123.145.3.154 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Unicom Chongqing Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Bad bot requested remote resources	2019-10-22 06:42:27

相同子网IP讨论:

IP	类型	评论内容	时间
123.145.30.23	attack	Unauthorized connection attempt detected from IP address 123.145.30.23 to port 123	2020-06-13 07:50:00
123.145.3.91	attack	Web Server Scan. RayID: 58f1c6f6aaad77b2, UA: Mozilla/4.047745454 Mozilla/4.0 (compatible; MSIE 5.00; Windows 98), Country: CN	2020-05-21 04:02:28
123.145.30.4	attackspambots	Unauthorized connection attempt detected from IP address 123.145.30.4 to port 8082 [J]	2020-03-02 19:58:54
123.145.32.233	attackbotsspam	Unauthorized connection attempt detected from IP address 123.145.32.233 to port 8118 [J]	2020-03-02 15:00:33
123.145.33.41	attackspambots	unauthorized connection attempt	2020-02-16 21:04:47
123.145.37.225	attackbots	Unauthorized connection attempt detected from IP address 123.145.37.225 to port 8081 [J]	2020-01-27 00:18:03
123.145.36.201	attackspam	Unauthorized connection attempt detected from IP address 123.145.36.201 to port 443 [J]	2020-01-16 08:00:20
123.145.38.177	attackspam	Unauthorized connection attempt detected from IP address 123.145.38.177 to port 8118 [T]	2020-01-10 08:20:46
123.145.34.88	attack	Unauthorized connection attempt detected from IP address 123.145.34.88 to port 8888	2020-01-04 08:58:49
123.145.30.125	attack	Unauthorized connection attempt detected from IP address 123.145.30.125 to port 8090	2020-01-01 21:56:18
123.145.33.181	attack	HTTP/80/443 Probe, BF, WP, Hack -	2019-12-26 04:17:52
123.145.39.53	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5430f60b6b49e7bd \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: d.skk.moe \| User-Agent: Mozilla/5.084743666 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 07:35:06
123.145.33.130	attackbots	The IP has triggered Cloudflare WAF. CF-Ray: 5433a96dbb9d77e8 \| WAF_Rule_ID: 1112825 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: ip.skk.moe \| User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 03:04:05
123.145.37.17	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 54163cd0dc70eaf8 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: api.skk.moe \| User-Agent: Mozilla/5.096783921 Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 05:17:26
123.145.37.197	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 5411e7afac829629 \| WAF_Rule_ID: 1112825 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: blog.skk.moe \| User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Mobile Safari/537.36 \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:32:45

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 123.145.3.154
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49347
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;123.145.3.154.			IN	A

;; AUTHORITY SECTION:
.			591	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102101 1800 900 604800 86400

