139.199.228.133

基本信息:

城市(city): Beijing

省份(region): Beijing

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd.

主机名(hostname): unknown

机构(organization): Shenzhen Tencent Computer Systems Company Limited

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Oct 9 00:11:50 slaro sshd\[11211\]: Invalid user cron from 139.199.228.133 Oct 9 00:11:50 slaro sshd\[11211\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.228.133 Oct 9 00:11:53 slaro sshd\[11211\]: Failed password for invalid user cron from 139.199.228.133 port 12623 ssh2 ...	2020-10-09 06:46:27
attackspam	Oct 08 08:08:17 askasleikir sshd[43451]: Failed password for root from 139.199.228.133 port 28627 ssh2 Oct 08 08:13:33 askasleikir sshd[43485]: Failed password for root from 139.199.228.133 port 50069 ssh2	2020-10-08 23:09:21
attackspambots	Oct 8 08:45:15 buvik sshd[20213]: Failed password for root from 139.199.228.133 port 20378 ssh2 Oct 8 08:47:29 buvik sshd[20456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.228.133 user=root Oct 8 08:47:31 buvik sshd[20456]: Failed password for root from 139.199.228.133 port 33133 ssh2 ...	2020-10-08 15:04:38
attackbotsspam	[f2b] sshd bruteforce, retries: 1	2020-09-13 02:26:52
attack	...	2020-09-12 18:29:36
attackspam	SSH bruteforce	2020-09-09 03:36:03
attack	Sep 8 09:22:58 prox sshd[16697]: Failed password for root from 139.199.228.133 port 9016 ssh2	2020-09-08 19:14:22
attackspambots	Aug 31 13:32:34 django-0 sshd[27253]: Invalid user steam from 139.199.228.133 ...	2020-08-31 22:59:51
attackbots	Invalid user gilbert from 139.199.228.133 port 39354	2020-08-31 18:42:13
attackspam	Invalid user gilbert from 139.199.228.133 port 39354	2020-08-31 07:10:35
attackbots	Aug 19 11:53:15 vpn01 sshd[23299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.228.133 Aug 19 11:53:17 vpn01 sshd[23299]: Failed password for invalid user admin from 139.199.228.133 port 26786 ssh2 ...	2020-08-19 18:32:43
attackbots	SSH BruteForce Attack	2020-08-13 13:23:37
attackspambots	Aug 11 03:50:59 *** sshd[19498]: User root from 139.199.228.133 not allowed because not listed in AllowUsers	2020-08-11 17:17:16
attackbotsspam	Connection to SSH Honeypot - Detected by HoneypotDB	2020-08-07 16:54:14
attackspam	2020-07-30T05:51:59.494801centos sshd[11517]: Invalid user tym from 139.199.228.133 port 32224 2020-07-30T05:52:01.063348centos sshd[11517]: Failed password for invalid user tym from 139.199.228.133 port 32224 ssh2 2020-07-30T05:55:49.411446centos sshd[11728]: Invalid user yanze from 139.199.228.133 port 51714 ...	2020-07-30 12:33:21
attack	$f2bV_matches	2020-07-15 09:41:41
attackspam	SSH Invalid Login	2020-07-08 05:59:23
attackbots	Jul 6 15:22:04 inter-technics sshd[9935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.228.133 user=root Jul 6 15:22:06 inter-technics sshd[9935]: Failed password for root from 139.199.228.133 port 57841 ssh2 Jul 6 15:25:11 inter-technics sshd[10178]: Invalid user test1 from 139.199.228.133 port 20509 Jul 6 15:25:11 inter-technics sshd[10178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.228.133 Jul 6 15:25:11 inter-technics sshd[10178]: Invalid user test1 from 139.199.228.133 port 20509 Jul 6 15:25:13 inter-technics sshd[10178]: Failed password for invalid user test1 from 139.199.228.133 port 20509 ssh2 ...	2020-07-06 22:09:58
