Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
123.145.30.23 attack
Unauthorized connection attempt detected from IP address 123.145.30.23 to port 123
2020-06-13 07:50:00
123.145.3.91 attack
Web Server Scan. RayID: 58f1c6f6aaad77b2, UA: Mozilla/4.047745454 Mozilla/4.0 (compatible; MSIE 5.00; Windows 98), Country: CN
2020-05-21 04:02:28
123.145.30.4 attackspambots
Unauthorized connection attempt detected from IP address 123.145.30.4 to port 8082 [J]
2020-03-02 19:58:54
123.145.32.233 attackbotsspam
Unauthorized connection attempt detected from IP address 123.145.32.233 to port 8118 [J]
2020-03-02 15:00:33
123.145.33.41 attackspambots
unauthorized connection attempt
2020-02-16 21:04:47
123.145.37.225 attackbots
Unauthorized connection attempt detected from IP address 123.145.37.225 to port 8081 [J]
2020-01-27 00:18:03
123.145.36.201 attackspam
Unauthorized connection attempt detected from IP address 123.145.36.201 to port 443 [J]
2020-01-16 08:00:20
123.145.38.177 attackspam
Unauthorized connection attempt detected from IP address 123.145.38.177 to port 8118 [T]
2020-01-10 08:20:46
123.145.34.88 attack
Unauthorized connection attempt detected from IP address 123.145.34.88 to port 8888
2020-01-04 08:58:49
123.145.30.125 attack
Unauthorized connection attempt detected from IP address 123.145.30.125 to port 8090
2020-01-01 21:56:18
123.145.33.181 attack
HTTP/80/443 Probe, BF, WP, Hack -
2019-12-26 04:17:52
123.145.39.53 attack
The IP has triggered Cloudflare WAF. CF-Ray: 5430f60b6b49e7bd | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: d.skk.moe | User-Agent: Mozilla/5.084743666 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 07:35:06
123.145.33.130 attackbots
The IP has triggered Cloudflare WAF. CF-Ray: 5433a96dbb9d77e8 | WAF_Rule_ID: 1112825 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: ip.skk.moe | User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Mobile Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 03:04:05
123.145.37.17 attackbotsspam
The IP has triggered Cloudflare WAF. CF-Ray: 54163cd0dc70eaf8 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: api.skk.moe | User-Agent: Mozilla/5.096783921 Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 05:17:26
123.145.37.197 attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 5411e7afac829629 | WAF_Rule_ID: 1112825 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: blog.skk.moe | User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Mobile Safari/537.36 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 03:32:45
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 123.145.3.47
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23800
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;123.145.3.47.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 06:54:31 CST 2022
;; MSG SIZE  rcvd: 105
Host info
Host 47.3.145.123.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 47.3.145.123.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
195.54.166.28 attack
firewall-block, port(s): 6999/tcp
2020-03-20 13:30:29
201.249.88.124 attack
Mar 20 06:00:26 nextcloud sshd\[26256\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.249.88.124  user=root
Mar 20 06:00:28 nextcloud sshd\[26256\]: Failed password for root from 201.249.88.124 port 44737 ssh2
Mar 20 06:08:09 nextcloud sshd\[1728\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.249.88.124  user=root
2020-03-20 13:21:48
117.201.129.92 attackspam
Lines containing failures of 117.201.129.92
Mar 20 04:49:08 shared09 sshd[14821]: Invalid user pi from 117.201.129.92 port 51153
Mar 20 04:49:08 shared09 sshd[14821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.201.129.92
Mar 20 04:49:10 shared09 sshd[14821]: Failed password for invalid user pi from 117.201.129.92 port 51153 ssh2
Mar 20 04:49:11 shared09 sshd[14821]: Connection closed by invalid user pi 117.201.129.92 port 51153 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=117.201.129.92
2020-03-20 13:00:33
178.92.120.251 attack
[portscan] Port scan
2020-03-20 12:50:01
167.71.115.245 attackspambots
SSH login attempts.
2020-03-20 13:20:58
45.143.220.163 attack
45.143.220.163 was recorded 9 times by 9 hosts attempting to connect to the following ports: 5072,5071. Incident counter (4h, 24h, all-time): 9, 52, 492
2020-03-20 13:24:53
5.188.86.206 attack
SSH login attempts.
2020-03-20 13:20:23
191.54.84.18 attackbotsspam
" "
2020-03-20 13:06:19
101.251.193.10 attackspam
SSH login attempts.
2020-03-20 13:31:42
178.128.247.181 attackspambots
2020-03-20T05:50:56.150005scmdmz1 sshd[19140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.247.181
2020-03-20T05:50:56.147205scmdmz1 sshd[19140]: Invalid user gitlab-prometheus from 178.128.247.181 port 37118
2020-03-20T05:50:58.197739scmdmz1 sshd[19140]: Failed password for invalid user gitlab-prometheus from 178.128.247.181 port 37118 ssh2
...
2020-03-20 13:07:24
5.188.86.216 attackspambots
SSH login attempts.
2020-03-20 13:19:59
185.37.209.49 attackspambots
Mar 20 03:04:55 XXXXXX sshd[56233]: Invalid user poke from 185.37.209.49 port 54761
2020-03-20 12:49:42
185.147.215.12 attackspambots
[2020-03-20 00:42:04] NOTICE[1148] chan_sip.c: Registration from '' failed for '185.147.215.12:53535' - Wrong password
[2020-03-20 00:42:04] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-03-20T00:42:04.501-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5256",SessionID="0x7fd82c40aa58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.12/53535",Challenge="568779e9",ReceivedChallenge="568779e9",ReceivedHash="737941450d4dddfe0f0812bf70271444"
[2020-03-20 00:42:30] NOTICE[1148] chan_sip.c: Registration from '' failed for '185.147.215.12:49473' - Wrong password
[2020-03-20 00:42:30] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-03-20T00:42:30.830-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="682",SessionID="0x7fd82c530768",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.
...
2020-03-20 12:52:11
118.89.62.112 attack
2020-03-20T04:50:53.045102v22018076590370373 sshd[14180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.62.112
2020-03-20T04:50:53.039231v22018076590370373 sshd[14180]: Invalid user minecraft from 118.89.62.112 port 40892
2020-03-20T04:50:54.797018v22018076590370373 sshd[14180]: Failed password for invalid user minecraft from 118.89.62.112 port 40892 ssh2
2020-03-20T04:59:34.872517v22018076590370373 sshd[2116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.62.112  user=root
2020-03-20T04:59:36.148028v22018076590370373 sshd[2116]: Failed password for root from 118.89.62.112 port 50692 ssh2
...
2020-03-20 13:24:30
113.25.208.97 attack
SSH login attempts.
2020-03-20 13:36:38

Recently Reported IPs

123.145.28.210 123.145.28.66 123.145.31.69 123.145.32.238
123.145.35.101 123.145.25.50 123.145.35.128 123.145.5.176
123.145.4.15 123.145.8.31 123.145.9.181 123.146.237.10
123.146.200.106 123.145.5.203 123.149.134.162 123.149.150.153
123.149.56.36 123.149.76.230 123.149.78.161 123.149.84.8