;; Query time: 116 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 22 06:42:24 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 154.3.145.123.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 154.3.145.123.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
52.34.195.239	attack	01/10/2020-11:22:34.578308 52.34.195.239 Protocol: 6 SURICATA TLS invalid record/traffic	2020-01-10 18:35:31
203.156.124.232	attack	1433/tcp 445/tcp [2019-12-31/2020-01-10]2pkt	2020-01-10 18:16:42
115.77.187.106	attack	1578631817 - 01/10/2020 05:50:17 Host: 115.77.187.106/115.77.187.106 Port: 445 TCP Blocked	2020-01-10 18:18:32
180.232.71.234	attackbots	2019-01-19 08:33:10 H=\(234.71.232.180.dsl.inet.as18190\) \[180.232.71.234\]:11342 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-01-19 08:33:17 H=\(234.71.232.180.dsl.inet.as18190\) \[180.232.71.234\]:11399 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-01-19 08:33:21 H=\(234.71.232.180.dsl.inet.as18190\) \[180.232.71.234\]:11456 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-03-08 08:29:37 1h29wm-0000mO-H8 SMTP connection from \(234.71.232.180.dsl.inet.as18190\) \[180.232.71.234\]:38417 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-08 08:30:20 1h29xT-0000os-Te SMTP connection from \(234.71.232.180.dsl.inet.as18190\) \[180.232.71.234\]:38698 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-08 08:30:45 1h29xs-0000pS-7K SMTP connection from \(234.71.232.180.dsl.inet.as18190 ...	2020-01-10 18:27:00
184.105.139.73	attackbots	27017/tcp 4786/tcp 5900/tcp... [2019-11-09/2020-01-09]30pkt,11pt.(tcp),3pt.(udp)	2020-01-10 18:39:03
74.82.47.31	attackbots	firewall-block, port(s): 873/tcp	2020-01-10 18:43:01
77.81.229.207	attack	Jan 10 05:46:28 legacy sshd[22995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.81.229.207 Jan 10 05:46:31 legacy sshd[22995]: Failed password for invalid user action from 77.81.229.207 port 39944 ssh2 Jan 10 05:49:49 legacy sshd[23221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.81.229.207 ...	2020-01-10 18:37:29
112.85.42.178	attackbotsspam	Jan 10 11:10:19 root sshd[1724]: Failed password for root from 112.85.42.178 port 24838 ssh2 Jan 10 11:10:22 root sshd[1724]: Failed password for root from 112.85.42.178 port 24838 ssh2 Jan 10 11:10:26 root sshd[1724]: Failed password for root from 112.85.42.178 port 24838 ssh2 Jan 10 11:10:32 root sshd[1724]: Failed password for root from 112.85.42.178 port 24838 ssh2 ...	2020-01-10 18:15:05
198.108.67.109	attackspambots	ET DROP Dshield Block Listed Source group 1 - port: 700 proto: TCP cat: Misc Attack	2020-01-10 18:54:40
87.106.202.9	attackspam	firewall-block, port(s): 64190/tcp	2020-01-10 18:29:32
222.186.30.57	attack	SSH Brute Force, server-1 sshd[6100]: Failed password for root from 222.186.30.57 port 28371 ssh2	2020-01-10 18:23:37
94.102.53.10	attack	Jan 10 10:50:40 tuxlinux kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=94.102.53.10 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=63968 PROTO=TCP SPT=53782 DPT=27521 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2020-01-10 18:19:55
222.186.175.147	attackbotsspam	2020-01-10T10:44:37.139175abusebot-5.cloudsearch.cf sshd[515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.147 user=root 2020-01-10T10:44:39.398450abusebot-5.cloudsearch.cf sshd[515]: Failed password for root from 222.186.175.147 port 57288 ssh2 2020-01-10T10:44:42.656286abusebot-5.cloudsearch.cf sshd[515]: Failed password for root from 222.186.175.147 port 57288 ssh2 2020-01-10T10:44:37.139175abusebot-5.cloudsearch.cf sshd[515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.147 user=root 2020-01-10T10:44:39.398450abusebot-5.cloudsearch.cf sshd[515]: Failed password for root from 222.186.175.147 port 57288 ssh2 2020-01-10T10:44:42.656286abusebot-5.cloudsearch.cf sshd[515]: Failed password for root from 222.186.175.147 port 57288 ssh2 2020-01-10T10:44:37.139175abusebot-5.cloudsearch.cf sshd[515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= ...	2020-01-10 18:47:00
14.169.133.176	attackspambots	1578631779 - 01/10/2020 05:49:39 Host: 14.169.133.176/14.169.133.176 Port: 445 TCP Blocked	2020-01-10 18:44:45
202.65.141.237	attackspam	01/09/2020-23:50:15.421225 202.65.141.237 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2020-01-10 18:19:32

最近上报的IP列表

224.27.173.233	230.176.46.148	126.153.16.83	35.246.64.225
31.133.67.214	190.203.248.11	186.135.26.183	72.252.238.106
46.130.119.42	30.119.54.147	157.245.208.72	139.59.10.121
93.65.71.13	45.238.121.233	200.84.189.131	47.107.251.144
202.137.155.181	176.103.210.63	217.112.142.114	190.97.253.238