13.72.228.20 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Australia

运营商(isp): Microsoft Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Jul 17 23:40:12 ajax sshd[28585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.72.228.20 Jul 17 23:40:15 ajax sshd[28585]: Failed password for invalid user admin from 13.72.228.20 port 26418 ssh2	2020-07-18 06:42:34
attack	Jul 15 22:28:16 Ubuntu-1404-trusty-64-minimal sshd\[6379\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.72.228.20 user=games Jul 15 22:28:18 Ubuntu-1404-trusty-64-minimal sshd\[6379\]: Failed password for games from 13.72.228.20 port 39501 ssh2 Jul 16 04:18:09 Ubuntu-1404-trusty-64-minimal sshd\[10787\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.72.228.20 user=root Jul 16 04:18:11 Ubuntu-1404-trusty-64-minimal sshd\[10787\]: Failed password for root from 13.72.228.20 port 51449 ssh2 Jul 16 06:04:45 Ubuntu-1404-trusty-64-minimal sshd\[12859\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.72.228.20 user=root	2020-07-16 12:09:53
attackbotsspam	Jul 14 11:59:34 ws26vmsma01 sshd[126210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.72.228.20 ...	2020-07-14 20:36:29

类型

评论内容

时间

attackbotsspam

Jul 17 23:40:12 ajax sshd[28585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.72.228.20 
Jul 17 23:40:15 ajax sshd[28585]: Failed password for invalid user admin from 13.72.228.20 port 26418 ssh2

2020-07-18 06:42:34

attack

Jul 15 22:28:16 Ubuntu-1404-trusty-64-minimal sshd\[6379\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.72.228.20  user=games
Jul 15 22:28:18 Ubuntu-1404-trusty-64-minimal sshd\[6379\]: Failed password for games from 13.72.228.20 port 39501 ssh2
Jul 16 04:18:09 Ubuntu-1404-trusty-64-minimal sshd\[10787\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.72.228.20  user=root
Jul 16 04:18:11 Ubuntu-1404-trusty-64-minimal sshd\[10787\]: Failed password for root from 13.72.228.20 port 51449 ssh2
Jul 16 06:04:45 Ubuntu-1404-trusty-64-minimal sshd\[12859\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.72.228.20  user=root

2020-07-16 12:09:53

attackbotsspam

Jul 14 11:59:34 ws26vmsma01 sshd[126210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.72.228.20
...

2020-07-14 20:36:29

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.72.228.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50597
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;13.72.228.20.			IN	A

;; AUTHORITY SECTION:
.			573	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020071400 1800 900 604800 86400

