45.143.221.26 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): Zumy Communications

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Dec 13 02:09:07 debian-2gb-vpn-nbg1-1 kernel: [570526.053899] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=45.143.221.26 DST=78.46.192.101 LEN=440 TOS=0x00 PREC=0x00 TTL=51 ID=38400 DF PROTO=UDP SPT=5082 DPT=5060 LEN=420	2019-12-13 08:07:46
attackbots	CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	2019-11-30 18:53:27

类型

评论内容

时间

attack

Dec 13 02:09:07 debian-2gb-vpn-nbg1-1 kernel: [570526.053899] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=45.143.221.26 DST=78.46.192.101 LEN=440 TOS=0x00 PREC=0x00 TTL=51 ID=38400 DF PROTO=UDP SPT=5082 DPT=5060 LEN=420

2019-12-13 08:07:46

attackbots

CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found

2019-11-30 18:53:27

相同子网IP讨论:

IP	类型	评论内容	时间
45.143.221.103	attack	[2020-10-13 15:19:26] NOTICE[1182] chan_sip.c: Registration from '"301" ' failed for '45.143.221.103:5683' - Wrong password [2020-10-13 15:19:26] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-13T15:19:26.829-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="301",SessionID="0x7f22f80ac0a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.103/5683",Challenge="7a628e30",ReceivedChallenge="7a628e30",ReceivedHash="0119f7e30ee57384234432f30b70c098" [2020-10-13 15:19:26] NOTICE[1182] chan_sip.c: Registration from '"301" ' failed for '45.143.221.103:5683' - Wrong password [2020-10-13 15:19:26] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-13T15:19:26.966-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="301",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.14 ...	2020-10-14 03:40:29
45.143.221.103	attack	[2020-10-13 06:46:57] NOTICE[1182] chan_sip.c: Registration from '"3333" ' failed for '45.143.221.103:5645' - Wrong password [2020-10-13 06:46:57] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-13T06:46:57.038-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3333",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.103/5645",Challenge="3439c4fc",ReceivedChallenge="3439c4fc",ReceivedHash="3062dbecaf2621780fa5e34eb195d058" [2020-10-13 06:46:57] NOTICE[1182] chan_sip.c: Registration from '"3333" ' failed for '45.143.221.103:5645' - Wrong password [2020-10-13 06:46:57] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-13T06:46:57.188-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3333",SessionID="0x7f22f83b6678",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-10-13 18:59:45
45.143.221.110	attack	Automatic report - Banned IP Access	2020-10-13 14:19:12
45.143.221.110	attack	[2020-10-12 16:53:29] NOTICE[1182] chan_sip.c: Registration from '"101" ' failed for '45.143.221.110:5615' - Wrong password [2020-10-12 16:53:29] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-12T16:53:29.550-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="101",SessionID="0x7f22f8572958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.110/5615",Challenge="0ad9c2aa",ReceivedChallenge="0ad9c2aa",ReceivedHash="886a00a66a8cbf6f214248f22ce3a6c8" [2020-10-12 16:53:29] NOTICE[1182] chan_sip.c: Registration from '"101" ' failed for '45.143.221.110:5615' - Wrong password [2020-10-12 16:53:29] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-12T16:53:29.962-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="101",SessionID="0x7f22f8418138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.14 ...	2020-10-13 07:01:19
45.143.221.110	attack	[2020-10-11 16:12:54] NOTICE[1182] chan_sip.c: Registration from '"3000" ' failed for '45.143.221.110:5288' - Wrong password [2020-10-11 16:12:54] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T16:12:54.204-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3000",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.110/5288",Challenge="526e051c",ReceivedChallenge="526e051c",ReceivedHash="7428017ede0270c83e0c7304a25a34ab" [2020-10-11 16:12:54] NOTICE[1182] chan_sip.c: Registration from '"3000" ' failed for '45.143.221.110:5288' - Wrong password [2020-10-11 16:12:54] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T16:12:54.355-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3000",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-10-12 05:24:32
45.143.221.101	attackbotsspam	TCP port : 5060	2020-10-12 04:08:31
45.143.221.96	attackbots	[2020-10-11 12:22:47] NOTICE[1182][C-00002dff] chan_sip.c: Call from '' (45.143.221.96:5071) to extension '972595778361' rejected because extension not found in context 'public'. [2020-10-11 12:22:47] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-11T12:22:47.182-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="972595778361",SessionID="0x7f22f8418138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.96/5071",ACLName="no_extension_match" [2020-10-11 12:31:40] NOTICE[1182][C-00002e08] chan_sip.c: Call from '' (45.143.221.96:5080) to extension '011972595778361' rejected because extension not found in context 'public'. [2020-10-11 12:31:40] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-11T12:31:40.743-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011972595778361",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.22 ...	2020-10-12 03:33:11
