123.194.80.148

基本信息:

城市(city): Taipei

省份(region): Taipei City

国家(country): Taiwan, China

运营商(isp): Tung Ho Multimedia Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Invalid user nginx from 123.194.80.148 port 51782	2020-02-23 15:30:02
attack	Jan 13 22:25:58 dedicated sshd[11034]: Invalid user bliss from 123.194.80.148 port 41675	2020-01-14 05:33:17

相同子网IP讨论:

IP	类型	评论内容	时间
123.194.80.69	attack	Unauthorised access (Sep 3) SRC=123.194.80.69 LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=14612 TCP DPT=8080 WINDOW=45292 SYN Unauthorised access (Sep 2) SRC=123.194.80.69 LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=49644 TCP DPT=8080 WINDOW=15242 SYN Unauthorised access (Sep 2) SRC=123.194.80.69 LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=203 TCP DPT=8080 WINDOW=14219 SYN Unauthorised access (Sep 2) SRC=123.194.80.69 LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=41640 TCP DPT=8080 WINDOW=53553 SYN Unauthorised access (Sep 1) SRC=123.194.80.69 LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=42356 TCP DPT=8080 WINDOW=54859 SYN Unauthorised access (Sep 1) SRC=123.194.80.69 LEN=40 TTL=51 ID=30241 TCP DPT=8080 WINDOW=33546 SYN Unauthorised access (Sep 1) SRC=123.194.80.69 LEN=40 TTL=48 ID=8772 TCP DPT=8080 WINDOW=31690 SYN	2020-09-03 20:19:39
123.194.80.69	attack	Honeypot attack, port: 81, PTR: 123-194-80-69.dynamic.kbronet.com.tw.	2020-09-03 12:03:30
123.194.80.69	attackspam	Honeypot attack, port: 81, PTR: 123-194-80-69.dynamic.kbronet.com.tw.	2020-09-03 04:22:29
123.194.80.71	attackbots	Honeypot attack, port: 81, PTR: 123-194-80-71.dynamic.kbronet.com.tw.	2020-03-03 17:31:58
123.194.80.147	attack	Feb 19 06:28:47 game-panel sshd[3322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.194.80.147 Feb 19 06:28:49 game-panel sshd[3322]: Failed password for invalid user lby from 123.194.80.147 port 37320 ssh2 Feb 19 06:34:14 game-panel sshd[3490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.194.80.147	2020-02-19 15:08:03
123.194.80.147	attack	$f2bV_matches	2020-02-19 09:01:59
123.194.80.147	attackbots	Jan 27 13:58:05 OPSO sshd\[10563\]: Invalid user postgres from 123.194.80.147 port 34023 Jan 27 13:58:05 OPSO sshd\[10563\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.194.80.147 Jan 27 13:58:07 OPSO sshd\[10563\]: Failed password for invalid user postgres from 123.194.80.147 port 34023 ssh2 Jan 27 14:02:05 OPSO sshd\[11798\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.194.80.147 user=root Jan 27 14:02:07 OPSO sshd\[11798\]: Failed password for root from 123.194.80.147 port 49090 ssh2	2020-01-27 21:17:20
123.194.80.147	attackbotsspam	Unauthorized connection attempt detected from IP address 123.194.80.147 to port 2220 [J]	2020-01-22 03:09:05

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 123.194.80.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48456
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;123.194.80.148.			IN	A

;; AUTHORITY SECTION:
.			418	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011301 1800 900 604800 86400

;; Query time: 126 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 14 05:33:14 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