attackbotsspam	Jul 6 06:56:59 server sshd[21032]: Failed password for root from 139.199.228.133 port 23221 ssh2 Jul 6 07:00:19 server sshd[23884]: Failed password for root from 139.199.228.133 port 43436 ssh2 Jul 6 07:03:35 server sshd[26353]: Failed password for root from 139.199.228.133 port 63656 ssh2	2020-07-06 13:54:59
attackbotsspam	Jun 25 15:08:28 meumeu sshd[1413645]: Invalid user demo from 139.199.228.133 port 46544 Jun 25 15:08:28 meumeu sshd[1413645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.228.133 Jun 25 15:08:28 meumeu sshd[1413645]: Invalid user demo from 139.199.228.133 port 46544 Jun 25 15:08:30 meumeu sshd[1413645]: Failed password for invalid user demo from 139.199.228.133 port 46544 ssh2 Jun 25 15:12:06 meumeu sshd[1413883]: Invalid user oscar from 139.199.228.133 port 12598 Jun 25 15:12:06 meumeu sshd[1413883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.228.133 Jun 25 15:12:06 meumeu sshd[1413883]: Invalid user oscar from 139.199.228.133 port 12598 Jun 25 15:12:08 meumeu sshd[1413883]: Failed password for invalid user oscar from 139.199.228.133 port 12598 ssh2 Jun 25 15:15:49 meumeu sshd[1414026]: Invalid user hml from 139.199.228.133 port 35150 ...	2020-06-25 21:49:50
attack	Jun 2 05:52:14 sshd\[31368\]: User root from 139.199.228.133 not allowed because not listed in AllowUsersJun 2 05:52:16 sshd\[31368\]: Failed password for invalid user root from 139.199.228.133 port 18808 ssh2 ...	2020-06-02 14:56:44
attackspam	Invalid user gnj from 139.199.228.133 port 37899	2020-05-21 15:06:27
attackbots	Invalid user admin from 139.199.228.133 port 18873	2020-05-16 15:39:26
attack	k+ssh-bruteforce	2020-05-08 23:56:47
attack	May 2 10:29:55 vmd17057 sshd[29214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.228.133 May 2 10:29:57 vmd17057 sshd[29214]: Failed password for invalid user internet from 139.199.228.133 port 13033 ssh2 ...	2020-05-02 17:30:43
attackspam	$f2bV_matches	2020-04-18 06:43:18
attackspambots	SSH Brute Force	2020-04-11 07:11:44
attackspam	k+ssh-bruteforce	2020-04-08 17:10:36
attackbotsspam	Mar 28 23:06:22 [host] sshd[4459]: Invalid user me Mar 28 23:06:22 [host] sshd[4459]: pam_unix(sshd:a Mar 28 23:06:24 [host] sshd[4459]: Failed password	2020-03-29 08:22:49
attackspambots	Mar 10 08:41:10 marvibiene sshd[1568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.228.133 user=root Mar 10 08:41:11 marvibiene sshd[1568]: Failed password for root from 139.199.228.133 port 16731 ssh2 Mar 10 09:25:15 marvibiene sshd[2074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.228.133 user=root Mar 10 09:25:17 marvibiene sshd[2074]: Failed password for root from 139.199.228.133 port 62367 ssh2 ...	2020-03-10 20:00:11

