45.143.221.16 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): Zumy Communications

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	ET SCAN Sipvicious Scan - port: 5060 proto: UDP cat: Attempted Information Leak	2019-11-14 19:00:48
attackspam	11/04/2019-17:41:58.926568 45.143.221.16 Protocol: 17 ET SCAN Sipvicious Scan	2019-11-05 06:46:45
attackbotsspam	" "	2019-11-03 20:01:05

相同子网IP讨论:

IP	类型	评论内容	时间
45.143.221.103	attack	[2020-10-13 15:19:26] NOTICE[1182] chan_sip.c: Registration from '"301" ' failed for '45.143.221.103:5683' - Wrong password [2020-10-13 15:19:26] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-13T15:19:26.829-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="301",SessionID="0x7f22f80ac0a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.103/5683",Challenge="7a628e30",ReceivedChallenge="7a628e30",ReceivedHash="0119f7e30ee57384234432f30b70c098" [2020-10-13 15:19:26] NOTICE[1182] chan_sip.c: Registration from '"301" ' failed for '45.143.221.103:5683' - Wrong password [2020-10-13 15:19:26] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-13T15:19:26.966-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="301",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.14 ...	2020-10-14 03:40:29
45.143.221.103	attack	[2020-10-13 06:46:57] NOTICE[1182] chan_sip.c: Registration from '"3333" ' failed for '45.143.221.103:5645' - Wrong password [2020-10-13 06:46:57] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-13T06:46:57.038-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3333",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.103/5645",Challenge="3439c4fc",ReceivedChallenge="3439c4fc",ReceivedHash="3062dbecaf2621780fa5e34eb195d058" [2020-10-13 06:46:57] NOTICE[1182] chan_sip.c: Registration from '"3333" ' failed for '45.143.221.103:5645' - Wrong password [2020-10-13 06:46:57] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-13T06:46:57.188-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3333",SessionID="0x7f22f83b6678",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-10-13 18:59:45
45.143.221.110	attack	Automatic report - Banned IP Access	2020-10-13 14:19:12
45.143.221.110	attack	[2020-10-12 16:53:29] NOTICE[1182] chan_sip.c: Registration from '"101" ' failed for '45.143.221.110:5615' - Wrong password [2020-10-12 16:53:29] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-12T16:53:29.550-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="101",SessionID="0x7f22f8572958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.110/5615",Challenge="0ad9c2aa",ReceivedChallenge="0ad9c2aa",ReceivedHash="886a00a66a8cbf6f214248f22ce3a6c8" [2020-10-12 16:53:29] NOTICE[1182] chan_sip.c: Registration from '"101" ' failed for '45.143.221.110:5615' - Wrong password [2020-10-12 16:53:29] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-12T16:53:29.962-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="101",SessionID="0x7f22f8418138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.14 ...	2020-10-13 07:01:19
45.143.221.110	attack	[2020-10-11 16:12:54] NOTICE[1182] chan_sip.c: Registration from '"3000" ' failed for '45.143.221.110:5288' - Wrong password [2020-10-11 16:12:54] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T16:12:54.204-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3000",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.110/5288",Challenge="526e051c",ReceivedChallenge="526e051c",ReceivedHash="7428017ede0270c83e0c7304a25a34ab" [2020-10-11 16:12:54] NOTICE[1182] chan_sip.c: Registration from '"3000" ' failed for '45.143.221.110:5288' - Wrong password [2020-10-11 16:12:54] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T16:12:54.355-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3000",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-10-12 05:24:32
45.143.221.101	attackbotsspam	TCP port : 5060	2020-10-12 04:08:31
45.143.221.96	attackbots	[2020-10-11 12:22:47] NOTICE[1182][C-00002dff] chan_sip.c: Call from '' (45.143.221.96:5071) to extension '972595778361' rejected because extension not found in context 'public'. [2020-10-11 12:22:47] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-11T12:22:47.182-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="972595778361",SessionID="0x7f22f8418138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.96/5071",ACLName="no_extension_match" [2020-10-11 12:31:40] NOTICE[1182][C-00002e08] chan_sip.c: Call from '' (45.143.221.96:5080) to extension '011972595778361' rejected because extension not found in context 'public'. [2020-10-11 12:31:40] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-11T12:31:40.743-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011972595778361",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.22 ...	2020-10-12 03:33:11
