113.118.45.199

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Guangdong Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Sep 4 05:47:06 xb3 sshd[23281]: Failed password for invalid user system from 113.118.45.199 port 50096 ssh2 Sep 4 05:47:07 xb3 sshd[23281]: Received disconnect from 113.118.45.199: 11: Bye Bye [preauth] Sep 4 06:14:53 xb3 sshd[30076]: Failed password for invalid user bi from 113.118.45.199 port 48586 ssh2 Sep 4 06:14:54 xb3 sshd[30076]: Received disconnect from 113.118.45.199: 11: Bye Bye [preauth] Sep 4 06:19:29 xb3 sshd[28654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.118.45.199 user=r.r Sep 4 06:19:31 xb3 sshd[28654]: Failed password for r.r from 113.118.45.199 port 43088 ssh2 Sep 4 06:19:31 xb3 sshd[28654]: Received disconnect from 113.118.45.199: 11: Bye Bye [preauth] Sep 4 06:21:27 xb3 sshd[21073]: Failed password for invalid user node from 113.118.45.199 port 54638 ssh2 Sep 4 06:21:28 xb3 sshd[21073]: Received disconnect from 113.118.45.199: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist	2019-09-05 04:41:56

类型

评论内容

时间

attackspam

Sep  4 05:47:06 xb3 sshd[23281]: Failed password for invalid user system from 113.118.45.199 port 50096 ssh2
Sep  4 05:47:07 xb3 sshd[23281]: Received disconnect from 113.118.45.199: 11: Bye Bye [preauth]
Sep  4 06:14:53 xb3 sshd[30076]: Failed password for invalid user bi from 113.118.45.199 port 48586 ssh2
Sep  4 06:14:54 xb3 sshd[30076]: Received disconnect from 113.118.45.199: 11: Bye Bye [preauth]
Sep  4 06:19:29 xb3 sshd[28654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.118.45.199  user=r.r
Sep  4 06:19:31 xb3 sshd[28654]: Failed password for r.r from 113.118.45.199 port 43088 ssh2
Sep  4 06:19:31 xb3 sshd[28654]: Received disconnect from 113.118.45.199: 11: Bye Bye [preauth]
Sep  4 06:21:27 xb3 sshd[21073]: Failed password for invalid user node from 113.118.45.199 port 54638 ssh2
Sep  4 06:21:28 xb3 sshd[21073]: Received disconnect from 113.118.45.199: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist

2019-09-05 04:41:56

相同子网IP讨论:

IP	类型	评论内容	时间
113.118.45.105	attackspambots	fail2ban	2020-03-27 15:54:09

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.118.45.199
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26619
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;113.118.45.199.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019090402 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Sep 05 04:41:51 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 199.45.118.113.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 199.45.118.113.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
177.42.134.75	attack	Unauthorized connection attempt from IP address 177.42.134.75 on Port 445(SMB)	2019-11-29 02:55:32
78.128.113.124	attackspambots	Nov 26 21:03:11 xzibhostname postfix/smtpd[27245]: warning: hostname ip-113-124.4vendeta.com does not resolve to address 78.128.113.124: Name or service not known Nov 26 21:03:11 xzibhostname postfix/smtpd[27245]: connect from unknown[78.128.113.124] Nov 26 21:03:12 xzibhostname postfix/smtpd[27245]: warning: unknown[78.128.113.124]: SASL LOGIN authentication failed: authentication failure Nov 26 21:03:12 xzibhostname postfix/smtpd[27245]: lost connection after AUTH from unknown[78.128.113.124] Nov 26 21:03:12 xzibhostname postfix/smtpd[27245]: disconnect from unknown[78.128.113.124] Nov 26 21:03:12 xzibhostname postfix/smtpd[27245]: warning: hostname ip-113-124.4vendeta.com does not resolve to address 78.128.113.124: Name or service not known Nov 26 21:03:12 xzibhostname postfix/smtpd[27245]: connect from unknown[78.128.113.124] Nov 26 21:03:14 xzibhostname postfix/smtpd[27245]: warning: unknown[78.128.113.124]: SASL LOGIN authentication failed: authentication failure ........ -------------------------------	2019-11-29 03:06:39
117.50.97.216	attackbotsspam	Invalid user destyn from 117.50.97.216 port 46212	2019-11-29 02:51:44
190.144.3.155	attack	2019-11-28 08:32:07 H=(lorelmiss.it) [190.144.3.155]:47734 I=[192.147.25.65]:25 sender verify fail for : Unrouteable address 2019-11-28 08:32:07 H=(lorelmiss.it) [190.144.3.155]:47734 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed 2019-11-28 08:32:07 H=(lorelmiss.it) [190.144.3.155]:47734 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed ...	2019-11-29 02:51:18
185.20.44.254	attackbotsspam	Unauthorized connection attempt from IP address 185.20.44.254 on Port 445(SMB)	2019-11-29 03:08:38
177.154.97.140	attack	Telnet/23 MH Probe, BF, Hack -	2019-11-29 02:31:18
94.29.100.109	attackbotsspam	Portscan or hack attempt detected by psad/fwsnort	2019-11-29 02:45:59
216.218.206.69	attackbots	Connection by 216.218.206.69 on port: 27017 got caught by honeypot at 11/28/2019 4:55:49 PM	2019-11-29 02:38:39
181.41.216.138	attackbots	SMTP spamming attempt - delivery failed to too many non-existing users	2019-11-29 02:37:34
220.191.160.42	attack	Nov 28 08:33:21 kapalua sshd\[14702\]: Invalid user passwd5555 from 220.191.160.42 Nov 28 08:33:21 kapalua sshd\[14702\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.hcj1952.com Nov 28 08:33:24 kapalua sshd\[14702\]: Failed password for invalid user passwd5555 from 220.191.160.42 port 34522 ssh2 Nov 28 08:40:18 kapalua sshd\[15372\]: Invalid user harsono from 220.191.160.42 Nov 28 08:40:18 kapalua sshd\[15372\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.hcj1952.com	2019-11-29 02:52:07
60.212.42.56	attackbotsspam	'IP reached maximum auth failures for a one day block'	2019-11-29 02:52:51
105.112.112.17	attackspam	Unauthorized connection attempt from IP address 105.112.112.17 on Port 445(SMB)	2019-11-29 03:05:31
2.134.10.103	attack	Unauthorized connection attempt from IP address 2.134.10.103 on Port 445(SMB)	2019-11-29 02:59:51
186.121.206.78	attackbots	Unauthorized connection attempt from IP address 186.121.206.78 on Port 445(SMB)	2019-11-29 03:06:11
222.106.165.84	attackspam	port scan and connect, tcp 23 (telnet)	2019-11-29 02:35:30

最近上报的IP列表

29.134.225.1	103.175.174.62	18.144.70.57	185.93.1.167
121.131.119.155	157.230.92.254	54.36.148.87	36.81.66.19
61.88.146.50	185.93.1.166	192.35.249.73	107.174.170.159
168.181.51.119	179.48.167.149	209.164.168.249	146.242.56.24
31.128.13.150	146.242.56.17	49.231.229.229	24.55.236.255