相同子网IP讨论:

IP	类型	评论内容	时间
139.199.228.154	attackbots	Exploited Host.	2020-07-26 02:24:36
139.199.228.154	attack	Brute-force attempt banned	2020-06-29 13:36:03
139.199.228.154	attack	$f2bV_matches	2020-06-13 16:16:57
139.199.228.154	attack	frenzy	2020-06-07 17:27:33
139.199.228.154	attackspam	Invalid user uko from 139.199.228.154 port 60180	2020-05-24 02:18:52
139.199.228.154	attackbots	May 13 08:50:03 ns382633 sshd\[474\]: Invalid user porn from 139.199.228.154 port 54096 May 13 08:50:03 ns382633 sshd\[474\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.228.154 May 13 08:50:05 ns382633 sshd\[474\]: Failed password for invalid user porn from 139.199.228.154 port 54096 ssh2 May 13 08:54:24 ns382633 sshd\[1355\]: Invalid user deploy from 139.199.228.154 port 34934 May 13 08:54:24 ns382633 sshd\[1355\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.228.154	2020-05-13 16:14:06
139.199.228.154	attackspam	k+ssh-bruteforce	2020-05-10 14:26:02
139.199.228.154	attack	May 4 15:57:12 plex sshd[11844]: Invalid user wh from 139.199.228.154 port 46960	2020-05-05 03:36:46
139.199.228.154	attack	invalid user	2020-05-03 18:49:36
139.199.228.154	attack	Invalid user dylan from 139.199.228.154 port 36700	2020-05-01 18:02:48
139.199.228.154	attackspam	Apr 14 22:41:10 srv-ubuntu-dev3 sshd[35369]: Invalid user bmuuser from 139.199.228.154 Apr 14 22:41:10 srv-ubuntu-dev3 sshd[35369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.228.154 Apr 14 22:41:10 srv-ubuntu-dev3 sshd[35369]: Invalid user bmuuser from 139.199.228.154 Apr 14 22:41:12 srv-ubuntu-dev3 sshd[35369]: Failed password for invalid user bmuuser from 139.199.228.154 port 47230 ssh2 Apr 14 22:43:44 srv-ubuntu-dev3 sshd[35742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.228.154 user=root Apr 14 22:43:46 srv-ubuntu-dev3 sshd[35742]: Failed password for root from 139.199.228.154 port 45694 ssh2 Apr 14 22:46:04 srv-ubuntu-dev3 sshd[36141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.228.154 user=root Apr 14 22:46:07 srv-ubuntu-dev3 sshd[36141]: Failed password for root from 139.199.228.154 port 44150 ssh2 Apr 14 22:48:34 srv- ...	2020-04-15 06:54:20
139.199.228.154	attackspam	SSH Invalid Login	2020-04-12 07:19:03
139.199.228.154	attackspambots	Mar 29 03:32:44 firewall sshd[2447]: Invalid user yev from 139.199.228.154 Mar 29 03:32:46 firewall sshd[2447]: Failed password for invalid user yev from 139.199.228.154 port 33242 ssh2 Mar 29 03:39:38 firewall sshd[2785]: Invalid user rica from 139.199.228.154 ...	2020-03-29 17:02:55
139.199.228.154	attackspambots	20 attempts against mh-ssh on echoip	2020-03-25 02:04:07
139.199.228.154	attackspam	Feb 12 22:32:46 server sshd\[17178\]: Invalid user aqjava from 139.199.228.154 Feb 12 22:32:46 server sshd\[17178\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.228.154 Feb 12 22:32:48 server sshd\[17178\]: Failed password for invalid user aqjava from 139.199.228.154 port 56226 ssh2 Feb 13 12:01:38 server sshd\[30434\]: Invalid user catego from 139.199.228.154 Feb 13 12:01:38 server sshd\[30434\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.228.154 ...	2020-02-13 19:11:56

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.228.133
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53448
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.199.228.133.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040801 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Tue Apr 09 12:55:39 +08 2019
;; MSG SIZE  rcvd: 119

HOST信息:

Host 133.228.199.139.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 133.228.199.139.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
163.172.157.162	attack	Oct 22 09:25:49 plusreed sshd[3641]: Invalid user iemergen from 163.172.157.162 ...	2019-10-22 21:26:24
103.85.160.9	attackbotsspam	" "	2019-10-22 21:09:49
222.186.175.212	attackbotsspam	Oct 22 15:22:54 dcd-gentoo sshd[26345]: User root from 222.186.175.212 not allowed because none of user's groups are listed in AllowGroups Oct 22 15:22:59 dcd-gentoo sshd[26345]: error: PAM: Authentication failure for illegal user root from 222.186.175.212 Oct 22 15:22:54 dcd-gentoo sshd[26345]: User root from 222.186.175.212 not allowed because none of user's groups are listed in AllowGroups Oct 22 15:22:59 dcd-gentoo sshd[26345]: error: PAM: Authentication failure for illegal user root from 222.186.175.212 Oct 22 15:22:54 dcd-gentoo sshd[26345]: User root from 222.186.175.212 not allowed because none of user's groups are listed in AllowGroups Oct 22 15:22:59 dcd-gentoo sshd[26345]: error: PAM: Authentication failure for illegal user root from 222.186.175.212 Oct 22 15:22:59 dcd-gentoo sshd[26345]: Failed keyboard-interactive/pam for invalid user root from 222.186.175.212 port 62014 ssh2 ...	2019-10-22 21:28:50
23.129.64.158	attackbots	Oct 22 15:24:08 vpn01 sshd[7859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.129.64.158 Oct 22 15:24:10 vpn01 sshd[7859]: Failed password for invalid user administrator from 23.129.64.158 port 18243 ssh2 ...	2019-10-22 21:32:03
45.136.109.215	attackbotsspam	Oct 22 14:51:26 mc1 kernel: \[3035036.798871\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.215 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=38672 PROTO=TCP SPT=43015 DPT=3881 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 22 14:55:24 mc1 kernel: \[3035274.290419\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.215 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=22136 PROTO=TCP SPT=43015 DPT=3173 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 22 14:56:51 mc1 kernel: \[3035362.117446\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.215 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=1997 PROTO=TCP SPT=43015 DPT=4432 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2019-10-22 21:14:23
58.193.0.58	attack	10/22/2019-07:52:07.077296 58.193.0.58 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 53	2019-10-22 21:17:06
222.136.250.85	attackbots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/222.136.250.85/ CN - 1H : (416) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4837 IP : 222.136.250.85 CIDR : 222.136.0.0/13 PREFIX COUNT : 1262 UNIQUE IP COUNT : 56665856 ATTACKS DETECTED ASN4837 : 1H - 7 3H - 19 6H - 42 12H - 78 24H - 141 DateTime : 2019-10-22 13:52:11 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-10-22 21:11:34
206.189.132.204	attack	2019-10-22T13:25:39.173810abusebot-4.cloudsearch.cf sshd\[26182\]: Invalid user ethos from 206.189.132.204 port 53466	2019-10-22 21:28:11
185.162.126.71	attack	Return-Path: Received: from ffh3.nc5roleta.com (unknown [185.162.126.71]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) Tue, 22 Oct 2019 04:47:13 -0500 (CDT) List-Unsubscribe: From: סיגל Sender: magaly@nc5roleta.com Reply-To: סיגל Date: 22 Oct 2019 11:47:08 +0200 Subject: היי מתי אני יכולה להתקשר אליך שנבדוק שיתוף פעולה עסקי יחד? Content-Type: multipart/alternative; boundary=--boundary_400127_3db26de1-f8f1-4866-b1a9-f1dfdf970795 Message-Id: <20191022083355.358263FB06@nc5roleta.com> היי, מה שלומך? אשמח לדבר איתך כמה דקות שנבדוק יחד אפשרות לשיתוף פעולה עסקי ביננו לשנה מוצלחת יותר. אני סיגל, מנהלת פרוייקטים של אחת החברות הגדולות בישראל לבניית אתרי חנויות למכירה באינטרנט, הבנתי שיש לך עסק שאפשר להביא לו עוד לקוחות דרך האינטרנט בשיתוף פעולה איתנו.	2019-10-22 21:20:34
138.197.43.206	attackbots	Automatic report - XMLRPC Attack	2019-10-22 21:31:22
222.186.175.183	attackbotsspam	Oct 22 15:23:14 ovpn sshd\[27241\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.183 user=root Oct 22 15:23:16 ovpn sshd\[27241\]: Failed password for root from 222.186.175.183 port 9690 ssh2 Oct 22 15:23:42 ovpn sshd\[27343\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.183 user=root Oct 22 15:23:44 ovpn sshd\[27343\]: Failed password for root from 222.186.175.183 port 14086 ssh2 Oct 22 15:23:48 ovpn sshd\[27343\]: Failed password for root from 222.186.175.183 port 14086 ssh2	2019-10-22 21:27:49
142.93.109.129	attack	Oct 22 11:52:35 *** sshd[12486]: User root from 142.93.109.129 not allowed because not listed in AllowUsers	2019-10-22 20:57:15
77.247.181.165	attackspambots	Oct 22 14:10:09 rotator sshd\[22686\]: Failed password for root from 77.247.181.165 port 26389 ssh2Oct 22 14:10:12 rotator sshd\[22686\]: Failed password for root from 77.247.181.165 port 26389 ssh2Oct 22 14:10:14 rotator sshd\[22686\]: Failed password for root from 77.247.181.165 port 26389 ssh2Oct 22 14:10:17 rotator sshd\[22686\]: Failed password for root from 77.247.181.165 port 26389 ssh2Oct 22 14:10:20 rotator sshd\[22686\]: Failed password for root from 77.247.181.165 port 26389 ssh2Oct 22 14:10:24 rotator sshd\[22686\]: Failed password for root from 77.247.181.165 port 26389 ssh2 ...	2019-10-22 21:06:31
129.28.177.29	attack	Automatic report - Banned IP Access	2019-10-22 21:26:49
121.162.131.223	attack	Oct 22 14:44:56 dedicated sshd[555]: Invalid user efsuser from 121.162.131.223 port 58888	2019-10-22 21:00:11

最近上报的IP列表

124.79.83.136	77.55.214.138	182.187.139.169	73.124.236.66
36.82.143.0	180.5.150.153	52.28.118.94	37.190.61.115
179.127.155.29	14.161.234.204	115.72.174.54	110.136.245.206
106.13.51.58	186.92.98.127	36.65.35.212	193.112.44.21
118.70.128.17	5.117.225.90	117.1.166.186	210.4.119.59