121.57.225.244

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Neimeng Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 5435d3402b9e994d \| WAF_Rule_ID: 1025440 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 06:23:08

类型

评论内容

时间

attackbotsspam

The IP has triggered Cloudflare WAF. CF-Ray: 5435d3402b9e994d | WAF_Rule_ID: 1025440 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-12 06:23:08

相同子网IP讨论:

IP	类型	评论内容	时间
121.57.225.64	attack	Unauthorized connection attempt detected from IP address 121.57.225.64 to port 81 [T]	2020-01-10 08:21:22
121.57.225.159	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 5432d1a50b89e801 \| WAF_Rule_ID: 1112825 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 06:46:14
121.57.225.78	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 543716687e3299a1 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: ip.skk.moe \| User-Agent: Mozilla/5.064213590 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 03:31:07
121.57.225.9	attack	The IP has triggered Cloudflare WAF. CF-Ray: 54359c4c0f4ae7e9 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: d.skk.moe \| User-Agent: Mozilla/5.067805899 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 01:52:56
121.57.225.137	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5410a72c4d02d386 \| WAF_Rule_ID: 1025440 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 05:40:46
121.57.225.21	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 5413db00bb939911 \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/4.049897920 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729) \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:52:59
121.57.225.54	attackbots	The IP has triggered Cloudflare WAF. CF-Ray: 54105a57ba40eb75 \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: api.skk.moe \| User-Agent: Mozilla/4.049897920 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729) \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:52:41
121.57.225.49	attackbots	The IP has triggered Cloudflare WAF. CF-Ray: 540f69074aa277be \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.096783921 Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 01:06:57
121.57.225.225	attack	The%20IP%20has%20triggered%20Cloudflare%20WAF.%20Report%20generated%20by%20Cloudflare-WAF-to-AbuseIPDB%20(https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB)	2019-11-19 04:36:01

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.57.225.244
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50068
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;121.57.225.244.			IN	A

;; AUTHORITY SECTION:
.			342	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121101 1800 900 604800 86400

;; Query time: 135 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Dec 12 06:23:03 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 244.225.57.121.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 244.225.57.121.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
98.4.160.39	attack	Oct 12 02:58:48 xtremcommunity sshd\[439084\]: Invalid user Admin@1 from 98.4.160.39 port 51972 Oct 12 02:58:48 xtremcommunity sshd\[439084\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.4.160.39 Oct 12 02:58:51 xtremcommunity sshd\[439084\]: Failed password for invalid user Admin@1 from 98.4.160.39 port 51972 ssh2 Oct 12 03:02:36 xtremcommunity sshd\[439170\]: Invalid user Einstein from 98.4.160.39 port 34018 Oct 12 03:02:36 xtremcommunity sshd\[439170\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.4.160.39 ...	2019-10-12 18:33:49
188.40.51.138	attackbotsspam	Faked Googlebot	2019-10-12 18:36:34
222.186.52.89	attackbotsspam	Oct 12 08:42:12 MK-Soft-Root1 sshd[29274]: Failed password for root from 222.186.52.89 port 21210 ssh2 Oct 12 08:42:14 MK-Soft-Root1 sshd[29274]: Failed password for root from 222.186.52.89 port 21210 ssh2 ...	2019-10-12 18:03:32
218.22.66.30	attackspam	Oct 11 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=218.22.66.30, lip=REMOVED, TLS: Disconnected, session=\<8C43KqaUmcbaFkIe\> Oct 11 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=218.22.66.30, lip=REMOVED, TLS, session=\ Oct 12 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 9 secs\): user=\, method=PLAIN, rip=218.22.66.30, lip=REMOVED, TLS: Disconnected, session=\	2019-10-12 18:01:10
46.175.243.9	attackspam	Oct 11 21:58:02 web9 sshd\[18798\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.175.243.9 user=root Oct 11 21:58:04 web9 sshd\[18798\]: Failed password for root from 46.175.243.9 port 49580 ssh2 Oct 11 22:02:14 web9 sshd\[19445\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.175.243.9 user=root Oct 11 22:02:16 web9 sshd\[19445\]: Failed password for root from 46.175.243.9 port 59186 ssh2 Oct 11 22:06:19 web9 sshd\[20002\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.175.243.9 user=root	2019-10-12 17:59:33
144.76.184.105	attackbotsspam	Faked Googlebot	2019-10-12 18:23:15
222.186.180.147	attackspambots	2019-10-12T10:19:25.491258abusebot-7.cloudsearch.cf sshd\[10089\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.147 user=root	2019-10-12 18:42:41
200.164.217.210	attackspam	Oct 12 10:11:44 icinga sshd[11162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.164.217.210 Oct 12 10:11:46 icinga sshd[11162]: Failed password for invalid user amandabackup from 200.164.217.210 port 38725 ssh2 ...	2019-10-12 18:22:34
175.30.128.42	attackbots	Automatic report - Port Scan	2019-10-12 18:25:24
139.217.216.202	attackspambots	2019-10-12T10:08:53.145138 sshd[23811]: Invalid user LouLou2016 from 139.217.216.202 port 60696 2019-10-12T10:08:53.160120 sshd[23811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.216.202 2019-10-12T10:08:53.145138 sshd[23811]: Invalid user LouLou2016 from 139.217.216.202 port 60696 2019-10-12T10:08:54.948773 sshd[23811]: Failed password for invalid user LouLou2016 from 139.217.216.202 port 60696 ssh2 2019-10-12T10:14:10.510981 sshd[23915]: Invalid user Set123 from 139.217.216.202 port 54874 ...	2019-10-12 18:17:17
218.92.0.200	attack	2019-10-12T09:41:58.530417abusebot-4.cloudsearch.cf sshd\[12526\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.200 user=root	2019-10-12 18:07:27
51.75.254.196	attackspam	Oct 11 23:55:17 auw2 sshd\[9299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.ip-51-75-254.eu user=root Oct 11 23:55:19 auw2 sshd\[9299\]: Failed password for root from 51.75.254.196 port 16796 ssh2 Oct 11 23:59:17 auw2 sshd\[9596\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.ip-51-75-254.eu user=root Oct 11 23:59:18 auw2 sshd\[9596\]: Failed password for root from 51.75.254.196 port 56152 ssh2 Oct 12 00:03:25 auw2 sshd\[9933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.ip-51-75-254.eu user=root	2019-10-12 18:14:09
114.67.90.149	attackbotsspam	Oct 11 20:13:22 web9 sshd\[4098\]: Invalid user Wachtwoord!23 from 114.67.90.149 Oct 11 20:13:22 web9 sshd\[4098\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.90.149 Oct 11 20:13:24 web9 sshd\[4098\]: Failed password for invalid user Wachtwoord!23 from 114.67.90.149 port 55342 ssh2 Oct 11 20:18:12 web9 sshd\[4795\]: Invalid user a1b2c3 from 114.67.90.149 Oct 11 20:18:12 web9 sshd\[4795\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.90.149	2019-10-12 18:14:52
37.57.49.47	attack	email spam	2019-10-12 18:21:43
185.153.196.50	attackspam	RDP Bruteforce	2019-10-12 18:39:26

最近上报的IP列表

110.177.83.156	110.80.152.48	106.120.14.169	106.59.245.107
106.45.1.151	106.45.0.102	106.45.0.12	130.77.216.84
170.208.251.196	61.159.252.2	60.13.6.49	58.249.101.92
58.249.97.240	58.212.14.144	52.80.32.140	36.32.3.68
172.186.48.35	2001:da8:20b:200:100::d4	27.224.137.195	27.224.136.131