45.143.221.29 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): Zumy Communications

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	1576507475 - 12/16/2019 15:44:35 Host: 45.143.221.29/45.143.221.29 Port: 5060 UDP Blocked	2019-12-17 00:59:52

相同子网IP讨论:

IP	类型	评论内容	时间
45.143.221.103	attack	[2020-10-13 15:19:26] NOTICE[1182] chan_sip.c: Registration from '"301" ' failed for '45.143.221.103:5683' - Wrong password [2020-10-13 15:19:26] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-13T15:19:26.829-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="301",SessionID="0x7f22f80ac0a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.103/5683",Challenge="7a628e30",ReceivedChallenge="7a628e30",ReceivedHash="0119f7e30ee57384234432f30b70c098" [2020-10-13 15:19:26] NOTICE[1182] chan_sip.c: Registration from '"301" ' failed for '45.143.221.103:5683' - Wrong password [2020-10-13 15:19:26] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-13T15:19:26.966-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="301",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.14 ...	2020-10-14 03:40:29
45.143.221.103	attack	[2020-10-13 06:46:57] NOTICE[1182] chan_sip.c: Registration from '"3333" ' failed for '45.143.221.103:5645' - Wrong password [2020-10-13 06:46:57] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-13T06:46:57.038-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3333",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.103/5645",Challenge="3439c4fc",ReceivedChallenge="3439c4fc",ReceivedHash="3062dbecaf2621780fa5e34eb195d058" [2020-10-13 06:46:57] NOTICE[1182] chan_sip.c: Registration from '"3333" ' failed for '45.143.221.103:5645' - Wrong password [2020-10-13 06:46:57] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-13T06:46:57.188-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3333",SessionID="0x7f22f83b6678",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-10-13 18:59:45
45.143.221.110	attack	Automatic report - Banned IP Access	2020-10-13 14:19:12
45.143.221.110	attack	[2020-10-12 16:53:29] NOTICE[1182] chan_sip.c: Registration from '"101" ' failed for '45.143.221.110:5615' - Wrong password [2020-10-12 16:53:29] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-12T16:53:29.550-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="101",SessionID="0x7f22f8572958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.110/5615",Challenge="0ad9c2aa",ReceivedChallenge="0ad9c2aa",ReceivedHash="886a00a66a8cbf6f214248f22ce3a6c8" [2020-10-12 16:53:29] NOTICE[1182] chan_sip.c: Registration from '"101" ' failed for '45.143.221.110:5615' - Wrong password [2020-10-12 16:53:29] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-12T16:53:29.962-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="101",SessionID="0x7f22f8418138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.14 ...	2020-10-13 07:01:19
45.143.221.110	attack	[2020-10-11 16:12:54] NOTICE[1182] chan_sip.c: Registration from '"3000" ' failed for '45.143.221.110:5288' - Wrong password [2020-10-11 16:12:54] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T16:12:54.204-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3000",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.110/5288",Challenge="526e051c",ReceivedChallenge="526e051c",ReceivedHash="7428017ede0270c83e0c7304a25a34ab" [2020-10-11 16:12:54] NOTICE[1182] chan_sip.c: Registration from '"3000" ' failed for '45.143.221.110:5288' - Wrong password [2020-10-11 16:12:54] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T16:12:54.355-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3000",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-10-12 05:24:32
45.143.221.101	attackbotsspam	TCP port : 5060	2020-10-12 04:08:31
45.143.221.96	attackbots	[2020-10-11 12:22:47] NOTICE[1182][C-00002dff] chan_sip.c: Call from '' (45.143.221.96:5071) to extension '972595778361' rejected because extension not found in context 'public'. [2020-10-11 12:22:47] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-11T12:22:47.182-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="972595778361",SessionID="0x7f22f8418138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.96/5071",ACLName="no_extension_match" [2020-10-11 12:31:40] NOTICE[1182][C-00002e08] chan_sip.c: Call from '' (45.143.221.96:5080) to extension '011972595778361' rejected because extension not found in context 'public'. [2020-10-11 12:31:40] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-11T12:31:40.743-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011972595778361",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.22 ...	2020-10-12 03:33:11
