89.41.159.157 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Romania

运营商(isp): Digital Cable Systems S.A.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Port Scan	2020-05-30 03:51:21

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 89.41.159.157
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42400
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;89.41.159.157.			IN	A

;; AUTHORITY SECTION:
.			405	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052901 1800 900 604800 86400

;; Query time: 111 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 30 03:51:18 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 157.159.41.89.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 157.159.41.89.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
177.207.192.137	attackbots	Sent mail to target address hacked/leaked from abandonia in 2016	2019-12-31 04:34:12
45.136.108.85	attack	Fail2Ban	2019-12-31 04:20:43
66.168.202.127	attackbotsspam	Automatic report - SSH Brute-Force Attack	2019-12-31 04:31:54
84.201.157.119	attackspam	2019-12-14T12:41:59.006001suse-nuc sshd[31543]: Invalid user amavis from 84.201.157.119 port 52864 ...	2019-12-31 04:10:09
112.6.44.28	attack	Dec 30 15:14:15 web1 postfix/smtpd[3125]: warning: unknown[112.6.44.28]: SASL LOGIN authentication failed: authentication failure ...	2019-12-31 04:36:17
80.211.136.164	attackbotsspam	Dec 30 21:14:24 andromeda sshd\[22520\]: Invalid user chriss from 80.211.136.164 port 52664 Dec 30 21:14:24 andromeda sshd\[22520\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.136.164 Dec 30 21:14:26 andromeda sshd\[22520\]: Failed password for invalid user chriss from 80.211.136.164 port 52664 ssh2	2019-12-31 04:31:35
42.116.211.52	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-12-31 04:10:40
222.186.173.238	attack	Dec 30 20:59:24 herz-der-gamer sshd[28000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.238 user=root Dec 30 20:59:26 herz-der-gamer sshd[28000]: Failed password for root from 222.186.173.238 port 49360 ssh2 ...	2019-12-31 04:02:48
195.154.28.229	attack	\[2019-12-30 14:56:24\] NOTICE\[2839\] chan_sip.c: Registration from '\' failed for '195.154.28.229:57214' - Wrong password \[2019-12-30 14:56:24\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-30T14:56:24.473-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1092",SessionID="0x7f0fb4989b48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154.28.229/57214",Challenge="588a530b",ReceivedChallenge="588a530b",ReceivedHash="5e0e06d5d5a72f16dd6ed0d5653b162e" \[2019-12-30 14:57:04\] NOTICE\[2839\] chan_sip.c: Registration from '\' failed for '195.154.28.229:64332' - Wrong password \[2019-12-30 14:57:04\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-30T14:57:04.647-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1093",SessionID="0x7f0fb48c2048",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.15	2019-12-31 04:18:46
202.77.105.100	attack	Dec 30 19:52:52 localhost sshd\[96841\]: Invalid user paget from 202.77.105.100 port 45272 Dec 30 19:52:52 localhost sshd\[96841\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.77.105.100 Dec 30 19:52:54 localhost sshd\[96841\]: Failed password for invalid user paget from 202.77.105.100 port 45272 ssh2 Dec 30 19:55:31 localhost sshd\[96868\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.77.105.100 user=root Dec 30 19:55:33 localhost sshd\[96868\]: Failed password for root from 202.77.105.100 port 44616 ssh2 ...	2019-12-31 03:58:08
60.190.10.42	attackspam	Unauthorised access (Dec 30) SRC=60.190.10.42 LEN=52 TOS=0x02 TTL=116 ID=21091 DF TCP DPT=1433 WINDOW=8192 CWR ECE SYN	2019-12-31 03:59:52
212.30.52.243	attackbotsspam	Automatic report - Banned IP Access	2019-12-31 04:22:20
106.52.242.107	attack	Dec 31 02:16:05 itv-usvr-02 sshd[9283]: Invalid user minecraft from 106.52.242.107 port 33224 Dec 31 02:16:05 itv-usvr-02 sshd[9283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.242.107 Dec 31 02:16:05 itv-usvr-02 sshd[9283]: Invalid user minecraft from 106.52.242.107 port 33224 Dec 31 02:16:07 itv-usvr-02 sshd[9283]: Failed password for invalid user minecraft from 106.52.242.107 port 33224 ssh2 Dec 31 02:18:27 itv-usvr-02 sshd[9301]: Invalid user students from 106.52.242.107 port 56714	2019-12-31 04:01:59
151.80.45.126	attackspam	Dec 30 21:11:51 MK-Soft-VM7 sshd[7472]: Failed password for root from 151.80.45.126 port 38820 ssh2 ...	2019-12-31 04:28:55
37.49.231.168	attackspam	Dec 30 20:28:48 h2177944 kernel: \[932790.459821\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=37.49.231.168 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=6417 PROTO=TCP SPT=50689 DPT=8080 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 30 20:28:48 h2177944 kernel: \[932790.459835\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=37.49.231.168 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=6417 PROTO=TCP SPT=50689 DPT=8080 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 30 20:31:40 h2177944 kernel: \[932961.605732\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=37.49.231.168 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=54042 PROTO=TCP SPT=50689 DPT=83 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 30 20:31:40 h2177944 kernel: \[932961.605746\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=37.49.231.168 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=54042 PROTO=TCP SPT=50689 DPT=83 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 30 20:41:52 h2177944 kernel: \[933574.061680\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=37.49.231.168 DST=85.214.117.9 LEN=40 TOS	2019-12-31 04:03:47

最近上报的IP列表

159.107.215.130	59.127.98.105	59.21.197.221	58.252.72.20
58.248.200.119	95.88.155.90	58.216.176.178	244.11.145.122
49.79.161.29	158.1.210.206	188.53.165.149	50.207.213.27
118.63.223.234	238.139.143.197	83.53.166.119	47.104.169.121
201.200.252.206	220.152.64.222	46.176.171.87	121.162.57.240