123.157.138.140

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Unicom Zhejiang Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Unauthorized connection attempt detected from IP address 123.157.138.140 to port 1433 [T]	2020-04-15 03:51:23

相同子网IP讨论:

IP	类型	评论内容	时间
123.157.138.136	attack	Unauthorized connection attempt detected from IP address 123.157.138.136 to port 1433 [T]	2020-04-15 04:24:05
123.157.138.139	attackbotsspam	Unauthorized connection attempt detected from IP address 123.157.138.139 to port 1433 [T]	2020-04-15 04:23:40
123.157.138.135	attack	Unauthorized connection attempt detected from IP address 123.157.138.135 to port 1433 [T]	2020-04-15 03:51:43
123.157.138.133	attack	Unauthorized connection attempt detected from IP address 123.157.138.133 to port 1433 [T]	2020-04-15 03:14:42
123.157.138.141	attackspambots	Unauthorized connection attempt detected from IP address 123.157.138.141 to port 1433 [T]	2020-04-15 03:14:12
123.157.138.132	attackbotsspam	Unauthorized connection attempt detected from IP address 123.157.138.132 to port 1433 [T]	2020-04-15 02:40:59
123.157.138.138	attackbots	Unauthorized connection attempt detected from IP address 123.157.138.138 to port 1433 [T]	2020-04-15 02:40:27
123.157.138.131	attack	Unauthorized connection attempt detected from IP address 123.157.138.131 to port 1433 [T]	2020-04-15 02:03:26
123.157.138.142	attackbots	Unauthorized connection attempt detected from IP address 123.157.138.142 to port 1433 [T]	2020-04-15 02:03:03
123.157.138.137	attackspambots	Unauthorized connection attempt detected from IP address 123.157.138.137 to port 1433 [T]	2020-04-15 01:19:21
123.157.138.134	attackbots	Unauthorized connection attempt detected from IP address 123.157.138.134 to port 1433 [T]	2020-04-15 00:27:24
123.157.138.133	attack	Unauthorized connection attempt detected from IP address 123.157.138.133 to port 1433 [J]	2020-01-22 22:28:59

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 123.157.138.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39270
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;123.157.138.140.		IN	A

;; AUTHORITY SECTION:
.			177	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020041401 1800 900 604800 86400

;; Query time: 765 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 15 03:51:15 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

