121.57.228.6 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Neimeng Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	The IP has triggered Cloudflare WAF. CF-Ray: 5437e357cb2898bd \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: ip.skk.moe \| User-Agent: Mozilla/5.077692140 Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 02:36:54

类型

评论内容

时间

attack

The IP has triggered Cloudflare WAF. CF-Ray: 5437e357cb2898bd | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: ip.skk.moe | User-Agent: Mozilla/5.077692140 Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-12 02:36:54

相同子网IP讨论:

IP	类型	评论内容	时间
121.57.228.214	attackspam	Unauthorized connection attempt detected from IP address 121.57.228.214 to port 8081 [J]	2020-01-27 00:45:24
121.57.228.255	attackbots	The IP has triggered Cloudflare WAF. CF-Ray: 54317b370c55e7ad \| WAF_Rule_ID: 1122843 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: blog.skk.moe \| User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 06:45:30
121.57.228.82	attack	The IP has triggered Cloudflare WAF. CF-Ray: 543659b17c73ebad \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.081397758 Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0) \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 03:55:18
121.57.228.87	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 5430cd9eff2ae7fd \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: ip.skk.moe \| User-Agent: Mozilla/5.067805899 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 03:54:56
121.57.228.117	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 54332858bccdeba5 \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: api.skk.moe \| User-Agent: Mozilla/4.047745454 Mozilla/4.0 (compatible; MSIE 5.00; Windows 98) \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 03:54:38
121.57.228.140	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 5412f2e088f1989f \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: blog.skk.moe \| User-Agent: Mozilla/5.0101097241 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 05:03:45
121.57.228.118	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 540fb34109efebb5 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: api.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 4.3; en-us; SM-N900T Build/JSS15J) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 01:06:38

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.57.228.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51483
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;121.57.228.6.			IN	A

;; AUTHORITY SECTION:
.			153	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121101 1800 900 604800 86400

;; Query time: 139 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Dec 12 02:36:49 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 6.228.57.121.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 6.228.57.121.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
37.49.224.159	attackbots	Invalid user admin from 37.49.224.159 port 48704 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.49.224.159 Invalid user admin from 37.49.224.159 port 48704 Failed password for invalid user admin from 37.49.224.159 port 48704 ssh2 Invalid user admin from 37.49.224.159 port 51192	2020-06-27 06:01:31
157.245.155.13	attackspam	Invalid user openhab from 157.245.155.13 port 40294	2020-06-27 05:24:22
81.64.120.148	attackspam	Jun 26 19:54:41 hermescis postfix/smtpd[30667]: NOQUEUE: reject: RCPT from 81-64-120-148.rev.numericable.fr[81.64.120.148]: 550 5.1.1 : Recipient address rejected:* from= to= proto=ESMTP helo=<81-64-120-148.rev.numericable.fr>	2020-06-27 05:57:33
51.75.18.215	attackbotsspam	Jun 26 23:59:11 mout sshd[23830]: Invalid user itadmin from 51.75.18.215 port 58202	2020-06-27 06:01:12
201.149.20.162	attack	Failed password for invalid user test from 201.149.20.162 port 30144 ssh2	2020-06-27 05:52:10
212.47.238.207	attack	[ssh] SSH attack	2020-06-27 05:32:16
218.92.0.246	attack	Jun 26 18:23:18 vps46666688 sshd[15639]: Failed password for root from 218.92.0.246 port 6002 ssh2 Jun 26 18:23:33 vps46666688 sshd[15639]: error: maximum authentication attempts exceeded for root from 218.92.0.246 port 6002 ssh2 [preauth] ...	2020-06-27 05:30:48
187.188.202.97	attack	Fail2Ban Ban Triggered SMTP Bruteforce Attempt	2020-06-27 05:48:17
40.117.147.53	attackbots	Jun 24 23:00:21 v26 sshd[8310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.117.147.53 user=r.r Jun 24 23:00:21 v26 sshd[8313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.117.147.53 user=r.r Jun 24 23:00:21 v26 sshd[8314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.117.147.53 user=r.r Jun 24 23:00:21 v26 sshd[8312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.117.147.53 user=r.r Jun 24 23:00:21 v26 sshd[8315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.117.147.53 user=r.r Jun 24 23:00:21 v26 sshd[8316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.117.147.53 user=r.r Jun 24 23:00:23 v26 sshd[8310]: Failed password for r.r from 40.117.147.53 port 2321 ssh2 Jun 24 23:00:23 v26 sshd[8314]........ -------------------------------	2020-06-27 05:36:25
51.178.137.139	attackspam	Jun 26 19:54:58 scw-focused-cartwright sshd[22197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.137.139 Jun 26 19:55:01 scw-focused-cartwright sshd[22197]: Failed password for invalid user idc from 51.178.137.139 port 47140 ssh2	2020-06-27 05:49:11
61.177.172.41	attackspam	SSH Brute-Force attacks	2020-06-27 05:51:00
139.60.63.190	attackspam	Port 22 Scan, PTR: None	2020-06-27 05:27:26
41.215.180.237	attackbots	trying to access non-authorized port	2020-06-27 05:52:43
106.51.80.198	attack	Invalid user ts3 from 106.51.80.198 port 43466	2020-06-27 05:23:28
13.65.147.228	attackbotsspam	Jun 26 23:40:22 fhem-rasp sshd[29984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.65.147.228 user=root Jun 26 23:40:24 fhem-rasp sshd[29984]: Failed password for root from 13.65.147.228 port 61912 ssh2 ...	2020-06-27 05:49:45

最近上报的IP列表

107.173.92.12	145.174.75.8	106.39.246.162	8.186.166.158
103.69.245.152	65.55.210.209	64.233.172.112	49.7.3.74
45.131.70.101	36.32.3.170	2408:8648:1300:40:3b36:51c8:2ca2:6c61	2001:da8:20b:200:100::d7
27.224.136.55	23.108.4.117	223.166.74.240	223.166.74.52
222.94.195.204	222.82.61.53	222.79.48.199	221.13.12.252