123.145.1.42 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
123.145.14.18	attackspam	Unauthorized connection attempt detected from IP address 123.145.14.18 to port 21	2020-05-31 03:37:45
123.145.107.63	attack	Invalid user postgres from 123.145.107.63 port 57537	2020-05-13 20:08:40
123.145.10.114	attackbotsspam	20 attempts against mh-ssh on field	2020-05-05 08:50:25
123.145.113.199	attackbots	Mar 27 04:53:07 [host] sshd[32010]: Invalid user k Mar 27 04:53:07 [host] sshd[32010]: pam_unix(sshd: Mar 27 04:53:10 [host] sshd[32010]: Failed passwor	2020-03-27 13:55:06
123.145.18.10	attackbots	123.145.18.10 - - \[27/Feb/2020:16:27:08 +0200\] "CONNECT www.baidu.com:443 HTTP/1.1" 403 202 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"	2020-02-27 23:17:54
123.145.11.89	attackbots	Unauthorized connection attempt detected from IP address 123.145.11.89 to port 8888 [J]	2020-01-29 10:03:12
123.145.17.240	attackbots	Unauthorized connection attempt detected from IP address 123.145.17.240 to port 81 [T]	2020-01-22 07:44:51
123.145.19.183	attackspam	Unauthorized connection attempt detected from IP address 123.145.19.183 to port 9999 [T]	2020-01-10 09:18:30
123.145.17.197	attack	Unauthorized connection attempt detected from IP address 123.145.17.197 to port 8090	2020-01-01 21:26:29
123.145.18.8	attackspam	Unauthorized connection attempt detected from IP address 123.145.18.8 to port 995	2020-01-01 19:02:52
123.145.14.230	attack	Unauthorized connection attempt detected from IP address 123.145.14.230 to port 8080	2019-12-29 17:11:26
123.145.11.119	attack	The IP has triggered Cloudflare WAF. CF-Ray: 543263d3f950d38e \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: api.skk.moe \| User-Agent: Mozilla/5.096783921 Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 06:44:26
123.145.11.238	attack	The IP has triggered Cloudflare WAF. CF-Ray: 54311a6a881dd35e \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: api.skk.moe \| User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 05:39:19
123.145.12.196	attack	The IP has triggered Cloudflare WAF. CF-Ray: 54160d140d7fed33 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: blog.skk.moe \| User-Agent: Mozilla/5.064213590 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 07:09:06
123.145.12.212	attack	The IP has triggered Cloudflare WAF. CF-Ray: 541104d0ae0c5120 \| WAF_Rule_ID: 1025440 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: theme-suka.skk.moe \| User-Agent: Mozilla/5.0 (iPad; CPU OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1 \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:40:31

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 123.145.1.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34211
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;123.145.1.42.			IN	A

