城市(city): Beijing
省份(region): Beijing
国家(country): China
运营商(isp): Microsoft (China) Co. Ltd.
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): Data Center/Web Hosting/Transit
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attack | prod11 ... |
2020-09-09 20:01:02 |
| attackbots | Sep 9 01:32:47 mail sshd\[63284\]: Invalid user shera from 139.219.0.102 ... |
2020-09-09 13:58:26 |
| attackbots | Sep 1 15:30:43 jane sshd[18170]: Failed password for root from 139.219.0.102 port 52504 ssh2 ... |
2020-09-02 01:16:17 |
| attack | Tried sshing with brute force. |
2020-08-16 08:34:13 |
| attackspambots | Aug 14 06:46:06 rancher-0 sshd[1076642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 user=root Aug 14 06:46:09 rancher-0 sshd[1076642]: Failed password for root from 139.219.0.102 port 49292 ssh2 ... |
2020-08-14 14:08:38 |
| attackbots | Failed password for root from 139.219.0.102 port 21566 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 user=root Failed password for root from 139.219.0.102 port 63408 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 user=root Failed password for root from 139.219.0.102 port 49744 ssh2 |
2020-08-02 04:51:21 |
| attack | Jul 31 23:31:34 santamaria sshd\[24041\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 user=root Jul 31 23:31:36 santamaria sshd\[24041\]: Failed password for root from 139.219.0.102 port 62796 ssh2 Jul 31 23:35:57 santamaria sshd\[24174\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 user=root ... |
2020-08-01 08:19:45 |
| attack | Jul 31 15:09:10 abendstille sshd\[31748\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 user=root Jul 31 15:09:11 abendstille sshd\[31748\]: Failed password for root from 139.219.0.102 port 45710 ssh2 Jul 31 15:12:53 abendstille sshd\[2746\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 user=root Jul 31 15:12:55 abendstille sshd\[2746\]: Failed password for root from 139.219.0.102 port 22766 ssh2 Jul 31 15:16:46 abendstille sshd\[6345\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 user=root ... |
2020-08-01 04:11:08 |
| attackbotsspam | Jul 29 19:28:15 ift sshd\[14466\]: Invalid user gengxin from 139.219.0.102Jul 29 19:28:18 ift sshd\[14466\]: Failed password for invalid user gengxin from 139.219.0.102 port 59032 ssh2Jul 29 19:31:02 ift sshd\[15229\]: Invalid user arjun from 139.219.0.102Jul 29 19:31:03 ift sshd\[15229\]: Failed password for invalid user arjun from 139.219.0.102 port 63240 ssh2Jul 29 19:33:49 ift sshd\[15462\]: Invalid user xn from 139.219.0.102 ... |
2020-07-30 02:28:00 |
| attackspambots | Jul 25 17:27:33 vmd36147 sshd[9571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 Jul 25 17:27:35 vmd36147 sshd[9571]: Failed password for invalid user sona from 139.219.0.102 port 25978 ssh2 Jul 25 17:31:30 vmd36147 sshd[18209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 ... |
2020-07-26 01:15:49 |
| attackbots | Jul 24 16:34:57 mail sshd[24068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 Jul 24 16:34:58 mail sshd[24068]: Failed password for invalid user manoj from 139.219.0.102 port 10934 ssh2 ... |
2020-07-24 23:41:43 |
| attackspambots | Invalid user rolo from 139.219.0.102 port 24558 |
2020-07-15 08:58:29 |
| attack | 2020-07-11T10:15:05.810912vps773228.ovh.net sshd[10786]: Invalid user xxshi from 139.219.0.102 port 58152 2020-07-11T10:15:05.827025vps773228.ovh.net sshd[10786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 2020-07-11T10:15:05.810912vps773228.ovh.net sshd[10786]: Invalid user xxshi from 139.219.0.102 port 58152 2020-07-11T10:15:08.101727vps773228.ovh.net sshd[10786]: Failed password for invalid user xxshi from 139.219.0.102 port 58152 ssh2 2020-07-11T10:18:06.198175vps773228.ovh.net sshd[10807]: Invalid user juliette from 139.219.0.102 port 16978 ... |
2020-07-11 16:33:50 |
| attackspambots | Invalid user russel from 139.219.0.102 port 39168 |
2020-07-11 08:05:10 |
| attackspam | $f2bV_matches |
2020-06-29 13:30:16 |
| attackspambots | Jun 9 06:27:56 ns381471 sshd[1659]: Failed password for root from 139.219.0.102 port 45720 ssh2 |
