2.20.161.199 - IPInfo

Basic Info

City: Diemen

Region: North Holland

Country: European Union

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.20.161.199
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9217
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;2.20.161.199.			IN	A

;; AUTHORITY SECTION:
.			580	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020040200 1800 900 604800 86400

;; Query time: 82 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Apr 02 20:33:34 CST 2020
;; MSG SIZE  rcvd: 116

Host info

199.161.20.2.in-addr.arpa domain name pointer a2-20-161-199.deploy.static.akamaitechnologies.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
199.161.20.2.in-addr.arpa	name = a2-20-161-199.deploy.static.akamaitechnologies.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
192.241.235.26	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2020-10-04 22:06:12
189.206.165.62	attackspambots	firewall-block, port(s): 16512/tcp	2020-10-04 21:47:57
116.72.87.105	attack	Automatic report - Port Scan Attack	2020-10-04 22:15:28
184.178.172.8	attack	Sep 19 15:32:24 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 9 secs\): user=\, method=PLAIN, rip=184.178.172.8, lip=10.64.89.208, TLS, session=\ Sep 19 22:27:57 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=184.178.172.8, lip=10.64.89.208, session=\ Sep 20 00:41:34 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=184.178.172.8, lip=10.64.89.208, TLS, session=\<3NVsUbKvdYS4sqwI\> Sep 22 05:51:41 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=184.178.172.8, lip=10.64.89.208, session=\ Sep 28 11:18:27 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=184.178.172 ...	2020-10-04 21:59:46
222.186.46.150	attackbots	Found on CINS badguys / proto=6 . srcport=46544 . dstport=18161 . (1954)	2020-10-04 22:12:36
51.68.189.69	attackspam	Failed password for root from 51.68.189.69 port 59548 ssh2 Failed password for root from 51.68.189.69 port 34813 ssh2	2020-10-04 21:53:25
154.222.30.134	attack	Oct 4 12:12:44 hidden sshd[23225]: error: Received disconnect from 154.222.30.134 port 58132:3: com.jcraft.jsch.JSchException: Auth fail [preauth] Oct 4 12:12:45 hidden sshd[23230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.222.30.134 user=root Oct 4 12:12:48 hidden sshd[23230]: Failed password for hidden from 154.222.30.134 port 58508 ssh2	2020-10-04 21:54:43
111.229.76.239	attack	Oct 4 01:03:58 web9 sshd\[29585\]: Invalid user rex from 111.229.76.239 Oct 4 01:03:58 web9 sshd\[29585\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.76.239 Oct 4 01:04:00 web9 sshd\[29585\]: Failed password for invalid user rex from 111.229.76.239 port 44764 ssh2 Oct 4 01:08:34 web9 sshd\[30112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.76.239 user=root Oct 4 01:08:36 web9 sshd\[30112\]: Failed password for root from 111.229.76.239 port 39370 ssh2	2020-10-04 22:13:10
92.204.164.42	attackspambots	1601805098 - 10/04/2020 11:51:38 Host: 92.204.164.42/92.204.164.42 Port: 22 TCP Blocked	2020-10-04 21:43:02
101.255.94.142	attack	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	2020-10-04 22:15:44
190.78.78.198	attackbots	1601757649 - 10/03/2020 22:40:49 Host: 190.78.78.198/190.78.78.198 Port: 445 TCP Blocked	2020-10-04 21:46:41
192.241.222.11	attack	21	2020-10-04 21:40:38
178.128.103.151	attackspam	178.128.103.151 - - [04/Oct/2020:14:54:57 +0100] "POST /wp-login.php HTTP/1.1" 200 2457 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 178.128.103.151 - - [04/Oct/2020:14:55:05 +0100] "POST /wp-login.php HTTP/1.1" 200 2437 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 178.128.103.151 - - [04/Oct/2020:14:55:14 +0100] "POST /wp-login.php HTTP/1.1" 200 2437 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-10-04 22:04:21
13.76.191.209	attack	Oct 3 22:01:23 mail.srvfarm.net postfix/smtpd[656142]: NOQUEUE: reject: RCPT from unknown[13.76.191.209]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Oct 3 22:03:23 mail.srvfarm.net postfix/smtpd[656146]: NOQUEUE: reject: RCPT from unknown[13.76.191.209]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Oct 3 22:06:13 mail.srvfarm.net postfix/smtpd[660363]: NOQUEUE: reject: RCPT from unknown[13.76.191.209]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Oct 3 22:07:32 mail.srvfarm.net postfix/smtpd[660363]: NOQUEUE: reject: RCPT from unknown[13.76.191.209]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo=	2020-10-04 21:37:09
139.59.83.179	attackspambots	Fail2Ban Ban Triggered	2020-10-04 22:09:16

Recently Reported IPs

191.167.74.94	46.169.11.36	61.167.86.18	19.198.182.205
113.165.184.135	87.0.64.190	94.73.231.189	203.213.244.94
153.103.8.48	219.142.252.204	74.103.52.208	173.210.228.105
126.33.128.22	41.118.73.214	85.79.192.102	165.225.126.38
130.27.154.254	171.224.178.133	61.212.110.146	176.67.81.121