45.143.221.90	attackspam	ET CINS Active Threat Intelligence Poor Reputation IP group 28 - port: 5070 proto: udp cat: Misc Attackbytes: 454	2020-10-12 00:44:43
45.143.221.41	attack	[2020-10-11 12:04:24] NOTICE[1182] chan_sip.c: Registration from '"9900" ' failed for '45.143.221.41:7384' - Wrong password [2020-10-11 12:04:24] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T12:04:24.226-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9900",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.41/7384",Challenge="680a328f",ReceivedChallenge="680a328f",ReceivedHash="1e6e62d2c5d20e0f03dc77bd5f78bb79" [2020-10-11 12:04:24] NOTICE[1182] chan_sip.c: Registration from '"9900" ' failed for '45.143.221.41:7384' - Wrong password [2020-10-11 12:04:24] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T12:04:24.402-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9900",SessionID="0x7f22f83b6678",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45 ...	2020-10-12 00:24:20
45.143.221.110	attack	[2020-10-11 08:58:48] NOTICE[1182] chan_sip.c: Registration from '"3071" ' failed for '45.143.221.110:5956' - Wrong password [2020-10-11 08:58:48] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T08:58:48.652-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3071",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.110/5956",Challenge="2bf8793a",ReceivedChallenge="2bf8793a",ReceivedHash="b66b2e9d962113daef388dc0c0e3980a" [2020-10-11 08:58:48] NOTICE[1182] chan_sip.c: Registration from '"3071" ' failed for '45.143.221.110:5956' - Wrong password [2020-10-11 08:58:48] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T08:58:48.770-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3071",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-10-11 21:30:44
45.143.221.101	attackspam	TCP port : 5060	2020-10-11 20:07:10
45.143.221.96	attackspam	[2020-10-11 05:57:59] NOTICE[1182][C-00002cca] chan_sip.c: Call from '' (45.143.221.96:5071) to extension '972595778361' rejected because extension not found in context 'public'. [2020-10-11 05:57:59] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-11T05:57:59.878-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="972595778361",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.96/5071",ACLName="no_extension_match" [2020-10-11 05:59:57] NOTICE[1182][C-00002ccf] chan_sip.c: Call from '' (45.143.221.96:5070) to extension '011972595778361' rejected because extension not found in context 'public'. [2020-10-11 05:59:57] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-11T05:59:57.598-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011972595778361",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.22 ...	2020-10-11 19:27:33
45.143.221.103	attackspambots	[2020-10-11 02:15:56] NOTICE[1182] chan_sip.c: Registration from '"654321" ' failed for '45.143.221.103:5703' - Wrong password [2020-10-11 02:15:56] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T02:15:56.179-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="654321",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.103/5703",Challenge="2fa01f1f",ReceivedChallenge="2fa01f1f",ReceivedHash="b9e3f4d835296970b0072df2ccd108c6" [2020-10-11 02:15:56] NOTICE[1182] chan_sip.c: Registration from '"654321" ' failed for '45.143.221.103:5703' - Wrong password [2020-10-11 02:15:56] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T02:15:56.319-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="654321",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddre ...	2020-10-11 16:54:32
45.143.221.90	attackbotsspam	ET CINS Active Threat Intelligence Poor Reputation IP group 28 - port: 5070 proto: udp cat: Misc Attackbytes: 456	2020-10-11 16:40:40
45.143.221.41	attackspam	[2020-10-11 03:27:05] NOTICE[1182] chan_sip.c: Registration from '"1004" ' failed for '45.143.221.41:5938' - Wrong password [2020-10-11 03:27:05] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T03:27:05.440-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1004",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.41/5938",Challenge="304b0393",ReceivedChallenge="304b0393",ReceivedHash="8b3a810e211de8db8067cab412f11f68" [2020-10-11 03:27:05] NOTICE[1182] chan_sip.c: Registration from '"1004" ' failed for '45.143.221.41:5938' - Wrong password [2020-10-11 03:27:05] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T03:27:05.679-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1004",SessionID="0x7f22f83116b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45 ...	2020-10-11 16:22:00