;; Query time: 560 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jul 14 20:36:25 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 20.228.72.13.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 20.228.72.13.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
182.140.233.9	attackbotsspam	01/26/2020-05:48:43.671020 182.140.233.9 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2020-01-26 16:42:55
190.66.3.92	attackspambots	Unauthorized connection attempt detected from IP address 190.66.3.92 to port 2220 [J]	2020-01-26 16:48:47
49.233.139.79	attackbotsspam	Unauthorized connection attempt detected from IP address 49.233.139.79 to port 2220 [J]	2020-01-26 16:56:56
77.247.110.69	attack	Port 5082 scan denied	2020-01-26 16:55:46
222.186.19.221	attackspambots	Port 8082 scan denied	2020-01-26 16:48:04
159.203.201.7	attackspambots	firewall-block, port(s): 17990/tcp	2020-01-26 16:34:31
129.226.129.144	attack	2020-01-26T04:59:50.941102shield sshd\[27307\]: Invalid user test from 129.226.129.144 port 36232 2020-01-26T04:59:50.948683shield sshd\[27307\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.129.144 2020-01-26T04:59:53.015183shield sshd\[27307\]: Failed password for invalid user test from 129.226.129.144 port 36232 ssh2 2020-01-26T05:02:20.229249shield sshd\[27818\]: Invalid user aria from 129.226.129.144 port 56746 2020-01-26T05:02:20.235453shield sshd\[27818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.129.144	2020-01-26 16:49:13
36.110.118.129	attackbots	Unauthorized connection attempt detected from IP address 36.110.118.129 to port 2220 [J]	2020-01-26 16:45:11
159.203.201.175	attackbotsspam	01/26/2020-05:49:00.797830 159.203.201.175 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-01-26 16:35:03
125.7.152.105	attackspam	pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.7.152.105 Failed password for invalid user weblogic from 125.7.152.105 port 47116 ssh2 Failed password for root from 125.7.152.105 port 34292 ssh2	2020-01-26 16:23:42
113.239.58.248	attackbots	unauthorized connection attempt	2020-01-26 16:22:33
58.18.91.190	attackspam	Jan 26 10:41:42 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=58.18.91.190, lip=212.111.212.230, session=\<37qS9Qadn4s6Elu+\> Jan 26 10:41:51 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 7 secs\): user=\, method=PLAIN, rip=58.18.91.190, lip=212.111.212.230, session=\ Jan 26 10:42:05 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 12 secs\): user=\, method=PLAIN, rip=58.18.91.190, lip=212.111.212.230, session=\ Jan 26 10:43:12 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=58.18.91.190, lip=212.111.212.230, session=\ Jan 26 10:43:21 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 7 secs\): user=\, method=PLAIN, rip=58.18.91.190, lip=212.111.2 ...	2020-01-26 16:51:19
129.204.50.75	attackspambots	2020-01-26T00:56:11.071849xentho-1 sshd[811933]: Invalid user jupyter from 129.204.50.75 port 32944 2020-01-26T00:56:11.081628xentho-1 sshd[811933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.50.75 2020-01-26T00:56:11.071849xentho-1 sshd[811933]: Invalid user jupyter from 129.204.50.75 port 32944 2020-01-26T00:56:12.638521xentho-1 sshd[811933]: Failed password for invalid user jupyter from 129.204.50.75 port 32944 ssh2 2020-01-26T00:57:29.947759xentho-1 sshd[811958]: Invalid user gts from 129.204.50.75 port 42414 2020-01-26T00:57:29.955529xentho-1 sshd[811958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.50.75 2020-01-26T00:57:29.947759xentho-1 sshd[811958]: Invalid user gts from 129.204.50.75 port 42414 2020-01-26T00:57:31.888388xentho-1 sshd[811958]: Failed password for invalid user gts from 129.204.50.75 port 42414 ssh2 2020-01-26T00:58:44.481639xentho-1 sshd[811976]: Invalid use ...	2020-01-26 16:33:46
178.128.114.106	attackbots	Jan 25 22:42:00 php1 sshd\[16075\]: Invalid user val from 178.128.114.106 Jan 25 22:42:00 php1 sshd\[16075\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.114.106 Jan 25 22:42:02 php1 sshd\[16075\]: Failed password for invalid user val from 178.128.114.106 port 56654 ssh2 Jan 25 22:42:10 php1 sshd\[16089\]: Invalid user user9 from 178.128.114.106 Jan 25 22:42:10 php1 sshd\[16089\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.114.106	2020-01-26 16:43:22
222.186.173.154	attackspambots	Jan 26 09:20:27 localhost sshd\[15584\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.154 user=root Jan 26 09:20:29 localhost sshd\[15584\]: Failed password for root from 222.186.173.154 port 48678 ssh2 Jan 26 09:20:32 localhost sshd\[15584\]: Failed password for root from 222.186.173.154 port 48678 ssh2	2020-01-26 16:21:09

最近上报的IP列表

199.75.228.155	8.195.10.178	140.200.212.11	104.211.88.245
82.35.205.125	187.234.144.70	220.64.214.122	52.172.193.120
13.79.147.107	201.49.98.213	195.8.10.204	126.144.54.80
34.57.19.157	128.199.126.222	101.83.190.224	219.121.82.172
74.97.90.145	52.254.83.94	100.140.36.76	118.164.8.149