123.145.1.172 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Unicom Chongqing Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	The IP has triggered Cloudflare WAF. CF-Ray: 541050604ba4eb00 \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/4.038533357 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1) QQBrowser/6.0 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 02:41:37

类型

评论内容

时间

attack

The IP has triggered Cloudflare WAF. CF-Ray: 541050604ba4eb00 | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/4.038533357 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1) QQBrowser/6.0 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 02:41:37

相同子网IP讨论:

IP	类型	评论内容	时间
123.145.14.18	attackspam	Unauthorized connection attempt detected from IP address 123.145.14.18 to port 21	2020-05-31 03:37:45
123.145.107.63	attack	Invalid user postgres from 123.145.107.63 port 57537	2020-05-13 20:08:40
123.145.10.114	attackbotsspam	20 attempts against mh-ssh on field	2020-05-05 08:50:25
123.145.113.199	attackbots	Mar 27 04:53:07 [host] sshd[32010]: Invalid user k Mar 27 04:53:07 [host] sshd[32010]: pam_unix(sshd: Mar 27 04:53:10 [host] sshd[32010]: Failed passwor	2020-03-27 13:55:06
123.145.18.10	attackbots	123.145.18.10 - - \[27/Feb/2020:16:27:08 +0200\] "CONNECT www.baidu.com:443 HTTP/1.1" 403 202 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"	2020-02-27 23:17:54
123.145.11.89	attackbots	Unauthorized connection attempt detected from IP address 123.145.11.89 to port 8888 [J]	2020-01-29 10:03:12
123.145.17.240	attackbots	Unauthorized connection attempt detected from IP address 123.145.17.240 to port 81 [T]	2020-01-22 07:44:51
123.145.19.183	attackspam	Unauthorized connection attempt detected from IP address 123.145.19.183 to port 9999 [T]	2020-01-10 09:18:30
123.145.17.197	attack	Unauthorized connection attempt detected from IP address 123.145.17.197 to port 8090	2020-01-01 21:26:29
123.145.18.8	attackspam	Unauthorized connection attempt detected from IP address 123.145.18.8 to port 995	2020-01-01 19:02:52
123.145.14.230	attack	Unauthorized connection attempt detected from IP address 123.145.14.230 to port 8080	2019-12-29 17:11:26
123.145.11.119	attack	The IP has triggered Cloudflare WAF. CF-Ray: 543263d3f950d38e \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: api.skk.moe \| User-Agent: Mozilla/5.096783921 Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 06:44:26
123.145.11.238	attack	The IP has triggered Cloudflare WAF. CF-Ray: 54311a6a881dd35e \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: api.skk.moe \| User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 05:39:19
123.145.12.196	attack	The IP has triggered Cloudflare WAF. CF-Ray: 54160d140d7fed33 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: blog.skk.moe \| User-Agent: Mozilla/5.064213590 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 07:09:06
123.145.12.212	attack	The IP has triggered Cloudflare WAF. CF-Ray: 541104d0ae0c5120 \| WAF_Rule_ID: 1025440 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: theme-suka.skk.moe \| User-Agent: Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1 \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:40:31

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 123.145.1.172
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46006
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;123.145.1.172.			IN	A

;; AUTHORITY SECTION:
.			481	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019120700 1800 900 604800 86400