45.143.221.90	attackspam	ET CINS Active Threat Intelligence Poor Reputation IP group 28 - port: 5070 proto: udp cat: Misc Attackbytes: 454	2020-10-12 00:44:43
45.143.221.41	attack	[2020-10-11 12:04:24] NOTICE[1182] chan_sip.c: Registration from '"9900" ' failed for '45.143.221.41:7384' - Wrong password [2020-10-11 12:04:24] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T12:04:24.226-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9900",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.41/7384",Challenge="680a328f",ReceivedChallenge="680a328f",ReceivedHash="1e6e62d2c5d20e0f03dc77bd5f78bb79" [2020-10-11 12:04:24] NOTICE[1182] chan_sip.c: Registration from '"9900" ' failed for '45.143.221.41:7384' - Wrong password [2020-10-11 12:04:24] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T12:04:24.402-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9900",SessionID="0x7f22f83b6678",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45 ...	2020-10-12 00:24:20
45.143.221.110	attack	[2020-10-11 08:58:48] NOTICE[1182] chan_sip.c: Registration from '"3071" ' failed for '45.143.221.110:5956' - Wrong password [2020-10-11 08:58:48] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T08:58:48.652-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3071",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.110/5956",Challenge="2bf8793a",ReceivedChallenge="2bf8793a",ReceivedHash="b66b2e9d962113daef388dc0c0e3980a" [2020-10-11 08:58:48] NOTICE[1182] chan_sip.c: Registration from '"3071" ' failed for '45.143.221.110:5956' - Wrong password [2020-10-11 08:58:48] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T08:58:48.770-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3071",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-10-11 21:30:44
45.143.221.101	attackspam	TCP port : 5060	2020-10-11 20:07:10
45.143.221.96	attackspam	[2020-10-11 05:57:59] NOTICE[1182][C-00002cca] chan_sip.c: Call from '' (45.143.221.96:5071) to extension '972595778361' rejected because extension not found in context 'public'. [2020-10-11 05:57:59] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-11T05:57:59.878-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="972595778361",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.96/5071",ACLName="no_extension_match" [2020-10-11 05:59:57] NOTICE[1182][C-00002ccf] chan_sip.c: Call from '' (45.143.221.96:5070) to extension '011972595778361' rejected because extension not found in context 'public'. [2020-10-11 05:59:57] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-11T05:59:57.598-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011972595778361",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.22 ...	2020-10-11 19:27:33
45.143.221.103	attackspambots	[2020-10-11 02:15:56] NOTICE[1182] chan_sip.c: Registration from '"654321" ' failed for '45.143.221.103:5703' - Wrong password [2020-10-11 02:15:56] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T02:15:56.179-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="654321",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.103/5703",Challenge="2fa01f1f",ReceivedChallenge="2fa01f1f",ReceivedHash="b9e3f4d835296970b0072df2ccd108c6" [2020-10-11 02:15:56] NOTICE[1182] chan_sip.c: Registration from '"654321" ' failed for '45.143.221.103:5703' - Wrong password [2020-10-11 02:15:56] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T02:15:56.319-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="654321",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddre ...	2020-10-11 16:54:32
45.143.221.90	attackbotsspam	ET CINS Active Threat Intelligence Poor Reputation IP group 28 - port: 5070 proto: udp cat: Misc Attackbytes: 456	2020-10-11 16:40:40
45.143.221.41	attackspam	[2020-10-11 03:27:05] NOTICE[1182] chan_sip.c: Registration from '"1004" ' failed for '45.143.221.41:5938' - Wrong password [2020-10-11 03:27:05] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T03:27:05.440-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1004",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.41/5938",Challenge="304b0393",ReceivedChallenge="304b0393",ReceivedHash="8b3a810e211de8db8067cab412f11f68" [2020-10-11 03:27:05] NOTICE[1182] chan_sip.c: Registration from '"1004" ' failed for '45.143.221.41:5938' - Wrong password [2020-10-11 03:27:05] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T03:27:05.679-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1004",SessionID="0x7f22f83116b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45 ...	2020-10-11 16:22:00

