118.68.99.138 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): FPT Telecom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Unauthorized connection attempt detected from IP address 118.68.99.138 to port 445 [T]	2020-05-09 02:56:54

相同子网IP讨论:

IP	类型	评论内容	时间
118.68.99.185	attack	Nov 2 03:50:08 mxgate1 postfix/postscreen[18055]: CONNECT from [118.68.99.185]:54523 to [176.31.12.44]:25 Nov 2 03:50:08 mxgate1 postfix/dnsblog[18404]: addr 118.68.99.185 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 2 03:50:08 mxgate1 postfix/dnsblog[18405]: addr 118.68.99.185 listed by domain zen.spamhaus.org as 127.0.0.10 Nov 2 03:50:08 mxgate1 postfix/dnsblog[18405]: addr 118.68.99.185 listed by domain zen.spamhaus.org as 127.0.0.3 Nov 2 03:50:08 mxgate1 postfix/dnsblog[18405]: addr 118.68.99.185 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 2 03:50:08 mxgate1 postfix/dnsblog[18401]: addr 118.68.99.185 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Nov 2 03:50:08 mxgate1 postfix/dnsblog[18402]: addr 118.68.99.185 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 2 03:50:08 mxgate1 postfix/postscreen[18055]: PREGREET 19 after 0.67 from [118.68.99.185]:54523: EHLO 40series.com Nov 2 03:50:09 mxgate1 postfix/dnsblog[18403]: addr 118.68.99......... -------------------------------	2019-11-02 13:55:32
118.68.99.124	attackbotsspam	Attempt to attack host OS, exploiting network vulnerabilities, on 25-10-2019 04:55:15.	2019-10-25 13:53:17

类型

评论内容

时间

118.68.99.185

attack

Nov  2 03:50:08 mxgate1 postfix/postscreen[18055]: CONNECT from [118.68.99.185]:54523 to [176.31.12.44]:25
Nov  2 03:50:08 mxgate1 postfix/dnsblog[18404]: addr 118.68.99.185 listed by domain cbl.abuseat.org as 127.0.0.2
Nov  2 03:50:08 mxgate1 postfix/dnsblog[18405]: addr 118.68.99.185 listed by domain zen.spamhaus.org as 127.0.0.10
Nov  2 03:50:08 mxgate1 postfix/dnsblog[18405]: addr 118.68.99.185 listed by domain zen.spamhaus.org as 127.0.0.3
Nov  2 03:50:08 mxgate1 postfix/dnsblog[18405]: addr 118.68.99.185 listed by domain zen.spamhaus.org as 127.0.0.4
Nov  2 03:50:08 mxgate1 postfix/dnsblog[18401]: addr 118.68.99.185 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Nov  2 03:50:08 mxgate1 postfix/dnsblog[18402]: addr 118.68.99.185 listed by domain b.barracudacentral.org as 127.0.0.2
Nov  2 03:50:08 mxgate1 postfix/postscreen[18055]: PREGREET 19 after 0.67 from [118.68.99.185]:54523: EHLO 40series.com

Nov  2 03:50:09 mxgate1 postfix/dnsblog[18403]: addr 118.68.99.........
-------------------------------

2019-11-02 13:55:32

118.68.99.124

attackbotsspam

Attempt to attack host OS, exploiting network vulnerabilities, on 25-10-2019 04:55:15.

2019-10-25 13:53:17

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 118.68.99.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37181
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;118.68.99.138.			IN	A

;; AUTHORITY SECTION:
.			321	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050801 1800 900 604800 86400

