192.141.200.13

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Brazil

运营商(isp): Torre das Antenas Comercio e Servicos Tecnico Ltda

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	May 27 17:44:31 sso sshd[19733]: Failed password for root from 192.141.200.13 port 58484 ssh2 ...	2020-05-28 00:27:19
attackspambots	k+ssh-bruteforce	2020-05-26 02:28:30
attackbots	Invalid user lindsay from 192.141.200.13 port 37158	2020-05-25 18:43:58

相同子网IP讨论:

IP	类型	评论内容	时间
192.141.200.20	attack	2020-06-03T08:46:43.9115021495-001 sshd[64862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.141.200.20 user=root 2020-06-03T08:46:45.7739491495-001 sshd[64862]: Failed password for root from 192.141.200.20 port 40242 ssh2 2020-06-03T08:50:51.1971961495-001 sshd[65022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.141.200.20 user=root 2020-06-03T08:50:53.4407801495-001 sshd[65022]: Failed password for root from 192.141.200.20 port 44170 ssh2 2020-06-03T08:54:58.6075341495-001 sshd[65176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.141.200.20 user=root 2020-06-03T08:55:00.4247511495-001 sshd[65176]: Failed password for root from 192.141.200.20 port 48098 ssh2 ...	2020-06-04 00:51:58
192.141.200.20	attackspambots	May 30 20:20:20 XXX sshd[15253]: Invalid user goellner from 192.141.200.20 port 37606	2020-05-31 05:09:18
192.141.200.20	attackbotsspam	2020-05-26T15:54:17.777287shield sshd\[14839\]: Invalid user test from 192.141.200.20 port 46816 2020-05-26T15:54:17.781779shield sshd\[14839\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.141.200.20 2020-05-26T15:54:19.898069shield sshd\[14839\]: Failed password for invalid user test from 192.141.200.20 port 46816 ssh2 2020-05-26T15:57:58.568913shield sshd\[15955\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.141.200.20 user=root 2020-05-26T15:58:00.690381shield sshd\[15955\]: Failed password for root from 192.141.200.20 port 43404 ssh2	2020-05-27 00:01:12
192.141.200.20	attackbots	May 25 11:21:01 ns382633 sshd\[20000\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.141.200.20 user=root May 25 11:21:02 ns382633 sshd\[20000\]: Failed password for root from 192.141.200.20 port 57520 ssh2 May 25 11:34:30 ns382633 sshd\[22372\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.141.200.20 user=root May 25 11:34:32 ns382633 sshd\[22372\]: Failed password for root from 192.141.200.20 port 50098 ssh2 May 25 11:38:45 ns382633 sshd\[23257\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.141.200.20 user=root	2020-05-25 18:03:49
192.141.200.12	attackbotsspam	May 21 21:39:19 web1 sshd\[24632\]: Invalid user ea from 192.141.200.12 May 21 21:39:19 web1 sshd\[24632\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.141.200.12 May 21 21:39:21 web1 sshd\[24632\]: Failed password for invalid user ea from 192.141.200.12 port 51984 ssh2 May 21 21:43:35 web1 sshd\[24995\]: Invalid user xsf from 192.141.200.12 May 21 21:43:35 web1 sshd\[24995\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.141.200.12	2020-05-22 15:47:38
192.141.200.20	attackspam	May 22 00:43:54 ny01 sshd[17836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.141.200.20 May 22 00:43:56 ny01 sshd[17836]: Failed password for invalid user qqe from 192.141.200.20 port 51696 ssh2 May 22 00:45:02 ny01 sshd[18001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.141.200.20	2020-05-22 12:56:15
192.141.200.20	attackspam	May 21 14:18:46 localhost sshd\[1302\]: Invalid user zto from 192.141.200.20 May 21 14:18:46 localhost sshd\[1302\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.141.200.20 May 21 14:18:48 localhost sshd\[1302\]: Failed password for invalid user zto from 192.141.200.20 port 42734 ssh2 May 21 14:22:09 localhost sshd\[1565\]: Invalid user yih from 192.141.200.20 May 21 14:22:09 localhost sshd\[1565\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.141.200.20 ...	2020-05-21 20:37:20
192.141.200.12	attack	Invalid user hja from 192.141.200.12 port 51540	2020-05-21 07:35:37
192.141.200.12	attackbotsspam	May 14 12:27:09 scw-6657dc sshd[11309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.141.200.12 May 14 12:27:09 scw-6657dc sshd[11309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.141.200.12 May 14 12:27:11 scw-6657dc sshd[11309]: Failed password for invalid user admin from 192.141.200.12 port 58904 ssh2 ...	2020-05-14 22:19:00
192.141.200.20	attackbots	May 13 07:56:43 [host] sshd[28727]: Invalid user c May 13 07:56:43 [host] sshd[28727]: pam_unix(sshd: May 13 07:56:45 [host] sshd[28727]: Failed passwor	2020-05-13 15:38:45
192.141.200.20	attackbots	May 10 14:15:22 ns382633 sshd\[26878\]: Invalid user dak from 192.141.200.20 port 42554 May 10 14:15:22 ns382633 sshd\[26878\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.141.200.20 May 10 14:15:24 ns382633 sshd\[26878\]: Failed password for invalid user dak from 192.141.200.20 port 42554 ssh2 May 10 14:25:14 ns382633 sshd\[28746\]: Invalid user guest from 192.141.200.20 port 56052 May 10 14:25:14 ns382633 sshd\[28746\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.141.200.20	2020-05-10 22:01:45
192.141.200.20	attack	Bruteforce detected by fail2ban	2020-05-10 01:43:55
192.141.200.20	attack	leo_www	2020-05-08 12:59:01
192.141.200.12	attack	May 6 15:29:22 meumeu sshd[17371]: Failed password for root from 192.141.200.12 port 36660 ssh2 May 6 15:34:01 meumeu sshd[18201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.141.200.12 May 6 15:34:02 meumeu sshd[18201]: Failed password for invalid user print from 192.141.200.12 port 46802 ssh2 ...	2020-05-06 23:07:14

