13.90.201.117 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Microsoft Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Invalid user admin from 13.90.201.117 port 50805	2019-07-13 16:30:56

相同子网IP讨论:

IP	类型	评论内容	时间
13.90.201.25	attack	Jun 6 14:09:53 buvik sshd[19141]: Failed password for root from 13.90.201.25 port 50004 ssh2 Jun 6 14:13:28 buvik sshd[19700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.90.201.25 user=root Jun 6 14:13:30 buvik sshd[19700]: Failed password for root from 13.90.201.25 port 55096 ssh2 ...	2020-06-06 20:17:09

类型

评论内容

时间

13.90.201.25

attack

Jun  6 14:09:53 buvik sshd[19141]: Failed password for root from 13.90.201.25 port 50004 ssh2
Jun  6 14:13:28 buvik sshd[19700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.90.201.25  user=root
Jun  6 14:13:30 buvik sshd[19700]: Failed password for root from 13.90.201.25 port 55096 ssh2
...

2020-06-06 20:17:09

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.90.201.117
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9651
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;13.90.201.117.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071300 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jul 13 16:30:46 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 117.201.90.13.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 117.201.90.13.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
202.158.68.91	attackspam	Feb 23 06:35:41 php1 sshd\[21451\]: Invalid user cpaneleximfilter from 202.158.68.91 Feb 23 06:35:41 php1 sshd\[21451\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.158.68.91 Feb 23 06:35:42 php1 sshd\[21451\]: Failed password for invalid user cpaneleximfilter from 202.158.68.91 port 57456 ssh2 Feb 23 06:40:05 php1 sshd\[21911\]: Invalid user tinkerware from 202.158.68.91 Feb 23 06:40:05 php1 sshd\[21911\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.158.68.91	2020-02-24 03:41:59
37.49.227.151	attackspambots	lfd: (smtpauth) Failed SMTP AUTH login from 37.49.227.151 (NL/Netherlands/-): 5 in the last 3600 secs - Wed Jun 13 23:33:55 2018	2020-02-24 03:40:03
180.67.115.102	attackspambots	Lines containing failures of 180.67.115.102 Feb 20 19:17:26 zabbix sshd[78753]: Invalid user rabbhostnamemq from 180.67.115.102 port 65210 Feb 20 19:17:26 zabbix sshd[78753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.67.115.102 Feb 20 19:17:28 zabbix sshd[78753]: Failed password for invalid user rabbhostnamemq from 180.67.115.102 port 65210 ssh2 Feb 20 19:17:28 zabbix sshd[78753]: Received disconnect from 180.67.115.102 port 65210:11: Bye Bye [preauth] Feb 20 19:17:28 zabbix sshd[78753]: Disconnected from invalid user rabbhostnamemq 180.67.115.102 port 65210 [preauth] Feb 20 19:23:21 zabbix sshd[79286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.67.115.102 user=gnats Feb 20 19:23:23 zabbix sshd[79286]: Failed password for gnats from 180.67.115.102 port 48511 ssh2 Feb 20 19:23:24 zabbix sshd[79286]: Received disconnect from 180.67.115.102 port 48511:11: Bye Bye [preauth] Fe........ ------------------------------	2020-02-24 03:38:42
113.252.232.249	attackspambots	Honeypot attack, port: 5555, PTR: 249-232-252-113-on-nets.com.	2020-02-24 03:54:45
185.165.31.157	attackbotsspam	lfd: (smtpauth) Failed SMTP AUTH login from 185.165.31.157 (-): 5 in the last 3600 secs - Wed Jun 13 13:20:50 2018	2020-02-24 03:28:41
218.72.66.177	attackbotsspam	lfd: (smtpauth) Failed SMTP AUTH login from 218.72.66.177 (177.66.72.218.broad.hz.zj.dynamic.163data.com.cn): 5 in the last 3600 secs - Wed Jun 13 11:13:48 2018	2020-02-24 03:30:08
