219.77.140.253

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): Hong Kong Telecommunications (HKT) Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Invalid user admin from 219.77.140.253	2020-09-11 22:34:53
attack	Invalid user admin from 219.77.140.253	2020-09-11 14:41:57
attack	Invalid user admin from 219.77.140.253	2020-09-11 06:52:10

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 219.77.140.253
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54929
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;219.77.140.253.			IN	A

;; AUTHORITY SECTION:
.			256	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020091001 1800 900 604800 86400

;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 11 06:52:07 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

253.140.77.219.in-addr.arpa domain name pointer n219077140253.netvigator.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
253.140.77.219.in-addr.arpa	name = n219077140253.netvigator.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
51.158.25.170	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-01 14:49:36
114.245.45.181	attack	Feb 1 07:14:46 debian-2gb-nbg1-2 kernel: \[2796943.683736\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=114.245.45.181 DST=195.201.40.59 LEN=52 TOS=0x00 PREC=0x00 TTL=106 ID=9872 DF PROTO=TCP SPT=58539 DPT=24237 WINDOW=65535 RES=0x00 SYN URGP=0 Feb 1 07:14:46 debian-2gb-nbg1-2 kernel: \[2796943.704120\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=114.245.45.181 DST=195.201.40.59 LEN=52 TOS=0x00 PREC=0x00 TTL=106 ID=9873 DF PROTO=TCP SPT=58540 DPT=247 WINDOW=65535 RES=0x00 SYN URGP=0 Feb 1 07:14:46 debian-2gb-nbg1-2 kernel: \[2796943.716479\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=114.245.45.181 DST=195.201.40.59 LEN=52 TOS=0x00 PREC=0x00 TTL=106 ID=9874 DF PROTO=TCP SPT=58541 DPT=48432 WINDOW=65535 RES=0x00 SYN URGP=0	2020-02-01 15:03:31
157.230.55.177	attackbotsspam	WordPress wp-login brute force :: 157.230.55.177 0.288 - [01/Feb/2020:04:55:44 0000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 1806 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "HTTP/1.1"	2020-02-01 15:11:09
118.89.249.95	attackspambots	Invalid user kobis from 118.89.249.95 port 36636	2020-02-01 15:05:29
51.79.25.38	attack	$f2bV_matches	2020-02-01 15:10:17
46.191.138.204	attackspambots	Attempt to attack host OS, exploiting network vulnerabilities, on 01-02-2020 04:55:10.	2020-02-01 15:33:37
168.232.198.218	attackspambots	$f2bV_matches	2020-02-01 15:12:06
35.180.243.229	attackbots	[SatFeb0105:55:03.4634772020][:error][pid21558:tid47092718393088][client35.180.243.229:59454][client35.180.243.229]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\\\\\\\.ini\\|web.config\)\\\\\\\\b\\|$\\|\^\\|\\\\\\\\.\\\\\\\\.$/etc/\\|/\\\\\\\\.$\?:history\\|bash_history\\|sh_history\\|env$\$\)"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"211"][id"390709"][rev"30"][msg"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely"][data"/.env"][severity"CRITICAL"][hostname"fit-easy.com"][uri"/.env"][unique_id"XjUEp1lw@ITNBo5tuwhVOgAAAVI"][SatFeb0105:55:04.1422642020][:error][pid21463:tid47092612081408][client35.180.243.229:60096][client35.180.243.229]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf	2020-02-01 15:34:51
152.136.55.139	attackspambots	Unauthorized connection attempt detected from IP address 152.136.55.139 to port 2220 [J]	2020-02-01 15:18:38
194.26.29.129	attackbotsspam	firewall-block, port(s): 33035/tcp, 33057/tcp, 33058/tcp, 33123/tcp	2020-02-01 14:50:26
163.172.119.155	attackbots	[2020-02-01 01:26:04] NOTICE[1148] chan_sip.c: Registration from '"344"' failed for '163.172.119.155:7208' - Wrong password [2020-02-01 01:26:04] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-01T01:26:04.024-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="344",SessionID="0x7fd82cd25138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.119.155/7208",Challenge="6e224f25",ReceivedChallenge="6e224f25",ReceivedHash="1dcb68c3849739faf002f95e43a1a826" [2020-02-01 01:26:36] NOTICE[1148] chan_sip.c: Registration from '"344"' failed for '163.172.119.155:7254' - Wrong password [2020-02-01 01:26:36] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-01T01:26:36.651-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="344",SessionID="0x7fd82cd25138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163. ...	2020-02-01 14:49:22
217.182.78.87	attackbotsspam	Invalid user msql from 217.182.78.87 port 44048	2020-02-01 15:20:58
221.194.44.156	attackspambots	ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic	2020-02-01 15:01:23
91.54.35.199	attackspambots	Feb 1 07:55:21 server sshd\[17440\]: Invalid user pi from 91.54.35.199 Feb 1 07:55:21 server sshd\[17440\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=p5b3623c7.dip0.t-ipconnect.de Feb 1 07:55:21 server sshd\[17442\]: Invalid user pi from 91.54.35.199 Feb 1 07:55:21 server sshd\[17442\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=p5b3623c7.dip0.t-ipconnect.de Feb 1 07:55:23 server sshd\[17440\]: Failed password for invalid user pi from 91.54.35.199 port 39044 ssh2 ...	2020-02-01 15:22:44
69.229.6.33	attackbotsspam	Unauthorized connection attempt detected from IP address 69.229.6.33 to port 2220 [J]	2020-02-01 15:30:28

最近上报的IP列表

154.234.96.41	27.6.204.181	1.64.221.30	187.109.32.186
251.3.53.241	36.235.71.115	205.215.251.14	189.90.183.67
183.101.244.165	58.61.145.26	106.105.142.109	190.143.53.195
49.36.229.71	212.252.139.246	119.193.158.232	178.137.83.51
112.53.72.163	27.2.186.72	185.203.242.244	78.46.241.188