2020-06-09 12:59:42 |
| attackbots | 2020-06-06T17:33:36.218763 sshd[6431]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 user=root 2020-06-06T17:33:38.003014 sshd[6431]: Failed password for root from 139.219.0.102 port 14836 ssh2 2020-06-06T17:37:28.361788 sshd[6492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 user=root 2020-06-06T17:37:30.663021 sshd[6492]: Failed password for root from 139.219.0.102 port 42588 ssh2 ... |
2020-06-07 03:53:56 |
| attackspambots | Invalid user mw from 139.219.0.102 port 60118 |
2020-05-26 03:11:20 |
| attack | Invalid user reports from 139.219.0.102 port 24922 |
2020-05-16 17:54:16 |
| attackbots | May 14 16:17:01 ns381471 sshd[19649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 May 14 16:17:03 ns381471 sshd[19649]: Failed password for invalid user an from 139.219.0.102 port 29684 ssh2 |
2020-05-14 22:19:59 |
| attackbotsspam | May 12 05:34:44 mx01 sshd[10160]: Invalid user bill from 139.219.0.102 May 12 05:34:44 mx01 sshd[10160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 May 12 05:34:47 mx01 sshd[10160]: Failed password for invalid user bill from 139.219.0.102 port 19618 ssh2 May 12 05:34:47 mx01 sshd[10160]: Received disconnect from 139.219.0.102: 11: Bye Bye [preauth] May 12 05:48:09 mx01 sshd[12428]: Invalid user deploy from 139.219.0.102 May 12 05:48:09 mx01 sshd[12428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 May 12 05:48:10 mx01 sshd[12428]: Failed password for invalid user deploy from 139.219.0.102 port 50390 ssh2 May 12 05:48:11 mx01 sshd[12428]: Received disconnect from 139.219.0.102: 11: Bye Bye [preauth] May 12 05:52:14 mx01 sshd[13203]: Invalid user donna from 139.219.0.102 May 12 05:52:14 mx01 sshd[13203]: pam_unix(sshd:auth): authentication failure; logname........ ------------------------------- |
2020-05-14 06:56:04 |
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 139.219.0.29 | attackspambots | SSH brute force |
2020-03-17 15:06:11 |
| 139.219.0.29 | attackbotsspam | Invalid user andoria from 139.219.0.29 port 57020 |
2020-03-14 04:43:01 |
| 139.219.0.20 | attack | Invalid user backup from 139.219.0.20 port 47876 |
2020-02-23 07:00:50 |
| 139.219.0.20 | attackspam | Feb 20 17:51:02 ws25vmsma01 sshd[78016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.20 Feb 20 17:51:03 ws25vmsma01 sshd[78016]: Failed password for invalid user logadmin from 139.219.0.20 port 46554 ssh2 ... |
2020-02-21 04:09:05 |
| 139.219.0.29 | attackspambots | $f2bV_matches |
2020-02-13 16:08:41 |
| 139.219.0.29 | attackbots | Automatic report - Banned IP Access |
2020-02-09 15:59:20 |
| 139.219.0.29 | attack | Feb 9 01:41:05 ovpn sshd\[15370\]: Invalid user jce from 139.219.0.29 Feb 9 01:41:05 ovpn sshd\[15370\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.29 Feb 9 01:41:07 ovpn sshd\[15370\]: Failed password for invalid user jce from 139.219.0.29 port 36204 ssh2 Feb 9 01:45:14 ovpn sshd\[16497\]: Invalid user qvv from 139.219.0.29 Feb 9 01:45:14 ovpn sshd\[16497\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.29 |
2020-02-09 11:02:01 |
| 139.219.0.20 | attack | Jan 31 10:50:54 Invalid user sonita from 139.219.0.20 port 48340 |
2020-01-31 18:04:07 |
| 139.219.0.20 | attackspambots | Invalid user postgres from 139.219.0.20 port 45946 |
2020-01-22 07:19:11 |
| 139.219.0.20 | attackbotsspam | Unauthorized connection attempt detected from IP address 139.219.0.20 to port 2220 [J] |
2020-01-19 18:12:41 |
| 139.219.0.29 | attackspambots | Unauthorized connection attempt detected from IP address 139.219.0.29 to port 2220 [J] |
2020-01-12 02:28:39 |
| 139.219.0.20 | attack | $f2bV_matches |
2020-01-12 00:09:20 |
| 139.219.0.20 | attackspam | Jan 8 13:13:41 server sshd\[1869\]: Invalid user user10 from 139.219.0.20 Jan 8 13:13:41 server sshd\[1869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.20 Jan 8 13:13:43 server sshd\[1869\]: Failed password for invalid user user10 from 139.219.0.20 port 40544 ssh2 Jan 8 16:06:12 server sshd\[9356\]: Invalid user nanamiya from 139.219.0.20 Jan 8 16:06:12 server sshd\[9356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.20 ... |
