13.82.53.10 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Microsoft Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Port Scan: TCP/445	2019-08-05 10:22:18

相同子网IP讨论:

IP	类型	评论内容	时间
13.82.53.248	attackbotsspam	Wordpress login attempts	2020-02-29 20:12:06
13.82.53.173	attack	Jul 15 19:38:07 mail postfix/postscreen[87735]: PREGREET 29 after 0.11 from [13.82.53.173]:62447: EHLO smtp48.thesqlteach.com ...	2019-07-16 11:54:38

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.82.53.10
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52518
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;13.82.53.10.			IN	A

;; AUTHORITY SECTION:
.			3158	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080401 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Aug 05 10:22:09 CST 2019
;; MSG SIZE  rcvd: 115

HOST信息:

10.53.82.13.in-addr.arpa domain name pointer onestopbdaweb01.eastus.cloudapp.azure.com.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
10.53.82.13.in-addr.arpa	name = onestopbdaweb01.eastus.cloudapp.azure.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
157.230.163.6	attackspam	vps1:pam-generic	2019-10-08 03:35:14
123.31.47.20	attackbots	Oct 7 20:53:08 vps647732 sshd[11452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.31.47.20 Oct 7 20:53:10 vps647732 sshd[11452]: Failed password for invalid user vQq0tNlkPchC from 123.31.47.20 port 48421 ssh2 ...	2019-10-08 03:02:42
117.90.84.101	attackspambots	Automatic report - Port Scan	2019-10-08 03:07:51
222.186.52.107	attackspambots	SSH Brute-Force reported by Fail2Ban	2019-10-08 03:40:00
212.47.251.164	attackspam	Oct 7 16:58:12 venus sshd\[23340\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.47.251.164 user=root Oct 7 16:58:13 venus sshd\[23340\]: Failed password for root from 212.47.251.164 port 36428 ssh2 Oct 7 17:01:59 venus sshd\[23378\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.47.251.164 user=root ...	2019-10-08 03:13:06
46.39.223.165	attackspam	Automatic report - Port Scan Attack	2019-10-08 03:05:14
112.216.39.29	attack	Oct 7 14:10:52 mail sshd[25056]: Failed password for root from 112.216.39.29 port 49668 ssh2 Oct 7 14:15:23 mail sshd[25744]: Failed password for root from 112.216.39.29 port 60396 ssh2	2019-10-08 03:15:29
159.203.201.154	attackspam	Port scan attempt detected by AWS-CCS, CTS, India	2019-10-08 03:39:35
223.220.159.78	attack	Oct 7 13:28:31 heissa sshd\[8219\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.220.159.78 user=root Oct 7 13:28:34 heissa sshd\[8219\]: Failed password for root from 223.220.159.78 port 59015 ssh2 Oct 7 13:32:50 heissa sshd\[8878\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.220.159.78 user=root Oct 7 13:32:52 heissa sshd\[8878\]: Failed password for root from 223.220.159.78 port 37232 ssh2 Oct 7 13:37:17 heissa sshd\[9539\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.220.159.78 user=root	2019-10-08 02:57:03
172.222.136.6	attackbotsspam	Automatic report - Port Scan Attack	2019-10-08 03:30:41
94.125.61.225	attackbots	Oct 7 14:36:27 h2177944 kernel: \[3327891.061362\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.125.61.225 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=58 ID=5840 DF PROTO=TCP SPT=49671 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 7 14:51:27 h2177944 kernel: \[3328791.497495\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.125.61.225 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=61 ID=39032 DF PROTO=TCP SPT=64820 DPT=465 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 7 15:10:32 h2177944 kernel: \[3329935.760445\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.125.61.225 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=54 ID=50437 DF PROTO=TCP SPT=55299 DPT=443 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 7 15:11:26 h2177944 kernel: \[3329990.147351\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.125.61.225 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=73 ID=59956 DF PROTO=TCP SPT=57170 DPT=465 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 7 15:14:52 h2177944 kernel: \[3330196.068463\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.125.61.225 DST=85.214	2019-10-08 03:36:03
64.202.188.205	attackspam	pixelfritteuse.de 64.202.188.205 \[07/Oct/2019:20:32:56 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4301 "-" "Mozilla/5.0 $Windows\; U\; Windows NT 5.1\; en-US\; rv:1.9.0.1$ Gecko/2008070208 Firefox/3.0.1" pixelfritteuse.de 64.202.188.205 \[07/Oct/2019:20:32:58 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4301 "-" "Mozilla/5.0 $Windows\; U\; Windows NT 5.1\; en-US\; rv:1.9.0.1$ Gecko/2008070208 Firefox/3.0.1"	2019-10-08 03:06:24
152.32.130.99	attackspambots	$f2bV_matches	2019-10-08 02:59:27
117.139.166.203	attack	Oct 7 14:40:31 root sshd[25180]: Failed password for root from 117.139.166.203 port 61247 ssh2 Oct 7 14:45:22 root sshd[25263]: Failed password for root from 117.139.166.203 port 63504 ssh2 ...	2019-10-08 03:28:38
81.171.107.175	attackbotsspam	\[2019-10-07 15:29:02\] NOTICE\[1887\] chan_sip.c: Registration from '\' failed for '81.171.107.175:51231' - Wrong password \[2019-10-07 15:29:02\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-07T15:29:02.257-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5824",SessionID="0x7fc3ac76b1b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.107.175/51231",Challenge="03e842d7",ReceivedChallenge="03e842d7",ReceivedHash="f9a0658a2730d57a3f9704b8cfe483ec" \[2019-10-07 15:34:03\] NOTICE\[1887\] chan_sip.c: Registration from '\' failed for '81.171.107.175:55637' - Wrong password \[2019-10-07 15:34:03\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-07T15:34:03.295-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="6712",SessionID="0x7fc3ac5226d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171	2019-10-08 03:37:21

最近上报的IP列表

183.98.16.226	179.95.190.55	177.138.64.239	176.67.57.203
175.23.200.177	170.80.31.39	121.194.2.5	117.20.65.76
116.237.141.225	101.230.4.181	91.151.85.24	76.75.65.48
75.131.54.141	72.24.197.18	71.78.28.130	71.41.206.150
71.38.167.215	70.88.89.106	67.250.27.54	67.227.152.230