13.92.6.20 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): Microsoft Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	May 20 09:28:33 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=13.92.6.20 May 20 09:28:36 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=13.92.6.20 May 20 09:31:32 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=13.92.6.20 May 20 09:31:34 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=13.92.6.20 May 20 09:36:08 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=13.92.6.20 May 20 09:36:10 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=13.92.6.20 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=13.92.6.20	2020-05-20 15:46:00

类型

评论内容

时间

attackbotsspam

May 20 09:28:33 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=13.92.6.20 
May 20 09:28:36 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=13.92.6.20 
May 20 09:31:32 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=13.92.6.20 
May 20 09:31:34 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=13.92.6.20 
May 20 09:36:08 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=13.92.6.20 
May 20 09:36:10 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=13.92.6.20 


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=13.92.6.20

2020-05-20 15:46:00

相同子网IP讨论:

IP	类型	评论内容	时间
13.92.62.94	attackspam	Invalid user 163 from 13.92.62.94 port 18331	2020-09-28 01:51:38
13.92.62.94	attackspam	2020-09-26 UTC: (2x) - 122,admin	2020-09-27 17:55:12
13.92.62.94	attackspam	$f2bV_matches	2020-09-25 09:06:46

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.92.6.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61622
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;13.92.6.20.			IN	A

;; AUTHORITY SECTION:
.			514	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052000 1800 900 604800 86400

;; Query time: 108 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 20 15:45:56 CST 2020
;; MSG SIZE  rcvd: 114

HOST信息:

Host 20.6.92.13.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 20.6.92.13.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
45.254.33.124	attackspambots	2020-05-25 06:54:04.705198-0500 localhost smtpd[45400]: NOQUEUE: reject: RCPT from unknown[45.254.33.124]: 450 4.7.25 Client host rejected: cannot find your hostname, [45.254.33.124]; from= to= proto=ESMTP helo=<00fd7d95.beucre.xyz>	2020-05-25 21:34:58
206.248.172.128	attack	DistributedAbnormallyLongRequest	2020-05-25 21:55:09
120.79.156.2	attackbots	Connection by 120.79.156.2 on port: 7001 got caught by honeypot at 5/25/2020 1:03:09 PM	2020-05-25 21:27:14
119.29.53.107	attackbotsspam	$f2bV_matches	2020-05-25 21:18:59
152.0.194.2	attackspam	May 25 14:36:42 ns381471 sshd[27688]: Failed password for root from 152.0.194.2 port 44050 ssh2	2020-05-25 21:43:58
193.111.79.211	attackspam	Lines containing failures of 193.111.79.211 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=193.111.79.211	2020-05-25 21:33:29
186.226.169.240	attack	May 25 13:15:20 master sshd[4284]: Failed password for invalid user admin from 186.226.169.240 port 57853 ssh2	2020-05-25 21:40:24
190.189.12.210	attackbots	May 25 14:32:52 inter-technics sshd[24849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.189.12.210 user=root May 25 14:32:54 inter-technics sshd[24849]: Failed password for root from 190.189.12.210 port 38932 ssh2 May 25 14:34:38 inter-technics sshd[24966]: Invalid user paten from 190.189.12.210 port 32778 May 25 14:34:38 inter-technics sshd[24966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.189.12.210 May 25 14:34:38 inter-technics sshd[24966]: Invalid user paten from 190.189.12.210 port 32778 May 25 14:34:40 inter-technics sshd[24966]: Failed password for invalid user paten from 190.189.12.210 port 32778 ssh2 ...	2020-05-25 21:24:13
178.128.23.6	attackbots	May 25 15:11:11 ns381471 sshd[29386]: Failed password for root from 178.128.23.6 port 49184 ssh2	2020-05-25 21:18:45
45.142.195.7	attackspam	May 25 15:27:16 relay postfix/smtpd\[14367\]: warning: unknown\[45.142.195.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 25 15:27:49 relay postfix/smtpd\[10482\]: warning: unknown\[45.142.195.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 25 15:28:08 relay postfix/smtpd\[7582\]: warning: unknown\[45.142.195.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 25 15:28:41 relay postfix/smtpd\[27697\]: warning: unknown\[45.142.195.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 25 15:29:00 relay postfix/smtpd\[9971\]: warning: unknown\[45.142.195.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-05-25 21:38:20
49.88.112.60	attackspam	May 25 15:40:27 vps sshd[256825]: Failed password for root from 49.88.112.60 port 17229 ssh2 May 25 15:40:30 vps sshd[256825]: Failed password for root from 49.88.112.60 port 17229 ssh2 May 25 15:41:35 vps sshd[261503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.60 user=root May 25 15:41:37 vps sshd[261503]: Failed password for root from 49.88.112.60 port 37469 ssh2 May 25 15:41:39 vps sshd[261503]: Failed password for root from 49.88.112.60 port 37469 ssh2 ...	2020-05-25 21:46:00
97.74.24.114	attack	Wordpress_xmlrpc_attack	2020-05-25 21:53:48
116.114.95.89	attack	Netgear DGN Device Remote Command Execution Vulnerability, PTR: PTR record not found	2020-05-25 21:34:08
125.121.116.116	attack	MAIL: User Login Brute Force Attempt, PTR: PTR record not found	2020-05-25 21:39:54
218.93.225.150	attackspambots	May 25 15:25:39 eventyay sshd[27130]: Failed password for root from 218.93.225.150 port 43324 ssh2 May 25 15:29:09 eventyay sshd[27285]: Failed password for root from 218.93.225.150 port 43340 ssh2 May 25 15:30:31 eventyay sshd[27363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.93.225.150 ...	2020-05-25 21:35:41

最近上报的IP列表

107.175.78.153	27.72.89.8	121.122.119.117	66.249.69.42
71.43.173.137	26.223.174.53	222.233.30.139	118.21.148.24
95.1.247.14	212.77.22.217	210.17.230.213	170.80.151.233
104.40.138.155	61.216.106.3	188.183.151.104	178.62.45.122
27.72.40.184	125.167.0.13	153.126.140.231	217.160.167.132