2020-01-08 21:50:11 |
| 139.219.0.29 | attackbotsspam | Invalid user mj from 139.219.0.29 port 54058 |
2020-01-04 04:33:45 |
| 139.219.0.20 | attackbots | Lines containing failures of 139.219.0.20 Dec 31 02:21:43 shared06 sshd[19150]: Invalid user seremet from 139.219.0.20 port 52094 Dec 31 02:21:43 shared06 sshd[19150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.20 Dec 31 02:21:45 shared06 sshd[19150]: Failed password for invalid user seremet from 139.219.0.20 port 52094 ssh2 Dec 31 02:21:45 shared06 sshd[19150]: Received disconnect from 139.219.0.20 port 52094:11: Bye Bye [preauth] Dec 31 02:21:45 shared06 sshd[19150]: Disconnected from invalid user seremet 139.219.0.20 port 52094 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=139.219.0.20 |
2020-01-01 15:38:15 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.219.0.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10469
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.219.0.102. IN A
;; AUTHORITY SECTION:
. 451 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020051302 1800 900 604800 86400
;; Query time: 155 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu May 14 06:56:00 CST 2020
;; MSG SIZE rcvd: 117Host 102.0.219.139.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 102.0.219.139.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 49.233.192.22 | attack | 2020-08-31T22:21:32.603237shield sshd\[11366\]: Invalid user user01 from 49.233.192.22 port 53290 2020-08-31T22:21:32.661424shield sshd\[11366\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.192.22 2020-08-31T22:21:34.969907shield sshd\[11366\]: Failed password for invalid user user01 from 49.233.192.22 port 53290 ssh2 2020-08-31T22:22:37.248752shield sshd\[11661\]: Invalid user wangqiang from 49.233.192.22 port 37206 2020-08-31T22:22:37.272403shield sshd\[11661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.192.22 |
2020-09-01 06:46:38 |
| 51.91.250.49 | attack | Sep 1 00:37:19 haigwepa sshd[6589]: Failed password for root from 51.91.250.49 port 54398 ssh2 ... |
2020-09-01 06:46:19 |
| 89.125.106.47 | attackspambots | Port probing on unauthorized port 445 |
2020-09-01 06:24:49 |
| 194.68.103.69 | attackbotsspam | Email rejected due to spam filtering |
2020-09-01 06:32:57 |
| 72.76.187.90 | attack | Tried our host z. |
2020-09-01 06:19:39 |
| 206.41.172.115 | attackbotsspam | Attempting to access Wordpress login on a honeypot or private system. |
2020-09-01 06:43:23 |
| 82.81.130.17 | attack | Automatic report - Port Scan Attack |
2020-09-01 06:30:27 |
| 218.57.129.37 | attackbots | Port Scan/VNC login attempt ... |
2020-09-01 06:29:25 |
| 94.43.139.99 | attackbots | GPON Home Routers Remote Code Execution Vulnerability CVE 2018-10562, PTR: 94-43-139-99.dsl.utg.ge. |
2020-09-01 06:21:33 |
| 45.148.10.28 | attackspambots | Aug 31 15:51:35 : SSH login attempts with invalid user |
2020-09-01 06:22:00 |
| 194.61.54.112 | attackbots | Tried our host z. |
2020-09-01 06:53:15 |
| 107.170.249.6 | attackspam | Aug 31 18:11:43 vps46666688 sshd[4576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.249.6 Aug 31 18:11:45 vps46666688 sshd[4576]: Failed password for invalid user t7adm from 107.170.249.6 port 51394 ssh2 ... |
2020-09-01 06:42:59 |
| 193.110.78.220 | attackspam | SSH brutforce |
2020-09-01 06:23:09 |
| 192.71.37.62 | attack | Email rejected due to spam filtering |
2020-09-01 06:35:58 |
| 92.247.140.178 | attackbotsspam | srvr2: (mod_security) mod_security (id:920350) triggered by 92.247.140.178 (BG/-/-): 1 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/31 23:11:51 [error] 315421#0: *372874 [client 92.247.140.178] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host' [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/"] [unique_id "159890831146.956331"] [ref "o0,18v21,18"], client: 92.247.140.178, [redacted] request: "GET / HTTP/1.1" [redacted] |
2020-09-01 06:39:08 |