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 192.141.200.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22850
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;192.141.200.13.			IN	A

;; AUTHORITY SECTION:
.			430	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050101 1800 900 604800 86400

;; Query time: 113 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 01 21:39:57 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

13.200.141.192.in-addr.arpa domain name pointer 192-141-200-13.clientes.torredasantenas.com.br.200.141.192.in-addr.arpa.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
13.200.141.192.in-addr.arpa	name = 192-141-200-13.clientes.torredasantenas.com.br.200.141.192.in-addr.arpa.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
141.98.10.208	attackbotsspam	Jul 4 19:31:12 srv01 postfix/smtpd\[14255\]: warning: unknown\[141.98.10.208\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 4 19:34:31 srv01 postfix/smtpd\[26614\]: warning: unknown\[141.98.10.208\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 4 19:35:29 srv01 postfix/smtpd\[26403\]: warning: unknown\[141.98.10.208\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 4 19:36:01 srv01 postfix/smtpd\[26614\]: warning: unknown\[141.98.10.208\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 4 19:37:41 srv01 postfix/smtpd\[26627\]: warning: unknown\[141.98.10.208\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-07-05 01:46:20
164.52.24.180	attackbotsspam	Hit honeypot r.	2020-07-05 01:46:36
58.62.207.50	attackbotsspam	Failed password for invalid user eric from 58.62.207.50 port 50276 ssh2	2020-07-05 02:11:44
122.51.241.109	attack	Failed password for invalid user ftp2 from 122.51.241.109 port 49126 ssh2	2020-07-05 02:17:52
119.160.98.31	attackspambots	20/7/4@08:08:59: FAIL: Alarm-Network address from=119.160.98.31 ...	2020-07-05 02:12:39
185.176.27.102	attackbots	Jul 4 19:22:11 debian-2gb-nbg1-2 kernel: \[16141948.846412\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.102 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=9118 PROTO=TCP SPT=58162 DPT=34200 WINDOW=1024 RES=0x00 SYN URGP=0	2020-07-05 02:00:08
36.90.179.187	attackspambots	Lines containing failures of 36.90.179.187 Jul 1 05:39:33 shared01 sshd[3088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.90.179.187 user=r.r Jul 1 05:39:34 shared01 sshd[3088]: Failed password for r.r from 36.90.179.187 port 50976 ssh2 Jul 1 05:39:34 shared01 sshd[3088]: Received disconnect from 36.90.179.187 port 50976:11: Bye Bye [preauth] Jul 1 05:39:34 shared01 sshd[3088]: Disconnected from authenticating user r.r 36.90.179.187 port 50976 [preauth] Jul 1 05:43:39 shared01 sshd[4594]: Invalid user Redistoor from 36.90.179.187 port 41964 Jul 1 05:43:39 shared01 sshd[4594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.90.179.187 Jul 1 05:43:41 shared01 sshd[4594]: Failed password for invalid user Redistoor from 36.90.179.187 port 41964 ssh2 Jul 1 05:43:41 shared01 sshd[4594]: Received disconnect from 36.90.179.187 port 41964:11: Bye Bye [preauth] Jul 1 05:43:41 share........ ------------------------------	2020-07-05 02:02:58
185.143.72.25	attackbotsspam	2020-07-04T11:55:17.335253linuxbox-skyline auth[568372]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=temp02 rhost=185.143.72.25 ...	2020-07-05 01:59:35
