城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '219.227.0.0 - 219.227.255.255'
% Abuse contact for '219.227.0.0 - 219.227.255.255' is 'abuse@cernet.edu.cn'
inetnum: 219.227.0.0 - 219.227.255.255
netname: GZR-CERNET
descr: China Education and Research Network
descr: Guangzhou Regional Network
country: CN
admin-c: CER-AP
tech-c: CER-AP
abuse-c: AC1685-AP
status: ALLOCATED PORTABLE
remarks: origin AS4538
remarks: confederation
remarks: GZR-CERNET
mnt-by: APNIC-HM
mnt-lower: MAINT-CERNET-AP
mnt-routes: MAINT-CERNET-AP
mnt-irt: IRT-CERNET-AP
last-modified: 2020-09-03T09:16:24Z
source: APNIC
irt: IRT-CERNET-AP
address: Network Center,
address: FIT-3-220, Tsinghua Univ
address: Beijing 100084, China
phone: +86-10-62784301
fax-no: +86-10-62785933
e-mail: abuse@cernet.edu.cn
abuse-mailbox: abuse@cernet.edu.cn
admin-c: CER-AP
tech-c: CER-AP
auth: # Filtered
remarks: timezone GMT+8
remarks: abuse@cernet.edu.cn was validated on 2026-03-05
mnt-by: MAINT-CERNET-AP
last-modified: 2026-05-25T09:07:47Z
source: APNIC
role: ABUSE CERNETAP
country: ZZ
address: Network Center,
address: FIT-3-220, Tsinghua Univ
address: Beijing 100084, China
phone: +86-10-62784301
e-mail: abuse@cernet.edu.cn
admin-c: CER-AP
tech-c: CER-AP
nic-hdl: AC1685-AP
remarks: Generated from irt object IRT-CERNET-AP
remarks: abuse@cernet.edu.cn was validated on 2026-03-05
abuse-mailbox: abuse@cernet.edu.cn
mnt-by: APNIC-ABUSE
last-modified: 2026-03-05T06:40:20Z
source: APNIC
role: CERNET Helpdesk
address: CERNET Center
address: Beijing 100084, China
country: CN
phone: +86-10-6278-4049
fax-no: +86-10-6278-5933
e-mail: helpdesk@cernet.edu.cn
remarks: abuse@cernet.edu.cn
admin-c: XL1-CN
tech-c: SZ2-AP
nic-hdl: CER-AP
mnt-by: MAINT-CERNET-AP
last-modified: 2020-09-03T09:14:12Z
source: APNIC
% Information related to '219.227.0.0/16AS4538'
route: 219.227.0.0/16
descr: CERNET
origin: AS4538
mnt-by: MAINT-CERNET-AP
last-modified: 2026-06-16T08:44:50Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 219.227.68.165
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18100
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;219.227.68.165. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026070703 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jul 08 10:04:07 CST 2026
;; MSG SIZE rcvd: 107Host 165.68.227.219.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 165.68.227.219.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 49.88.112.75 | attackspambots | Dec 3 17:39:58 vps666546 sshd\[14979\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.75 user=root Dec 3 17:40:01 vps666546 sshd\[14979\]: Failed password for root from 49.88.112.75 port 16057 ssh2 Dec 3 17:40:03 vps666546 sshd\[14979\]: Failed password for root from 49.88.112.75 port 16057 ssh2 Dec 3 17:40:05 vps666546 sshd\[14979\]: Failed password for root from 49.88.112.75 port 16057 ssh2 Dec 3 17:40:59 vps666546 sshd\[15034\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.75 user=root ... |
2019-12-04 00:45:17 |
| 13.239.56.51 | attack | RDP brute forcing (d) |
2019-12-04 00:45:33 |
| 187.190.235.89 | attackbotsspam | Dec 3 17:25:52 OPSO sshd\[10173\]: Invalid user bruegmann from 187.190.235.89 port 53590 Dec 3 17:25:52 OPSO sshd\[10173\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.190.235.89 Dec 3 17:25:55 OPSO sshd\[10173\]: Failed password for invalid user bruegmann from 187.190.235.89 port 53590 ssh2 Dec 3 17:34:38 OPSO sshd\[11698\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.190.235.89 user=root Dec 3 17:34:39 OPSO sshd\[11698\]: Failed password for root from 187.190.235.89 port 59197 ssh2 |
2019-12-04 00:51:39 |
| 170.233.12.7 | attackbots | Fail2Ban Ban Triggered |
2019-12-04 00:43:32 |
| 82.64.189.69 | attack | Automatic report - Port Scan Attack |
2019-12-04 01:02:21 |
