118.99.239.1 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Republic of China (ROC)

运营商(isp): SaveCom International Inc.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Unauthorized connection attempt from IP address 118.99.239.1 on Port 445(SMB)	2019-10-12 07:32:29
attack	Unauthorized connection attempt from IP address 118.99.239.1 on Port 445(SMB)	2019-09-22 08:04:49

相同子网IP讨论:

IP	类型	评论内容	时间
118.99.239.217	attackspam	Honeypot attack, port: 81, PTR: 217-239-99-118.savecom.net.tw.	2020-07-04 12:42:17

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 118.99.239.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41607
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;118.99.239.1.			IN	A

;; AUTHORITY SECTION:
.			587	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092101 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Sep 22 08:04:42 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

1.239.99.118.in-addr.arpa domain name pointer 1-239-99-118.savecom.net.tw.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
1.239.99.118.in-addr.arpa	name = 1-239-99-118.savecom.net.tw.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
46.3.96.66	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2019-07-08 19:03:40
107.170.240.68	attack	993/tcp 39153/tcp 22419/tcp... [2019-05-13/07-07]43pkt,33pt.(tcp),7pt.(udp)	2019-07-08 19:50:42
157.230.125.77	attackspambots	Jul 8 11:23:56 ns341937 sshd[11528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.125.77 Jul 8 11:23:58 ns341937 sshd[11528]: Failed password for invalid user git from 157.230.125.77 port 54148 ssh2 Jul 8 11:26:30 ns341937 sshd[12309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.125.77 ...	2019-07-08 19:13:58
138.186.199.99	attack	SMTP/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	2019-07-08 18:58:09
185.242.6.4	attack	Automatic report - Web App Attack	2019-07-08 19:19:16
93.26.254.135	attack	Jul 8 11:30:07 mailserver dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[hidden]>, method=PLAIN, rip=93.26.254.135, lip=[hidden], TLS, session= Jul 8 11:30:07 mailserver dovecot: imap-login: ID sent: name=Mac OS X Mail, version=6.6 (1510), os=Mac OS X, os-version=10.8.5 (12F2560), vendor=Apple Inc.: user=<>, rip=93.26.254.135, lip=[hidden], TLS, session= Jul 8 11:30:11 mailserver dovecot: auth-worker(9175): sql([hidden],93.26.254.135,): Password mismatch Jul 8 11:30:13 mailserver dovecot: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<[hidden]>, method=PLAIN, rip=93.26.254.135, lip=[hidden], TLS, session= Jul 8 12:30:16 mailserver dovecot: imap-login: ID sent: name=Mac OS X Mail, version=6.6 (1510), os=Mac OS X, os-version=10.8.5 (12F2560), vendor=Apple Inc.: user=<>, rip=93.26.254.135, lip=[hidden], TLS, session= Jul 8 12:30:19 mailserver dovecot: auth-worker(100	2019-07-08 19:03:02
138.117.88.153	attack	SMTP/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	2019-07-08 19:09:22
92.114.25.30	attack	Jul 8 11:10:57 MainVPS sshd[31127]: Invalid user demo2 from 92.114.25.30 port 47634 Jul 8 11:10:57 MainVPS sshd[31127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.114.25.30 Jul 8 11:10:57 MainVPS sshd[31127]: Invalid user demo2 from 92.114.25.30 port 47634 Jul 8 11:10:59 MainVPS sshd[31127]: Failed password for invalid user demo2 from 92.114.25.30 port 47634 ssh2 Jul 8 11:13:40 MainVPS sshd[31325]: Invalid user tomek from 92.114.25.30 port 43508 ...	2019-07-08 19:42:45
37.49.229.137	attack	Portscan or hack attempt detected by psad/fwsnort	2019-07-08 19:04:05
178.127.59.74	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-07-08 19:05:55
64.57.81.165	attack	Jul 8 10:08:19 mxgate1 postfix/postscreen[24361]: CONNECT from [64.57.81.165]:56898 to [176.31.12.44]:25 Jul 8 10:08:19 mxgate1 postfix/dnsblog[24397]: addr 64.57.81.165 listed by domain cbl.abuseat.org as 127.0.0.2 Jul 8 10:08:24 mxgate1 postfix/dnsblog[24396]: addr 64.57.81.165 listed by domain zen.spamhaus.org as 127.0.0.4 Jul 8 10:08:24 mxgate1 postfix/dnsblog[24364]: addr 64.57.81.165 listed by domain b.barracudacentral.org as 127.0.0.2 Jul 8 10:08:25 mxgate1 postfix/postscreen[24361]: DNSBL rank 4 for [64.57.81.165]:56898 Jul x@x Jul 8 10:08:26 mxgate1 postfix/postscreen[24361]: DISCONNECT [64.57.81.165]:56898 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=64.57.81.165	2019-07-08 19:10:07
131.255.223.73	attackspambots	SMTP/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	2019-07-08 19:14:50
131.0.120.247	attack	SMTP/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	2019-07-08 19:37:32
131.0.122.19	attack	SMTP/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	2019-07-08 19:36:14
213.6.227.38	attackbots	Unauthorized IMAP connection attempt.	2019-07-08 19:13:33

最近上报的IP列表

127.150.186.167	71.164.243.148	213.142.90.80	15.173.234.127
113.161.161.62	212.156.83.182	212.248.24.199	186.89.15.235
83.135.21.210	80.245.112.134	58.250.164.246	103.136.110.98
163.198.104.202	102.226.140.227	58.56.251.170	133.142.85.5
217.170.153.165	87.213.197.41	54.39.193.26	159.100.255.169