223.42.159.48 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): South Korea

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 223.42.159.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32863
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;223.42.159.48.			IN	A

;; AUTHORITY SECTION:
.			184	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023012200 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 22 23:26:36 CST 2023
;; MSG SIZE  rcvd: 106

HOST信息:

Host 48.159.42.223.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 48.159.42.223.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
185.53.88.36	attackspambots	[2020-04-08 14:32:53] NOTICE[12114][C-00002ee6] chan_sip.c: Call from '' (185.53.88.36:52924) to extension '011441482455983' rejected because extension not found in context 'public'. [2020-04-08 14:32:53] SECURITY[12128] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-08T14:32:53.813-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441482455983",SessionID="0x7f020c04b958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.36/52924",ACLName="no_extension_match" [2020-04-08 14:33:10] NOTICE[12114][C-00002ee7] chan_sip.c: Call from '' (185.53.88.36:57263) to extension '9011441482455983' rejected because extension not found in context 'public'. [2020-04-08 14:33:10] SECURITY[12128] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-08T14:33:10.908-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011441482455983",SessionID="0x7f020c088288",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/U ...	2020-04-09 02:45:13
185.67.0.251	attack	sends spam email (euro-hold.com: 185.67.0.251 is authorized to use 'office@euro-hold.com' in 'mfrom' identity (mechanism 'mx' matched))	2020-04-09 02:50:38
162.243.129.130	attackbots	512/tcp 465/tcp 1433/tcp... [2020-02-09/04-08]25pkt,23pt.(tcp),1pt.(udp)	2020-04-09 03:11:45
192.241.238.12	attackspambots	4840/tcp 28015/tcp 389/tcp... [2020-03-14/04-08]22pkt,20pt.(tcp)	2020-04-09 03:13:23
113.21.125.226	attack	(imapd) Failed IMAP login from 113.21.125.226 (NC/New Caledonia/host-113-21-125-226.canl.nc): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 8 20:57:04 ir1 dovecot[566034]: imap-login: Disconnected (auth failed, 1 attempts in 7 secs): user=, method=PLAIN, rip=113.21.125.226, lip=5.63.12.44, session=	2020-04-09 02:47:09
144.217.7.75	attackspambots	Apr 8 20:25:48 nextcloud sshd\[30301\]: Invalid user cleo from 144.217.7.75 Apr 8 20:25:48 nextcloud sshd\[30301\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.7.75 Apr 8 20:25:50 nextcloud sshd\[30301\]: Failed password for invalid user cleo from 144.217.7.75 port 48120 ssh2	2020-04-09 02:51:32
177.222.178.58	attack	" "	2020-04-09 02:56:40
141.98.9.160	attack	Apr 8 19:16:14 debian64 sshd[22649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.160 Apr 8 19:16:16 debian64 sshd[22649]: Failed password for invalid user admin from 141.98.9.160 port 36087 ssh2 ...	2020-04-09 02:40:13
186.216.224.11	attack	prod11 ...	2020-04-09 02:44:40
13.125.239.73	attack	Lines containing failures of 13.125.239.73 Apr 8 08:44:46 neweola sshd[4751]: Invalid user tech from 13.125.239.73 port 44886 Apr 8 08:44:46 neweola sshd[4751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.125.239.73 Apr 8 08:44:49 neweola sshd[4751]: Failed password for invalid user tech from 13.125.239.73 port 44886 ssh2 Apr 8 08:44:50 neweola sshd[4751]: Received disconnect from 13.125.239.73 port 44886:11: Bye Bye [preauth] Apr 8 08:44:50 neweola sshd[4751]: Disconnected from invalid user tech 13.125.239.73 port 44886 [preauth] Apr 8 08:57:21 neweola sshd[5103]: Invalid user prod from 13.125.239.73 port 42034 Apr 8 08:57:21 neweola sshd[5103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.125.239.73 Apr 8 08:57:23 neweola sshd[5103]: Failed password for invalid user prod from 13.125.239.73 port 42034 ssh2 Apr 8 08:57:25 neweola sshd[5103]: Received disconnect from 13........ ------------------------------	2020-04-09 02:57:24
192.241.238.205	attack	" "	2020-04-09 03:01:11
163.61.67.73	attackbotsspam	report	2020-04-09 02:42:38
157.230.190.1	attackbots	Apr 8 19:39:27 v22018086721571380 sshd[23508]: Failed password for invalid user vbox from 157.230.190.1 port 41598 ssh2	2020-04-09 02:54:25
192.169.232.246	attack	Malicious Scanning of Webserver @ 2020-04-08 14:07:43	2020-04-09 02:46:04
5.188.206.18	attackspam	20/4/8@14:35:24: FAIL: Alarm-Webmin address from=5.188.206.18 ...	2020-04-09 02:49:34

最近上报的IP列表

215.208.194.165	213.140.72.49	212.10.231.110	210.175.170.142
207.175.163.73	204.167.254.139	204.129.179.227	205.25.42.211
200.133.226.211	198.250.205.190	198.3.52.186	195.138.184.90
191.68.154.4	107.173.13.132	186.250.132.247	186.70.52.176
18.147.114.89	176.221.204.118	172.38.101.18	17.67.21.0