218.161.112.70

基本信息:

城市(city): Kaohsiung City

省份(region): Kaohsiung

国家(country): Taiwan, China

运营商(isp): Chunghwa Telecom Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Unauthorized connection attempt detected from IP address 218.161.112.70 to port 81 [J]	2020-02-01 01:18:16
attack	Unauthorised access (Nov 7) SRC=218.161.112.70 LEN=40 PREC=0x20 TTL=242 ID=64684 DF TCP DPT=23 WINDOW=14600 SYN	2019-11-08 04:35:50

相同子网IP讨论:

IP	类型	评论内容	时间
218.161.112.152	attackspambots	Scanning random ports - tries to find possible vulnerable services	2020-02-24 07:46:20
218.161.112.40	attack	23/tcp [2019-10-30]1pkt	2019-10-30 22:39:28
218.161.112.40	attackbots	Telnet/23 MH Probe, BF, Hack -	2019-09-30 22:41:44

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 218.161.112.70
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11177
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;218.161.112.70.			IN	A

;; AUTHORITY SECTION:
.			472	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110701 1800 900 604800 86400

;; Query time: 121 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 08 04:35:47 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

70.112.161.218.in-addr.arpa domain name pointer 218-161-112-70.HINET-IP.hinet.net.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
70.112.161.218.in-addr.arpa	name = 218-161-112-70.HINET-IP.hinet.net.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
37.49.231.127	attack	Mar 1 05:59:03 debian-2gb-nbg1-2 kernel: \[5297930.580956\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=37.49.231.127 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=53810 PROTO=TCP SPT=54004 DPT=5038 WINDOW=1024 RES=0x00 SYN URGP=0	2020-03-01 13:05:32
87.70.40.171	attackspambots	2020-03-01 05:58:46 H=(loaehoveo.com) [87.70.40.171] sender verify fail for : Unrouteable address 2020-03-01 05:58:46 H=(loaehoveo.com) [87.70.40.171] F= rejected RCPT : Sender verify failed ...	2020-03-01 13:26:16
138.197.175.236	attackspambots	Mar 1 05:58:42 ArkNodeAT sshd\[32666\]: Invalid user admin from 138.197.175.236 Mar 1 05:58:42 ArkNodeAT sshd\[32666\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.175.236 Mar 1 05:58:45 ArkNodeAT sshd\[32666\]: Failed password for invalid user admin from 138.197.175.236 port 38054 ssh2	2020-03-01 13:26:44
45.33.70.146	attackbotsspam	Unauthorized connection attempt detected from IP address 45.33.70.146 to port 22 [J]	2020-03-01 10:08:01
222.186.173.180	attackspam	Mar 1 07:29:05 ift sshd\[25964\]: Failed password for root from 222.186.173.180 port 32368 ssh2Mar 1 07:29:08 ift sshd\[25964\]: Failed password for root from 222.186.173.180 port 32368 ssh2Mar 1 07:29:19 ift sshd\[25964\]: Failed password for root from 222.186.173.180 port 32368 ssh2Mar 1 07:29:27 ift sshd\[25989\]: Failed password for root from 222.186.173.180 port 41884 ssh2Mar 1 07:29:30 ift sshd\[25989\]: Failed password for root from 222.186.173.180 port 41884 ssh2 ...	2020-03-01 13:32:08
157.245.59.41	attack	Mar 1 06:23:23 vps647732 sshd[28722]: Failed password for root from 157.245.59.41 port 54230 ssh2 ...	2020-03-01 13:37:52
34.92.40.21	attackspam	Mar 1 05:59:08 vps647732 sshd[27987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.92.40.21 Mar 1 05:59:09 vps647732 sshd[27987]: Failed password for invalid user carlos from 34.92.40.21 port 39442 ssh2 ...	2020-03-01 13:01:18
218.92.0.184	attackspam	Mar 1 05:37:51 combo sshd[1658]: Failed password for root from 218.92.0.184 port 9393 ssh2 Mar 1 05:37:56 combo sshd[1658]: Failed password for root from 218.92.0.184 port 9393 ssh2 Mar 1 05:37:59 combo sshd[1658]: Failed password for root from 218.92.0.184 port 9393 ssh2 ...	2020-03-01 13:38:25
45.227.253.62	attack	apache exploit attempt	2020-03-01 13:23:51
69.12.92.22	attackbotsspam	B: Magento admin pass test (wrong country)	2020-03-01 13:40:04
79.113.161.137	attack	Unauthorized connection attempt detected from IP address 79.113.161.137 to port 88 [J]	2020-03-01 13:33:58
222.186.175.181	attack	Mar105:58:08server6sshd[19547]:refusedconnectfrom222.186.175.181\(222.186.175.181\)Mar105:58:08server6sshd[19548]:refusedconnectfrom222.186.175.181\(222.186.175.181\)Mar105:58:08server6sshd[19549]:refusedconnectfrom222.186.175.181\(222.186.175.181\)Mar106:19:34server6sshd[21144]:refusedconnectfrom222.186.175.181\(222.186.175.181\)Mar106:19:34server6sshd[21145]:refusedconnectfrom222.186.175.181\(222.186.175.181\)	2020-03-01 13:25:22
141.136.79.244	attackbots	Honeypot attack, port: 445, PTR: host-244.79.136.141.ucom.am.	2020-03-01 13:30:22
171.239.166.239	attackbots	Port probing on unauthorized port 9530	2020-03-01 13:08:43
36.66.171.205	attackspambots	Honeypot attack, port: 445, PTR: PTR record not found	2020-03-01 13:41:42

最近上报的IP列表

43.255.112.216	177.73.24.22	71.88.117.98	1.164.0.131
104.60.194.45	104.42.154.104	77.220.212.223	2607:5300:203:2be::
193.200.241.132	45.66.9.114	111.254.37.72	71.10.112.17
154.121.28.1	221.15.78.223	102.65.21.191	37.120.217.108
54.172.55.129	116.196.82.80	172.69.71.48	191.14.180.111