128.1.131.19 - IPInfo

基本信息:

城市(city): Hong Kong

省份(region): unknown

国家(country): Hong Kong

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
128.1.131.73	attackspam	128.1.131.73 - - [29/Apr/2020:23:16:09 +0200] "GET /wp-login.php HTTP/1.1" 200 6108 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 128.1.131.73 - - [29/Apr/2020:23:16:12 +0200] "POST /wp-login.php HTTP/1.1" 200 6338 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 128.1.131.73 - - [29/Apr/2020:23:16:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-04-30 06:01:26
128.1.131.9	attackbots	Repeated RDP login failures. Last user: Administrator	2020-04-02 14:05:12

类型

评论内容

时间

128.1.131.73

attackspam

128.1.131.73 - - [29/Apr/2020:23:16:09 +0200] "GET /wp-login.php HTTP/1.1" 200 6108 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
128.1.131.73 - - [29/Apr/2020:23:16:12 +0200] "POST /wp-login.php HTTP/1.1" 200 6338 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
128.1.131.73 - - [29/Apr/2020:23:16:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"

2020-04-30 06:01:26

128.1.131.9

attackbots

Repeated RDP login failures. Last user: Administrator

2020-04-02 14:05:12

WHOIS信息:

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#



# start

NetRange:       128.1.0.0 - 128.1.255.255
CIDR:           128.1.0.0/16
NetName:        ZL-LAX3-003
NetHandle:      NET-128-1-0-0-1
Parent:         NET128 (NET-128-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   Zenlayer Inc (ZENLA-7)
RegDate:        2016-09-07
Updated:        2018-01-12
Ref:            https://rdap.arin.net/registry/ip/128.1.0.0


OrgName:        Zenlayer Inc
OrgId:          ZENLA-7
Address:        21700 Copley Dr Suite 350
City:           Diamond Bar
StateProv:      CA
PostalCode:     91765
Country:        US
RegDate:        2017-12-27
Updated:        2026-06-09
Ref:            https://rdap.arin.net/registry/entity/ZENLA-7


OrgAbuseHandle: SOCOP-ARIN
OrgAbuseName:   SOC Ops
OrgAbusePhone:  +1-909-718-3558 
OrgAbuseEmail:  abuse@zenlayer.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/SOCOP-ARIN

OrgTechHandle: IPNOC27-ARIN
OrgTechName:   IPNOC
OrgTechPhone:  +1-800-858-7986 
OrgTechEmail:  ipnoc-t3@zenlayer.com
OrgTechRef:    https://rdap.arin.net/registry/entity/IPNOC27-ARIN

OrgNOCHandle: IPNOC27-ARIN
OrgNOCName:   IPNOC
OrgNOCPhone:  +1-800-858-7986 
OrgNOCEmail:  ipnoc-t3@zenlayer.com
OrgNOCRef:    https://rdap.arin.net/registry/entity/IPNOC27-ARIN

OrgTechHandle: TANGR16-ARIN
OrgTechName:   Tang, Ruifan 
OrgTechPhone:  +1-800-858-7986 
OrgTechEmail:  ruifan.tang@zenlayer.com
OrgTechRef:    https://rdap.arin.net/registry/entity/TANGR16-ARIN

OrgTechHandle: IPADM641-ARIN
OrgTechName:   IP ADMIN
OrgTechPhone:  +1-909-718-3558 
OrgTechEmail:  ipadmin@zenlayer.com
OrgTechRef:    https://rdap.arin.net/registry/entity/IPADM641-ARIN

OrgNOCHandle: IPADM641-ARIN
OrgNOCName:   IP ADMIN
OrgNOCPhone:  +1-909-718-3558 
OrgNOCEmail:  ipadmin@zenlayer.com
OrgNOCRef:    https://rdap.arin.net/registry/entity/IPADM641-ARIN

OrgTechHandle: CHUAN32-ARIN
OrgTechName:   Chuang, Zoe 
OrgTechPhone:  +1-909-718-3558 
OrgTechEmail:  zoe.chuang@zenlayer.com
OrgTechRef:    https://rdap.arin.net/registry/entity/CHUAN32-ARIN

