124.235.138.203

基本信息:

城市(city): Changchun

省份(region): Jilin

国家(country): China

运营商(isp): Changchun Beijingpuruofeite Corp

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	The IP has triggered Cloudflare WAF. CF-Ray: 543793b61b9ceb1d \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.077692140 Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 04:41:55

类型

评论内容

时间

attack

The IP has triggered Cloudflare WAF. CF-Ray: 543793b61b9ceb1d | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.077692140 Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-12 04:41:55

相同子网IP讨论:

IP	类型	评论内容	时间
124.235.138.34	attackbots	user not found%3a http%3a%2f%2f123.125.114.144%2f	2020-10-12 20:36:32
124.235.138.34	attackbots	user not found%3a http%3a%2f%2f123.125.114.144%2f	2020-10-12 12:05:19
124.235.138.202	attackbotsspam	Unauthorized connection attempt detected from IP address 124.235.138.202 to port 80	2020-05-31 03:01:01
124.235.138.41	attack	Unauthorized connection attempt detected from IP address 124.235.138.41 to port 999	2020-05-30 03:39:05
124.235.138.245	attackspam	Unauthorized connection attempt detected from IP address 124.235.138.245 to port 999	2020-05-30 03:38:37
124.235.138.145	attack	Web Server Scan. RayID: 5957efee79dbeb00, UA: Mozilla/5.067805899 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36, Country: CN	2020-05-21 03:58:23
124.235.138.197	attackspam	Fail2Ban Ban Triggered	2020-03-25 15:46:09
124.235.138.94	attackspam	Unauthorized connection attempt detected from IP address 124.235.138.94 to port 8082 [J]	2020-03-02 19:58:02
124.235.138.238	attackspam	Unauthorized connection attempt detected from IP address 124.235.138.238 to port 8118 [J]	2020-03-02 19:57:36
124.235.138.55	attackspam	Unauthorized connection attempt detected from IP address 124.235.138.55 to port 8443 [J]	2020-03-02 17:10:39
124.235.138.151	attackspambots	Unauthorized connection attempt detected from IP address 124.235.138.151 to port 8081 [J]	2020-03-02 17:10:02
124.235.138.178	attackbots	Unauthorized connection attempt detected from IP address 124.235.138.178 to port 8081 [J]	2020-03-02 17:09:40
124.235.138.152	attackspam	Unauthorized connection attempt detected from IP address 124.235.138.152 to port 22 [J]	2020-03-02 16:40:18
124.235.138.171	attackspam	Unauthorized connection attempt detected from IP address 124.235.138.171 to port 22 [J]	2020-03-02 14:58:00
124.235.138.65	attack	Unauthorized connection attempt detected from IP address 124.235.138.65 to port 8123 [J]	2020-03-02 14:27:36

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.235.138.203
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51685
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;124.235.138.203.		IN	A

;; AUTHORITY SECTION:
.			522	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121101 1800 900 604800 86400

;; Query time: 96 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Dec 12 04:41:52 CST 2019
;; MSG SIZE  rcvd: 119

HOST信息:

