123.157.138.138

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Unicom Zhejiang Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Unauthorized connection attempt detected from IP address 123.157.138.138 to port 1433 [T]	2020-04-15 02:40:27

相同子网IP讨论:

IP	类型	评论内容	时间
123.157.138.136	attack	Unauthorized connection attempt detected from IP address 123.157.138.136 to port 1433 [T]	2020-04-15 04:24:05
123.157.138.139	attackbotsspam	Unauthorized connection attempt detected from IP address 123.157.138.139 to port 1433 [T]	2020-04-15 04:23:40
123.157.138.135	attack	Unauthorized connection attempt detected from IP address 123.157.138.135 to port 1433 [T]	2020-04-15 03:51:43
123.157.138.140	attack	Unauthorized connection attempt detected from IP address 123.157.138.140 to port 1433 [T]	2020-04-15 03:51:23
123.157.138.133	attack	Unauthorized connection attempt detected from IP address 123.157.138.133 to port 1433 [T]	2020-04-15 03:14:42
123.157.138.141	attackspambots	Unauthorized connection attempt detected from IP address 123.157.138.141 to port 1433 [T]	2020-04-15 03:14:12
123.157.138.132	attackbotsspam	Unauthorized connection attempt detected from IP address 123.157.138.132 to port 1433 [T]	2020-04-15 02:40:59
123.157.138.131	attack	Unauthorized connection attempt detected from IP address 123.157.138.131 to port 1433 [T]	2020-04-15 02:03:26
123.157.138.142	attackbots	Unauthorized connection attempt detected from IP address 123.157.138.142 to port 1433 [T]	2020-04-15 02:03:03
123.157.138.137	attackspambots	Unauthorized connection attempt detected from IP address 123.157.138.137 to port 1433 [T]	2020-04-15 01:19:21
123.157.138.134	attackbots	Unauthorized connection attempt detected from IP address 123.157.138.134 to port 1433 [T]	2020-04-15 00:27:24
123.157.138.133	attack	Unauthorized connection attempt detected from IP address 123.157.138.133 to port 1433 [J]	2020-01-22 22:28:59

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 123.157.138.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33649
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;123.157.138.138.		IN	A

;; AUTHORITY SECTION:
.			374	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012800 1800 900 604800 86400

;; Query time: 132 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 29 01:02:04 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