45.141.84.10	attack	Jul 4 sshd[6307]: Invalid user admin from 45.141.84.10 port 31680	2020-07-05 01:38:30
27.54.62.8	attack	Automatic report - Port Scan Attack	2020-07-05 01:46:04
185.108.106.251	attackbotsspam	[2020-07-04 13:32:16] NOTICE[1197] chan_sip.c: Registration from '' failed for '185.108.106.251:49535' - Wrong password [2020-07-04 13:32:16] SECURITY[1214] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-04T13:32:16.296-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3037",SessionID="0x7f6d28136c98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.108.106.251/49535",Challenge="25377108",ReceivedChallenge="25377108",ReceivedHash="166ed5224ef4b84fb2756e638bcc8936" [2020-07-04 13:32:43] NOTICE[1197] chan_sip.c: Registration from '' failed for '185.108.106.251:61257' - Wrong password [2020-07-04 13:32:43] SECURITY[1214] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-04T13:32:43.510-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3037",SessionID="0x7f6d28742108",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.108 ...	2020-07-05 01:40:53
103.129.223.136	attackbots	Jul 4 15:16:10 124388 sshd[26736]: Failed password for invalid user amsftp from 103.129.223.136 port 50656 ssh2 Jul 4 15:20:06 124388 sshd[27037]: Invalid user strider from 103.129.223.136 port 49416 Jul 4 15:20:06 124388 sshd[27037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.129.223.136 Jul 4 15:20:06 124388 sshd[27037]: Invalid user strider from 103.129.223.136 port 49416 Jul 4 15:20:08 124388 sshd[27037]: Failed password for invalid user strider from 103.129.223.136 port 49416 ssh2	2020-07-05 02:16:17
51.75.78.172	attackbots	Lines containing failures of 51.75.78.172 Jul 3 12:27:18 kmh-vmh-001-fsn03 sshd[2068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.78.172 user=r.r Jul 3 12:27:20 kmh-vmh-001-fsn03 sshd[2068]: Failed password for r.r from 51.75.78.172 port 55650 ssh2 Jul 3 12:27:21 kmh-vmh-001-fsn03 sshd[2068]: Received disconnect from 51.75.78.172 port 55650:11: Bye Bye [preauth] Jul 3 12:27:21 kmh-vmh-001-fsn03 sshd[2068]: Disconnected from authenticating user r.r 51.75.78.172 port 55650 [preauth] Jul 3 12:39:23 kmh-vmh-001-fsn03 sshd[29999]: Invalid user yujie from 51.75.78.172 port 59006 Jul 3 12:39:23 kmh-vmh-001-fsn03 sshd[29999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.78.172 Jul 3 12:39:24 kmh-vmh-001-fsn03 sshd[29999]: Failed password for invalid user yujie from 51.75.78.172 port 59006 ssh2 Jul 3 12:39:24 kmh-vmh-001-fsn03 sshd[29999]: Received disconnect from 51.75.7........ ------------------------------	2020-07-05 02:05:56
59.120.227.134	attackspam	Jul 4 17:13:26 marvibiene sshd[6076]: Invalid user eversec from 59.120.227.134 port 35656 Jul 4 17:13:26 marvibiene sshd[6076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.120.227.134 Jul 4 17:13:26 marvibiene sshd[6076]: Invalid user eversec from 59.120.227.134 port 35656 Jul 4 17:13:28 marvibiene sshd[6076]: Failed password for invalid user eversec from 59.120.227.134 port 35656 ssh2 ...	2020-07-05 01:51:12
111.229.74.27	attackbots	$f2bV_matches	2020-07-05 02:18:14

最近上报的IP列表

198.118.236.164	152.205.104.55	169.91.155.231	204.55.89.159
105.117.25.116	195.184.208.95	113.99.4.31	129.23.207.187
182.196.12.199	187.251.93.76	123.123.43.126	152.153.96.220
12.95.226.196	108.78.53.247	58.177.17.142	101.240.172.112
76.162.167.207	52.85.127.162	13.144.233.69	180.140.111.210