# end


# start

NetRange:       128.1.131.0 - 128.1.131.255
CIDR:           128.1.131.0/24
NetName:        ZL-HKG-UCLOUD-0040
NetHandle:      NET-128-1-131-0-1
Parent:         ZL-LAX3-003 (NET-128-1-0-0-1)
NetType:        Reassigned
OriginAS:       
Organization:   UCLOUD (UCLOU-1)
RegDate:        2019-03-28
Updated:        2019-03-28
Comment:        Abuse please contact:unoc@ucloud.cn ，unom@ucloud.cn，hegui@ucloud.cn
Ref:            https://rdap.arin.net/registry/ip/128.1.131.0


OrgName:        UCLOUD
OrgId:          UCLOU-1
Address:        FLAT/RM 603 6/   FLAWS COMMERCIAL PLAZA 788 CHEUNG SHA WAN ROAD  KL
City:           Hong Kong
StateProv:      
PostalCode:     
Country:        HK
RegDate:        2019-02-28
Updated:        2019-02-28
Ref:            https://rdap.arin.net/registry/entity/UCLOU-1


OrgTechHandle: IAU2-ARIN
OrgTechName:   IP ABUSE Ucloud
OrgTechPhone:  +86 4000188113 
OrgTechEmail:  unoc@ucloud.cn
OrgTechRef:    https://rdap.arin.net/registry/entity/IAU2-ARIN

OrgAbuseHandle: IAU2-ARIN
OrgAbuseName:   IP ABUSE Ucloud
OrgAbusePhone:  +86 4000188113 
OrgAbuseEmail:  unoc@ucloud.cn
OrgAbuseRef:    https://rdap.arin.net/registry/entity/IAU2-ARIN

# end



#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 128.1.131.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39075
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;128.1.131.19.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026083001 1800 900 604800 86400

;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Aug 31 12:30:21 CST 2026
;; MSG SIZE  rcvd: 105

HOST信息:

Host 19.131.1.128.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 19.131.1.128.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
27.72.31.180	attackbotsspam	Lines containing failures of 27.72.31.180 Sep 19 18:47:43 shared04 sshd[8312]: Did not receive identification string from 27.72.31.180 port 60060 Sep 19 18:47:46 shared04 sshd[8314]: Invalid user adminixxxr from 27.72.31.180 port 60154 Sep 19 18:47:46 shared04 sshd[8314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.72.31.180 Sep 19 18:47:48 shared04 sshd[8314]: Failed password for invalid user adminixxxr from 27.72.31.180 port 60154 ssh2 Sep 19 18:47:48 shared04 sshd[8314]: Connection closed by invalid user adminixxxr 27.72.31.180 port 60154 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=27.72.31.180	2020-09-20 04:09:04
185.220.102.244	attack	2020-09-19T14:17:41.741101dreamphreak.com sshd[365886]: Failed password for root from 185.220.102.244 port 6442 ssh2 2020-09-19T14:17:43.817170dreamphreak.com sshd[365886]: Failed password for root from 185.220.102.244 port 6442 ssh2 ...	2020-09-20 04:21:45
95.142.121.18	attackspam	slow and persistent scanner	2020-09-20 04:11:03
218.103.131.205	attack	Sep 19 19:02:58 vps639187 sshd\[27235\]: Invalid user admin from 218.103.131.205 port 38729 Sep 19 19:02:58 vps639187 sshd\[27235\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.103.131.205 Sep 19 19:03:01 vps639187 sshd\[27235\]: Failed password for invalid user admin from 218.103.131.205 port 38729 ssh2 ...	2020-09-20 04:37:36
178.89.216.155	attackspambots	Sep 19 19:03:17 vps639187 sshd\[27326\]: Invalid user osmc from 178.89.216.155 port 33628 Sep 19 19:03:17 vps639187 sshd\[27326\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.89.216.155 Sep 19 19:03:20 vps639187 sshd\[27326\]: Failed password for invalid user osmc from 178.89.216.155 port 33628 ssh2 ...	2020-09-20 04:13:59
88.202.238.213	attackbots	E-Mail Spam (RBL) [REJECTED]	2020-09-20 04:39:24
187.55.168.198	attackspam	20/9/19@14:36:01: FAIL: Alarm-Network address from=187.55.168.198 20/9/19@14:36:01: FAIL: Alarm-Network address from=187.55.168.198 ...	2020-09-20 04:25:09
171.249.138.140	attackspambots	Invalid user admin from 171.249.138.140 port 57420	2020-09-20 04:18:13
222.186.175.183	attackspambots	Sep 19 22:30:17 marvibiene sshd[4049]: Failed password for root from 222.186.175.183 port 28204 ssh2 Sep 19 22:30:21 marvibiene sshd[4049]: Failed password for root from 222.186.175.183 port 28204 ssh2	2020-09-20 04:36:46
222.186.180.147	attack	Sep 19 13:01:42 dignus sshd[32718]: Failed password for root from 222.186.180.147 port 47190 ssh2 Sep 19 13:01:45 dignus sshd[32718]: Failed password for root from 222.186.180.147 port 47190 ssh2 Sep 19 13:01:49 dignus sshd[32718]: Failed password for root from 222.186.180.147 port 47190 ssh2 Sep 19 13:01:52 dignus sshd[32718]: Failed password for root from 222.186.180.147 port 47190 ssh2 Sep 19 13:01:55 dignus sshd[32718]: Failed password for root from 222.186.180.147 port 47190 ssh2 ...	2020-09-20 04:09:22
123.126.40.29	attackspambots	123.126.40.29 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 19 13:03:00 server2 sshd[27397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.126.40.29 user=root Sep 19 13:02:42 server2 sshd[27355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.78.16 user=root Sep 19 13:01:45 server2 sshd[26828]: Failed password for root from 104.131.48.67 port 56834 ssh2 Sep 19 13:02:52 server2 sshd[27371]: Failed password for root from 118.27.22.229 port 54214 ssh2 Sep 19 13:02:44 server2 sshd[27355]: Failed password for root from 188.166.78.16 port 50591 ssh2 IP Addresses Blocked:	2020-09-20 04:35:10
170.130.212.178	attack	2020-09-19 11:58:36.979043-0500 localhost smtpd[25603]: NOQUEUE: reject: RCPT from unknown[170.130.212.178]: 554 5.7.1 Service unavailable; Client host [170.130.212.178] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<00ea91a1.powerhigh.co>	2020-09-20 04:30:14
111.231.88.39	attackspam	SSH Brute-force	2020-09-20 04:20:06
193.154.75.43	attack	Sep 19 19:02:56 vps639187 sshd\[27233\]: Invalid user pi from 193.154.75.43 port 35390 Sep 19 19:02:56 vps639187 sshd\[27233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.154.75.43 Sep 19 19:02:59 vps639187 sshd\[27233\]: Failed password for invalid user pi from 193.154.75.43 port 35390 ssh2 ...	2020-09-20 04:43:32
49.88.112.69	attackbotsspam	(sshd) Failed SSH login from 49.88.112.69 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 19 13:03:11 optimus sshd[16237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.69 user=root Sep 19 13:03:12 optimus sshd[16237]: Failed password for root from 49.88.112.69 port 50095 ssh2 Sep 19 13:03:14 optimus sshd[16237]: Failed password for root from 49.88.112.69 port 50095 ssh2 Sep 19 13:03:17 optimus sshd[16237]: Failed password for root from 49.88.112.69 port 50095 ssh2 Sep 19 13:03:18 optimus sshd[16288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.69 user=root	2020-09-20 04:12:10

最近上报的IP列表

58.13.244.50	103.83.87.91	60.27.225.65	42.238.93.51
40.124.112.163	116.168.60.135	115.53.102.13	54.136.81.11
151.245.151.185	39.184.8.176	39.154.22.216	39.151.85.92
39.149.243.35	39.149.143.148	36.161.129.34	36.143.157.120
223.91.99.8	223.91.40.134	223.88.244.106	223.74.143.164