Host 138.138.157.123.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 138.138.157.123.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
45.228.254.168	attack	Oct 3 22:17:52 mail.srvfarm.net postfix/smtpd[660363]: warning: unknown[45.228.254.168]: SASL PLAIN authentication failed: Oct 3 22:17:53 mail.srvfarm.net postfix/smtpd[660363]: lost connection after AUTH from unknown[45.228.254.168] Oct 3 22:20:06 mail.srvfarm.net postfix/smtps/smtpd[660131]: warning: unknown[45.228.254.168]: SASL PLAIN authentication failed: Oct 3 22:20:06 mail.srvfarm.net postfix/smtps/smtpd[660131]: lost connection after AUTH from unknown[45.228.254.168] Oct 3 22:26:24 mail.srvfarm.net postfix/smtps/smtpd[658122]: warning: unknown[45.228.254.168]: SASL PLAIN authentication failed:	2020-10-04 13:20:17
103.18.242.37	attackbots	Oct 4 03:01:05 mail.srvfarm.net postfix/smtpd[696518]: warning: unknown[103.18.242.37]: SASL PLAIN authentication failed: Oct 4 03:01:05 mail.srvfarm.net postfix/smtpd[696518]: lost connection after AUTH from unknown[103.18.242.37] Oct 4 03:07:34 mail.srvfarm.net postfix/smtpd[700724]: warning: unknown[103.18.242.37]: SASL PLAIN authentication failed: Oct 4 03:07:34 mail.srvfarm.net postfix/smtpd[700724]: lost connection after AUTH from unknown[103.18.242.37] Oct 4 03:07:46 mail.srvfarm.net postfix/smtps/smtpd[697233]: warning: unknown[103.18.242.37]: SASL PLAIN authentication failed:	2020-10-04 13:16:31
192.241.222.11	attack	...	2020-10-04 13:26:45
45.160.136.66	attackbotsspam	Oct 3 22:26:03 mail.srvfarm.net postfix/smtps/smtpd[662248]: warning: unknown[45.160.136.66]: SASL PLAIN authentication failed: Oct 3 22:26:03 mail.srvfarm.net postfix/smtps/smtpd[662248]: lost connection after AUTH from unknown[45.160.136.66] Oct 3 22:29:35 mail.srvfarm.net postfix/smtps/smtpd[661644]: warning: unknown[45.160.136.66]: SASL PLAIN authentication failed: Oct 3 22:29:36 mail.srvfarm.net postfix/smtps/smtpd[661644]: lost connection after AUTH from unknown[45.160.136.66] Oct 3 22:31:51 mail.srvfarm.net postfix/smtpd[660372]: warning: unknown[45.160.136.66]: SASL PLAIN authentication failed:	2020-10-04 13:03:11
45.142.120.121	attackspambots	Oct 4 06:18:17 mail.srvfarm.net postfix/smtpd[735772]: warning: unknown[45.142.120.121]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 06:18:24 mail.srvfarm.net postfix/smtpd[737246]: warning: unknown[45.142.120.121]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 06:18:26 mail.srvfarm.net postfix/smtpd[735492]: warning: unknown[45.142.120.121]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 06:18:28 mail.srvfarm.net postfix/smtpd[737249]: warning: unknown[45.142.120.121]: SASL LOGIN authentication failed: VXNlcm5hbWU6 Oct 4 06:18:35 mail.srvfarm.net postfix/smtpd[734060]: warning: unknown[45.142.120.121]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-10-04 13:21:58
23.97.180.45	attackbotsspam	Oct 4 06:26:10 vps647732 sshd[8652]: Failed password for root from 23.97.180.45 port 57212 ssh2 ...	2020-10-04 12:51:25
51.81.119.1	attackspam	Multiport scan : 6 ports scanned 80(x2) 443(x3) 465(x2) 3074(x4) 3478 8080(x2)	2020-10-04 12:53:33
49.88.223.137	attack	MAIL: User Login Brute Force Attempt	2020-10-04 12:53:51
190.109.43.205	attack	Oct 3 22:26:38 mail.srvfarm.net postfix/smtpd[660374]: warning: unknown[190.109.43.205]: SASL PLAIN authentication failed: Oct 3 22:26:39 mail.srvfarm.net postfix/smtpd[660374]: lost connection after AUTH from unknown[190.109.43.205] Oct 3 22:32:48 mail.srvfarm.net postfix/smtps/smtpd[663268]: warning: unknown[190.109.43.205]: SASL PLAIN authentication failed: Oct 3 22:32:48 mail.srvfarm.net postfix/smtps/smtpd[663268]: lost connection after AUTH from unknown[190.109.43.205] Oct 3 22:33:03 mail.srvfarm.net postfix/smtps/smtpd[662243]: warning: unknown[190.109.43.205]: SASL PLAIN authentication failed:	2020-10-04 12:57:11
181.94.226.164	attack	Oct 4 04:18:42 vm0 sshd[30972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.94.226.164 Oct 4 04:18:43 vm0 sshd[30972]: Failed password for invalid user bash from 181.94.226.164 port 63688 ssh2 ...	2020-10-04 12:50:22
212.70.149.5	attack	Oct 4 07:03:47 cho postfix/smtpd[4169349]: warning: unknown[212.70.149.5]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 07:04:08 cho postfix/smtpd[4168489]: warning: unknown[212.70.149.5]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 07:04:29 cho postfix/smtpd[4168489]: warning: unknown[212.70.149.5]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 07:04:50 cho postfix/smtpd[4169119]: warning: unknown[212.70.149.5]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 07:05:11 cho postfix/smtpd[4169349]: warning: unknown[212.70.149.5]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-10-04 13:07:06
13.76.191.209	attack	Oct 3 22:01:23 mail.srvfarm.net postfix/smtpd[656142]: NOQUEUE: reject: RCPT from unknown[13.76.191.209]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Oct 3 22:03:23 mail.srvfarm.net postfix/smtpd[656146]: NOQUEUE: reject: RCPT from unknown[13.76.191.209]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Oct 3 22:06:13 mail.srvfarm.net postfix/smtpd[660363]: NOQUEUE: reject: RCPT from unknown[13.76.191.209]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Oct 3 22:07:32 mail.srvfarm.net postfix/smtpd[660363]: NOQUEUE: reject: RCPT from unknown[13.76.191.209]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo=	2020-10-04 13:23:57
157.245.108.35	attackbotsspam	pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.108.35 Failed password for invalid user ubuntu from 157.245.108.35 port 47498 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.108.35	2020-10-04 12:49:27
138.121.95.197	attack	Oct 3 22:03:58 mail.srvfarm.net postfix/smtpd[656172]: warning: 197-95-121-138.ebertinformatica.com.br[138.121.95.197]: SASL PLAIN authentication failed: Oct 3 22:03:59 mail.srvfarm.net postfix/smtpd[656172]: lost connection after AUTH from 197-95-121-138.ebertinformatica.com.br[138.121.95.197] Oct 3 22:06:14 mail.srvfarm.net postfix/smtps/smtpd[658135]: warning: 197-95-121-138.ebertinformatica.com.br[138.121.95.197]: SASL PLAIN authentication failed: Oct 3 22:06:14 mail.srvfarm.net postfix/smtps/smtpd[658135]: lost connection after AUTH from 197-95-121-138.ebertinformatica.com.br[138.121.95.197] Oct 3 22:13:43 mail.srvfarm.net postfix/smtpd[656144]: warning: 197-95-121-138.ebertinformatica.com.br[138.121.95.197]: SASL PLAIN authentication failed:	2020-10-04 13:14:07
192.35.169.55	attack	trying to access non-authorized port	2020-10-04 12:53:09

最近上报的IP列表

189.56.88.83	188.0.161.58	178.93.34.202	175.141.162.180
174.26.209.249	129.0.205.105	129.0.205.10	121.183.240.232
118.68.0.190	90.102.182.147	116.103.241.50	164.33.169.184
253.255.207.68	69.148.226.152	111.96.35.197	26.102.198.231
15.206.190.143	65.74.40.148	94.38.73.131	204.122.25.194