45.143.221.103

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): Zumy Communications

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	[2020-10-13 15:19:26] NOTICE[1182] chan_sip.c: Registration from '"301" ' failed for '45.143.221.103:5683' - Wrong password [2020-10-13 15:19:26] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-13T15:19:26.829-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="301",SessionID="0x7f22f80ac0a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.103/5683",Challenge="7a628e30",ReceivedChallenge="7a628e30",ReceivedHash="0119f7e30ee57384234432f30b70c098" [2020-10-13 15:19:26] NOTICE[1182] chan_sip.c: Registration from '"301" ' failed for '45.143.221.103:5683' - Wrong password [2020-10-13 15:19:26] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-13T15:19:26.966-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="301",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.14 ...	2020-10-14 03:40:29
attack	[2020-10-13 06:46:57] NOTICE[1182] chan_sip.c: Registration from '"3333" ' failed for '45.143.221.103:5645' - Wrong password [2020-10-13 06:46:57] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-13T06:46:57.038-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3333",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.103/5645",Challenge="3439c4fc",ReceivedChallenge="3439c4fc",ReceivedHash="3062dbecaf2621780fa5e34eb195d058" [2020-10-13 06:46:57] NOTICE[1182] chan_sip.c: Registration from '"3333" ' failed for '45.143.221.103:5645' - Wrong password [2020-10-13 06:46:57] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-13T06:46:57.188-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3333",SessionID="0x7f22f83b6678",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-10-13 18:59:45
attackspambots	[2020-10-11 02:15:56] NOTICE[1182] chan_sip.c: Registration from '"654321" ' failed for '45.143.221.103:5703' - Wrong password [2020-10-11 02:15:56] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T02:15:56.179-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="654321",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.103/5703",Challenge="2fa01f1f",ReceivedChallenge="2fa01f1f",ReceivedHash="b9e3f4d835296970b0072df2ccd108c6" [2020-10-11 02:15:56] NOTICE[1182] chan_sip.c: Registration from '"654321" ' failed for '45.143.221.103:5703' - Wrong password [2020-10-11 02:15:56] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T02:15:56.319-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="654321",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddre ...	2020-10-11 16:54:32
attackbots	[2020-10-10 21:56:50] NOTICE[1182] chan_sip.c: Registration from '"8000" ' failed for '45.143.221.103:5595' - Wrong password [2020-10-10 21:56:50] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-10T21:56:50.946-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8000",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.103/5595",Challenge="3a378ee5",ReceivedChallenge="3a378ee5",ReceivedHash="3d041a32cb8c63031a074ccf9aa093e3" [2020-10-10 21:56:51] NOTICE[1182] chan_sip.c: Registration from '"8000" ' failed for '45.143.221.103:5595' - Wrong password [2020-10-10 21:56:51] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-10T21:56:51.087-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8000",SessionID="0x7f22f80f48e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-10-11 10:14:24
attack	[2020-09-26 14:32:35] NOTICE[1159] chan_sip.c: Registration from '"200" ' failed for '45.143.221.103:5689' - Wrong password [2020-09-26 14:32:35] SECURITY[1198] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-26T14:32:35.078-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="200",SessionID="0x7fcaa0022038",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.103/5689",Challenge="5aabba72",ReceivedChallenge="5aabba72",ReceivedHash="a1a054feb11941549d9f46ba3aed5e4c" [2020-09-26 14:32:35] NOTICE[1159] chan_sip.c: Registration from '"200" ' failed for '45.143.221.103:5689' - Wrong password [2020-09-26 14:32:35] SECURITY[1198] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-26T14:32:35.238-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="200",SessionID="0x7fcaa047d038",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.14 ...	2020-09-27 02:48:15
attackspambots	SIPVicious Scanner Detection	2020-09-26 18:45:04

相同子网IP讨论:

IP	类型	评论内容	时间
45.143.221.110	attack	Automatic report - Banned IP Access	2020-10-13 14:19:12
45.143.221.110	attack	[2020-10-12 16:53:29] NOTICE[1182] chan_sip.c: Registration from '"101" ' failed for '45.143.221.110:5615' - Wrong password [2020-10-12 16:53:29] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-12T16:53:29.550-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="101",SessionID="0x7f22f8572958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.110/5615",Challenge="0ad9c2aa",ReceivedChallenge="0ad9c2aa",ReceivedHash="886a00a66a8cbf6f214248f22ce3a6c8" [2020-10-12 16:53:29] NOTICE[1182] chan_sip.c: Registration from '"101" ' failed for '45.143.221.110:5615' - Wrong password [2020-10-12 16:53:29] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-12T16:53:29.962-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="101",SessionID="0x7f22f8418138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.14 ...	2020-10-13 07:01:19
45.143.221.110	attack	[2020-10-11 16:12:54] NOTICE[1182] chan_sip.c: Registration from '"3000" ' failed for '45.143.221.110:5288' - Wrong password [2020-10-11 16:12:54] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T16:12:54.204-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3000",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.110/5288",Challenge="526e051c",ReceivedChallenge="526e051c",ReceivedHash="7428017ede0270c83e0c7304a25a34ab" [2020-10-11 16:12:54] NOTICE[1182] chan_sip.c: Registration from '"3000" ' failed for '45.143.221.110:5288' - Wrong password [2020-10-11 16:12:54] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T16:12:54.355-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3000",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-10-12 05:24:32
45.143.221.101	attackbotsspam	TCP port : 5060	2020-10-12 04:08:31
45.143.221.96	attackbots	[2020-10-11 12:22:47] NOTICE[1182][C-00002dff] chan_sip.c: Call from '' (45.143.221.96:5071) to extension '972595778361' rejected because extension not found in context 'public'. [2020-10-11 12:22:47] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-11T12:22:47.182-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="972595778361",SessionID="0x7f22f8418138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.96/5071",ACLName="no_extension_match" [2020-10-11 12:31:40] NOTICE[1182][C-00002e08] chan_sip.c: Call from '' (45.143.221.96:5080) to extension '011972595778361' rejected because extension not found in context 'public'. [2020-10-11 12:31:40] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-11T12:31:40.743-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011972595778361",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.22 ...	2020-10-12 03:33:11
45.143.221.90	attackspam	ET CINS Active Threat Intelligence Poor Reputation IP group 28 - port: 5070 proto: udp cat: Misc Attackbytes: 454	2020-10-12 00:44:43
45.143.221.41	attack	[2020-10-11 12:04:24] NOTICE[1182] chan_sip.c: Registration from '"9900" ' failed for '45.143.221.41:7384' - Wrong password [2020-10-11 12:04:24] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T12:04:24.226-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9900",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.41/7384",Challenge="680a328f",ReceivedChallenge="680a328f",ReceivedHash="1e6e62d2c5d20e0f03dc77bd5f78bb79" [2020-10-11 12:04:24] NOTICE[1182] chan_sip.c: Registration from '"9900" ' failed for '45.143.221.41:7384' - Wrong password [2020-10-11 12:04:24] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T12:04:24.402-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9900",SessionID="0x7f22f83b6678",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45 ...	2020-10-12 00:24:20
45.143.221.110	attack	[2020-10-11 08:58:48] NOTICE[1182] chan_sip.c: Registration from '"3071" ' failed for '45.143.221.110:5956' - Wrong password [2020-10-11 08:58:48] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T08:58:48.652-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3071",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.110/5956",Challenge="2bf8793a",ReceivedChallenge="2bf8793a",ReceivedHash="b66b2e9d962113daef388dc0c0e3980a" [2020-10-11 08:58:48] NOTICE[1182] chan_sip.c: Registration from '"3071" ' failed for '45.143.221.110:5956' - Wrong password [2020-10-11 08:58:48] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T08:58:48.770-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3071",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-10-11 21:30:44
45.143.221.101	attackspam	TCP port : 5060	2020-10-11 20:07:10
45.143.221.96	attackspam	[2020-10-11 05:57:59] NOTICE[1182][C-00002cca] chan_sip.c: Call from '' (45.143.221.96:5071) to extension '972595778361' rejected because extension not found in context 'public'. [2020-10-11 05:57:59] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-11T05:57:59.878-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="972595778361",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.96/5071",ACLName="no_extension_match" [2020-10-11 05:59:57] NOTICE[1182][C-00002ccf] chan_sip.c: Call from '' (45.143.221.96:5070) to extension '011972595778361' rejected because extension not found in context 'public'. [2020-10-11 05:59:57] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-11T05:59:57.598-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011972595778361",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.22 ...	2020-10-11 19:27:33
45.143.221.90	attackbotsspam	ET CINS Active Threat Intelligence Poor Reputation IP group 28 - port: 5070 proto: udp cat: Misc Attackbytes: 456	2020-10-11 16:40:40
45.143.221.41	attackspam	[2020-10-11 03:27:05] NOTICE[1182] chan_sip.c: Registration from '"1004" ' failed for '45.143.221.41:5938' - Wrong password [2020-10-11 03:27:05] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T03:27:05.440-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1004",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.41/5938",Challenge="304b0393",ReceivedChallenge="304b0393",ReceivedHash="8b3a810e211de8db8067cab412f11f68" [2020-10-11 03:27:05] NOTICE[1182] chan_sip.c: Registration from '"1004" ' failed for '45.143.221.41:5938' - Wrong password [2020-10-11 03:27:05] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T03:27:05.679-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1004",SessionID="0x7f22f83116b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45 ...	2020-10-11 16:22:00
45.143.221.110	attackbotsspam	Port scan denied	2020-10-11 13:27:40
45.143.221.101	attackspam	Scanned 1 times in the last 24 hours on port 80	2020-10-11 12:06:13
45.143.221.90	attackspam	ET CINS Active Threat Intelligence Poor Reputation IP group 28 - port: 5070 proto: udp cat: Misc Attackbytes: 456	2020-10-11 09:59:37

