80.134.28.127 - IPInfo

基本信息:

城市(city): Bergneustadt

省份(region): North Rhine-Westphalia

国家(country): Germany

运营商(isp): Deutsche Telekom AG

主机名(hostname): unknown

机构(organization): Deutsche Telekom AG

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	\[2019-08-07 21:41:45\] NOTICE\[32542\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '80.134.28.127:5060' \(callid: 5C45BBA28991ADD7@80.134.28.127\) - Failed to authenticate \[2019-08-07 21:41:45\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-08-07T21:41:45.517+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="sip219222",SessionID="5C45BBA28991ADD7@80.134.28.127",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/80.134.28.127/5060",Challenge="1565205105/a0ae79e729103e7fa4110ef39512777c",Response="cc28d240e22551882b3da0981bb98f9d",ExpectedResponse="" \[2019-08-07 21:41:45\] NOTICE\[26038\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '80.134.28.127:5060' \(callid: 5C45BBA28991ADD7@80.134.28.127\) - Failed to authenticate \[2019-08-07 21:41:45\] SECURITY\[1715\] res_security_log.c: SecurityE	2019-08-08 04:23:36

类型

评论内容

时间

attackspambots

\[2019-08-07 21:41:45\] NOTICE\[32542\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '80.134.28.127:5060' \(callid: 5C45BBA28991ADD7@80.134.28.127\) - Failed to authenticate
\[2019-08-07 21:41:45\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-08-07T21:41:45.517+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="sip219222",SessionID="5C45BBA28991ADD7@80.134.28.127",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/80.134.28.127/5060",Challenge="1565205105/a0ae79e729103e7fa4110ef39512777c",Response="cc28d240e22551882b3da0981bb98f9d",ExpectedResponse=""
\[2019-08-07 21:41:45\] NOTICE\[26038\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '80.134.28.127:5060' \(callid: 5C45BBA28991ADD7@80.134.28.127\) - Failed to authenticate
\[2019-08-07 21:41:45\] SECURITY\[1715\] res_security_log.c: SecurityE

2019-08-08 04:23:36

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.134.28.127
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18445
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;80.134.28.127.			IN	A

;; AUTHORITY SECTION:
.			2673	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080701 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Aug 08 04:23:31 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

127.28.134.80.in-addr.arpa domain name pointer p50861C7F.dip0.t-ipconnect.de.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
127.28.134.80.in-addr.arpa	name = p50861C7F.dip0.t-ipconnect.de.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
177.1.249.144	attackbots	Sep 22 08:10:22 sip sshd[14746]: Failed password for root from 177.1.249.144 port 45406 ssh2 Sep 22 19:00:50 sip sshd[26694]: Failed password for root from 177.1.249.144 port 56790 ssh2	2020-09-23 07:27:00
37.59.224.39	attack	s2.hscode.pl - SSH Attack	2020-09-23 07:28:27
49.88.112.110	attackbotsspam	Sep 23 06:50:21 webhost01 sshd[1464]: Failed password for root from 49.88.112.110 port 58182 ssh2 ...	2020-09-23 07:57:50
185.191.171.17	attack	Brute force attack stopped by firewall	2020-09-23 08:03:35
118.123.244.100	attackbotsspam	ssh brute force	2020-09-23 07:31:41
157.245.54.15	attackbots	2020-09-22T17:34:29.683889mail.thespaminator.com sshd[5868]: Invalid user guest from 157.245.54.15 port 42656 2020-09-22T17:34:31.976898mail.thespaminator.com sshd[5868]: Failed password for invalid user guest from 157.245.54.15 port 42656 ssh2 ...	2020-09-23 07:52:21
123.59.62.57	attack	20 attempts against mh-ssh on pcx	2020-09-23 07:51:23
184.70.244.67	attack	$f2bV_matches	2020-09-23 07:57:20
138.197.222.141	attackbots	Sep 23 01:06:18 host sshd[6691]: Invalid user tom from 138.197.222.141 port 43402 ...	2020-09-23 07:34:02
139.186.73.140	attackspam	SSH Invalid Login	2020-09-23 07:28:42
149.56.12.88	attack	Sep 22 23:50:48 vserver sshd\[30893\]: Invalid user webmaster from 149.56.12.88Sep 22 23:50:51 vserver sshd\[30893\]: Failed password for invalid user webmaster from 149.56.12.88 port 60060 ssh2Sep 22 23:54:11 vserver sshd\[31230\]: Invalid user bert from 149.56.12.88Sep 22 23:54:13 vserver sshd\[31230\]: Failed password for invalid user bert from 149.56.12.88 port 40502 ssh2 ...	2020-09-23 07:54:46
46.146.240.185	attackbots	Sep 23 01:42:24 srv-ubuntu-dev3 sshd[94462]: Invalid user user7 from 46.146.240.185 Sep 23 01:42:24 srv-ubuntu-dev3 sshd[94462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.146.240.185 Sep 23 01:42:24 srv-ubuntu-dev3 sshd[94462]: Invalid user user7 from 46.146.240.185 Sep 23 01:42:27 srv-ubuntu-dev3 sshd[94462]: Failed password for invalid user user7 from 46.146.240.185 port 44885 ssh2 Sep 23 01:46:07 srv-ubuntu-dev3 sshd[95022]: Invalid user git from 46.146.240.185 Sep 23 01:46:07 srv-ubuntu-dev3 sshd[95022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.146.240.185 Sep 23 01:46:07 srv-ubuntu-dev3 sshd[95022]: Invalid user git from 46.146.240.185 Sep 23 01:46:09 srv-ubuntu-dev3 sshd[95022]: Failed password for invalid user git from 46.146.240.185 port 49395 ssh2 Sep 23 01:49:44 srv-ubuntu-dev3 sshd[95457]: Invalid user dmitry from 46.146.240.185 ...	2020-09-23 08:04:07
3.236.184.241	attack	Automatic report - Port Scan	2020-09-23 07:53:47
159.65.157.70	attackspambots	Invalid user adriana from 159.65.157.70 port 34122	2020-09-23 07:46:53
103.142.34.34	attackbotsspam	Time: Tue Sep 22 22:46:52 2020 +0000 IP: 103.142.34.34 (BD/Bangladesh/ns1.gnetworkbd.com) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 22 22:31:40 37-1 sshd[21760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.142.34.34 user=root Sep 22 22:31:43 37-1 sshd[21760]: Failed password for root from 103.142.34.34 port 42218 ssh2 Sep 22 22:42:28 37-1 sshd[22663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.142.34.34 user=root Sep 22 22:42:30 37-1 sshd[22663]: Failed password for root from 103.142.34.34 port 56242 ssh2 Sep 22 22:46:51 37-1 sshd[23063]: Invalid user albert from 103.142.34.34 port 36242	2020-09-23 07:46:11

最近上报的IP列表

183.12.129.228	77.40.61.94	176.150.187.110	220.181.108.179
113.107.105.58	39.111.31.4	145.251.22.28	143.217.55.153
65.188.185.1	140.176.150.231	85.254.39.235	198.251.82.92
179.242.199.232	205.145.155.44	113.1.26.175	219.247.135.178
59.18.198.89	58.175.112.165	209.141.52.141	141.24.194.4