148.80.194.123.in-addr.arpa domain name pointer 123-194-80-148.dynamic.kbronet.com.tw.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
148.80.194.123.in-addr.arpa	name = 123-194-80-148.dynamic.kbronet.com.tw.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
109.194.54.126	attack	Sep 23 12:47:25 sachi sshd\[27277\]: Invalid user kubernetes from 109.194.54.126 Sep 23 12:47:25 sachi sshd\[27277\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.194.54.126 Sep 23 12:47:27 sachi sshd\[27277\]: Failed password for invalid user kubernetes from 109.194.54.126 port 40010 ssh2 Sep 23 12:51:47 sachi sshd\[27633\]: Invalid user target from 109.194.54.126 Sep 23 12:51:47 sachi sshd\[27633\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.194.54.126	2019-09-24 06:58:04
183.63.87.235	attackspam	Sep 23 18:32:12 TORMINT sshd\[11303\]: Invalid user sq from 183.63.87.235 Sep 23 18:32:12 TORMINT sshd\[11303\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.63.87.235 Sep 23 18:32:14 TORMINT sshd\[11303\]: Failed password for invalid user sq from 183.63.87.235 port 49114 ssh2 ...	2019-09-24 06:35:50
222.186.31.144	attack	Sep 24 00:52:22 MainVPS sshd[30506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.144 user=root Sep 24 00:52:23 MainVPS sshd[30506]: Failed password for root from 222.186.31.144 port 56935 ssh2 Sep 24 00:52:25 MainVPS sshd[30506]: Failed password for root from 222.186.31.144 port 56935 ssh2 Sep 24 00:52:22 MainVPS sshd[30506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.144 user=root Sep 24 00:52:23 MainVPS sshd[30506]: Failed password for root from 222.186.31.144 port 56935 ssh2 Sep 24 00:52:25 MainVPS sshd[30506]: Failed password for root from 222.186.31.144 port 56935 ssh2 Sep 24 00:52:22 MainVPS sshd[30506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.144 user=root Sep 24 00:52:23 MainVPS sshd[30506]: Failed password for root from 222.186.31.144 port 56935 ssh2 Sep 24 00:52:25 MainVPS sshd[30506]: Failed password for root from 222.186.31.144	2019-09-24 06:54:57
62.192.61.53	attackspam	23/tcp [2019-09-23]1pkt	2019-09-24 06:32:41
91.39.223.62	attack	8888/tcp [2019-09-23]1pkt	2019-09-24 06:51:56
128.199.224.215	attackspambots	Sep 23 21:10:20 work-partkepr sshd\[19703\]: Invalid user testuser from 128.199.224.215 port 50962 Sep 23 21:10:20 work-partkepr sshd\[19703\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.224.215 ...	2019-09-24 06:38:32
222.186.30.165	attackbotsspam	Sep 23 19:04:39 plusreed sshd[8062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.165 user=root Sep 23 19:04:41 plusreed sshd[8062]: Failed password for root from 222.186.30.165 port 47060 ssh2 ...	2019-09-24 07:05:57
119.29.98.253	attack	2019-09-23T21:42:32.557916abusebot-3.cloudsearch.cf sshd\[14989\]: Invalid user cluser from 119.29.98.253 port 42150	2019-09-24 06:46:31
194.102.35.245	attack	Sep 24 00:12:41 MK-Soft-VM5 sshd[17143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.102.35.245 Sep 24 00:12:43 MK-Soft-VM5 sshd[17143]: Failed password for invalid user ubnt from 194.102.35.245 port 49024 ssh2 ...	2019-09-24 06:59:57
81.174.227.27	attackspam	Jan 16 19:20:55 vtv3 sshd\[10520\]: Invalid user redis from 81.174.227.27 port 44166 Jan 16 19:20:55 vtv3 sshd\[10520\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.174.227.27 Jan 16 19:20:57 vtv3 sshd\[10520\]: Failed password for invalid user redis from 81.174.227.27 port 44166 ssh2 Jan 16 19:24:59 vtv3 sshd\[11352\]: Invalid user web from 81.174.227.27 port 44282 Jan 16 19:24:59 vtv3 sshd\[11352\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.174.227.27 Feb 10 05:48:29 vtv3 sshd\[17916\]: Invalid user nuxeo from 81.174.227.27 port 51410 Feb 10 05:48:29 vtv3 sshd\[17916\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.174.227.27 Feb 10 05:48:30 vtv3 sshd\[17916\]: Failed password for invalid user nuxeo from 81.174.227.27 port 51410 ssh2 Feb 10 05:53:09 vtv3 sshd\[19208\]: Invalid user timemachine from 81.174.227.27 port 41540 Feb 10 05:53:09 vtv3 sshd\[19208\]: p	2019-09-24 06:34:44
163.172.4.70	attack	firewall-block, port(s): 5060/udp	2019-09-24 06:32:00
196.52.43.61	attackbots	Automatic report - Port Scan Attack	2019-09-24 07:06:34
195.154.48.30	attack	\[2019-09-23 18:26:26\] NOTICE\[2270\] chan_sip.c: Registration from '\' failed for '195.154.48.30:64101' - Wrong password \[2019-09-23 18:26:26\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-23T18:26:26.333-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1001",SessionID="0x7fcd8c12cad8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154.48.30/64101",Challenge="1b4fecc0",ReceivedChallenge="1b4fecc0",ReceivedHash="ac856a78d83d2c1dc6f85e1831272fcc" \[2019-09-23 18:30:28\] NOTICE\[2270\] chan_sip.c: Registration from '\' failed for '195.154.48.30:51608' - Wrong password \[2019-09-23 18:30:28\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-23T18:30:28.388-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="69",SessionID="0x7fcd8c193c98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154.48.30	2019-09-24 06:33:33
5.196.67.41	attackbots	Sep 23 11:56:17 sachi sshd\[22660\]: Invalid user user from 5.196.67.41 Sep 23 11:56:17 sachi sshd\[22660\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns378499.ip-5-196-67.eu Sep 23 11:56:19 sachi sshd\[22660\]: Failed password for invalid user user from 5.196.67.41 port 33738 ssh2 Sep 23 12:00:41 sachi sshd\[23070\]: Invalid user test from 5.196.67.41 Sep 23 12:00:41 sachi sshd\[23070\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns378499.ip-5-196-67.eu	2019-09-24 06:48:13
58.150.46.6	attackspam	Sep 24 00:12:11 ArkNodeAT sshd\[12972\]: Invalid user gd from 58.150.46.6 Sep 24 00:12:11 ArkNodeAT sshd\[12972\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.150.46.6 Sep 24 00:12:13 ArkNodeAT sshd\[12972\]: Failed password for invalid user gd from 58.150.46.6 port 37598 ssh2	2019-09-24 07:06:58

最近上报的IP列表

151.70.151.195	12.72.161.11	172.245.155.243	94.25.60.161
219.141.177.114	91.221.71.77	177.128.137.255	111.229.48.141
67.33.77.115	189.234.151.139	192.200.206.81	128.128.118.92
112.251.200.96	83.111.102.64	201.108.138.174	195.206.56.10
129.207.14.249	193.28.200.137	172.1.37.205	126.176.254.254