Host 140.138.157.123.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 140.138.157.123.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
86.111.144.10	attack	Jun 8 05:28:15 web01.agentur-b-2.de postfix/smtpd[1323751]: NOQUEUE: reject: RCPT from unknown[86.111.144.10]: 554 5.7.1 Service unavailable; Client host [86.111.144.10] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/86.111.144.10; from= to= proto=ESMTP helo= Jun 8 05:28:16 web01.agentur-b-2.de postfix/smtpd[1323751]: NOQUEUE: reject: RCPT from unknown[86.111.144.10]: 554 5.7.1 Service unavailable; Client host [86.111.144.10] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/86.111.144.10; from= to= proto=ESMTP helo= Jun 8 05:28:17 web01.agentur-b-2.de postfix/smtpd[1323751]: NOQUEUE: reject: RCPT from unknown[86.111.144.10]: 554 5.7.1 Service unavailable; Client host [86.111.144.10] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamha	2020-06-08 18:47:46
45.178.3.37	attackspam	(sshd) Failed SSH login from 45.178.3.37 (AR/Argentina/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 8 12:01:07 ubnt-55d23 sshd[23367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.178.3.37 user=root Jun 8 12:01:10 ubnt-55d23 sshd[23367]: Failed password for root from 45.178.3.37 port 36015 ssh2	2020-06-08 18:53:28
134.175.121.80	attackbotsspam	Fail2Ban	2020-06-08 19:04:49
87.246.7.70	attackbotsspam	Rude login attack (716 tries in 1d)	2020-06-08 18:47:21
188.241.45.85	attackbotsspam	Jun 8 05:22:24 web01.agentur-b-2.de postfix/smtpd[1323114]: NOQUEUE: reject: RCPT from unknown[188.241.45.85]: 554 5.7.1 Service unavailable; Client host [188.241.45.85] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/188.241.45.85 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<153consulting.com> Jun 8 05:22:24 web01.agentur-b-2.de postfix/smtpd[1323114]: lost connection after RCPT from unknown[188.241.45.85] Jun 8 05:26:53 web01.agentur-b-2.de postfix/smtpd[1323114]: NOQUEUE: reject: RCPT from unknown[188.241.45.85]: 554 5.7.1 Service unavailable; Client host [188.241.45.85] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/188.241.45.85 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<193828.com> Jun 8 05:26:54 web01.agentur-b-2.de postfix/smtpd[1323114]: NOQUEUE: reject: RCPT from unknown[188.241.45.85]: 554 5.7.1	2020-06-08 18:36:09
88.199.41.50	attack	Unauthorized SMTP/IMAP/POP3 connection attempt	2020-06-08 18:30:01
59.149.147.168	attack	Telnetd brute force attack detected by fail2ban	2020-06-08 18:59:22
188.92.209.143	attackbots	Jun 8 05:21:04 mail.srvfarm.net postfix/smtps/smtpd[671710]: warning: unknown[188.92.209.143]: SASL PLAIN authentication failed: Jun 8 05:21:04 mail.srvfarm.net postfix/smtps/smtpd[671710]: lost connection after AUTH from unknown[188.92.209.143] Jun 8 05:21:31 mail.srvfarm.net postfix/smtps/smtpd[673656]: warning: unknown[188.92.209.143]: SASL PLAIN authentication failed: Jun 8 05:21:31 mail.srvfarm.net postfix/smtps/smtpd[673656]: lost connection after AUTH from unknown[188.92.209.143] Jun 8 05:25:20 mail.srvfarm.net postfix/smtps/smtpd[674165]: warning: unknown[188.92.209.143]: SASL PLAIN authentication failed:	2020-06-08 18:37:09
167.99.170.83	attack	Jun 8 08:58:52 datenbank sshd[63973]: Failed password for root from 167.99.170.83 port 33528 ssh2 Jun 8 09:00:53 datenbank sshd[63990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.170.83 user=root Jun 8 09:00:55 datenbank sshd[63990]: Failed password for root from 167.99.170.83 port 41876 ssh2 ...	2020-06-08 19:03:48
189.126.187.147	attackspambots	Jun 8 05:12:23 mail.srvfarm.net postfix/smtpd[652511]: warning: unknown[189.126.187.147]: SASL PLAIN authentication failed: Jun 8 05:12:24 mail.srvfarm.net postfix/smtpd[652511]: lost connection after AUTH from unknown[189.126.187.147] Jun 8 05:13:16 mail.srvfarm.net postfix/smtpd[653267]: warning: unknown[189.126.187.147]: SASL PLAIN authentication failed: Jun 8 05:13:17 mail.srvfarm.net postfix/smtpd[653267]: lost connection after AUTH from unknown[189.126.187.147] Jun 8 05:19:25 mail.srvfarm.net postfix/smtpd[669637]: warning: unknown[189.126.187.147]: SASL PLAIN authentication failed:	2020-06-08 18:35:38
176.165.48.246	attack	Jun 8 06:19:52 odroid64 sshd\[18583\]: User root from 176.165.48.246 not allowed because not listed in AllowUsers Jun 8 06:19:52 odroid64 sshd\[18583\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.165.48.246 user=root ...	2020-06-08 19:05:05
51.255.150.119	attackbots	odoo8 ...	2020-06-08 18:54:47
165.22.63.58	attackspambots	CMS (WordPress or Joomla) login attempt.	2020-06-08 18:42:06
138.36.200.118	attackspambots	Jun 8 05:12:35 mail.srvfarm.net postfix/smtps/smtpd[652514]: warning: unknown[138.36.200.118]: SASL PLAIN authentication failed: Jun 8 05:12:35 mail.srvfarm.net postfix/smtps/smtpd[652514]: lost connection after AUTH from unknown[138.36.200.118] Jun 8 05:17:48 mail.srvfarm.net postfix/smtpd[671305]: lost connection after CONNECT from unknown[138.36.200.118] Jun 8 05:18:32 mail.srvfarm.net postfix/smtps/smtpd[653854]: warning: unknown[138.36.200.118]: SASL PLAIN authentication failed: Jun 8 05:18:32 mail.srvfarm.net postfix/smtps/smtpd[653854]: lost connection after AUTH from unknown[138.36.200.118]	2020-06-08 18:43:34
170.233.70.225	attackbots	Jun 8 05:02:49 mail.srvfarm.net postfix/smtps/smtpd[652518]: warning: unknown[170.233.70.225]: SASL PLAIN authentication failed: Jun 8 05:02:50 mail.srvfarm.net postfix/smtps/smtpd[652518]: lost connection after AUTH from unknown[170.233.70.225] Jun 8 05:03:08 mail.srvfarm.net postfix/smtpd[652527]: warning: unknown[170.233.70.225]: SASL PLAIN authentication failed: Jun 8 05:03:08 mail.srvfarm.net postfix/smtpd[652527]: lost connection after AUTH from unknown[170.233.70.225] Jun 8 05:07:15 mail.srvfarm.net postfix/smtps/smtpd[652505]: warning: unknown[170.233.70.225]: SASL PLAIN authentication failed:	2020-06-08 18:40:57

最近上报的IP列表

60.245.45.121	58.249.99.69	58.220.46.62	46.191.232.172
46.45.38.97	185.220.101.158	198.1.81.46	45.77.181.37
42.113.92.192	35.221.213.24	34.76.78.209	27.3.160.19
1.52.134.18	1.52.68.214	218.247.162.250	218.222.71.15
217.197.242.68	217.165.51.86	128.199.63.80	210.121.9.189