| 154.117.154.34 | attackspam | Unauthorised access (Dec 3) SRC=154.117.154.34 LEN=40 TTL=51 ID=9576 TCP DPT=23 WINDOW=32947 SYN Unauthorised access (Dec 3) SRC=154.117.154.34 LEN=40 TTL=51 ID=53353 TCP DPT=23 WINDOW=32947 SYN |
2019-12-04 00:36:00 |
| 115.29.11.56 | attackbots | Dec 3 16:28:36 sauna sshd[241775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.29.11.56 Dec 3 16:28:37 sauna sshd[241775]: Failed password for invalid user krishnavani from 115.29.11.56 port 41719 ssh2 ... |
2019-12-04 01:05:15 |
| 164.132.110.223 | attack | Tried sshing with brute force. |
2019-12-04 01:12:08 |
| 138.94.114.238 | attack | Dec 3 06:40:41 web9 sshd\[7045\]: Invalid user asterisk from 138.94.114.238 Dec 3 06:40:41 web9 sshd\[7045\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.94.114.238 Dec 3 06:40:43 web9 sshd\[7045\]: Failed password for invalid user asterisk from 138.94.114.238 port 50128 ssh2 Dec 3 06:47:39 web9 sshd\[8072\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.94.114.238 user=backup Dec 3 06:47:41 web9 sshd\[8072\]: Failed password for backup from 138.94.114.238 port 52794 ssh2 |
2019-12-04 00:48:38 |
| 203.195.207.40 | attackspambots | no |
2019-12-04 00:52:58 |
| 149.56.141.193 | attackspam | Dec 3 16:19:08 zeus sshd[6919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.141.193 Dec 3 16:19:10 zeus sshd[6919]: Failed password for invalid user sales from 149.56.141.193 port 36664 ssh2 Dec 3 16:24:43 zeus sshd[7045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.141.193 Dec 3 16:24:45 zeus sshd[7045]: Failed password for invalid user ident from 149.56.141.193 port 47198 ssh2 |
2019-12-04 00:41:22 |
| 46.166.148.210 | attackbotsspam | \[2019-12-03 11:24:28\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-03T11:24:28.855-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="01113183142436",SessionID="0x7f26c4840358",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.148.210/61962",ACLName="no_extension_match" \[2019-12-03 11:24:39\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-03T11:24:39.349-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="01116155520134",SessionID="0x7f26c4276ea8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.148.210/62060",ACLName="no_extension_match" \[2019-12-03 11:24:51\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-03T11:24:51.573-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="01117622262163",SessionID="0x7f26c445f668",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.148.210/55572",ACLName="no_ext |
2019-12-04 00:39:22 |
| 218.92.0.180 | attackspambots | Dec 3 16:57:30 localhost sshd[28253]: Failed password for root from 218.92.0.180 port 46890 ssh2 Dec 3 16:57:33 localhost sshd[28253]: Failed password for root from 218.92.0.180 port 46890 ssh2 Dec 3 16:57:34 localhost sshd[28253]: error: maximum authentication attempts exceeded for root from 218.92.0.180 port 46890 ssh2 [preauth] Dec 3 16:57:37 localhost sshd[28259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.180 user=root Dec 3 16:57:40 localhost sshd[28259]: Failed password for root from 218.92.0.180 port 13957 ssh2 |
2019-12-04 01:04:28 |
| 101.251.228.26 | attackspam | Dec 3 16:36:37 tux-35-217 sshd\[20355\]: Invalid user binte from 101.251.228.26 port 41760 Dec 3 16:36:37 tux-35-217 sshd\[20355\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.251.228.26 Dec 3 16:36:39 tux-35-217 sshd\[20355\]: Failed password for invalid user binte from 101.251.228.26 port 41760 ssh2 Dec 3 16:45:43 tux-35-217 sshd\[20468\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.251.228.26 user=root ... |
2019-12-04 00:52:01 |
| 123.58.251.17 | attackbotsspam | Dec 3 16:30:59 nextcloud sshd\[29299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.58.251.17 user=root Dec 3 16:31:01 nextcloud sshd\[29299\]: Failed password for root from 123.58.251.17 port 42704 ssh2 Dec 3 16:48:17 nextcloud sshd\[25074\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.58.251.17 user=backup ... |
2019-12-04 01:01:58 |