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.143.221.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4764
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.143.221.16.			IN	A

;; AUTHORITY SECTION:
.			180	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110300 1800 900 604800 86400

;; Query time: 118 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Nov 03 20:01:03 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 16.221.143.45.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 16.221.143.45.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
222.186.175.216	attackbotsspam	Jan 1 12:47:02 v22018086721571380 sshd[16216]: Failed password for root from 222.186.175.216 port 17664 ssh2 Jan 1 12:47:02 v22018086721571380 sshd[16216]: error: maximum authentication attempts exceeded for root from 222.186.175.216 port 17664 ssh2 [preauth]	2020-01-02 01:35:45
183.88.234.249	attack	SMTP-SASL bruteforce attempt	2020-01-02 01:46:33
51.38.134.34	attackbotsspam	Jan 1 15:35:12 herz-der-gamer sshd[6923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.134.34 user=root Jan 1 15:35:14 herz-der-gamer sshd[6923]: Failed password for root from 51.38.134.34 port 51460 ssh2 Jan 1 15:49:20 herz-der-gamer sshd[12697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.134.34 user=root Jan 1 15:49:22 herz-der-gamer sshd[12697]: Failed password for root from 51.38.134.34 port 50818 ssh2 ...	2020-01-02 02:04:52
49.235.139.216	attackspambots	no	2020-01-02 01:44:44
185.244.167.52	attack	Jan 1 05:13:32 web9 sshd\[32103\]: Invalid user ubuntu from 185.244.167.52 Jan 1 05:13:32 web9 sshd\[32103\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.244.167.52 Jan 1 05:13:34 web9 sshd\[32103\]: Failed password for invalid user ubuntu from 185.244.167.52 port 56636 ssh2 Jan 1 05:14:54 web9 sshd\[32281\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.244.167.52 user=root Jan 1 05:14:57 web9 sshd\[32281\]: Failed password for root from 185.244.167.52 port 40422 ssh2	2020-01-02 01:27:34
46.183.112.72	attack	" "	2020-01-02 01:49:09
129.28.165.178	attackspam	Jan 1 16:12:55 zeus sshd[30424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.165.178 Jan 1 16:12:57 zeus sshd[30424]: Failed password for invalid user whisk from 129.28.165.178 port 46582 ssh2 Jan 1 16:14:50 zeus sshd[30476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.165.178 Jan 1 16:14:52 zeus sshd[30476]: Failed password for invalid user ytruth2 from 129.28.165.178 port 59348 ssh2	2020-01-02 01:59:59
83.212.109.91	attackspambots	Jan 1 17:36:20 v22018076622670303 sshd\[15410\]: Invalid user ryanlee from 83.212.109.91 port 38252 Jan 1 17:36:20 v22018076622670303 sshd\[15410\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.212.109.91 Jan 1 17:36:22 v22018076622670303 sshd\[15410\]: Failed password for invalid user ryanlee from 83.212.109.91 port 38252 ssh2 ...	2020-01-02 01:54:37
51.254.102.212	attack	SSH Brute-Force reported by Fail2Ban	2020-01-02 01:48:43
178.62.231.116	attack	Jan 1 11:53:51 server sshd\[15383\]: Invalid user backup from 178.62.231.116 Jan 1 11:53:51 server sshd\[15383\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=geektechsupport.co.uk Jan 1 11:53:53 server sshd\[15383\]: Failed password for invalid user backup from 178.62.231.116 port 36458 ssh2 Jan 1 20:39:48 server sshd\[23498\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=geektechsupport.co.uk user=root Jan 1 20:39:50 server sshd\[23498\]: Failed password for root from 178.62.231.116 port 47460 ssh2 ...	2020-01-02 02:00:32
27.223.89.238	attackbotsspam	ssh failed login	2020-01-02 01:32:13
87.79.238.217	attackbotsspam	RDPBruteGSL24	2020-01-02 01:29:20
78.26.52.16	attackspam	Jan 1 15:49:20 web1 sshd\[12290\]: Invalid user test from 78.26.52.16 Jan 1 15:49:20 web1 sshd\[12290\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.26.52.16 Jan 1 15:49:22 web1 sshd\[12290\]: Failed password for invalid user test from 78.26.52.16 port 42370 ssh2 Jan 1 15:49:26 web1 sshd\[12290\]: Failed password for invalid user test from 78.26.52.16 port 42370 ssh2 Jan 1 15:49:29 web1 sshd\[12290\]: Failed password for invalid user test from 78.26.52.16 port 42370 ssh2	2020-01-02 01:58:35
31.208.74.177	attackspambots	20/1/1@12:17:53: FAIL: Alarm-SSH address from=31.208.74.177 20/1/1@12:17:53: FAIL: Alarm-SSH address from=31.208.74.177 ...	2020-01-02 01:51:42
191.33.234.80	attack	1577890217 - 01/01/2020 15:50:17 Host: 191.33.234.80/191.33.234.80 Port: 445 TCP Blocked	2020-01-02 01:33:16

最近上报的IP列表

81.93.94.133	46.70.194.185	49.81.39.135	208.92.229.85
42.122.251.0	107.183.127.80	178.69.88.37	194.150.89.30
183.6.26.84	86.191.27.40	122.51.86.120	3.91.164.185
102.164.252.153	113.231.219.217	83.116.57.249	51.158.74.228
108.157.144.135	152.102.185.198	189.215.214.66	175.139.107.113