164.52.24.180 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Capital Online Data Service HK Co Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Found on Github Combined on 3 lists / proto=17 . srcport=50017 . dstport=389 . (2740)	2020-09-26 06:19:53
attackspam	" "	2020-09-25 23:22:00
attackspambots	" "	2020-09-25 15:00:11
attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-08-20 18:40:03
attackbotsspam	Unauthorized connection attempt detected from IP address 164.52.24.180 to port 2121 [T]	2020-08-14 04:39:08
attackbots	Port scan: Attack repeated for 24 hours	2020-08-04 14:20:05
attackbots	Unauthorized connection attempt detected from IP address 164.52.24.180 to port 90 [T]	2020-07-22 04:32:33
attackbots	TCP (SYN) 164.52.24.180:45700 -> port 311, len 44	2020-07-16 20:53:42
attackspam	Unauthorized connection attempt detected from IP address 164.52.24.180 to port 311 [T]	2020-07-13 03:17:12
attackbotsspam	Hit honeypot r.	2020-07-05 01:46:36
attack	Honeypot hit.	2020-07-04 10:59:40
attackspambots	" "	2020-06-05 16:06:38
attackbots	Unauthorized connection attempt detected from IP address 164.52.24.180 to port 37 [T]	2020-05-20 11:18:05
attackbots	90/tcp 311/tcp 389/udp... [2020-03-09/05-08]22pkt,6pt.(tcp),2pt.(udp)	2020-05-09 04:39:19
attackbotsspam	Unauthorized connection attempt detected from IP address 164.52.24.180 to port 90 [T]	2020-05-06 08:45:29
attackbotsspam	Unauthorized connection attempt detected from IP address 164.52.24.180 to port 666 [T]	2020-04-14 23:41:38
attack	Unauthorized connection attempt detected from IP address 164.52.24.180 to port 11 [T]	2020-03-24 21:27:08
attackspambots	Unauthorized connection attempt detected from IP address 164.52.24.180 to port 37 [J]	2020-03-02 22:55:53
attackspambots	Unauthorized connection attempt detected from IP address 164.52.24.180 to port 666 [T]	2020-01-30 14:37:58
attackspam	Unauthorized connection attempt detected from IP address 164.52.24.180 to port 11 [T]	2020-01-09 03:45:11
attackbotsspam	Unauthorized connection attempt detected from IP address 164.52.24.180 to port 11 [J]	2020-01-07 03:04:56
attackspambots	90/tcp 311/tcp 389/udp... [2019-07-12/09-08]24pkt,4pt.(tcp),2pt.(udp)	2019-09-08 19:02:34

Comments on same subnet:

IP	Type	Details	Datetime
164.52.24.181	attackspam	TCP (SYN) 164.52.24.181:46010 -> port 4433, len 44	2020-10-04 07:18:57
164.52.24.181	attack	Port Scan ...	2020-10-03 23:34:13
164.52.24.181	attack	Port Scan ...	2020-10-03 15:18:06
164.52.24.176	attackspambots	IP 164.52.24.176 attacked honeypot on port: 1911 at 9/29/2020 1:37:53 PM	2020-10-01 05:46:19
164.52.24.176	attackbotsspam	IP 164.52.24.176 attacked honeypot on port: 1911 at 9/29/2020 1:37:53 PM	2020-09-30 22:04:21
164.52.24.176	attackbotsspam	IP 164.52.24.176 attacked honeypot on port: 1911 at 9/29/2020 1:37:53 PM	2020-09-30 14:37:21
164.52.24.170	attackspam	TCP (SYN) 164.52.24.170:50354 -> port 3306, len 44	2020-09-17 18:55:47
164.52.24.164	attackspam	TCP (SYN) 164.52.24.164:33766 -> port 22, len 44	2020-09-11 03:11:12
164.52.24.22	attackspambots	SSH-BruteForce	2020-09-11 01:25:56
164.52.24.164	attackbotsspam	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-10 18:39:33
164.52.24.22	attackbots	SSH-BruteForce	2020-09-10 16:45:10
164.52.24.22	attack	1599681880 - 09/09/2020 22:04:40 Host: 164.52.24.22/164.52.24.22 Port: 22 TCP Blocked ...	2020-09-10 07:20:49
164.52.24.176	attackspambots	[Thu Aug 27 05:01:26 2020] - DDoS Attack From IP: 164.52.24.176 Port: 38298	2020-09-08 03:45:04
164.52.24.177	attackbots	Port scan: Attack repeated for 24 hours	2020-09-08 02:52:45
164.52.24.176	attack	[Thu Aug 27 05:01:26 2020] - DDoS Attack From IP: 164.52.24.176 Port: 38298	2020-09-07 19:19:30

