48.168.189.1 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 48.168.189.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64883
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;48.168.189.1.			IN	A

;; AUTHORITY SECTION:
.			149	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022011002 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 11 14:16:19 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

Host 1.189.168.48.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 1.189.168.48.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
177.200.64.90	attackbots	Sep 8 01:21:21 mail.srvfarm.net postfix/smtpd[1484470]: warning: 177-200-64-90.static.skysever.com.br[177.200.64.90]: SASL PLAIN authentication failed: Sep 8 01:21:22 mail.srvfarm.net postfix/smtpd[1484470]: lost connection after AUTH from 177-200-64-90.static.skysever.com.br[177.200.64.90] Sep 8 01:21:47 mail.srvfarm.net postfix/smtps/smtpd[1499177]: warning: 177-200-64-90.static.skysever.com.br[177.200.64.90]: SASL PLAIN authentication failed: Sep 8 01:21:47 mail.srvfarm.net postfix/smtps/smtpd[1499177]: lost connection after AUTH from 177-200-64-90.static.skysever.com.br[177.200.64.90] Sep 8 01:22:06 mail.srvfarm.net postfix/smtps/smtpd[1499177]: warning: 177-200-64-90.static.skysever.com.br[177.200.64.90]: SASL PLAIN authentication failed:	2020-09-11 18:39:48
176.109.0.30	attackspambots	Sep 11 09:09:57 email sshd\[14227\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.109.0.30 user=root Sep 11 09:09:59 email sshd\[14227\]: Failed password for root from 176.109.0.30 port 48435 ssh2 Sep 11 09:18:21 email sshd\[15754\]: Invalid user supervisor from 176.109.0.30 Sep 11 09:18:21 email sshd\[15754\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.109.0.30 Sep 11 09:18:23 email sshd\[15754\]: Failed password for invalid user supervisor from 176.109.0.30 port 55817 ssh2 ...	2020-09-11 18:29:00
177.10.22.126	attackspam	Sep 10 02:35:48 mail.srvfarm.net postfix/smtps/smtpd[2854037]: warning: unknown[177.10.22.126]: SASL PLAIN authentication failed: Sep 10 02:35:49 mail.srvfarm.net postfix/smtps/smtpd[2854037]: lost connection after AUTH from unknown[177.10.22.126] Sep 10 02:37:03 mail.srvfarm.net postfix/smtps/smtpd[2854037]: warning: unknown[177.10.22.126]: SASL PLAIN authentication failed: Sep 10 02:37:04 mail.srvfarm.net postfix/smtps/smtpd[2854037]: lost connection after AUTH from unknown[177.10.22.126] Sep 10 02:45:27 mail.srvfarm.net postfix/smtpd[2859616]: warning: unknown[177.10.22.126]: SASL PLAIN authentication failed:	2020-09-11 18:35:56
177.11.114.115	attackbotsspam	Sep 7 11:44:11 mail.srvfarm.net postfix/smtpd[1031549]: warning: unknown[177.11.114.115]: SASL PLAIN authentication failed: Sep 7 11:44:11 mail.srvfarm.net postfix/smtpd[1031549]: lost connection after AUTH from unknown[177.11.114.115] Sep 7 11:49:24 mail.srvfarm.net postfix/smtpd[1031548]: warning: unknown[177.11.114.115]: SASL PLAIN authentication failed: Sep 7 11:49:24 mail.srvfarm.net postfix/smtpd[1031548]: lost connection after AUTH from unknown[177.11.114.115] Sep 7 11:50:30 mail.srvfarm.net postfix/smtps/smtpd[1032347]: warning: unknown[177.11.114.115]: SASL PLAIN authentication failed:	2020-09-11 18:57:30
77.57.204.34	attackspambots	Sep 10 23:37:52 php1 sshd\[10064\]: Invalid user oracle10 from 77.57.204.34 Sep 10 23:37:52 php1 sshd\[10064\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.57.204.34 Sep 10 23:37:55 php1 sshd\[10064\]: Failed password for invalid user oracle10 from 77.57.204.34 port 44559 ssh2 Sep 10 23:44:23 php1 sshd\[10693\]: Invalid user sistemas from 77.57.204.34 Sep 10 23:44:23 php1 sshd\[10693\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.57.204.34	2020-09-11 18:18:58
119.202.218.23	attackbotsspam	2020-09-10 05:28:23 Reject access to port(s):3389 1 times a day	2020-09-11 18:20:23