45.143.221.90	attackspam	ET CINS Active Threat Intelligence Poor Reputation IP group 28 - port: 5070 proto: udp cat: Misc Attackbytes: 454	2020-10-12 00:44:43
45.143.221.41	attack	[2020-10-11 12:04:24] NOTICE[1182] chan_sip.c: Registration from '"9900" ' failed for '45.143.221.41:7384' - Wrong password [2020-10-11 12:04:24] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T12:04:24.226-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9900",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.41/7384",Challenge="680a328f",ReceivedChallenge="680a328f",ReceivedHash="1e6e62d2c5d20e0f03dc77bd5f78bb79" [2020-10-11 12:04:24] NOTICE[1182] chan_sip.c: Registration from '"9900" ' failed for '45.143.221.41:7384' - Wrong password [2020-10-11 12:04:24] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T12:04:24.402-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9900",SessionID="0x7f22f83b6678",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45 ...	2020-10-12 00:24:20
45.143.221.110	attack	[2020-10-11 08:58:48] NOTICE[1182] chan_sip.c: Registration from '"3071" ' failed for '45.143.221.110:5956' - Wrong password [2020-10-11 08:58:48] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T08:58:48.652-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3071",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.110/5956",Challenge="2bf8793a",ReceivedChallenge="2bf8793a",ReceivedHash="b66b2e9d962113daef388dc0c0e3980a" [2020-10-11 08:58:48] NOTICE[1182] chan_sip.c: Registration from '"3071" ' failed for '45.143.221.110:5956' - Wrong password [2020-10-11 08:58:48] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T08:58:48.770-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3071",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-10-11 21:30:44
45.143.221.101	attackspam	TCP port : 5060	2020-10-11 20:07:10
45.143.221.96	attackspam	[2020-10-11 05:57:59] NOTICE[1182][C-00002cca] chan_sip.c: Call from '' (45.143.221.96:5071) to extension '972595778361' rejected because extension not found in context 'public'. [2020-10-11 05:57:59] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-11T05:57:59.878-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="972595778361",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.96/5071",ACLName="no_extension_match" [2020-10-11 05:59:57] NOTICE[1182][C-00002ccf] chan_sip.c: Call from '' (45.143.221.96:5070) to extension '011972595778361' rejected because extension not found in context 'public'. [2020-10-11 05:59:57] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-11T05:59:57.598-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011972595778361",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.22 ...	2020-10-11 19:27:33
45.143.221.103	attackspambots	[2020-10-11 02:15:56] NOTICE[1182] chan_sip.c: Registration from '"654321" ' failed for '45.143.221.103:5703' - Wrong password [2020-10-11 02:15:56] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T02:15:56.179-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="654321",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.103/5703",Challenge="2fa01f1f",ReceivedChallenge="2fa01f1f",ReceivedHash="b9e3f4d835296970b0072df2ccd108c6" [2020-10-11 02:15:56] NOTICE[1182] chan_sip.c: Registration from '"654321" ' failed for '45.143.221.103:5703' - Wrong password [2020-10-11 02:15:56] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T02:15:56.319-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="654321",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddre ...	2020-10-11 16:54:32
45.143.221.90	attackbotsspam	ET CINS Active Threat Intelligence Poor Reputation IP group 28 - port: 5070 proto: udp cat: Misc Attackbytes: 456	2020-10-11 16:40:40
45.143.221.41	attackspam	[2020-10-11 03:27:05] NOTICE[1182] chan_sip.c: Registration from '"1004" ' failed for '45.143.221.41:5938' - Wrong password [2020-10-11 03:27:05] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T03:27:05.440-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1004",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.41/5938",Challenge="304b0393",ReceivedChallenge="304b0393",ReceivedHash="8b3a810e211de8db8067cab412f11f68" [2020-10-11 03:27:05] NOTICE[1182] chan_sip.c: Registration from '"1004" ' failed for '45.143.221.41:5938' - Wrong password [2020-10-11 03:27:05] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T03:27:05.679-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1004",SessionID="0x7f22f83116b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45 ...	2020-10-11 16:22:00