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 164.52.24.180
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38438
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;164.52.24.180.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019041200 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Fri Apr 12 15:39:33 +08 2019
;; MSG SIZE  rcvd: 117

Host info

Host 180.24.52.164.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 67.207.67.3, trying next server
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 180.24.52.164.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
49.232.165.42	attackspam	Invalid user teamspeak from 49.232.165.42 port 40266	2020-09-27 01:14:36
180.164.177.21	attackspam	2020-09-26T01:47:37.722872morrigan.ad5gb.com sshd[320993]: Failed password for invalid user cl from 180.164.177.21 port 41742 ssh2	2020-09-27 01:10:00
93.184.221.240	attack	Blocked by Sophos UTM Network Protection . / / proto=6 . srcport=80 . dstport=49970 . (3527)	2020-09-27 01:39:31
3.7.233.194	attackspam	Invalid user back from 3.7.233.194 port 52386	2020-09-27 01:27:33
140.143.20.135	attack	Invalid user gameserver from 140.143.20.135 port 40210	2020-09-27 01:22:05
128.199.241.107	attackbotsspam	2020-09-26T19:00:41.543337mail.broermann.family sshd[13599]: Failed password for root from 128.199.241.107 port 13677 ssh2 2020-09-26T19:04:58.597466mail.broermann.family sshd[14002]: Invalid user celia from 128.199.241.107 port 13066 2020-09-26T19:04:58.601395mail.broermann.family sshd[14002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.241.107 2020-09-26T19:04:58.597466mail.broermann.family sshd[14002]: Invalid user celia from 128.199.241.107 port 13066 2020-09-26T19:05:00.403198mail.broermann.family sshd[14002]: Failed password for invalid user celia from 128.199.241.107 port 13066 ssh2 ...	2020-09-27 01:23:47
115.99.14.202	attackspam	Invalid user soft from 115.99.14.202 port 48830	2020-09-27 01:12:59
40.117.173.200	attack	Sep 26 18:00:27 ajax sshd[21655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.117.173.200 Sep 26 18:00:28 ajax sshd[21655]: Failed password for invalid user 193 from 40.117.173.200 port 30782 ssh2	2020-09-27 01:19:52
206.189.148.19	attackspambots	$f2bV_matches	2020-09-27 01:20:35
64.225.11.61	attackbots	Sep 26 16:10:14 124388 sshd[15089]: Invalid user admin from 64.225.11.61 port 51470 Sep 26 16:10:16 124388 sshd[15089]: Failed password for invalid user admin from 64.225.11.61 port 51470 ssh2 Sep 26 16:10:14 124388 sshd[15093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.11.61 Sep 26 16:10:14 124388 sshd[15093]: Invalid user ubuntu from 64.225.11.61 port 51978 Sep 26 16:10:17 124388 sshd[15093]: Failed password for invalid user ubuntu from 64.225.11.61 port 51978 ssh2	2020-09-27 01:03:46
67.205.138.198	attackspambots	(sshd) Failed SSH login from 67.205.138.198 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 26 07:54:22 server sshd[14736]: Invalid user erica from 67.205.138.198 port 54248 Sep 26 07:54:24 server sshd[14736]: Failed password for invalid user erica from 67.205.138.198 port 54248 ssh2 Sep 26 08:22:20 server sshd[23864]: Invalid user lin from 67.205.138.198 port 50404 Sep 26 08:22:23 server sshd[23864]: Failed password for invalid user lin from 67.205.138.198 port 50404 ssh2 Sep 26 08:29:58 server sshd[25767]: Did not receive identification string from 67.205.138.198 port 59454	2020-09-27 01:03:16
167.248.133.66	attackspambots	TCP (SYN) 167.248.133.66:23034 -> port 800, len 44	2020-09-27 01:38:15
40.113.16.216	attack	Automatic report - Brute Force attack using this IP address	2020-09-27 01:33:43
152.231.107.22	attackspambots	Invalid user marge from 152.231.107.22 port 39126	2020-09-27 01:18:31
35.245.13.164	attackbots	Sep 26 13:37:53 ws24vmsma01 sshd[44995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.245.13.164 Sep 26 13:37:53 ws24vmsma01 sshd[44995]: Failed password for invalid user olivier from 35.245.13.164 port 57590 ssh2 ...	2020-09-27 01:28:25

Recently Reported IPs

103.108.74.74	212.162.150.5	46.119.113.153	67.71.220.185
120.29.116.85	222.73.163.90	126.126.188.134	193.56.28.18
103.27.237.30	190.6.199.22	193.106.31.130	118.71.224.220
176.32.160.94	156.202.242.11	134.73.7.203	118.170.236.46
112.192.189.232	138.128.115.96	117.4.105.213	212.1.67.138