13.127.45.242 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
13.127.45.105	attack	Unauthorized connection attempt detected from IP address 13.127.45.105 to port 2220 [J]	2020-01-05 19:36:54
13.127.45.105	attackspambots	Jan 3 21:38:00 nandi sshd[6830]: Invalid user web from 13.127.45.105 Jan 3 21:38:00 nandi sshd[6830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-13-127-45-105.ap-south-1.compute.amazonaws.com Jan 3 21:38:02 nandi sshd[6830]: Failed password for invalid user web from 13.127.45.105 port 43778 ssh2 Jan 3 21:38:02 nandi sshd[6830]: Received disconnect from 13.127.45.105: 11: Bye Bye [preauth] Jan 3 21:57:43 nandi sshd[19779]: Invalid user suporte from 13.127.45.105 Jan 3 21:57:43 nandi sshd[19779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-13-127-45-105.ap-south-1.compute.amazonaws.com Jan 3 21:57:45 nandi sshd[19779]: Failed password for invalid user suporte from 13.127.45.105 port 37662 ssh2 Jan 3 21:57:45 nandi sshd[19779]: Received disconnect from 13.127.45.105: 11: Bye Bye [preauth] Jan 3 22:01:36 nandi sshd[22248]: Invalid user student from 13.127.45.105 Jan ........ -------------------------------	2020-01-04 06:55:02

类型

评论内容

时间

13.127.45.105

attack

Unauthorized connection attempt detected from IP address 13.127.45.105 to port 2220 [J]

2020-01-05 19:36:54

13.127.45.105

attackspambots

Jan  3 21:38:00 nandi sshd[6830]: Invalid user web from 13.127.45.105
Jan  3 21:38:00 nandi sshd[6830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-13-127-45-105.ap-south-1.compute.amazonaws.com 
Jan  3 21:38:02 nandi sshd[6830]: Failed password for invalid user web from 13.127.45.105 port 43778 ssh2
Jan  3 21:38:02 nandi sshd[6830]: Received disconnect from 13.127.45.105: 11: Bye Bye [preauth]
Jan  3 21:57:43 nandi sshd[19779]: Invalid user suporte from 13.127.45.105
Jan  3 21:57:43 nandi sshd[19779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-13-127-45-105.ap-south-1.compute.amazonaws.com 
Jan  3 21:57:45 nandi sshd[19779]: Failed password for invalid user suporte from 13.127.45.105 port 37662 ssh2
Jan  3 21:57:45 nandi sshd[19779]: Received disconnect from 13.127.45.105: 11: Bye Bye [preauth]
Jan  3 22:01:36 nandi sshd[22248]: Invalid user student from 13.127.45.105
Jan  ........
-------------------------------

2020-01-04 06:55:02

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.127.45.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1703
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;13.127.45.242.			IN	A

;; AUTHORITY SECTION:
.			320	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030802 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 04:54:40 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