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.143.221.103
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26463
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.143.221.103.			IN	A

;; AUTHORITY SECTION:
.			334	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020092600 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Sep 26 18:45:00 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 103.221.143.45.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 103.221.143.45.in-addr.arpa: NXDOMAIN

IP	类型	评论内容	时间
92.169.67.98	attack	php vulnerability probing	2020-07-13 15:13:51
42.236.10.74	attackspambots	Automatic report - Banned IP Access	2020-07-13 14:46:16
106.54.200.209	attack	Invalid user mati from 106.54.200.209 port 52410	2020-07-13 15:05:24
106.12.47.108	attackbotsspam	2020-07-13T05:05:39.184355shield sshd\[21380\]: Invalid user vnc from 106.12.47.108 port 51484 2020-07-13T05:05:39.191330shield sshd\[21380\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.47.108 2020-07-13T05:05:41.539830shield sshd\[21380\]: Failed password for invalid user vnc from 106.12.47.108 port 51484 ssh2 2020-07-13T05:10:35.900316shield sshd\[22888\]: Invalid user viraj from 106.12.47.108 port 51792 2020-07-13T05:10:35.911459shield sshd\[22888\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.47.108	2020-07-13 15:15:43
198.20.99.130	attackbotsspam	Port scanning [2 denied]	2020-07-13 14:55:35
23.129.64.180	attack	Unauthorized connection attempt detected from IP address 23.129.64.180 to port 5984	2020-07-13 15:11:51
142.44.161.132	attackspam	$f2bV_matches	2020-07-13 15:05:11
177.73.136.228	attackspam	Jul 13 02:25:09 george sshd[28991]: Failed password for invalid user mf from 177.73.136.228 port 57328 ssh2 Jul 13 02:28:51 george sshd[30345]: Invalid user postgres from 177.73.136.228 port 53366 Jul 13 02:28:51 george sshd[30345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.73.136.228 Jul 13 02:28:53 george sshd[30345]: Failed password for invalid user postgres from 177.73.136.228 port 53366 ssh2 Jul 13 02:32:25 george sshd[30445]: Invalid user guest from 177.73.136.228 port 49402 ...	2020-07-13 15:12:38
176.122.166.102	attackspam	Failed password for invalid user news from 176.122.166.102 port 47474 ssh2	2020-07-13 15:07:31
162.243.129.121	attackbotsspam	Port scan denied	2020-07-13 14:56:54
170.210.121.208	attackspambots	Jul 13 08:08:24 OPSO sshd\[916\]: Invalid user james from 170.210.121.208 port 36425 Jul 13 08:08:24 OPSO sshd\[916\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.210.121.208 Jul 13 08:08:26 OPSO sshd\[916\]: Failed password for invalid user james from 170.210.121.208 port 36425 ssh2 Jul 13 08:10:23 OPSO sshd\[1372\]: Invalid user build from 170.210.121.208 port 49311 Jul 13 08:10:23 OPSO sshd\[1372\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.210.121.208	2020-07-13 15:07:54
185.39.11.32	attackspambots	TCP (SYN) 185.39.11.32:50329 -> port 38097, len 44	2020-07-13 14:53:23
42.200.206.225	attackbotsspam	Jul 12 20:51:17 web9 sshd\[31316\]: Invalid user zee from 42.200.206.225 Jul 12 20:51:17 web9 sshd\[31316\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.200.206.225 Jul 12 20:51:19 web9 sshd\[31316\]: Failed password for invalid user zee from 42.200.206.225 port 49454 ssh2 Jul 12 20:57:21 web9 sshd\[32081\]: Invalid user sinus from 42.200.206.225 Jul 12 20:57:21 web9 sshd\[32081\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.200.206.225	2020-07-13 15:06:28
192.35.169.42	attack	Port scan denied	2020-07-13 15:03:24
118.24.122.36	attack	bruteforce detected	2020-07-13 15:10:17

最近上报的IP列表

27.154.66.175	125.72.106.61	104.237.133.145	109.167.224.54
3.236.64.92	187.58.41.30	78.189.129.186	103.138.37.143
87.212.126.197	5.15.114.149	59.166.23.182	196.219.37.51
170.210.123.24	8.115.201.39	235.171.101.3	178.255.75.62
33.38.41.74	253.207.56.71	92.175.13.10	75.20.133.159