;; AUTHORITY SECTION:
.			197	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030901 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 10 05:50:23 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 42.1.145.123.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 42.1.145.123.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
148.70.242.53	attack	fail2ban honeypot	2020-01-14 06:19:04
114.32.73.197	attackbots	firewall-block, port(s): 81/tcp	2020-01-14 05:55:38
190.0.24.230	attackspambots	Unauthorized connection attempt detected from IP address 190.0.24.230 to port 2220 [J]	2020-01-14 05:55:00
191.115.40.69	attack	Automatic report - Port Scan Attack	2020-01-14 06:13:43
49.234.223.253	attack	Jan 13 16:11:55 vzhost sshd[18149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.223.253 user=nagios Jan 13 16:11:57 vzhost sshd[18149]: Failed password for nagios from 49.234.223.253 port 49336 ssh2 Jan 13 16:19:06 vzhost sshd[19544]: Invalid user dinamic from 49.234.223.253 Jan 13 16:19:06 vzhost sshd[19544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.223.253 Jan 13 16:19:08 vzhost sshd[19544]: Failed password for invalid user dinamic from 49.234.223.253 port 33522 ssh2 Jan 13 16:23:46 vzhost sshd[20472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.223.253 user=r.r Jan 13 16:23:47 vzhost sshd[20472]: Failed password for r.r from 49.234.223.253 port 60382 ssh2 Jan 13 16:28:24 vzhost sshd[21339]: Invalid user XXX from 49.234.223.253 Jan 13 16:28:24 vzhost sshd[21339]: pam_unix(sshd:auth): authentication failure; logn........ -------------------------------	2020-01-14 06:10:48
192.200.206.81	attackbots	Jan 13 22:25:43 grey postfix/smtpd\[22750\]: NOQUEUE: reject: RCPT from unknown\[192.200.206.81\]: 554 5.7.1 Service unavailable\; Client host \[192.200.206.81\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[192.200.206.81\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-01-14 05:39:57
62.158.50.185	attackbotsspam	Unauthorized connection attempt detected from IP address 62.158.50.185 to port 81 [J]	2020-01-14 05:46:40
66.60.143.245	attackbots	$f2bV_matches	2020-01-14 06:20:08
1.179.185.50	attackspam	Unauthorized connection attempt detected from IP address 1.179.185.50 to port 2220 [J]	2020-01-14 06:01:49
51.68.176.49	attackspam	2020-01-13T16:06:58.3487571495-001 sshd[16422]: Invalid user movies from 51.68.176.49 port 35968 2020-01-13T16:06:58.3670401495-001 sshd[16422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip49.ip-51-68-176.eu 2020-01-13T16:06:58.3487571495-001 sshd[16422]: Invalid user movies from 51.68.176.49 port 35968 2020-01-13T16:07:00.3216871495-001 sshd[16422]: Failed password for invalid user movies from 51.68.176.49 port 35968 ssh2 2020-01-13T16:09:42.4347511495-001 sshd[16558]: Invalid user tomek from 51.68.176.49 port 49817 2020-01-13T16:09:42.4380491495-001 sshd[16558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip49.ip-51-68-176.eu 2020-01-13T16:09:42.4347511495-001 sshd[16558]: Invalid user tomek from 51.68.176.49 port 49817 2020-01-13T16:09:44.4609221495-001 sshd[16558]: Failed password for invalid user tomek from 51.68.176.49 port 49817 ssh2 2020-01-13T16:12:25.5572791495-001 sshd[16639]: Invalid u ...	2020-01-14 06:08:05
49.234.87.24	attackbots	Jan 13 16:48:57 ny01 sshd[7562]: Failed password for root from 49.234.87.24 port 36306 ssh2 Jan 13 16:51:29 ny01 sshd[7834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.87.24 Jan 13 16:51:31 ny01 sshd[7834]: Failed password for invalid user ym from 49.234.87.24 port 60590 ssh2	2020-01-14 06:00:56
188.19.246.218	attackbots	WebFormToEmail Comment SPAM	2020-01-14 06:18:49
148.76.108.146	attackspambots	Unauthorized connection attempt detected from IP address 148.76.108.146 to port 2220 [J]	2020-01-14 05:42:42
222.186.30.35	attackspambots	Jan 13 22:50:27 vpn01 sshd[4401]: Failed password for root from 222.186.30.35 port 34017 ssh2 Jan 13 22:50:29 vpn01 sshd[4401]: Failed password for root from 222.186.30.35 port 34017 ssh2 ...	2020-01-14 05:53:02
222.186.175.202	attack	SSH Brute-Force attacks	2020-01-14 06:15:31

Recently Reported IPs

123.145.1.27	123.145.1.69	123.145.1.70	123.145.1.81
123.145.1.86	123.145.10.118	123.145.10.121	123.145.10.166
123.145.10.21	123.145.10.224	123.145.10.251	123.145.10.252
123.145.10.69	123.145.10.79	123.145.107.121	123.145.11.134
123.145.11.135	123.145.11.147	123.145.11.150	123.145.11.151