118.69.13.37 - IPInfo

基本信息:

城市(city): Ho Chi Minh City

省份(region): Ho Chi Minh

国家(country): Vietnam

运营商(isp): FPT Telecom Company

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Port Scan detected! ...	2020-09-11 23:47:09
attack	Port Scan detected! ...	2020-09-11 15:48:55
attack	Port Scan detected! ...	2020-09-11 08:00:51

相同子网IP讨论:

IP	类型	评论内容	时间
118.69.133.58	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-06-21 08:28:44
118.69.133.6	attackbotsspam	Unauthorized connection attempt from IP address 118.69.133.6 on Port 445(SMB)	2020-06-06 22:47:35
118.69.139.7	attack	Telnet/23 MH Probe, Scan, BF, Hack -	2020-05-26 16:04:21
118.69.139.156	attackspam	May 10 14:08:17 server postfix/smtpd[22735]: NOQUEUE: reject: RCPT from unknown[118.69.139.156]: 554 5.7.1 Service unavailable; Client host [118.69.139.156] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/118.69.139.156; from= to= proto=ESMTP helo=<[118.69.139.156]>	2020-05-11 03:52:25
118.69.134.245	attackbots	1582865392 - 02/28/2020 05:49:52 Host: 118.69.134.245/118.69.134.245 Port: 445 TCP Blocked	2020-02-28 19:54:30
118.69.139.238	attackbots	DATE:2020-01-26 05:52:07, IP:118.69.139.238, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-01-26 14:41:49
118.69.139.234	attackbots	Unauthorized connection attempt detected from IP address 118.69.139.234 to port 83 [J]	2020-01-20 08:31:44
118.69.130.110	attackspambots	Unauthorized connection attempt detected from IP address 118.69.130.110 to port 23 [J]	2020-01-18 18:12:04
118.69.130.3	attackbotsspam	Unauthorized connection attempt detected from IP address 118.69.130.3 to port 445	2019-12-13 09:11:53
118.69.134.213	attack	Dec 6 07:23:47 our-server-hostname postfix/smtpd[13928]: connect from unknown[118.69.134.213] Dec x@x Dec x@x Dec x@x Dec x@x Dec x@x Dec x@x Dec x@x Dec x@x Dec x@x Dec x@x Dec x@x Dec x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=118.69.134.213	2019-12-06 06:03:58
118.69.133.215	attack	Unauthorized connection attempt from IP address 118.69.133.215 on Port 445(SMB)	2019-09-01 04:49:39
118.69.133.104	attackbots	19/7/10@04:55:41: FAIL: Alarm-Intrusion address from=118.69.133.104 ...	2019-07-10 18:54:00

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 118.69.13.37
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56138
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;118.69.13.37.			IN	A