122.51.45.200	attackspam	$f2bV_matches	2020-09-11 18:47:13
68.183.193.157	attack	TCP (SYN) 68.183.193.157:36571 -> port 22, len 44	2020-09-11 18:47:40
187.189.11.49	attack	Sep 11 11:37:02 santamaria sshd\[19429\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.189.11.49 user=root Sep 11 11:37:04 santamaria sshd\[19429\]: Failed password for root from 187.189.11.49 port 33300 ssh2 Sep 11 11:37:51 santamaria sshd\[19437\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.189.11.49 user=root ...	2020-09-11 18:50:17
209.85.208.65	attack	Trying to spoof execs	2020-09-11 18:33:14
62.173.149.5	attackbots	[2020-09-11 06:44:46] NOTICE[1239][C-000014f7] chan_sip.c: Call from '' (62.173.149.5:57673) to extension '01112062587273' rejected because extension not found in context 'public'. [2020-09-11 06:44:46] SECURITY[1264] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-11T06:44:46.183-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01112062587273",SessionID="0x7f4d480d6c18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.173.149.5/57673",ACLName="no_extension_match" [2020-09-11 06:45:09] NOTICE[1239][C-000014f8] chan_sip.c: Call from '' (62.173.149.5:60960) to extension '12062587273' rejected because extension not found in context 'public'. [2020-09-11 06:45:09] SECURITY[1264] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-11T06:45:09.712-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="12062587273",SessionID="0x7f4d480961a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.173.149.5/ ...	2020-09-11 18:45:59
182.61.36.56	attackspambots	Port scan: Attack repeated for 24 hours	2020-09-11 18:50:43
177.221.177.128	attack	Sep 7 11:56:06 mail.srvfarm.net postfix/smtps/smtpd[1034373]: warning: unknown[177.221.177.128]: SASL PLAIN authentication failed: Sep 7 11:56:07 mail.srvfarm.net postfix/smtps/smtpd[1034373]: lost connection after AUTH from unknown[177.221.177.128] Sep 7 11:59:14 mail.srvfarm.net postfix/smtpd[1038283]: warning: unknown[177.221.177.128]: SASL PLAIN authentication failed: Sep 7 11:59:14 mail.srvfarm.net postfix/smtpd[1038283]: lost connection after AUTH from unknown[177.221.177.128] Sep 7 12:05:56 mail.srvfarm.net postfix/smtpd[1038120]: warning: unknown[177.221.177.128]: SASL PLAIN authentication failed:	2020-09-11 18:39:22
83.48.29.116	attackbotsspam	Sep 11 07:16:19 ns382633 sshd\[20959\]: Invalid user gmoduser from 83.48.29.116 port 29619 Sep 11 07:16:19 ns382633 sshd\[20959\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.48.29.116 Sep 11 07:16:21 ns382633 sshd\[20959\]: Failed password for invalid user gmoduser from 83.48.29.116 port 29619 ssh2 Sep 11 07:31:25 ns382633 sshd\[23690\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.48.29.116 user=root Sep 11 07:31:27 ns382633 sshd\[23690\]: Failed password for root from 83.48.29.116 port 14264 ssh2	2020-09-11 18:49:25
103.237.58.151	attackspambots	Sep 8 09:53:23 mail.srvfarm.net postfix/smtpd[1694401]: warning: unknown[103.237.58.151]: SASL PLAIN authentication failed: Sep 8 09:53:23 mail.srvfarm.net postfix/smtpd[1694401]: lost connection after AUTH from unknown[103.237.58.151] Sep 8 09:54:08 mail.srvfarm.net postfix/smtpd[1694698]: warning: unknown[103.237.58.151]: SASL PLAIN authentication failed: Sep 8 09:54:08 mail.srvfarm.net postfix/smtpd[1694698]: lost connection after AUTH from unknown[103.237.58.151] Sep 8 09:56:21 mail.srvfarm.net postfix/smtpd[1695123]: warning: unknown[103.237.58.151]: SASL PLAIN authentication failed:	2020-09-11 18:36:12

最近上报的IP列表

211.210.79.56	197.36.105.132	35.24.31.24	231.90.145.146
161.91.87.116	39.182.176.135	69.61.39.79	223.48.104.148
105.161.147.188	74.95.233.242	57.24.23.17	85.13.67.232
227.48.181.85	28.232.211.198	52.124.196.21	20.117.39.173
150.217.88.50	130.216.177.64	131.52.230.145	198.43.29.103