159.65.135.55 - IPInfo

基本信息:

城市(city): Singapore

省份(region): unknown

国家(country): Singapore

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): DigitalOcean, LLC

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Apr 22 16:34:41 server sshd\[44924\]: Invalid user ubnt from 159.65.135.55 Apr 22 16:34:41 server sshd\[44924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.135.55 Apr 22 16:34:43 server sshd\[44924\]: Failed password for invalid user ubnt from 159.65.135.55 port 42972 ssh2 ...	2019-10-09 17:39:37
attackbots	Apr 22 16:34:41 server sshd\[44924\]: Invalid user ubnt from 159.65.135.55 Apr 22 16:34:41 server sshd\[44924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.135.55 Apr 22 16:34:43 server sshd\[44924\]: Failed password for invalid user ubnt from 159.65.135.55 port 42972 ssh2 ...	2019-07-12 00:17:39

类型

评论内容

时间

attack

Apr 22 16:34:41 server sshd\[44924\]: Invalid user ubnt from 159.65.135.55
Apr 22 16:34:41 server sshd\[44924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.135.55
Apr 22 16:34:43 server sshd\[44924\]: Failed password for invalid user ubnt from 159.65.135.55 port 42972 ssh2
...

2019-10-09 17:39:37

attackbots

Apr 22 16:34:41 server sshd\[44924\]: Invalid user ubnt from 159.65.135.55
Apr 22 16:34:41 server sshd\[44924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.135.55
Apr 22 16:34:43 server sshd\[44924\]: Failed password for invalid user ubnt from 159.65.135.55 port 42972 ssh2
...

2019-07-12 00:17:39

相同子网IP讨论:

IP	类型	评论内容	时间
159.65.135.136	attackbotsspam	$f2bV_matches	2020-08-18 03:46:39
159.65.135.136	attackspam	$f2bV_matches	2020-08-17 00:27:13
159.65.135.11	attackspambots	Aug 13 23:15:34 vps691689 sshd[3081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.135.11 Aug 13 23:15:36 vps691689 sshd[3081]: Failed password for invalid user scaner from 159.65.135.11 port 53342 ssh2 ...	2019-08-14 05:34:21
159.65.135.11	attackbots	2019-08-12T13:29:34.150430abusebot-6.cloudsearch.cf sshd\[9841\]: Invalid user cdoran from 159.65.135.11 port 47686	2019-08-12 21:33:25
159.65.135.11	attack	Aug 9 08:44:01 ny01 sshd[6080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.135.11 Aug 9 08:44:03 ny01 sshd[6080]: Failed password for invalid user station from 159.65.135.11 port 38730 ssh2 Aug 9 08:49:52 ny01 sshd[6519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.135.11	2019-08-09 20:53:28
159.65.135.11	attackspam	Jul 31 20:40:29 rpi sshd[11790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.135.11 Jul 31 20:40:31 rpi sshd[11790]: Failed password for invalid user milo from 159.65.135.11 port 51850 ssh2	2019-08-01 09:05:16
159.65.135.11	attack	Jul 26 13:08:03 eventyay sshd[908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.135.11 Jul 26 13:08:06 eventyay sshd[908]: Failed password for invalid user support from 159.65.135.11 port 51964 ssh2 Jul 26 13:12:57 eventyay sshd[2408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.135.11 ...	2019-07-26 19:13:02
159.65.135.11	attack	Jul 26 02:34:15 s64-1 sshd[11767]: Failed password for root from 159.65.135.11 port 34958 ssh2 Jul 26 02:39:18 s64-1 sshd[11883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.135.11 Jul 26 02:39:21 s64-1 sshd[11883]: Failed password for invalid user helpdesk from 159.65.135.11 port 50850 ssh2 ...	2019-07-26 08:52:38