218.92.0.212	attackspambots	2020-02-23T19:40:00.113804abusebot-2.cloudsearch.cf sshd[22868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.212 user=root 2020-02-23T19:40:01.768077abusebot-2.cloudsearch.cf sshd[22868]: Failed password for root from 218.92.0.212 port 8543 ssh2 2020-02-23T19:40:04.926195abusebot-2.cloudsearch.cf sshd[22868]: Failed password for root from 218.92.0.212 port 8543 ssh2 2020-02-23T19:40:00.113804abusebot-2.cloudsearch.cf sshd[22868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.212 user=root 2020-02-23T19:40:01.768077abusebot-2.cloudsearch.cf sshd[22868]: Failed password for root from 218.92.0.212 port 8543 ssh2 2020-02-23T19:40:04.926195abusebot-2.cloudsearch.cf sshd[22868]: Failed password for root from 218.92.0.212 port 8543 ssh2 2020-02-23T19:40:00.113804abusebot-2.cloudsearch.cf sshd[22868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2 ...	2020-02-24 03:55:07
129.213.139.213	attackspam	serveres are UTC Lines containing failures of 129.213.139.213 Feb 17 11:40:53 tux2 sshd[2990]: Invalid user support from 129.213.139.213 port 57031 Feb 17 11:40:53 tux2 sshd[2990]: Failed password for invalid user support from 129.213.139.213 port 57031 ssh2 Feb 17 11:40:53 tux2 sshd[2990]: Connection closed by invalid user support 129.213.139.213 port 57031 [preauth] Feb 18 20:00:58 tux2 sshd[18915]: Invalid user support from 129.213.139.213 port 63310 Feb 18 20:00:58 tux2 sshd[18915]: Failed password for invalid user support from 129.213.139.213 port 63310 ssh2 Feb 18 20:00:58 tux2 sshd[18915]: Connection closed by invalid user support 129.213.139.213 port 63310 [preauth] Feb 19 01:36:39 tux2 sshd[6389]: Invalid user support from 129.213.139.213 port 64612 Feb 19 01:36:39 tux2 sshd[6389]: Failed password for invalid user support from 129.213.139.213 port 64612 ssh2 Feb 19 01:36:39 tux2 sshd[6389]: Connection closed by invalid user support 129.213.139.213 port 64612 [p........ ------------------------------	2020-02-24 03:49:22
49.76.11.206	attackbotsspam	lfd: (smtpauth) Failed SMTP AUTH login from 49.76.11.206 (-): 5 in the last 3600 secs - Wed Jun 13 22:19:19 2018	2020-02-24 03:27:29
81.214.245.188	attackbots	Port Scan detected from 81.214.245.188 (TR/Turkey/81.214.245.188.dynamic.ttnet.com.tr). 4 hits in the last 250 seconds	2020-02-24 03:48:04
54.36.106.204	attackspambots	[2020-02-23 14:17:05] NOTICE[1148] chan_sip.c: Registration from '' failed for '54.36.106.204:50001' - Wrong password [2020-02-23 14:17:05] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-23T14:17:05.737-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="3055",SessionID="0x7fd82c144298",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/54.36.106.204/50001",Challenge="0d8abe1e",ReceivedChallenge="0d8abe1e",ReceivedHash="1bedf7ec6744040f164a60510b27415c" [2020-02-23 14:18:14] NOTICE[1148] chan_sip.c: Registration from '' failed for '54.36.106.204:53589' - Wrong password [2020-02-23 14:18:14] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-23T14:18:14.685-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="3060",SessionID="0x7fd82c144298",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/54.36.106.204 ...	2020-02-24 03:33:31
190.182.179.12	attackspam	(imapd) Failed IMAP login from 190.182.179.12 (AR/Argentina/-): 1 in the last 3600 secs	2020-02-24 03:50:09
41.33.12.34	attack	Honeypot attack, port: 445, PTR: host-41.33.12.34.tedata.net.	2020-02-24 03:41:40
51.75.248.57	attackspambots	Total attacks: 2	2020-02-24 03:17:38
216.218.206.122	attackbots	firewall-block, port(s): 27017/tcp	2020-02-24 03:17:52

最近上报的IP列表

191.180.225.191	26.239.8.159	187.109.19.131	182.91.6.74
180.175.11.103	180.158.162.168	156.208.186.240	124.65.140.42
121.225.219.186	118.98.121.195	95.125.13.27	91.231.165.245
89.46.196.34	10.0.0.112	222.141.167.235	178.111.73.57
19.124.84.57	95.227.154.102	107.106.230.217	100.243.252.124