5.134.219.13 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Russian Federation

运营商(isp): Wiland Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	2019-09-08T16:29:01.866452abusebot-6.cloudsearch.cf sshd\[387\]: Invalid user 123456 from 5.134.219.13 port 52602	2019-09-09 01:01:07
attackspambots	Sep 1 14:44:10 plusreed sshd[24763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.134.219.13 user=root Sep 1 14:44:12 plusreed sshd[24763]: Failed password for root from 5.134.219.13 port 45658 ssh2 ...	2019-09-02 02:51:10
attackspam	Aug 29 02:11:20 ns315508 sshd[849]: Invalid user rocket from 5.134.219.13 port 40502 Aug 29 02:11:20 ns315508 sshd[849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.134.219.13 Aug 29 02:11:20 ns315508 sshd[849]: Invalid user rocket from 5.134.219.13 port 40502 Aug 29 02:11:22 ns315508 sshd[849]: Failed password for invalid user rocket from 5.134.219.13 port 40502 ssh2 Aug 29 02:16:20 ns315508 sshd[880]: Invalid user 123456 from 5.134.219.13 port 40432 ...	2019-08-29 11:20:33

类型

评论内容

时间

attackspam

2019-09-08T16:29:01.866452abusebot-6.cloudsearch.cf sshd\[387\]: Invalid user 123456 from 5.134.219.13 port 52602

2019-09-09 01:01:07

attackspambots

Sep  1 14:44:10 plusreed sshd[24763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.134.219.13  user=root
Sep  1 14:44:12 plusreed sshd[24763]: Failed password for root from 5.134.219.13 port 45658 ssh2
...

2019-09-02 02:51:10

attackspam

Aug 29 02:11:20 ns315508 sshd[849]: Invalid user rocket from 5.134.219.13 port 40502
Aug 29 02:11:20 ns315508 sshd[849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.134.219.13
Aug 29 02:11:20 ns315508 sshd[849]: Invalid user rocket from 5.134.219.13 port 40502
Aug 29 02:11:22 ns315508 sshd[849]: Failed password for invalid user rocket from 5.134.219.13 port 40502 ssh2
Aug 29 02:16:20 ns315508 sshd[880]: Invalid user 123456 from 5.134.219.13 port 40432
...

2019-08-29 11:20:33

相同子网IP讨论:

IP	类型	评论内容	时间
5.134.219.3	attackbots	Unauthorized connection attempt from IP address 5.134.219.3 on Port 445(SMB)	2020-03-07 01:29:34
5.134.219.3	attackbots	Unauthorized connection attempt from IP address 5.134.219.3 on Port 445(SMB)	2020-02-01 10:26:12

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 5.134.219.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47023
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;5.134.219.13.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082802 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Aug 29 11:20:09 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 13.219.134.5.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 13.219.134.5.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
86.105.186.182	attackbotsspam	Date: Tue, 25 Feb 2020 01:28:52 -0000 From: "Weed-Killer-Suit-Claim" Subject: Get your free case review now Reply-To: "Weed-Killer-Suit-Claim" capitallhome.com resolves to 86.105.186.182	2020-02-26 08:31:06
85.105.120.215	attackbotsspam	Unauthorized connection attempt from IP address 85.105.120.215 on Port 445(SMB)	2020-02-26 08:49:17
171.83.24.244	attackspambots	Fail2Ban Ban Triggered	2020-02-26 08:52:42
27.64.152.4	attack	DATE:2020-02-26 01:45:10, IP:27.64.152.4, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-02-26 08:57:01
172.104.242.173	attackbotsspam	Feb 26 01:47:17 debian-2gb-nbg1-2 kernel: \[4937234.515124\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=172.104.242.173 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=3570 PROTO=TCP SPT=46369 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0	2020-02-26 08:59:44
77.247.109.41	attackspam	Automatic report - Banned IP Access	2020-02-26 08:57:41
78.128.113.66	attackspambots	Feb 26 01:17:05 web01.agentur-b-2.de postfix/smtpd[12257]: warning: unknown[78.128.113.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 26 01:17:12 web01.agentur-b-2.de postfix/smtpd[15040]: warning: unknown[78.128.113.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 26 01:18:55 web01.agentur-b-2.de postfix/smtpd[12257]: warning: unknown[78.128.113.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-02-26 08:33:15
27.59.142.199	attackspambots	Unauthorized connection attempt from IP address 27.59.142.199 on Port 445(SMB)	2020-02-26 08:47:43
95.105.233.209	attack	Repeated brute force against a port	2020-02-26 09:04:21
41.32.222.20	attack	Honeypot attack, port: 81, PTR: host-41.32.222.20.tedata.net.	2020-02-26 08:34:28
193.32.161.60	attack	port	2020-02-26 09:01:53
149.135.121.242	attackspambots	Feb 26 00:42:19 localhost sshd\[120433\]: Invalid user solr from 149.135.121.242 port 52002 Feb 26 00:42:19 localhost sshd\[120433\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.135.121.242 Feb 26 00:42:21 localhost sshd\[120433\]: Failed password for invalid user solr from 149.135.121.242 port 52002 ssh2 Feb 26 00:47:08 localhost sshd\[120505\]: Invalid user zhuhan from 149.135.121.242 port 56612 Feb 26 00:47:08 localhost sshd\[120505\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.135.121.242 ...	2020-02-26 09:05:11
78.128.112.26	attackspambots	VNC brute force attack detected by fail2ban	2020-02-26 08:48:29
117.103.2.114	attackspambots	2020-02-26T01:47:12.889052centos sshd\[5472\]: Invalid user sam from 117.103.2.114 port 45148 2020-02-26T01:47:12.898255centos sshd\[5472\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.103.2.114 2020-02-26T01:47:14.373570centos sshd\[5472\]: Failed password for invalid user sam from 117.103.2.114 port 45148 ssh2	2020-02-26 09:01:40
203.205.253.185	normal	Teclast Android system call to china! No address!!!!	2020-02-26 09:09:53

最近上报的IP列表

119.56.186.244	46.246.213.140	157.55.39.113	115.77.191.113
88.218.16.211	80.20.20.63	163.172.50.34	185.209.108.225
117.247.192.164	24.157.24.180	223.223.188.109	1.60.122.99
80.245.117.82	148.71.186.43	92.41.93.215	115.208.150.77
172.69.68.72	132.148.134.246	197.248.119.140	225.118.218.145