13.80.249.12 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Microsoft Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Jul 25 20:18:24 meumeu sshd[15901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.80.249.12 Jul 25 20:18:26 meumeu sshd[15901]: Failed password for invalid user jakarta from 13.80.249.12 port 34891 ssh2 Jul 25 20:23:26 meumeu sshd[14663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.80.249.12 ...	2019-07-26 02:25:32
attack	Jul 25 04:44:28 meumeu sshd[13063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.80.249.12 Jul 25 04:44:30 meumeu sshd[13063]: Failed password for invalid user op from 13.80.249.12 port 33947 ssh2 Jul 25 04:49:27 meumeu sshd[16912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.80.249.12 ...	2019-07-25 10:53:29

类型

评论内容

时间

attackspambots

Jul 25 20:18:24 meumeu sshd[15901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.80.249.12 
Jul 25 20:18:26 meumeu sshd[15901]: Failed password for invalid user jakarta from 13.80.249.12 port 34891 ssh2
Jul 25 20:23:26 meumeu sshd[14663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.80.249.12 
...

2019-07-26 02:25:32

attack

Jul 25 04:44:28 meumeu sshd[13063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.80.249.12 
Jul 25 04:44:30 meumeu sshd[13063]: Failed password for invalid user op from 13.80.249.12 port 33947 ssh2
Jul 25 04:49:27 meumeu sshd[16912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.80.249.12 
...

2019-07-25 10:53:29

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.80.249.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2466
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;13.80.249.12.			IN	A

;; AUTHORITY SECTION:
.			2274	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072401 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 25 10:53:10 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 12.249.80.13.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 12.249.80.13.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
117.254.148.17	attack	DATE:2020-09-22 19:01:31, IP:117.254.148.17, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2020-09-24 01:57:05
189.4.2.58	attackbotsspam	Sep 23 14:41:19 ns392434 sshd[15785]: Invalid user usuario from 189.4.2.58 port 43438 Sep 23 14:41:19 ns392434 sshd[15785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.4.2.58 Sep 23 14:41:19 ns392434 sshd[15785]: Invalid user usuario from 189.4.2.58 port 43438 Sep 23 14:41:21 ns392434 sshd[15785]: Failed password for invalid user usuario from 189.4.2.58 port 43438 ssh2 Sep 23 14:54:09 ns392434 sshd[15938]: Invalid user operador from 189.4.2.58 port 47068 Sep 23 14:54:09 ns392434 sshd[15938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.4.2.58 Sep 23 14:54:09 ns392434 sshd[15938]: Invalid user operador from 189.4.2.58 port 47068 Sep 23 14:54:10 ns392434 sshd[15938]: Failed password for invalid user operador from 189.4.2.58 port 47068 ssh2 Sep 23 15:02:49 ns392434 sshd[15986]: Invalid user aaron from 189.4.2.58 port 56220	2020-09-24 02:00:36
209.97.179.52	attackbotsspam	Automatic report - Banned IP Access	2020-09-24 02:12:14
221.214.74.10	attack	2020-09-23T10:38:49+0200 Failed SSH Authentication/Brute Force Attack. (Server 4)	2020-09-24 02:11:46
167.172.46.87	attackspambots	Invalid user user1 from 167.172.46.87 port 43988	2020-09-24 01:47:07
54.38.55.136	attack	Invalid user esbuser from 54.38.55.136 port 60022	2020-09-24 02:02:46
36.24.148.243	attackbotsspam	Sep 23 07:29:57 sshgateway sshd\[14241\]: Invalid user es from 36.24.148.243 Sep 23 07:29:57 sshgateway sshd\[14241\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.24.148.243 Sep 23 07:29:59 sshgateway sshd\[14241\]: Failed password for invalid user es from 36.24.148.243 port 43642 ssh2	2020-09-24 01:37:03
120.150.216.161	attack	Invalid user admin from 120.150.216.161 port 45424	2020-09-24 01:53:04
51.178.43.9	attackbots	Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-09-24 02:09:35
162.142.125.25	attackbots	TCP (SYN) 162.142.125.25:25602 -> port 23, len 44	2020-09-24 01:57:57
122.154.33.214	attackbotsspam	Unauthorized connection attempt from IP address 122.154.33.214 on Port 445(SMB)	2020-09-24 01:38:19
114.35.154.121	attackbotsspam	Unauthorized connection attempt from IP address 114.35.154.121 on Port 445(SMB)	2020-09-24 02:04:02
1.10.250.58	attack	Listed on abuseat.org plus zen-spamhaus / proto=6 . srcport=10124 . dstport=23 . (3054)	2020-09-24 01:55:12
180.164.58.165	attackspambots	21 attempts against mh-ssh on pcx	2020-09-24 01:38:48
168.63.137.51	attackbots	Sep 23 17:29:21 markkoudstaal sshd[3175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.63.137.51 Sep 23 17:29:22 markkoudstaal sshd[3175]: Failed password for invalid user backups from 168.63.137.51 port 1664 ssh2 Sep 23 17:35:53 markkoudstaal sshd[5146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.63.137.51 ...	2020-09-24 01:44:45

最近上报的IP列表

187.20.21.122	138.75.171.32	124.156.245.149	218.244.150.6
18.215.251.24	200.160.106.222	191.242.167.204	172.68.189.131
175.161.229.133	124.156.100.197	178.128.42.36	165.22.139.53
187.98.8.202	106.12.212.141	236.45.105.221	35.194.223.105
86.194.10.16	138.68.26.49	77.126.77.164	214.129.117.48