58.252.72.20 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Kinbaitao-Building-Material-Ltd Foshan Guangdong Province

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Unauthorized connection attempt detected from IP address 58.252.72.20 to port 1433	2020-05-30 03:57:35

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 58.252.72.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51665
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;58.252.72.20.			IN	A

;; AUTHORITY SECTION:
.			301	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052901 1800 900 604800 86400

;; Query time: 156 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 30 03:57:32 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 20.72.252.58.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 20.72.252.58.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
46.185.138.163	attackbotsspam	Aug 12 21:20:04 buvik sshd[29738]: Failed password for root from 46.185.138.163 port 43766 ssh2 Aug 12 21:24:39 buvik sshd[30372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.185.138.163 user=root Aug 12 21:24:41 buvik sshd[30372]: Failed password for root from 46.185.138.163 port 54072 ssh2 ...	2020-08-13 03:30:55
88.227.199.78	attackspam	TCP (SYN) 88.227.199.78:57839 -> port 445, len 52	2020-08-13 03:26:20
52.186.84.111	attack	TCP (SYN) 52.186.84.111:1088 -> port 445, len 44	2020-08-13 03:47:07
59.127.50.240	attack	TCP (SYN) 59.127.50.240:32536 -> port 23, len 40	2020-08-13 03:29:10
193.252.189.37	attackspam	Aug 12 15:56:41 pve1 sshd[12449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.252.189.37 ...	2020-08-13 03:37:07
187.102.32.46	attackbotsspam	TCP (SYN) 187.102.32.46:57858 -> port 445, len 52	2020-08-13 03:15:35
107.175.246.196	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-08-13 03:23:33
213.170.247.157	attack	TCP (SYN) 213.170.247.157:14161 -> port 8080, len 44	2020-08-13 03:50:41
192.35.169.20	attackbotsspam	TCP (SYN) 192.35.169.20:23333 -> port 1433, len 44	2020-08-13 03:13:22
186.195.0.230	attack	TCP (SYN) 186.195.0.230:43603 -> port 80, len 40	2020-08-13 03:15:51
27.147.41.32	attackbots	TCP (SYN) 27.147.41.32:18273 -> port 23, len 40	2020-08-13 03:32:50
94.53.168.189	attackbotsspam	TCP (SYN) 94.53.168.189:57606 -> port 445, len 52	2020-08-13 03:25:47
112.213.105.24	attackspam	TCP (SYN) 112.213.105.24:53839 -> port 1433, len 52	2020-08-13 03:41:38
61.243.128.141	attack	Unauthorised access (Aug 12) SRC=61.243.128.141 LEN=40 TTL=46 ID=34163 TCP DPT=8080 WINDOW=22306 SYN	2020-08-13 03:28:16
190.4.54.170	attack	TCP (SYN) 190.4.54.170:49386 -> port 1433, len 40	2020-08-13 03:14:28

Recently Reported IPs

195.121.73.132	37.116.38.76	27.214.39.103	14.127.249.21
5.185.116.241	5.154.106.129	5.28.140.244	1.27.157.57
1.0.244.14	222.112.24.121	222.102.40.154	66.221.199.88
222.82.56.134	222.71.236.138	45.125.111.26	86.245.39.28
25.38.63.51	208.160.160.45	221.148.227.153	69.128.252.39