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.143.221.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62907
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.143.221.29.			IN	A

;; AUTHORITY SECTION:
.			224	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121601 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 17 00:59:47 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 29.221.143.45.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 29.221.143.45.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
2001:470:dfa9:10ff:0:242:ac11:26	attackbots	Port scan	2020-02-20 08:48:08
218.92.0.212	attackbotsspam	Feb 20 00:44:05 game-panel sshd[19985]: Failed password for root from 218.92.0.212 port 37049 ssh2 Feb 20 00:44:08 game-panel sshd[19985]: Failed password for root from 218.92.0.212 port 37049 ssh2 Feb 20 00:44:11 game-panel sshd[19985]: Failed password for root from 218.92.0.212 port 37049 ssh2 Feb 20 00:44:17 game-panel sshd[19985]: error: maximum authentication attempts exceeded for root from 218.92.0.212 port 37049 ssh2 [preauth]	2020-02-20 08:47:33
86.35.37.186	attackspam	Feb 19 14:31:43 php1 sshd\[1347\]: Invalid user jianhaoc from 86.35.37.186 Feb 19 14:31:43 php1 sshd\[1347\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.35.37.186 Feb 19 14:31:45 php1 sshd\[1347\]: Failed password for invalid user jianhaoc from 86.35.37.186 port 38386 ssh2 Feb 19 14:36:09 php1 sshd\[1805\]: Invalid user cpaneleximscanner from 86.35.37.186 Feb 19 14:36:09 php1 sshd\[1805\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.35.37.186	2020-02-20 09:07:32
154.209.65.19	attackbots	Feb 20 05:46:56 gw1 sshd[10172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.209.65.19 Feb 20 05:46:58 gw1 sshd[10172]: Failed password for invalid user test from 154.209.65.19 port 60856 ssh2 ...	2020-02-20 09:00:42
2001:470:dfa9:10ff:0:242:ac11:27	attackbotsspam	Port scan	2020-02-20 08:47:13
165.227.211.13	attack	DATE:2020-02-20 00:57:08, IP:165.227.211.13, PORT:ssh SSH brute force auth (docker-dc)	2020-02-20 09:23:56
182.75.139.26	attackspam	SSH_scan	2020-02-20 09:05:46
92.118.160.1	attackbotsspam	Feb 19 07:18:41 : SSH login attempts with invalid user	2020-02-20 09:22:52
61.216.166.25	attackspambots	20/2/19@16:54:20: FAIL: Alarm-Network address from=61.216.166.25 20/2/19@16:54:20: FAIL: Alarm-Network address from=61.216.166.25 ...	2020-02-20 09:12:54
128.199.202.206	attackbots	Feb 19 13:07:47 php1 sshd\[25964\]: Invalid user cpaneleximscanner from 128.199.202.206 Feb 19 13:07:47 php1 sshd\[25964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.202.206 Feb 19 13:07:49 php1 sshd\[25964\]: Failed password for invalid user cpaneleximscanner from 128.199.202.206 port 59880 ssh2 Feb 19 13:10:51 php1 sshd\[26384\]: Invalid user hfbx from 128.199.202.206 Feb 19 13:10:51 php1 sshd\[26384\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.202.206	2020-02-20 09:03:01
106.13.142.115	attack	Failed password for daemon from 106.13.142.115 port 44924 ssh2 Invalid user info from 106.13.142.115 port 35484 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.115 Failed password for invalid user info from 106.13.142.115 port 35484 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.142.115 user=list	2020-02-20 09:11:28
178.62.186.49	attackspambots	Feb 19 12:21:10 php1 sshd\[21345\]: Invalid user confluence from 178.62.186.49 Feb 19 12:21:11 php1 sshd\[21345\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.186.49 Feb 19 12:21:13 php1 sshd\[21345\]: Failed password for invalid user confluence from 178.62.186.49 port 35572 ssh2 Feb 19 12:24:16 php1 sshd\[21671\]: Invalid user ftpuser from 178.62.186.49 Feb 19 12:24:16 php1 sshd\[21671\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.186.49	2020-02-20 09:11:02
46.161.59.93	attack	B: Magento admin pass test (wrong country)	2020-02-20 09:13:17
172.104.106.221	attackspambots	Unauthorized connection attempt detected from IP address 172.104.106.221 to port 8089	2020-02-20 09:09:26
3.6.43.35	attackbotsspam	scan z	2020-02-20 08:51:10

最近上报的IP列表

191.6.13.151	200.167.184.84	93.115.225.76	78.87.238.31
92.23.58.129	197.210.64.156	187.176.25.60	40.92.70.36
40.92.41.56	187.176.191.4	81.17.30.198	112.198.29.146
197.210.64.86	14.248.74.122	133.242.145.105	187.176.190.14
94.152.193.15	111.72.193.216	49.149.100.231	191.78.125.164