159.65.135.11	attackbots	Jul 24 05:38:00 tux-35-217 sshd\[27362\]: Invalid user smbguest from 159.65.135.11 port 54548 Jul 24 05:38:00 tux-35-217 sshd\[27362\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.135.11 Jul 24 05:38:02 tux-35-217 sshd\[27362\]: Failed password for invalid user smbguest from 159.65.135.11 port 54548 ssh2 Jul 24 05:42:55 tux-35-217 sshd\[27369\]: Invalid user mongodb from 159.65.135.11 port 41210 Jul 24 05:42:55 tux-35-217 sshd\[27369\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.135.11 ...	2019-07-24 12:28:37
159.65.135.11	attackspam	2019-07-23T18:49:21.676037hub.schaetter.us sshd\[9066\]: Invalid user a from 159.65.135.11 2019-07-23T18:49:21.709905hub.schaetter.us sshd\[9066\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.135.11 2019-07-23T18:49:23.227874hub.schaetter.us sshd\[9066\]: Failed password for invalid user a from 159.65.135.11 port 54114 ssh2 2019-07-23T18:59:13.272094hub.schaetter.us sshd\[9127\]: Invalid user ftpuser from 159.65.135.11 2019-07-23T18:59:13.306921hub.schaetter.us sshd\[9127\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.135.11 ...	2019-07-24 03:26:49
159.65.135.11	attack	Jul 23 02:07:07 aat-srv002 sshd[3353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.135.11 Jul 23 02:07:10 aat-srv002 sshd[3353]: Failed password for invalid user shark from 159.65.135.11 port 33956 ssh2 Jul 23 02:13:58 aat-srv002 sshd[3516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.135.11 Jul 23 02:14:00 aat-srv002 sshd[3516]: Failed password for invalid user paul from 159.65.135.11 port 50146 ssh2 ...	2019-07-23 15:24:32
159.65.135.11	attack	2019-07-16T09:41:56.379430enmeeting.mahidol.ac.th sshd\[23543\]: Invalid user angel from 159.65.135.11 port 44264 2019-07-16T09:41:56.394337enmeeting.mahidol.ac.th sshd\[23543\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.135.11 2019-07-16T09:41:58.841261enmeeting.mahidol.ac.th sshd\[23543\]: Failed password for invalid user angel from 159.65.135.11 port 44264 ssh2 ...	2019-07-16 11:42:31
159.65.135.11	attackspam	Jul 12 22:01:59 tux-35-217 sshd\[7019\]: Invalid user schneider from 159.65.135.11 port 56538 Jul 12 22:01:59 tux-35-217 sshd\[7019\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.135.11 Jul 12 22:02:01 tux-35-217 sshd\[7019\]: Failed password for invalid user schneider from 159.65.135.11 port 56538 ssh2 Jul 12 22:08:00 tux-35-217 sshd\[7079\]: Invalid user git from 159.65.135.11 port 59516 Jul 12 22:08:00 tux-35-217 sshd\[7079\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.135.11 ...	2019-07-13 05:54:59
159.65.135.11	attackbots	Jul 12 08:32:16 tux-35-217 sshd\[32739\]: Invalid user gi from 159.65.135.11 port 59570 Jul 12 08:32:16 tux-35-217 sshd\[32739\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.135.11 Jul 12 08:32:17 tux-35-217 sshd\[32739\]: Failed password for invalid user gi from 159.65.135.11 port 59570 ssh2 Jul 12 08:38:27 tux-35-217 sshd\[363\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.135.11 user=root ...	2019-07-12 15:09:36

