13.92.6.20 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): Microsoft Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	May 20 09:28:33 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=13.92.6.20 May 20 09:28:36 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=13.92.6.20 May 20 09:31:32 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=13.92.6.20 May 20 09:31:34 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=13.92.6.20 May 20 09:36:08 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=13.92.6.20 May 20 09:36:10 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=13.92.6.20 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=13.92.6.20	2020-05-20 15:46:00

类型

评论内容

时间

attackbotsspam

May 20 09:28:33 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=13.92.6.20 
May 20 09:28:36 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=13.92.6.20 
May 20 09:31:32 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=13.92.6.20 
May 20 09:31:34 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=13.92.6.20 
May 20 09:36:08 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=13.92.6.20 
May 20 09:36:10 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=13.92.6.20 


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=13.92.6.20

2020-05-20 15:46:00

相同子网IP讨论:

IP	类型	评论内容	时间
13.92.62.94	attackspam	Invalid user 163 from 13.92.62.94 port 18331	2020-09-28 01:51:38
13.92.62.94	attackspam	2020-09-26 UTC: (2x) - 122,admin	2020-09-27 17:55:12
13.92.62.94	attackspam	$f2bV_matches	2020-09-25 09:06:46

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.92.6.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61622
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;13.92.6.20.			IN	A

;; AUTHORITY SECTION:
.			514	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052000 1800 900 604800 86400

;; Query time: 108 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 20 15:45:56 CST 2020
;; MSG SIZE  rcvd: 114

HOST信息:

Host 20.6.92.13.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 20.6.92.13.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
188.166.87.238	attackbots	Oct 9 19:53:22 sachi sshd\[28252\]: Invalid user Dakota2017 from 188.166.87.238 Oct 9 19:53:22 sachi sshd\[28252\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.87.238 Oct 9 19:53:23 sachi sshd\[28252\]: Failed password for invalid user Dakota2017 from 188.166.87.238 port 54516 ssh2 Oct 9 19:57:14 sachi sshd\[28602\]: Invalid user Apache123 from 188.166.87.238 Oct 9 19:57:14 sachi sshd\[28602\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.87.238	2019-10-10 17:27:41
187.107.136.134	attackspambots	Oct 10 10:57:02 mail postfix/smtpd[2488]: warning: unknown[187.107.136.134]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 10 10:57:08 mail postfix/smtpd[2696]: warning: unknown[187.107.136.134]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 10 11:04:19 mail postfix/smtpd[24541]: warning: unknown[187.107.136.134]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2019-10-10 17:42:30
163.172.160.182	attackspambots	2019-10-10T06:15:45.865876abusebot.cloudsearch.cf sshd\[8356\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.160.182 user=root	2019-10-10 17:50:20
183.240.157.3	attackspambots	Oct 9 19:58:04 wbs sshd\[32336\]: Invalid user Radio@123 from 183.240.157.3 Oct 9 19:58:04 wbs sshd\[32336\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.240.157.3 Oct 9 19:58:06 wbs sshd\[32336\]: Failed password for invalid user Radio@123 from 183.240.157.3 port 59270 ssh2 Oct 9 20:03:37 wbs sshd\[332\]: Invalid user P@\$\$w0rt!qaz from 183.240.157.3 Oct 9 20:03:37 wbs sshd\[332\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.240.157.3	2019-10-10 17:46:26
36.76.110.251	attackspambots	Unauthorised access (Oct 10) SRC=36.76.110.251 LEN=52 TTL=247 ID=10639 DF TCP DPT=445 WINDOW=8192 SYN	2019-10-10 17:33:10
65.169.38.37	attackbotsspam	Oct 9 REMOVED dovecot: imap-login: Disconnected $auth failed, 1 attempts in 5 secs$: user=\, method=PLAIN, rip=65.169.38.37, lip=REMOVED, TLS, session=\ Oct 10 REMOVED dovecot: imap-login: Disconnected $auth failed, 1 attempts in 5 secs$: user=\, method=PLAIN, rip=65.169.38.37, lip=REMOVED, TLS, session=\<52DddoGUL45BqSYl\> Oct 10 REMOVED dovecot: imap-login: Disconnected $auth failed, 1 attempts in 5 secs$: user=\, method=PLAIN, rip=65.169.38.37, lip=REMOVED, TLS, session=\	2019-10-10 17:48:27
41.41.77.196	attackspam	Automatic report - Port Scan Attack	2019-10-10 17:56:56
106.12.120.58	attack	Oct 10 10:55:26 MK-Soft-VM3 sshd[23567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.120.58 Oct 10 10:55:28 MK-Soft-VM3 sshd[23567]: Failed password for invalid user Angela2017 from 106.12.120.58 port 49188 ssh2 ...	2019-10-10 17:18:50
34.66.84.11	attackspam	10.10.2019 10:00:06 Connection to port 33333 blocked by firewall	2019-10-10 17:55:52
165.22.157.111	attackspambots	ZTE Router Exploit Scanner	2019-10-10 17:32:54
174.1.161.59	attackspam	Automatic report - Port Scan Attack	2019-10-10 17:24:13
101.95.29.150	attack	Oct 10 11:02:31 markkoudstaal sshd[5606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.95.29.150 Oct 10 11:02:33 markkoudstaal sshd[5606]: Failed password for invalid user Million2017 from 101.95.29.150 port 42255 ssh2 Oct 10 11:06:59 markkoudstaal sshd[5962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.95.29.150	2019-10-10 17:21:19
223.166.46.4	attackbots	" "	2019-10-10 17:29:31
186.56.147.150	attackbots	Automatic report - Port Scan Attack	2019-10-10 17:36:23
71.6.158.166	attackspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/71.6.158.166/ US - 1H : (343) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : US NAME ASN : ASN10439 IP : 71.6.158.166 CIDR : 71.6.156.0/22 PREFIX COUNT : 181 UNIQUE IP COUNT : 106752 WYKRYTE ATAKI Z ASN10439 : 1H - 1 3H - 1 6H - 1 12H - 2 24H - 4 DateTime : 2019-10-10 11:01:49 INFO : Server 403 - Looking for resource vulnerabilities Detected and Blocked by ADMIN - data recovery	2019-10-10 17:27:13

最近上报的IP列表

107.175.78.153	27.72.89.8	121.122.119.117	66.249.69.42
71.43.173.137	26.223.174.53	222.233.30.139	118.21.148.24
95.1.247.14	212.77.22.217	210.17.230.213	170.80.151.233
104.40.138.155	61.216.106.3	188.183.151.104	178.62.45.122
27.72.40.184	125.167.0.13	153.126.140.231	217.160.167.132