242.45.127.13.in-addr.arpa domain name pointer ec2-13-127-45-242.ap-south-1.compute.amazonaws.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
242.45.127.13.in-addr.arpa	name = ec2-13-127-45-242.ap-south-1.compute.amazonaws.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
45.66.208.247	attackbots	Chat Spam	2020-05-14 03:13:55
218.52.228.218	attack	May 13 14:33:20 icecube postfix/smtpd[35356]: NOQUEUE: reject: RCPT from unknown[218.52.228.218]: 554 5.7.1 Service unavailable; Client host [218.52.228.218] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/218.52.228.218; from= to= proto=ESMTP helo=<[218.52.228.218]>	2020-05-14 02:37:20
91.236.5.6	attackspambots	May 13 14:22:57 mail.srvfarm.net postfix/smtps/smtpd[553718]: warning: unknown[91.236.5.6]: SASL PLAIN authentication failed: May 13 14:22:57 mail.srvfarm.net postfix/smtps/smtpd[553718]: lost connection after AUTH from unknown[91.236.5.6] May 13 14:24:37 mail.srvfarm.net postfix/smtpd[556757]: warning: unknown[91.236.5.6]: SASL PLAIN authentication failed: May 13 14:24:37 mail.srvfarm.net postfix/smtpd[556757]: lost connection after AUTH from unknown[91.236.5.6] May 13 14:25:22 mail.srvfarm.net postfix/smtps/smtpd[553710]: warning: unknown[91.236.5.6]: SASL PLAIN authentication failed:	2020-05-14 02:51:33
51.178.78.154	attackspambots	Unauthorized connection attempt from IP address 51.178.78.154 on Port 445(SMB)	2020-05-14 03:11:49
194.126.183.171	attack	May 13 14:12:45 mail.srvfarm.net postfix/smtpd[540848]: NOQUEUE: reject: RCPT from unknown[194.126.183.171]: 554 5.7.1 Service unavailable; Client host [194.126.183.171] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?194.126.183.171; from= to= proto=ESMTP helo= May 13 14:12:45 mail.srvfarm.net postfix/smtpd[540848]: NOQUEUE: reject: RCPT from unknown[194.126.183.171]: 554 5.7.1 Service unavailable; Client host [194.126.183.171] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?194.126.183.171; from= to= proto=ESMTP helo= May 13 14:12:46 mail.srvfarm.net postfix/smtpd[540848]: NOQUEUE: reject: RCPT from unknown[194.126.183.171]: 554 5.7.1 Service unavailable; Client host [194.126.183.171] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?194.126.183.171; from=	2020-05-14 02:40:44
91.225.242.73	attackspambots	May 13 14:23:46 mail.srvfarm.net postfix/smtps/smtpd[553680]: warning: ip242-73.falconn.pl[91.225.242.73]: SASL PLAIN authentication failed: May 13 14:23:46 mail.srvfarm.net postfix/smtps/smtpd[553680]: lost connection after AUTH from ip242-73.falconn.pl[91.225.242.73] May 13 14:26:44 mail.srvfarm.net postfix/smtps/smtpd[553251]: warning: ip242-73.falconn.pl[91.225.242.73]: SASL PLAIN authentication failed: May 13 14:27:00 mail.srvfarm.net postfix/smtps/smtpd[553251]: lost connection after AUTH from ip242-73.falconn.pl[91.225.242.73] May 13 14:29:17 mail.srvfarm.net postfix/smtpd[556773]: warning: ip242-73.falconn.pl[91.225.242.73]: SASL PLAIN authentication failed:	2020-05-14 02:51:57
185.234.217.191	attackspam	May 13 15:43:15 web01.agentur-b-2.de postfix/smtpd[228384]: warning: unknown[185.234.217.191]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 13 15:43:15 web01.agentur-b-2.de postfix/smtpd[228384]: lost connection after AUTH from unknown[185.234.217.191] May 13 15:45:20 web01.agentur-b-2.de postfix/smtpd[224706]: warning: unknown[185.234.217.191]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 13 15:45:20 web01.agentur-b-2.de postfix/smtpd[224706]: lost connection after AUTH from unknown[185.234.217.191] May 13 15:48:25 web01.agentur-b-2.de postfix/smtpd[228715]: warning: unknown[185.234.217.191]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-05-14 02:44:16
106.13.207.113	attackspam	2020-05-13 19:48:57,104 fail2ban.actions: WARNING [ssh] Ban 106.13.207.113	2020-05-14 03:01:32
208.68.39.220	attackspam	May 13 19:35:13 host sshd[5773]: Invalid user traffic from 208.68.39.220 port 39524 ...	2020-05-14 03:08:36
192.241.151.77	attackbots	192.241.151.77 - - [13/May/2020:14:32:50 +0200] "GET /wp-login.php HTTP/1.1" 200 6451 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 192.241.151.77 - - [13/May/2020:14:32:51 +0200] "POST /wp-login.php HTTP/1.1" 200 6702 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 192.241.151.77 - - [13/May/2020:14:32:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-05-14 03:16:02
185.175.93.14	attackspambots	05/13/2020-14:07:14.257008 185.175.93.14 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-14 02:57:38
220.85.206.96	attack	May 13 18:05:52 haigwepa sshd[12217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.85.206.96 May 13 18:05:54 haigwepa sshd[12217]: Failed password for invalid user ubuntu from 220.85.206.96 port 54176 ssh2 ...	2020-05-14 02:36:51
81.218.45.186	attackspam	Fail2Ban Ban Triggered	2020-05-14 03:00:55
170.246.205.136	attack	May 13 14:08:40 mail.srvfarm.net postfix/smtps/smtpd[553712]: warning: unknown[170.246.205.136]: SASL PLAIN authentication failed: May 13 14:08:40 mail.srvfarm.net postfix/smtps/smtpd[553712]: lost connection after AUTH from unknown[170.246.205.136] May 13 14:15:54 mail.srvfarm.net postfix/smtps/smtpd[553251]: warning: unknown[170.246.205.136]: SASL PLAIN authentication failed: May 13 14:15:54 mail.srvfarm.net postfix/smtps/smtpd[553251]: lost connection after AUTH from unknown[170.246.205.136] May 13 14:18:11 mail.srvfarm.net postfix/smtps/smtpd[553478]: warning: unknown[170.246.205.136]: SASL PLAIN authentication failed:	2020-05-14 02:46:49
191.53.223.20	attackspam	May 13 14:06:55 mail.srvfarm.net postfix/smtpd[540971]: warning: unknown[191.53.223.20]: SASL PLAIN authentication failed: May 13 14:06:55 mail.srvfarm.net postfix/smtpd[540971]: lost connection after AUTH from unknown[191.53.223.20] May 13 14:12:41 mail.srvfarm.net postfix/smtps/smtpd[553527]: warning: unknown[191.53.223.20]: SASL PLAIN authentication failed: May 13 14:12:41 mail.srvfarm.net postfix/smtps/smtpd[553527]: lost connection after AUTH from unknown[191.53.223.20] May 13 14:15:28 mail.srvfarm.net postfix/smtpd[553612]: warning: unknown[191.53.223.20]: SASL PLAIN authentication failed:	2020-05-14 02:42:01

最近上报的IP列表

13.127.49.40	13.127.48.142	118.172.10.149	118.172.10.153
118.172.10.215	118.172.10.237	13.209.60.161	13.209.87.125
13.209.87.7	13.209.60.147	13.209.78.96	13.209.72.153
13.209.75.229	13.209.62.166	13.209.62.207	13.209.91.132
13.209.86.182	13.209.93.175	118.172.10.243	13.210.101.206