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.65.135.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27236
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;159.65.135.55.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019042701 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sat Apr 27 18:57:29 +08 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 55.135.65.159.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 55.135.65.159.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
67.225.146.4	attackspambots	Automatic report - XMLRPC Attack	2020-06-03 22:09:27
193.27.228.13	attack	[H1.VM8] Blocked by UFW	2020-06-03 22:26:16
82.254.10.37	attack	SSH brute-force attempt	2020-06-03 22:36:17
194.26.29.116	attackspambots	06/03/2020-09:48:41.521298 194.26.29.116 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-06-03 22:13:00
101.255.56.42	attack	Jun 3 09:49:41 NPSTNNYC01T sshd[26674]: Failed password for root from 101.255.56.42 port 35241 ssh2 Jun 3 09:51:33 NPSTNNYC01T sshd[26904]: Failed password for root from 101.255.56.42 port 45316 ssh2 ...	2020-06-03 22:27:55
124.107.183.240	attackspam	20/6/3@07:54:40: FAIL: Alarm-Intrusion address from=124.107.183.240 ...	2020-06-03 22:30:04
106.53.104.169	attackspambots	Jun 3 16:34:06 ift sshd\[33687\]: Failed password for root from 106.53.104.169 port 35534 ssh2Jun 3 16:36:07 ift sshd\[34113\]: Failed password for root from 106.53.104.169 port 60320 ssh2Jun 3 16:37:33 ift sshd\[34295\]: Failed password for root from 106.53.104.169 port 45620 ssh2Jun 3 16:38:54 ift sshd\[34396\]: Failed password for root from 106.53.104.169 port 54728 ssh2Jun 3 16:40:16 ift sshd\[34795\]: Failed password for root from 106.53.104.169 port 40120 ssh2 ...	2020-06-03 22:46:14
83.30.73.192	attackspam	Lines containing failures of 83.30.73.192 (max 1000) Jun 3 11:50:09 UTC__SANYALnet-Labs__cac12 sshd[11509]: Connection from 83.30.73.192 port 34180 on 64.137.176.104 port 22 Jun 3 11:50:13 UTC__SANYALnet-Labs__cac12 sshd[11509]: Failed password for invalid user r.r from 83.30.73.192 port 34180 ssh2 Jun 3 11:50:13 UTC__SANYALnet-Labs__cac12 sshd[11509]: Received disconnect from 83.30.73.192 port 34180:11: Bye Bye [preauth] Jun 3 11:50:13 UTC__SANYALnet-Labs__cac12 sshd[11509]: Disconnected from 83.30.73.192 port 34180 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=83.30.73.192	2020-06-03 22:48:33
182.76.74.78	attack	2020-06-03T07:05:21.620620linuxbox-skyline sshd[109681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.76.74.78 user=root 2020-06-03T07:05:23.629337linuxbox-skyline sshd[109681]: Failed password for root from 182.76.74.78 port 31736 ssh2 ...	2020-06-03 22:10:37
139.199.32.57	attackbotsspam	Jun 3 16:32:54 inter-technics sshd[21498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.32.57 user=root Jun 3 16:32:56 inter-technics sshd[21498]: Failed password for root from 139.199.32.57 port 39038 ssh2 Jun 3 16:37:00 inter-technics sshd[21728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.32.57 user=root Jun 3 16:37:02 inter-technics sshd[21728]: Failed password for root from 139.199.32.57 port 54696 ssh2 Jun 3 16:41:05 inter-technics sshd[22064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.32.57 user=root Jun 3 16:41:07 inter-technics sshd[22064]: Failed password for root from 139.199.32.57 port 42120 ssh2 ...	2020-06-03 22:45:14
51.38.128.30	attackbotsspam	Jun 3 16:40:34 vps687878 sshd\[11085\]: Failed password for invalid user funshion\r from 51.38.128.30 port 60282 ssh2 Jun 3 16:44:32 vps687878 sshd\[11502\]: Invalid user 1qazxsw23edcvfr45tgb\r from 51.38.128.30 port 47728 Jun 3 16:44:32 vps687878 sshd\[11502\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.128.30 Jun 3 16:44:34 vps687878 sshd\[11502\]: Failed password for invalid user 1qazxsw23edcvfr45tgb\r from 51.38.128.30 port 47728 ssh2 Jun 3 16:48:29 vps687878 sshd\[11881\]: Invalid user R00tAdm!n123\r from 51.38.128.30 port 35092 Jun 3 16:48:29 vps687878 sshd\[11881\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.128.30 ...	2020-06-03 22:49:13
111.229.226.212	attackbots	SSH Brute-Force reported by Fail2Ban	2020-06-03 22:48:15
62.171.144.195	attackbots	[2020-06-03 10:19:27] NOTICE[1288] chan_sip.c: Registration from '' failed for '62.171.144.195:42799' - Wrong password [2020-06-03 10:19:27] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-03T10:19:27.789-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="newyork",SessionID="0x7f4d740397b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.171.144.195/42799",Challenge="6b87a5eb",ReceivedChallenge="6b87a5eb",ReceivedHash="da07f0664af2f6418fdb4f4b23c129ec" [2020-06-03 10:20:50] NOTICE[1288] chan_sip.c: Registration from '' failed for '62.171.144.195:45822' - Wrong password [2020-06-03 10:20:50] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-03T10:20:50.639-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="soccer",SessionID="0x7f4d740436f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/ ...	2020-06-03 22:24:46
178.176.113.142	attackbots	xmlrpc attack	2020-06-03 22:33:45
64.225.58.121	attack	(sshd) Failed SSH login from 64.225.58.121 (US/United States/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 3 14:53:08 ubnt-55d23 sshd[10697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.58.121 user=root Jun 3 14:53:10 ubnt-55d23 sshd[10697]: Failed password for root from 64.225.58.121 port 58332 ssh2	2020-06-03 22:24:08

最近上报的IP列表

102.72.58.8	162.243.151.93	140.47.82.255	68.66.233.25
224.222.44.210	216.155.42.102	119.42.94.61	44.191.78.145
87.228.125.192	223.106.168.27	103.79.168.21	243.37.162.178
180.173.109.214	154.48.227.44	184.126.167.194	236.99.112.52
181.215.159.241	103.114.106.46	74.79.152.76	177.136.37.185