;; AUTHORITY SECTION:
.			148	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020091001 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 11 08:00:48 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 37.13.69.118.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 37.13.69.118.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
213.184.251.86	attackspam	Unauthorized connection attempt from IP address 213.184.251.86 on Port 445(SMB)	2020-08-05 03:22:10
95.111.247.228	attackbotsspam	2020-08-04T19:01:40.038912shield sshd\[7320\]: Invalid user majidi from 95.111.247.228 port 47042 2020-08-04T19:01:40.048748shield sshd\[7320\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmd54164.contaboserver.net 2020-08-04T19:01:42.378924shield sshd\[7320\]: Failed password for invalid user majidi from 95.111.247.228 port 47042 ssh2 2020-08-04T19:01:50.071184shield sshd\[7419\]: Invalid user rp1999a from 95.111.247.228 port 58464 2020-08-04T19:01:50.080700shield sshd\[7419\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmd54164.contaboserver.net	2020-08-05 03:02:06
79.124.62.55	attack	firewall-block, port(s): 3389/tcp	2020-08-05 03:23:03
196.52.43.111	attackbots	firewall-block, port(s): 8531/tcp	2020-08-05 02:54:01
84.78.22.160	attackspam	Aug 4 16:11:24 WHD8 dovecot: pop3-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=84.78.22.160, lip=10.64.89.208, session=\ Aug 4 16:33:14 WHD8 dovecot: pop3-login: Disconnected \(auth failed, 1 attempts in 8 secs\): user=\, method=PLAIN, rip=84.78.22.160, lip=10.64.89.208, session=\ Aug 4 16:33:14 WHD8 dovecot: pop3-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=84.78.22.160, lip=10.64.89.208, session=\ Aug 4 17:05:25 WHD8 dovecot: pop3-login: Disconnected \(auth failed, 1 attempts in 8 secs\): user=\, method=PLAIN, rip=84.78.22.160, lip=10.64.89.208, session=\ Aug 4 17:05:25 WHD8 dovecot: pop3-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=84.78.22.160, lip=10.64.89. ...	2020-08-05 03:10:58
45.154.255.73	attackspambots	Time: Tue Aug 4 14:53:44 2020 -0300 IP: 45.154.255.73 (SE/Sweden/tor-exit-8.keff.org) Failures: 5 (mod_security) Interval: 3600 seconds Blocked: Permanent Block	2020-08-05 03:27:42
81.4.110.153	attackbots	Fail2Ban	2020-08-05 02:59:51
69.245.71.26	attackbotsspam	Aug 4 21:05:47 vps639187 sshd\[28358\]: Invalid user admin@!QAZ@WSX from 69.245.71.26 port 49292 Aug 4 21:05:47 vps639187 sshd\[28358\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.245.71.26 Aug 4 21:05:49 vps639187 sshd\[28358\]: Failed password for invalid user admin@!QAZ@WSX from 69.245.71.26 port 49292 ssh2 ...	2020-08-05 03:06:08
128.14.209.243	attack	firewall-block, port(s): 80/tcp	2020-08-05 03:10:00
117.33.128.218	attackbotsspam	Aug 4 20:46:40 h2779839 sshd[28277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.33.128.218 user=root Aug 4 20:46:42 h2779839 sshd[28277]: Failed password for root from 117.33.128.218 port 36130 ssh2 Aug 4 20:48:20 h2779839 sshd[28329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.33.128.218 user=root Aug 4 20:48:23 h2779839 sshd[28329]: Failed password for root from 117.33.128.218 port 57648 ssh2 Aug 4 20:49:59 h2779839 sshd[28360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.33.128.218 user=root Aug 4 20:50:01 h2779839 sshd[28360]: Failed password for root from 117.33.128.218 port 50936 ssh2 Aug 4 20:51:37 h2779839 sshd[28378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.33.128.218 user=root Aug 4 20:51:39 h2779839 sshd[28378]: Failed password for root from 117.33.128.218 port 44222 s ...	2020-08-05 03:14:12
138.255.148.35	attack	Aug 4 19:16:10 ip-172-31-61-156 sshd[26176]: Failed password for root from 138.255.148.35 port 47875 ssh2 Aug 4 19:16:08 ip-172-31-61-156 sshd[26176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.255.148.35 user=root Aug 4 19:16:10 ip-172-31-61-156 sshd[26176]: Failed password for root from 138.255.148.35 port 47875 ssh2 Aug 4 19:19:43 ip-172-31-61-156 sshd[26302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.255.148.35 user=root Aug 4 19:19:44 ip-172-31-61-156 sshd[26302]: Failed password for root from 138.255.148.35 port 44026 ssh2 ...	2020-08-05 03:24:04
4.7.94.244	attack	Aug 4 19:51:23 h2779839 sshd[26947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.7.94.244 user=root Aug 4 19:51:25 h2779839 sshd[26947]: Failed password for root from 4.7.94.244 port 33886 ssh2 Aug 4 19:53:41 h2779839 sshd[27010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.7.94.244 user=root Aug 4 19:53:43 h2779839 sshd[27010]: Failed password for root from 4.7.94.244 port 42546 ssh2 Aug 4 19:55:52 h2779839 sshd[27172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.7.94.244 user=root Aug 4 19:55:54 h2779839 sshd[27172]: Failed password for root from 4.7.94.244 port 51204 ssh2 Aug 4 19:58:03 h2779839 sshd[27227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.7.94.244 user=root Aug 4 19:58:05 h2779839 sshd[27227]: Failed password for root from 4.7.94.244 port 59862 ssh2 Aug 4 20:00:16 h2779839 ssh ...	2020-08-05 03:12:54
164.132.73.220	attackbots	20035/tcp 20749/tcp 1108/tcp... [2020-06-04/08-04]260pkt,96pt.(tcp)	2020-08-05 03:28:37
222.186.180.17	attack	Aug 4 21:24:22 piServer sshd[19472]: Failed password for root from 222.186.180.17 port 24802 ssh2 Aug 4 21:24:26 piServer sshd[19472]: Failed password for root from 222.186.180.17 port 24802 ssh2 Aug 4 21:24:29 piServer sshd[19472]: Failed password for root from 222.186.180.17 port 24802 ssh2 Aug 4 21:24:34 piServer sshd[19472]: Failed password for root from 222.186.180.17 port 24802 ssh2 ...	2020-08-05 03:27:26
42.113.93.46	attackspam	1596564028 - 08/04/2020 20:00:28 Host: 42.113.93.46/42.113.93.46 Port: 445 TCP Blocked	2020-08-05 02:51:25

最近上报的IP列表

207.189.224.92	89.96.221.85	85.211.145.115	195.54.166.211
90.221.28.238	2.56.20.158	109.57.51.243	183.224.187.14
212.26.254.243	126.196.212.24	125.79.94.177	207.86.142.222
207.96.208.132	172.124.69.51	59.57.68.158	60.10.253.98
69.95.134.155	217.145.203.223	253.251.32.127	128.68.146.153