;; Query time: 115 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 08 02:41:34 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 172.1.145.123.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 172.1.145.123.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
61.177.172.158	attack	2019-10-20T17:01:43.876429hub.schaetter.us sshd\[7587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.158 user=root 2019-10-20T17:01:45.977859hub.schaetter.us sshd\[7587\]: Failed password for root from 61.177.172.158 port 19891 ssh2 2019-10-20T17:01:48.696497hub.schaetter.us sshd\[7587\]: Failed password for root from 61.177.172.158 port 19891 ssh2 2019-10-20T17:01:51.025330hub.schaetter.us sshd\[7587\]: Failed password for root from 61.177.172.158 port 19891 ssh2 2019-10-20T17:02:28.023908hub.schaetter.us sshd\[7604\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.158 user=root ...	2019-10-21 01:28:20
161.0.72.11	attack	2019-10-20 06:59:05 H=(lubenglass.it) [161.0.72.11]:50003 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/161.0.72.11) 2019-10-20 06:59:06 H=(lubenglass.it) [161.0.72.11]:50003 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-10-20 06:59:06 H=(lubenglass.it) [161.0.72.11]:50003 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2019-10-21 01:39:21
171.234.37.216	attackbotsspam	Oct 20 18:47:41 vpn01 sshd[24677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.234.37.216 Oct 20 18:47:44 vpn01 sshd[24677]: Failed password for invalid user admin from 171.234.37.216 port 35914 ssh2 ...	2019-10-21 01:42:50
124.205.224.179	attack	Invalid user kruspe from 124.205.224.179 port 57129	2019-10-21 01:58:14
45.253.26.34	attackspambots	Oct 20 17:23:19 lnxded63 sshd[14800]: Failed password for root from 45.253.26.34 port 50848 ssh2 Oct 20 17:24:55 lnxded63 sshd[14874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.253.26.34 Oct 20 17:24:57 lnxded63 sshd[14874]: Failed password for invalid user 0 from 45.253.26.34 port 33842 ssh2	2019-10-21 01:30:31
148.70.54.83	attackspam	Invalid user ay from 148.70.54.83 port 35050	2019-10-21 01:44:03
104.236.143.13	attackspambots	Oct 20 14:02:08 XXXXXX sshd[59650]: Invalid user ricky from 104.236.143.13 port 38007	2019-10-21 01:12:44
106.12.90.250	attack	Invalid user portal from 106.12.90.250 port 45690	2019-10-21 01:59:31
185.40.14.242	attack	3389BruteforceStormFW21	2019-10-21 01:39:35
154.8.217.73	attack	Invalid user wa from 154.8.217.73 port 55178	2019-10-21 01:55:59
107.180.121.1	attack	xmlrpc attack	2019-10-21 01:19:44
188.128.43.28	attackspam	Oct 20 15:05:36 localhost sshd\[84877\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.128.43.28 user=root Oct 20 15:05:38 localhost sshd\[84877\]: Failed password for root from 188.128.43.28 port 60042 ssh2 Oct 20 15:09:54 localhost sshd\[85063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.128.43.28 user=root Oct 20 15:09:56 localhost sshd\[85063\]: Failed password for root from 188.128.43.28 port 43156 ssh2 Oct 20 15:14:10 localhost sshd\[85210\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.128.43.28 user=root ...	2019-10-21 01:33:23
103.99.1.249	attackbots	Oct 20 20:46:42 lcl-usvr-01 sshd[12690]: refused connect from 103.99.1.249 (103.99.1.249) Oct 20 20:46:42 lcl-usvr-01 sshd[12691]: refused connect from 103.99.1.249 (103.99.1.249)	2019-10-21 01:45:37
221.195.189.144	attackspam	Oct 20 19:40:27 MK-Soft-VM3 sshd[9824]: Failed password for root from 221.195.189.144 port 52218 ssh2 ...	2019-10-21 01:50:42
140.246.191.130	attackbots	Oct 20 17:07:10 ArkNodeAT sshd\[15810\]: Invalid user smtpuser from 140.246.191.130 Oct 20 17:07:10 ArkNodeAT sshd\[15810\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.191.130 Oct 20 17:07:11 ArkNodeAT sshd\[15810\]: Failed password for invalid user smtpuser from 140.246.191.130 port 41070 ssh2	2019-10-21 01:56:46

最近上报的IP列表

112.117.19.99	112.66.103.94	112.66.98.35	111.206.198.138
111.206.198.106	58.48.129.155	42.200.113.140	37.94.81.104
95.90.208.99	51.105.222.2	75.218.52.116	12.211.200.71
59.56.129.239	36.32.3.90	141.0.89.254	215.90.28.131
85.197.1.3	2401:4900:30e9:8940:612a:d298:6cf2:fd30	151.141.174.197	93.53.45.178