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.143.221.26
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12499
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.143.221.26.			IN	A

;; AUTHORITY SECTION:
.			327	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112901 1800 900 604800 86400

;; Query time: 88 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 30 07:33:58 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 26.221.143.45.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 26.221.143.45.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
111.38.9.112	attackbots	Honeypot attack, port: 23, PTR: PTR record not found	2019-09-07 13:05:50
178.62.17.167	attackspambots	Sep 6 18:00:24 lcprod sshd\[4614\]: Invalid user q1w2e3r4t5 from 178.62.17.167 Sep 6 18:00:24 lcprod sshd\[4614\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.17.167 Sep 6 18:00:26 lcprod sshd\[4614\]: Failed password for invalid user q1w2e3r4t5 from 178.62.17.167 port 35296 ssh2 Sep 6 18:04:58 lcprod sshd\[5026\]: Invalid user server from 178.62.17.167 Sep 6 18:04:58 lcprod sshd\[5026\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.17.167	2019-09-07 12:18:04
117.139.202.64	attackbotsspam	Sep 6 18:14:06 web1 sshd\[28691\]: Invalid user hadoop from 117.139.202.64 Sep 6 18:14:06 web1 sshd\[28691\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.202.64 Sep 6 18:14:08 web1 sshd\[28691\]: Failed password for invalid user hadoop from 117.139.202.64 port 42789 ssh2 Sep 6 18:19:36 web1 sshd\[29142\]: Invalid user solr from 117.139.202.64 Sep 6 18:19:36 web1 sshd\[29142\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.202.64	2019-09-07 12:19:40
209.17.97.58	attackspam	Port scan attempt detected by AWS-CCS, CTS, India	2019-09-07 12:58:34
216.230.44.188	attackspambots	Sep 7 06:12:36 mail sshd\[12128\]: Invalid user cloud from 216.230.44.188 Sep 7 06:12:36 mail sshd\[12128\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.230.44.188 Sep 7 06:12:39 mail sshd\[12128\]: Failed password for invalid user cloud from 216.230.44.188 port 47828 ssh2 ...	2019-09-07 12:35:08
178.128.223.28	attack	Sep 7 06:17:25 vps01 sshd[3125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.223.28 Sep 7 06:17:27 vps01 sshd[3125]: Failed password for invalid user jenkins from 178.128.223.28 port 55804 ssh2	2019-09-07 12:40:09
119.29.247.225	attackbots	Sep 6 17:40:06 tdfoods sshd\[24481\]: Invalid user 123 from 119.29.247.225 Sep 6 17:40:06 tdfoods sshd\[24481\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.247.225 Sep 6 17:40:08 tdfoods sshd\[24481\]: Failed password for invalid user 123 from 119.29.247.225 port 44884 ssh2 Sep 6 17:43:40 tdfoods sshd\[24823\]: Invalid user azureuser from 119.29.247.225 Sep 6 17:43:40 tdfoods sshd\[24823\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.247.225	2019-09-07 12:45:47
124.204.45.66	attack	Sep 7 03:48:21 MK-Soft-VM6 sshd\[16811\]: Invalid user rodrigo from 124.204.45.66 port 34010 Sep 7 03:48:22 MK-Soft-VM6 sshd\[16811\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.204.45.66 Sep 7 03:48:23 MK-Soft-VM6 sshd\[16811\]: Failed password for invalid user rodrigo from 124.204.45.66 port 34010 ssh2 ...	2019-09-07 12:45:11
212.87.9.141	attackspambots	Sep 7 06:13:34 MK-Soft-Root1 sshd\[1775\]: Invalid user dspace from 212.87.9.141 port 47644 Sep 7 06:13:34 MK-Soft-Root1 sshd\[1775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.87.9.141 Sep 7 06:13:36 MK-Soft-Root1 sshd\[1775\]: Failed password for invalid user dspace from 212.87.9.141 port 47644 ssh2 ...	2019-09-07 12:19:18
121.162.88.249	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2019-09-07 13:02:18
34.77.94.3	attackspam	Unauthorized access to SSH at 7/Sep/2019:00:40:55 +0000. Received: (SSH-2.0-Go)	2019-09-07 12:36:34
218.161.74.215	attackbotsspam	Sep 6 20:40:24 localhost kernel: [1554640.570017] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=218.161.74.215 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=35782 PROTO=TCP SPT=3138 DPT=52869 WINDOW=24346 RES=0x00 SYN URGP=0 Sep 6 20:40:24 localhost kernel: [1554640.570044] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=218.161.74.215 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=35782 PROTO=TCP SPT=3138 DPT=52869 SEQ=758669438 ACK=0 WINDOW=24346 RES=0x00 SYN URGP=0	2019-09-07 12:57:27
218.98.40.134	attackspam	Sep 7 00:26:23 debian sshd\[4637\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.40.134 user=root Sep 7 00:26:24 debian sshd\[4637\]: Failed password for root from 218.98.40.134 port 23378 ssh2 Sep 7 00:26:26 debian sshd\[4637\]: Failed password for root from 218.98.40.134 port 23378 ssh2 ...	2019-09-07 12:30:37
104.248.134.200	attackspam	Sep 7 06:17:02 vps691689 sshd[30809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.200 Sep 7 06:17:05 vps691689 sshd[30809]: Failed password for invalid user test from 104.248.134.200 port 46124 ssh2 Sep 7 06:21:28 vps691689 sshd[30855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.134.200 ...	2019-09-07 12:27:09
119.29.243.100	attack	Sep 7 05:54:01 plex sshd[9270]: Invalid user ftp123 from 119.29.243.100 port 43046	2019-09-07 13:03:13

最近上报的IP列表

180.253.164.241	45.82.153.137	41.58.149.210	113.172.55.86
130.193.24.97	122.96.92.226	211.93.11.6	188.124.89.22
5.189.170.207	45.76.182.34	45.163.59.242	87.206.247.190
170.106.36.56	158.181.18.194	182.53.252.75	108.247.68.125
13.238.201.122	41.81.150.131	77.247.109.60	109.86.213.56