118.163.107.56

基本信息:

城市(city): Taipei

省份(region): Taipei City

国家(country): Taiwan, China

运营商(isp): Chunghwa Telecom Co. Ltd.

主机名(hostname): unknown

机构(organization): Data Communication Business Group

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Jul 16 23:18:13 sshgateway sshd\[15644\]: Invalid user ftptest from 118.163.107.56 Jul 16 23:18:13 sshgateway sshd\[15644\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.163.107.56 Jul 16 23:18:15 sshgateway sshd\[15644\]: Failed password for invalid user ftptest from 118.163.107.56 port 57868 ssh2	2019-07-17 11:11:42
attackspam	DATE:2019-07-16 15:21:30, IP:118.163.107.56, PORT:ssh brute force auth on SSH service (patata)	2019-07-17 00:16:32
attackspambots	Jul 9 21:56:48 vserver sshd\[2452\]: Invalid user user from 118.163.107.56Jul 9 21:56:50 vserver sshd\[2452\]: Failed password for invalid user user from 118.163.107.56 port 53455 ssh2Jul 9 22:01:54 vserver sshd\[2510\]: Invalid user nao from 118.163.107.56Jul 9 22:01:56 vserver sshd\[2510\]: Failed password for invalid user nao from 118.163.107.56 port 55643 ssh2 ...	2019-07-10 05:45:14

类型

评论内容

时间

attackbotsspam

Jul 16 23:18:13 sshgateway sshd\[15644\]: Invalid user ftptest from 118.163.107.56
Jul 16 23:18:13 sshgateway sshd\[15644\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.163.107.56
Jul 16 23:18:15 sshgateway sshd\[15644\]: Failed password for invalid user ftptest from 118.163.107.56 port 57868 ssh2

2019-07-17 11:11:42

attackspam

DATE:2019-07-16 15:21:30, IP:118.163.107.56, PORT:ssh brute force auth on SSH service (patata)

2019-07-17 00:16:32

attackspambots

Jul  9 21:56:48 vserver sshd\[2452\]: Invalid user user from 118.163.107.56Jul  9 21:56:50 vserver sshd\[2452\]: Failed password for invalid user user from 118.163.107.56 port 53455 ssh2Jul  9 22:01:54 vserver sshd\[2510\]: Invalid user nao from 118.163.107.56Jul  9 22:01:56 vserver sshd\[2510\]: Failed password for invalid user nao from 118.163.107.56 port 55643 ssh2
...

2019-07-10 05:45:14

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 118.163.107.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48759
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;118.163.107.56.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019033102 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Mon Apr 01 09:38:03 +08 2019
;; MSG SIZE  rcvd: 118

HOST信息:

56.107.163.118.in-addr.arpa domain name pointer 118-163-107-56.HINET-IP.hinet.net.

NSLOOKUP信息:

Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
56.107.163.118.in-addr.arpa	name = 118-163-107-56.HINET-IP.hinet.net.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
106.52.121.64	attack	Jan 13 23:32:53 woltan sshd[2554]: Failed password for root from 106.52.121.64 port 49912 ssh2	2020-03-19 05:20:12
222.186.180.223	attackbotsspam	Mar 19 05:52:17 bacztwo sshd[2506]: error: PAM: Authentication failure for root from 222.186.180.223 Mar 19 05:52:20 bacztwo sshd[2506]: error: PAM: Authentication failure for root from 222.186.180.223 Mar 19 05:52:23 bacztwo sshd[2506]: error: PAM: Authentication failure for root from 222.186.180.223 Mar 19 05:52:23 bacztwo sshd[2506]: Failed keyboard-interactive/pam for root from 222.186.180.223 port 56676 ssh2 Mar 19 05:52:14 bacztwo sshd[2506]: error: PAM: Authentication failure for root from 222.186.180.223 Mar 19 05:52:17 bacztwo sshd[2506]: error: PAM: Authentication failure for root from 222.186.180.223 Mar 19 05:52:20 bacztwo sshd[2506]: error: PAM: Authentication failure for root from 222.186.180.223 Mar 19 05:52:23 bacztwo sshd[2506]: error: PAM: Authentication failure for root from 222.186.180.223 Mar 19 05:52:23 bacztwo sshd[2506]: Failed keyboard-interactive/pam for root from 222.186.180.223 port 56676 ssh2 Mar 19 05:52:26 bacztwo sshd[2506]: error: PAM: Authentication fa ...	2020-03-19 05:53:47
88.157.229.59	attack	2020-03-18T19:02:13.564658shield sshd\[14378\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.157.229.59 user=root 2020-03-18T19:02:15.836693shield sshd\[14378\]: Failed password for root from 88.157.229.59 port 42276 ssh2 2020-03-18T19:05:02.431901shield sshd\[14980\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.157.229.59 user=root 2020-03-18T19:05:04.233537shield sshd\[14980\]: Failed password for root from 88.157.229.59 port 39256 ssh2 2020-03-18T19:07:49.233136shield sshd\[15688\]: Invalid user vsftpd from 88.157.229.59 port 36236	2020-03-19 05:33:21
154.89.4.76	attackspam	Invalid user oikawa from 154.89.4.76 port 38487	2020-03-19 05:34:31
192.99.245.147	attack	2020-03-18T20:35:59.239495abusebot-8.cloudsearch.cf sshd[10129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.ip-192-99-245.net user=root 2020-03-18T20:36:00.527547abusebot-8.cloudsearch.cf sshd[10129]: Failed password for root from 192.99.245.147 port 40288 ssh2 2020-03-18T20:41:03.295946abusebot-8.cloudsearch.cf sshd[10540]: Invalid user spark from 192.99.245.147 port 40252 2020-03-18T20:41:03.305993abusebot-8.cloudsearch.cf sshd[10540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.ip-192-99-245.net 2020-03-18T20:41:03.295946abusebot-8.cloudsearch.cf sshd[10540]: Invalid user spark from 192.99.245.147 port 40252 2020-03-18T20:41:05.328477abusebot-8.cloudsearch.cf sshd[10540]: Failed password for invalid user spark from 192.99.245.147 port 40252 ssh2 2020-03-18T20:45:25.911238abusebot-8.cloudsearch.cf sshd[10874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh rus ...	2020-03-19 05:43:32
110.249.212.46	attack	Port 80 (HTTP) access denied	2020-03-19 05:37:13
66.96.189.5	spam	AGAIN and AGAIN and ALWAYS the same REGISTRAR as tucows.com, endurance.com and else TO STOP IMMEDIATELY for keeping SPAMMERS, LIERS, ROBERS and else since too many years ! The cheapest service, as usual... fundreleaseoder1@gmail.com, fundreleaseoder1@eigbox.net and sarah@deliverypaths.com to BURN / CLOSE / DELETTE / STOP IMMEDIATELY for SPAM, PHISHING and SCAM ! Message-ID: Date: Wed, 18 Mar 2020 11:24:58 -0400 Subject: I am here by apologizing for the delayed of your $50,000.00 Fifty From: "Mrs Rose Daniel" Reply-To: fundreleaseoder@gmail.com fundreleaseoder1@eigbox.net => 66.96.189.5 => endurance.com eigbox.net (FALSE EMPTY Web Site created and used ONLY for SPAM !) => endurance.com AS USUAL... eigbox.net => 38.113.1.135 38.113.1.1 => cogentco.com ipage.com => endurance.com https://www.mywot.com/scorecard/eigbox.net https://www.mywot.com/scorecard/endurance.com https://www.mywot.com/scorecard/ipage.com https://www.mywot.com/scorecard/tucows.com https://en.asytech.cn/check-ip/66.96.189.5 https://en.asytech.cn/check-ip/38.113.1.135	2020-03-19 05:32:56
178.62.37.78	attackbotsspam	Too many connections or unauthorized access detected from Arctic banned ip	2020-03-19 05:50:03
189.168.169.129	attackspambots	SSH login attempts with user root.	2020-03-19 05:19:42
73.167.84.250	attackbotsspam	Mar 18 22:45:49 localhost sshd\[31539\]: Invalid user rstudio-server from 73.167.84.250 port 32818 Mar 18 22:45:49 localhost sshd\[31539\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.167.84.250 Mar 18 22:45:51 localhost sshd\[31539\]: Failed password for invalid user rstudio-server from 73.167.84.250 port 32818 ssh2	2020-03-19 05:54:52
222.186.15.10	attackspambots	2020-03-18T21:39:34.818846abusebot.cloudsearch.cf sshd[13822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.10 user=root 2020-03-18T21:39:36.503210abusebot.cloudsearch.cf sshd[13822]: Failed password for root from 222.186.15.10 port 50950 ssh2 2020-03-18T21:39:39.297425abusebot.cloudsearch.cf sshd[13822]: Failed password for root from 222.186.15.10 port 50950 ssh2 2020-03-18T21:39:34.818846abusebot.cloudsearch.cf sshd[13822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.10 user=root 2020-03-18T21:39:36.503210abusebot.cloudsearch.cf sshd[13822]: Failed password for root from 222.186.15.10 port 50950 ssh2 2020-03-18T21:39:39.297425abusebot.cloudsearch.cf sshd[13822]: Failed password for root from 222.186.15.10 port 50950 ssh2 2020-03-18T21:39:34.818846abusebot.cloudsearch.cf sshd[13822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.1 ...	2020-03-19 05:48:10
220.129.51.55	attackbots	" "	2020-03-19 05:29:24
58.65.169.70	attack	Honeypot attack, port: 445, PTR: mail.heartbeatsaveslives.org.	2020-03-19 05:30:35
117.51.142.192	attack	Mar 18 14:34:13 ewelt sshd[16269]: Invalid user lijiang from 117.51.142.192 port 45139 Mar 18 14:34:13 ewelt sshd[16269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.51.142.192 Mar 18 14:34:13 ewelt sshd[16269]: Invalid user lijiang from 117.51.142.192 port 45139 Mar 18 14:34:15 ewelt sshd[16269]: Failed password for invalid user lijiang from 117.51.142.192 port 45139 ssh2 ...	2020-03-19 05:32:53
217.112.142.211	attackspam	Bad mail behaviour	2020-03-19 05:29:40

最近上报的IP列表

138.68.51.145	1.32.50.44	176.31.253.105	185.176.27.90
118.25.49.95	106.12.194.207	193.112.213.48	180.103.132.212
164.132.225.250	107.170.18.163	197.245.235.170	178.128.84.122
140.143.247.51	157.240.8.18	158.69.241.207	37.115.184.170
1.9.46.177	219.151.22.86	178.184.19.114	159.89.114.191