;; Query time: 113 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 09 02:56:51 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 138.99.68.118.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 138.99.68.118.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
188.166.39.43	attackspam	ssh brute force	2020-08-30 14:53:05
104.203.92.202	attack	TCP (SYN) 104.203.92.202:58271 -> port 6780, len 44	2020-08-30 14:44:40
198.12.156.214	attack	198.12.156.214 - - [30/Aug/2020:04:50:49 +0100] "POST /wp-login.php HTTP/1.1" 200 2606 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 198.12.156.214 - - [30/Aug/2020:04:51:02 +0100] "POST /wp-login.php HTTP/1.1" 200 2581 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 198.12.156.214 - - [30/Aug/2020:04:51:06 +0100] "POST /wp-login.php HTTP/1.1" 200 2581 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-30 14:17:34
85.209.0.101	attack	Aug 30 08:13:32 haigwepa sshd[30570]: Failed password for root from 85.209.0.101 port 35416 ssh2 Aug 30 08:13:32 haigwepa sshd[30571]: Failed password for root from 85.209.0.101 port 35402 ssh2 ...	2020-08-30 14:52:12
188.166.49.126	attackspam	2020-08-30T09:26:46.036817paragon sshd[807291]: Failed password for root from 188.166.49.126 port 53638 ssh2 2020-08-30T09:30:21.886339paragon sshd[807542]: Invalid user marketing from 188.166.49.126 port 35600 2020-08-30T09:30:21.889040paragon sshd[807542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.49.126 2020-08-30T09:30:21.886339paragon sshd[807542]: Invalid user marketing from 188.166.49.126 port 35600 2020-08-30T09:30:24.022827paragon sshd[807542]: Failed password for invalid user marketing from 188.166.49.126 port 35600 ssh2 ...	2020-08-30 14:43:20
45.129.33.14	attackbotsspam	Persistent port scanning [21 denied]	2020-08-30 14:46:25
141.98.81.196	attack	Aug 30 11:10:49 gw1 sshd[16852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.196 Aug 30 11:10:51 gw1 sshd[16852]: Failed password for invalid user admin from 141.98.81.196 port 44363 ssh2 ...	2020-08-30 14:16:41
41.205.83.6	attackspambots	20/8/29@23:50:55: FAIL: Alarm-Network address from=41.205.83.6 20/8/29@23:50:55: FAIL: Alarm-Network address from=41.205.83.6 ...	2020-08-30 14:28:50
125.166.50.63	attackspambots	Unauthorized connection attempt from IP address 125.166.50.63 on Port 445(SMB)	2020-08-30 14:30:45
106.13.164.39	attack	Time: Sun Aug 30 05:44:04 2020 +0200 IP: 106.13.164.39 (CN/China/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Aug 18 10:58:33 mail-03 sshd[5621]: Invalid user test from 106.13.164.39 port 50574 Aug 18 10:58:34 mail-03 sshd[5621]: Failed password for invalid user test from 106.13.164.39 port 50574 ssh2 Aug 18 11:03:21 mail-03 sshd[10732]: Invalid user johny from 106.13.164.39 port 57856 Aug 18 11:03:24 mail-03 sshd[10732]: Failed password for invalid user johny from 106.13.164.39 port 57856 ssh2 Aug 18 11:07:13 mail-03 sshd[10972]: Invalid user ed from 106.13.164.39 port 59548	2020-08-30 14:23:10
185.220.101.207	attack	Unauthorized connection attempt detected from IP address 185.220.101.207 to port 22 [T]	2020-08-30 14:22:24
61.182.227.245	attackspambots	SMTP Bruteforce attempt	2020-08-30 14:27:17
85.209.0.102	attackspambots	TCP (SYN) 85.209.0.102:23522 -> port 22, len 60	2020-08-30 14:54:28
141.98.81.197	attack	Aug 30 11:10:51 gw1 sshd[16863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.197 Aug 30 11:10:53 gw1 sshd[16863]: Failed password for invalid user Administrator from 141.98.81.197 port 45753 ssh2 ...	2020-08-30 14:12:41
106.13.168.43	attackbotsspam	Invalid user devuser from 106.13.168.43 port 43214	2020-08-30 14:53:30

最近上报的IP列表

98.6.233.50	94.245.128.61	91.209.234.200	89.189.174.139
79.99.199.250	77.222.107.128	60.208.219.249	60.31.152.59
164.227.130.42	49.235.118.98	49.232.153.169	47.101.136.76
223.118.225.138	45.174.238.21	43.247.91.111	42.232.70.251
42.159.95.8	41.84.241.205	40.65.179.84	39.85.111.152