94.20.55.169 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Azerbaijan

运营商(isp): Delta Telecom Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	[SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(09111103)	2019-09-12 02:01:18
attackspam	445/tcp 445/tcp 445/tcp... [2019-06-09/08-06]15pkt,1pt.(tcp)	2019-08-07 09:20:48
attackbotsspam	[SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(07271010)	2019-07-27 22:06:36

类型

评论内容

时间

attack

[SMB remote code execution attempt: port tcp/445]
*(RWIN=1024)(09111103)

2019-09-12 02:01:18

attackspam

445/tcp 445/tcp 445/tcp...
[2019-06-09/08-06]15pkt,1pt.(tcp)

2019-08-07 09:20:48

attackbotsspam

[SMB remote code execution attempt: port tcp/445]
*(RWIN=1024)(07271010)

2019-07-27 22:06:36

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.20.55.169
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12584
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.20.55.169.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072700 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jul 27 22:06:27 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 169.55.20.94.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
*** Can't find 169.55.20.94.in-addr.arpa.: No answer

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
106.12.5.96	attackspam	Sep 22 18:32:13 xtremcommunity sshd\[372880\]: Invalid user decker from 106.12.5.96 port 53644 Sep 22 18:32:13 xtremcommunity sshd\[372880\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.5.96 Sep 22 18:32:16 xtremcommunity sshd\[372880\]: Failed password for invalid user decker from 106.12.5.96 port 53644 ssh2 Sep 22 18:37:23 xtremcommunity sshd\[373043\]: Invalid user text123 from 106.12.5.96 port 37554 Sep 22 18:37:23 xtremcommunity sshd\[373043\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.5.96 ...	2019-09-23 06:52:47
103.207.13.199	attackbotsspam	Unauthorized connection attempt from IP address 103.207.13.199 on Port 445(SMB)	2019-09-23 06:59:52
141.98.80.78	attack	Sep 23 00:28:08 mail postfix/smtpd\[25063\]: warning: unknown\[141.98.80.78\]: SASL PLAIN authentication failed: Sep 23 00:29:25 mail postfix/smtpd\[26529\]: warning: unknown\[141.98.80.78\]: SASL PLAIN authentication failed: Sep 23 00:29:25 mail postfix/smtpd\[32165\]: warning: unknown\[141.98.80.78\]: SASL PLAIN authentication failed:	2019-09-23 06:44:22
153.228.158.177	attackbots	2019-09-22T22:08:28.615063abusebot-5.cloudsearch.cf sshd\[29844\]: Invalid user jmuser from 153.228.158.177 port 50907	2019-09-23 06:26:45
198.12.86.18	attack	\[2019-09-22 18:25:46\] NOTICE\[2270\] chan_sip.c: Registration from '"100"\' failed for '198.12.86.18:8995' - Wrong password \[2019-09-22 18:25:46\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-22T18:25:46.907-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="100",SessionID="0x7fcd8c1c4788",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/198.12.86.18/8995",Challenge="1526264b",ReceivedChallenge="1526264b",ReceivedHash="aebd3511c6d1bd19f940575fdd471844" \[2019-09-22 18:26:31\] NOTICE\[2270\] chan_sip.c: Registration from '"6000"\' failed for '198.12.86.18:9199' - Wrong password \[2019-09-22 18:26:31\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-22T18:26:31.159-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="6000",SessionID="0x7fcd8c57a408",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/198.12	2019-09-23 06:31:20
91.121.110.50	attack	Sep 23 03:38:51 areeb-Workstation sshd[32732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.110.50 Sep 23 03:38:52 areeb-Workstation sshd[32732]: Failed password for invalid user webmail from 91.121.110.50 port 39275 ssh2 ...	2019-09-23 06:24:18
148.66.135.178	attackspambots	2019-09-22T22:10:29.835039abusebot-2.cloudsearch.cf sshd\[1538\]: Invalid user buildbot from 148.66.135.178 port 43600	2019-09-23 06:36:34
80.82.77.240	attackbotsspam	" "	2019-09-23 06:57:01
218.17.192.122	attackspam	Connection by 218.17.192.122 on port: 139 got caught by honeypot at 9/22/2019 2:02:52 PM	2019-09-23 07:01:48
138.59.219.47	attackbots	Sep 22 22:49:05 Ubuntu-1404-trusty-64-minimal sshd\[1288\]: Invalid user test from 138.59.219.47 Sep 22 22:49:05 Ubuntu-1404-trusty-64-minimal sshd\[1288\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.59.219.47 Sep 22 22:49:07 Ubuntu-1404-trusty-64-minimal sshd\[1288\]: Failed password for invalid user test from 138.59.219.47 port 47454 ssh2 Sep 22 23:03:13 Ubuntu-1404-trusty-64-minimal sshd\[16628\]: Invalid user qp from 138.59.219.47 Sep 22 23:03:13 Ubuntu-1404-trusty-64-minimal sshd\[16628\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.59.219.47	2019-09-23 06:48:15
201.66.230.67	attackbotsspam	$f2bV_matches_ltvn	2019-09-23 06:32:40
117.239.48.242	attackspambots	Sep 22 12:29:22 hcbb sshd\[1009\]: Invalid user lliam from 117.239.48.242 Sep 22 12:29:22 hcbb sshd\[1009\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.239.48.242 Sep 22 12:29:24 hcbb sshd\[1009\]: Failed password for invalid user lliam from 117.239.48.242 port 42014 ssh2 Sep 22 12:35:09 hcbb sshd\[1488\]: Invalid user medina from 117.239.48.242 Sep 22 12:35:09 hcbb sshd\[1488\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.239.48.242	2019-09-23 06:36:54
92.222.66.234	attackspambots	Sep 23 00:02:30 markkoudstaal sshd[13887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.66.234 Sep 23 00:02:32 markkoudstaal sshd[13887]: Failed password for invalid user tulia from 92.222.66.234 port 50866 ssh2 Sep 23 00:06:26 markkoudstaal sshd[14233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.66.234	2019-09-23 06:20:50
23.253.20.205	attackspam	SSH bruteforce	2019-09-23 06:57:15
106.12.33.174	attack	Sep 22 12:20:37 web1 sshd\[25983\]: Invalid user roger from 106.12.33.174 Sep 22 12:20:37 web1 sshd\[25983\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.33.174 Sep 22 12:20:39 web1 sshd\[25983\]: Failed password for invalid user roger from 106.12.33.174 port 50938 ssh2 Sep 22 12:25:35 web1 sshd\[26445\]: Invalid user claudia from 106.12.33.174 Sep 22 12:25:35 web1 sshd\[26445\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.33.174	2019-09-23 06:43:43

最近上报的IP列表

193.9.114.146	103.211.36.50	213.109.160.61	193.248.182.69
181.191.44.250	81.92.58.29	188.49.22.40	202.114.118.181
188.134.98.156	180.126.236.92	178.140.168.52	167.71.137.134
123.20.14.162	119.76.156.196	103.207.170.230	103.71.168.41
164.115.183.156	94.62.245.112	181.38.127.159	49.144.250.165