城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.53.80.219
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40527
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;116.53.80.219. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 20:45:37 CST 2025
;; MSG SIZE rcvd: 106
219.80.53.116.in-addr.arpa domain name pointer 219.80.53.116.broad.km.yn.dynamic.163data.com.cn.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
219.80.53.116.in-addr.arpa name = 219.80.53.116.broad.km.yn.dynamic.163data.com.cn.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 51.89.98.81 | attackspam | [2020-09-19 18:31:00] NOTICE[1239][C-000055c1] chan_sip.c: Call from '' (51.89.98.81:5060) to extension '00961870897106' rejected because extension not found in context 'public'. [2020-09-19 18:31:00] SECURITY[1264] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-19T18:31:00.472-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00961870897106",SessionID="0x7f4d4844faa8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.89.98.81/5060",ACLName="no_extension_match" [2020-09-19 18:35:36] NOTICE[1239][C-000055c9] chan_sip.c: Call from '' (51.89.98.81:5060) to extension '001161870897106' rejected because extension not found in context 'public'. [2020-09-19 18:35:36] SECURITY[1264] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-19T18:35:36.042-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="001161870897106",SessionID="0x7f4d48513438",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.89.98.81 ... |
2020-09-20 06:49:25 |
| 149.34.21.141 | attackspam | Sep 19 20:00:47 scw-focused-cartwright sshd[29751]: Failed password for root from 149.34.21.141 port 50867 ssh2 Sep 19 20:00:47 scw-focused-cartwright sshd[29753]: Failed password for root from 149.34.21.141 port 50890 ssh2 |
2020-09-20 06:33:27 |
| 92.154.95.236 | attackbotsspam | Multiport scan : 69 ports scanned 19 110 111 125 146 163 427 443 512 1032 1034 1042 1044 1057 1073 1074 1075 1076 1078 1079 1102 1145 1296 1334 1666 1862 2001 2002 2013 2144 2196 2399 2761 2809 2998 3000 3017 3168 3269 3370 3800 4000 4129 4899 5922 6000 6002 6689 6881 7000 7201 7778 8000 8021 8042 8045 8090 8383 8500 9000 9300 9878 10616 16992 19350 25735 27000 27352 31337 |
2020-09-20 06:26:05 |
| 112.120.245.213 | attackspambots | (sshd) Failed SSH login from 112.120.245.213 (HK/Hong Kong/n112120245213.netvigator.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 19 19:01:32 rainbow sshd[3261573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.120.245.213 user=root Sep 19 19:01:34 rainbow sshd[3261573]: Failed password for root from 112.120.245.213 port 50832 ssh2 Sep 19 19:01:36 rainbow sshd[3261603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.120.245.213 user=root Sep 19 19:01:37 rainbow sshd[3261620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.120.245.213 user=root Sep 19 19:01:38 rainbow sshd[3261603]: Failed password for root from 112.120.245.213 port 51292 ssh2 |
2020-09-20 06:27:23 |
| 159.203.188.175 | attack | Sep 19 22:26:46 IngegnereFirenze sshd[30261]: User root from 159.203.188.175 not allowed because not listed in AllowUsers ... |
2020-09-20 06:29:13 |
| 141.136.37.245 | attackspambots | SIP/5060 Probe, BF, Hack - |
2020-09-20 06:57:33 |
| 174.138.42.143 | attackbotsspam | Invalid user suser from 174.138.42.143 port 53068 |
2020-09-20 06:19:38 |
| 221.127.42.228 | attack | Sep 19 10:32:50 sip sshd[11357]: Failed password for root from 221.127.42.228 port 39028 ssh2 Sep 19 19:01:25 sip sshd[17380]: Failed password for root from 221.127.42.228 port 57651 ssh2 |
2020-09-20 06:41:02 |
| 76.102.119.124 | attackbots | SSH Invalid Login |
2020-09-20 06:42:08 |
| 220.134.123.203 | attack | Found on CINS badguys / proto=6 . srcport=17975 . dstport=23 . (2305) |
2020-09-20 06:31:50 |
| 198.71.55.148 | attackbotsspam | 198.71.55.148 (US/United States/-), 7 distributed sshd attacks on account [test] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 19 13:45:16 server2 sshd[20105]: Invalid user test from 122.51.234.86 Sep 19 13:05:17 server2 sshd[28807]: Invalid user test from 198.71.55.148 Sep 19 13:05:18 server2 sshd[28807]: Failed password for invalid user test from 198.71.55.148 port 52272 ssh2 Sep 19 13:24:47 server2 sshd[6721]: Invalid user test from 190.145.78.65 Sep 19 13:24:49 server2 sshd[6721]: Failed password for invalid user test from 190.145.78.65 port 45340 ssh2 Sep 19 13:43:48 server2 sshd[18973]: Invalid user test from 195.123.239.36 Sep 19 13:43:50 server2 sshd[18973]: Failed password for invalid user test from 195.123.239.36 port 47542 ssh2 IP Addresses Blocked: 122.51.234.86 (CN/China/-) |
2020-09-20 06:41:22 |
| 49.207.209.140 | attack | Unauthorized connection attempt from IP address 49.207.209.140 on Port 445(SMB) |
2020-09-20 06:48:41 |
| 23.129.64.181 | attackspam | SSH Invalid Login |
2020-09-20 06:23:00 |
| 188.77.63.254 | attack | Brute force 68 attempts |
2020-09-20 06:26:49 |
| 159.65.237.97 | attackspam | Invalid user ubuntu from 159.65.237.97 port 43882 |
2020-09-20 06:31:02 |