222.252.243.20

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Vietnam Telecom National

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Unauthorised access (Dec 16) SRC=222.252.243.20 LEN=52 PREC=0x20 TTL=54 ID=27634 DF TCP DPT=445 WINDOW=8192 SYN	2019-12-16 18:14:52

Comments on same subnet:

IP	Type	Details	Datetime
222.252.243.14	attackbotsspam	Unauthorized connection attempt from IP address 222.252.243.14 on Port 445(SMB)	2020-09-15 21:30:37
222.252.243.14	attackbotsspam	Unauthorized connection attempt from IP address 222.252.243.14 on Port 445(SMB)	2020-09-15 13:28:59
222.252.243.236	attackbotsspam	trying to access non-authorized port	2020-06-16 06:38:19
222.252.243.14	attack	20/1/31@03:02:02: FAIL: Alarm-Network address from=222.252.243.14 20/1/31@03:02:02: FAIL: Alarm-Network address from=222.252.243.14 ...	2020-01-31 16:14:14

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 222.252.243.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29095
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;222.252.243.20.			IN	A

;; AUTHORITY SECTION:
.			437	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121600 1800 900 604800 86400

;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 16 18:14:49 CST 2019
;; MSG SIZE  rcvd: 118

Host info

20.243.252.222.in-addr.arpa domain name pointer static.vnpt.vn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
20.243.252.222.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
45.138.172.125	attackbotsspam	(pop3d) Failed POP3 login from 45.138.172.125 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug 2 16:38:29 ir1 dovecot[3110802]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=45.138.172.125, lip=5.63.12.44, session=	2020-08-03 00:47:50
137.117.217.32	attackbotsspam	DATE:2020-08-02 14:58:37, IP:137.117.217.32, PORT:1433 MSSQL brute force auth on honeypot server (honey-neo-dc)	2020-08-03 00:25:41
218.92.0.211	attackbots	Connection to SSH Honeypot - Detected by HoneypotDB	2020-08-03 00:10:13
195.54.167.152	attackspam	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-08-02T13:58:12Z and 2020-08-02T14:25:47Z	2020-08-03 00:04:52
125.124.253.203	attackspam	Bruteforce detected by fail2ban	2020-08-03 00:46:49
201.72.190.98	attackspam	$f2bV_matches	2020-08-03 00:03:20
172.73.162.109	attackbotsspam	ICMP MH Probe, Scan /Distributed -	2020-08-03 00:31:55
213.8.199.76	attackbotsspam	Automatic report - Port Scan Attack	2020-08-03 00:05:39
195.154.176.103	attackbotsspam	Aug 2 13:05:14 rocket sshd[26144]: Failed password for root from 195.154.176.103 port 44808 ssh2 Aug 2 13:09:11 rocket sshd[26664]: Failed password for root from 195.154.176.103 port 59636 ssh2 ...	2020-08-03 00:20:03
172.73.162.115	attackspambots	ICMP MH Probe, Scan /Distributed -	2020-08-03 00:28:30
157.230.230.215	attackbots	Aug 2 17:29:34 relay postfix/smtpd\[27631\]: warning: unknown\[157.230.230.215\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 2 17:29:34 relay postfix/smtpd\[8293\]: warning: unknown\[157.230.230.215\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 2 17:39:08 relay postfix/smtpd\[10738\]: warning: unknown\[157.230.230.215\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 2 17:39:08 relay postfix/smtpd\[27631\]: warning: unknown\[157.230.230.215\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 2 17:48:33 relay postfix/smtpd\[28575\]: warning: unknown\[157.230.230.215\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 2 17:48:33 relay postfix/smtpd\[8293\]: warning: unknown\[157.230.230.215\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-08-03 00:07:49
83.18.149.38	attackbotsspam	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-02T11:55:03Z and 2020-08-02T12:08:31Z	2020-08-03 00:50:31
122.51.60.39	attackspambots	Aug 2 14:41:34 xeon sshd[34542]: Failed password for root from 122.51.60.39 port 50172 ssh2	2020-08-03 00:06:16
2.44.152.96	attackbots	php WP PHPmyadamin ABUSE blocked for 12h	2020-08-03 00:29:02
139.199.80.67	attackspambots	Aug 2 12:37:23 vps-51d81928 sshd[393833]: Failed password for root from 139.199.80.67 port 46592 ssh2 Aug 2 12:38:34 vps-51d81928 sshd[393850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.80.67 user=root Aug 2 12:38:36 vps-51d81928 sshd[393850]: Failed password for root from 139.199.80.67 port 58464 ssh2 Aug 2 12:39:50 vps-51d81928 sshd[393864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.80.67 user=root Aug 2 12:39:52 vps-51d81928 sshd[393864]: Failed password for root from 139.199.80.67 port 42112 ssh2 ...	2020-08-03 00:34:31

Recently Reported IPs

94.142.140.219	40.92.71.17	136.143.188.54	40.92.19.60
36.78.41.147	202.6.234.123	170.254.248.61	180.158.1.177
218.104.198.194	2.180.230.41	222.252.12.27	110.77.232.233
189.41.210.95	120.227.166.4	119.235.53.36	118.69.152.36
36.104.30.21	122.174.110.138	103.17.244.21	112.39.169.213