Host 203.138.235.124.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 203.138.235.124.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
61.178.249.23	attack	Unauthorized connection attempt detected from IP address 61.178.249.23 to port 1433	2020-05-26 00:23:09
142.93.226.18	attackbots	May 25 17:46:59 h2779839 sshd[30756]: Invalid user 123julien123 from 142.93.226.18 port 38910 May 25 17:46:59 h2779839 sshd[30756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.226.18 May 25 17:46:59 h2779839 sshd[30756]: Invalid user 123julien123 from 142.93.226.18 port 38910 May 25 17:47:00 h2779839 sshd[30756]: Failed password for invalid user 123julien123 from 142.93.226.18 port 38910 ssh2 May 25 17:48:49 h2779839 sshd[30784]: Invalid user cindy0032 from 142.93.226.18 port 41746 May 25 17:48:49 h2779839 sshd[30784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.226.18 May 25 17:48:49 h2779839 sshd[30784]: Invalid user cindy0032 from 142.93.226.18 port 41746 May 25 17:48:50 h2779839 sshd[30784]: Failed password for invalid user cindy0032 from 142.93.226.18 port 41746 ssh2 May 25 17:50:37 h2779839 sshd[30822]: Invalid user 1qaz2wsxzxcv from 142.93.226.18 port 44582 ...	2020-05-26 00:11:34
223.247.140.89	attack	May 25 14:15:03 marvibiene sshd[39746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.140.89 user=root May 25 14:15:05 marvibiene sshd[39746]: Failed password for root from 223.247.140.89 port 47866 ssh2 May 25 14:25:46 marvibiene sshd[39852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.140.89 user=root May 25 14:25:48 marvibiene sshd[39852]: Failed password for root from 223.247.140.89 port 45082 ssh2 ...	2020-05-26 00:00:00
189.207.39.203	attackbots	DATE:2020-05-25 14:01:03, IP:189.207.39.203, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-05-26 00:06:13
42.117.20.158	attackbotsspam	TCP (SYN) 42.117.20.158:55984 -> port 23, len 44	2020-05-26 00:13:31
195.38.126.113	attackbots	May 25 06:05:09 php1 sshd\[7629\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.38.126.113 user=root May 25 06:05:11 php1 sshd\[7629\]: Failed password for root from 195.38.126.113 port 8203 ssh2 May 25 06:08:20 php1 sshd\[7890\]: Invalid user sammy from 195.38.126.113 May 25 06:08:20 php1 sshd\[7890\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.38.126.113 May 25 06:08:23 php1 sshd\[7890\]: Failed password for invalid user sammy from 195.38.126.113 port 16709 ssh2	2020-05-26 00:17:56
134.209.178.175	attackbots	$f2bV_matches	2020-05-25 23:50:16
112.85.42.176	attackspam	May 25 12:05:00 NPSTNNYC01T sshd[23653]: Failed password for root from 112.85.42.176 port 32556 ssh2 May 25 12:05:15 NPSTNNYC01T sshd[23653]: error: maximum authentication attempts exceeded for root from 112.85.42.176 port 32556 ssh2 [preauth] May 25 12:05:22 NPSTNNYC01T sshd[23692]: Failed password for root from 112.85.42.176 port 60135 ssh2 ...	2020-05-26 00:10:04
144.91.87.170	attack	May 25 17:10:54 raspberrypi sshd\[19300\]: Invalid user oracle from 144.91.87.170 port 51484 May 25 17:16:19 raspberrypi sshd\[20531\]: Invalid user oracle from 144.91.87.170 port 35388 May 25 17:21:38 raspberrypi sshd\[21695\]: Invalid user git from 144.91.87.170 port 47504 ...	2020-05-26 00:24:24
14.242.179.50	attack	Unauthorized connection attempt from IP address 14.242.179.50 on Port 445(SMB)	2020-05-26 00:19:24
179.191.215.148	attack	Unauthorized connection attempt from IP address 179.191.215.148 on Port 445(SMB)	2020-05-26 00:35:18
192.144.172.50	attack	May 25 07:56:03 NPSTNNYC01T sshd[23571]: Failed password for root from 192.144.172.50 port 47380 ssh2 May 25 08:00:50 NPSTNNYC01T sshd[24069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.172.50 May 25 08:00:51 NPSTNNYC01T sshd[24069]: Failed password for invalid user socks from 192.144.172.50 port 42624 ssh2 ...	2020-05-26 00:21:57
13.74.181.42	attackbots	Invalid user admin from 13.74.181.42 port 43140	2020-05-26 00:32:56
217.141.115.150	attack	Unauthorized connection attempt from IP address 217.141.115.150 on Port 445(SMB)	2020-05-26 00:33:19
164.52.1.70	attackspam	$f2bV_matches	2020-05-25 23:49:30

最近上报的IP列表

86.206.242.86	123.144.28.104	143.90.138.38	106.116.82.179
123.138.79.99	237.217.180.248	118.81.2.203	196.104.203.249
117.14.149.210	123.184.249.158	174.20.179.156	117.14.114.139
131.231.21.67	117.13.170.16	92.51.207.20	186.168.234.36
116.252.2.157	2.98.214.97	59.80.231.228	116.252.0.167