113.121.45.57 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
113.121.45.153	attackspambots	Unauthorized connection attempt detected from IP address 113.121.45.153 to port 6656 [T]	2020-01-28 08:21:27
113.121.45.124	attackbots	Unauthorized connection attempt detected from IP address 113.121.45.124 to port 6656 [T]	2020-01-26 08:22:05
113.121.45.74	attackbotsspam	2019-09-28T13:31:50.447540beta postfix/smtpd[7094]: NOQUEUE: reject: RCPT from unknown[113.121.45.74]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [113.121.45.74]; from= to= proto=ESMTP helo= 2019-09-28T13:32:23.738776beta postfix/smtpd[7094]: NOQUEUE: reject: RCPT from unknown[113.121.45.74]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [113.121.45.74]; from= to= proto=ESMTP helo= 2019-09-28T13:32:56.473042beta postfix/smtpd[7094]: NOQUEUE: reject: RCPT from unknown[113.121.45.74]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [113.121.45.74]; from= to= proto=ESMTP helo= ...	2019-09-28 23:02:08

类型

评论内容

时间

113.121.45.153

attackspambots

Unauthorized connection attempt detected from IP address 113.121.45.153 to port 6656 [T]

2020-01-28 08:21:27

113.121.45.124

attackbots

Unauthorized connection attempt detected from IP address 113.121.45.124 to port 6656 [T]

2020-01-26 08:22:05

113.121.45.74

attackbotsspam

2019-09-28T13:31:50.447540beta postfix/smtpd[7094]: NOQUEUE: reject: RCPT from unknown[113.121.45.74]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [113.121.45.74]; from= to= proto=ESMTP helo=
2019-09-28T13:32:23.738776beta postfix/smtpd[7094]: NOQUEUE: reject: RCPT from unknown[113.121.45.74]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [113.121.45.74]; from= to= proto=ESMTP helo=
2019-09-28T13:32:56.473042beta postfix/smtpd[7094]: NOQUEUE: reject: RCPT from unknown[113.121.45.74]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [113.121.45.74]; from= to= proto=ESMTP helo=
...

2019-09-28 23:02:08

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.121.45.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56100
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;113.121.45.57.			IN	A

;; AUTHORITY SECTION:
.			182	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400

;; Query time: 23 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 05 02:03:22 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 57.45.121.113.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 57.45.121.113.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
222.186.190.17	attack	Aug 27 06:47:31 * sshd[2384]: Failed password for root from 222.186.190.17 port 57673 ssh2	2020-08-27 16:21:50
61.144.211.235	attackspambots	port scan and connect, tcp 1433 (ms-sql-s)	2020-08-27 15:58:53
42.194.200.127	attack	42.194.200.127 - - [27/Aug/2020:08:36:48 +0200] "GET /TP/public/index.php HTTP/1.1" 302 398 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"	2020-08-27 16:22:54
45.142.120.74	attack	2020-08-27 07:29:08 dovecot_login authenticator failed for $User$ \[45.142.120.74\]: 535 Incorrect authentication data $set_id=microsoftonline-p@no-server.de$ 2020-08-27 07:29:22 dovecot_login authenticator failed for $User$ \[45.142.120.74\]: 535 Incorrect authentication data $set_id=figaro1@no-server.de$ 2020-08-27 07:29:37 dovecot_login authenticator failed for $User$ \[45.142.120.74\]: 535 Incorrect authentication data $set_id=figaro1@no-server.de$ 2020-08-27 07:29:40 dovecot_login authenticator failed for $User$ \[45.142.120.74\]: 535 Incorrect authentication data $set_id=figaro1@no-server.de$ 2020-08-27 07:29:54 dovecot_login authenticator failed for $User$ \[45.142.120.74\]: 535 Incorrect authentication data $set_id=figaro1@no-server.de$ ...	2020-08-27 15:56:34
75.80.155.121	attackspam	Fail2Ban Ban Triggered HTTP Exploit Attempt	2020-08-27 16:04:55
222.186.30.57	attackspambots	2020-08-27T06:40:58.781850server.espacesoutien.com sshd[3442]: Failed password for root from 222.186.30.57 port 53641 ssh2 2020-08-27T06:41:01.426610server.espacesoutien.com sshd[3442]: Failed password for root from 222.186.30.57 port 53641 ssh2 2020-08-27T06:41:04.805940server.espacesoutien.com sshd[3459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.57 user=root 2020-08-27T06:41:07.115607server.espacesoutien.com sshd[3459]: Failed password for root from 222.186.30.57 port 43129 ssh2 ...	2020-08-27 16:24:30
37.211.23.164	attackspam	Invalid user 2 from 37.211.23.164 port 43852	2020-08-27 16:33:09
122.11.137.187	attackbotsspam	Automatic report - Port Scan Attack	2020-08-27 16:33:36
179.108.245.192	attackspambots	Attempts against SMTP/SSMTP	2020-08-27 15:56:59
78.196.38.46	attackspam	Invalid user scott from 78.196.38.46 port 47212	2020-08-27 16:03:54
5.154.9.150	attack	[Thu Aug 27 10:47:06.144579 2020] [:error] [pid 31949:tid 139707023353600] [client 5.154.9.150:33081] [client 5.154.9.150] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197:80"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "X0csuv4Cfhq9i9xL3Rte9QAAAtE"] ...	2020-08-27 16:15:13
45.249.91.252	attackspam	[2020-08-27 02:39:24] NOTICE[1185][C-00007484] chan_sip.c: Call from '' (45.249.91.252:52027) to extension '01146423112947' rejected because extension not found in context 'public'. [2020-08-27 02:39:24] SECURITY[1203] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-27T02:39:24.827-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01146423112947",SessionID="0x7f10c4286a78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.249.91.252/52027",ACLName="no_extension_match" [2020-08-27 02:41:17] NOTICE[1185][C-00007486] chan_sip.c: Call from '' (45.249.91.252:64578) to extension '901146423112947' rejected because extension not found in context 'public'. [2020-08-27 02:41:17] SECURITY[1203] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-27T02:41:17.986-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="901146423112947",SessionID="0x7f10c43e3a48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45 ...	2020-08-27 16:40:50
36.92.106.227	attackspam	IP 36.92.106.227 attacked honeypot on port: 1433 at 8/26/2020 8:47:12 PM	2020-08-27 16:12:04
222.186.175.183	attack	web-1 [ssh] SSH Attack	2020-08-27 16:02:10
87.170.34.23	attack	Aug 27 07:15:13 buvik sshd[19268]: Failed password for invalid user mdm from 87.170.34.23 port 43324 ssh2 Aug 27 07:18:17 buvik sshd[19593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.170.34.23 user=root Aug 27 07:18:20 buvik sshd[19593]: Failed password for root from 87.170.34.23 port 56653 ssh2 ...	2020-08-27 16:19:50

最近上报的IP列表

113.121.45.54	113.121.45.52	113.121.45.67	113.121.45.71
113.121.46.102	113.121.46.110	113.121.45.78	113.121.45.76
113.121.46.1	114.99.74.157	113.121.46.108	113.121.45.98
113.121.46.114	113.121.45.8	113.121.45.82	113.121.45.75
113.121.46.116	114.99.74.158	114.99.74.160	114.99.74.173