城市(city): Beijing
省份(region): Beijing
国家(country): China
运营商(isp): Microsoft (China) Co. Ltd.
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): Data Center/Web Hosting/Transit
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attack | prod11 ... |
2020-09-09 20:01:02 |
| attackbots | Sep 9 01:32:47 mail sshd\[63284\]: Invalid user shera from 139.219.0.102 ... |
2020-09-09 13:58:26 |
| attackbots | Sep 1 15:30:43 jane sshd[18170]: Failed password for root from 139.219.0.102 port 52504 ssh2 ... |
2020-09-02 01:16:17 |
| attack | Tried sshing with brute force. |
2020-08-16 08:34:13 |
| attackspambots | Aug 14 06:46:06 rancher-0 sshd[1076642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 user=root Aug 14 06:46:09 rancher-0 sshd[1076642]: Failed password for root from 139.219.0.102 port 49292 ssh2 ... |
2020-08-14 14:08:38 |
| attackbots | Failed password for root from 139.219.0.102 port 21566 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 user=root Failed password for root from 139.219.0.102 port 63408 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 user=root Failed password for root from 139.219.0.102 port 49744 ssh2 |
2020-08-02 04:51:21 |
| attack | Jul 31 23:31:34 santamaria sshd\[24041\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 user=root Jul 31 23:31:36 santamaria sshd\[24041\]: Failed password for root from 139.219.0.102 port 62796 ssh2 Jul 31 23:35:57 santamaria sshd\[24174\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 user=root ... |
2020-08-01 08:19:45 |
| attack | Jul 31 15:09:10 abendstille sshd\[31748\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 user=root Jul 31 15:09:11 abendstille sshd\[31748\]: Failed password for root from 139.219.0.102 port 45710 ssh2 Jul 31 15:12:53 abendstille sshd\[2746\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 user=root Jul 31 15:12:55 abendstille sshd\[2746\]: Failed password for root from 139.219.0.102 port 22766 ssh2 Jul 31 15:16:46 abendstille sshd\[6345\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 user=root ... |
2020-08-01 04:11:08 |
| attackbotsspam | Jul 29 19:28:15 ift sshd\[14466\]: Invalid user gengxin from 139.219.0.102Jul 29 19:28:18 ift sshd\[14466\]: Failed password for invalid user gengxin from 139.219.0.102 port 59032 ssh2Jul 29 19:31:02 ift sshd\[15229\]: Invalid user arjun from 139.219.0.102Jul 29 19:31:03 ift sshd\[15229\]: Failed password for invalid user arjun from 139.219.0.102 port 63240 ssh2Jul 29 19:33:49 ift sshd\[15462\]: Invalid user xn from 139.219.0.102 ... |
2020-07-30 02:28:00 |
| attackspambots | Jul 25 17:27:33 vmd36147 sshd[9571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 Jul 25 17:27:35 vmd36147 sshd[9571]: Failed password for invalid user sona from 139.219.0.102 port 25978 ssh2 Jul 25 17:31:30 vmd36147 sshd[18209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 ... |
2020-07-26 01:15:49 |
| attackbots | Jul 24 16:34:57 mail sshd[24068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 Jul 24 16:34:58 mail sshd[24068]: Failed password for invalid user manoj from 139.219.0.102 port 10934 ssh2 ... |
2020-07-24 23:41:43 |
| attackspambots | Invalid user rolo from 139.219.0.102 port 24558 |
2020-07-15 08:58:29 |
| attack | 2020-07-11T10:15:05.810912vps773228.ovh.net sshd[10786]: Invalid user xxshi from 139.219.0.102 port 58152 2020-07-11T10:15:05.827025vps773228.ovh.net sshd[10786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 2020-07-11T10:15:05.810912vps773228.ovh.net sshd[10786]: Invalid user xxshi from 139.219.0.102 port 58152 2020-07-11T10:15:08.101727vps773228.ovh.net sshd[10786]: Failed password for invalid user xxshi from 139.219.0.102 port 58152 ssh2 2020-07-11T10:18:06.198175vps773228.ovh.net sshd[10807]: Invalid user juliette from 139.219.0.102 port 16978 ... |
2020-07-11 16:33:50 |
| attackspambots | Invalid user russel from 139.219.0.102 port 39168 |
2020-07-11 08:05:10 |
| attackspam | $f2bV_matches |
2020-06-29 13:30:16 |
| attackspambots | Jun 9 06:27:56 ns381471 sshd[1659]: Failed password for root from 139.219.0.102 port 45720 ssh2 |
2020-06-09 12:59:42 |
| attackbots | 2020-06-06T17:33:36.218763 sshd[6431]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 user=root 2020-06-06T17:33:38.003014 sshd[6431]: Failed password for root from 139.219.0.102 port 14836 ssh2 2020-06-06T17:37:28.361788 sshd[6492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 user=root 2020-06-06T17:37:30.663021 sshd[6492]: Failed password for root from 139.219.0.102 port 42588 ssh2 ... |
2020-06-07 03:53:56 |
| attackspambots | Invalid user mw from 139.219.0.102 port 60118 |
2020-05-26 03:11:20 |
| attack | Invalid user reports from 139.219.0.102 port 24922 |
2020-05-16 17:54:16 |
| attackbots | May 14 16:17:01 ns381471 sshd[19649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 May 14 16:17:03 ns381471 sshd[19649]: Failed password for invalid user an from 139.219.0.102 port 29684 ssh2 |
2020-05-14 22:19:59 |
| attackbotsspam | May 12 05:34:44 mx01 sshd[10160]: Invalid user bill from 139.219.0.102 May 12 05:34:44 mx01 sshd[10160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 May 12 05:34:47 mx01 sshd[10160]: Failed password for invalid user bill from 139.219.0.102 port 19618 ssh2 May 12 05:34:47 mx01 sshd[10160]: Received disconnect from 139.219.0.102: 11: Bye Bye [preauth] May 12 05:48:09 mx01 sshd[12428]: Invalid user deploy from 139.219.0.102 May 12 05:48:09 mx01 sshd[12428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 May 12 05:48:10 mx01 sshd[12428]: Failed password for invalid user deploy from 139.219.0.102 port 50390 ssh2 May 12 05:48:11 mx01 sshd[12428]: Received disconnect from 139.219.0.102: 11: Bye Bye [preauth] May 12 05:52:14 mx01 sshd[13203]: Invalid user donna from 139.219.0.102 May 12 05:52:14 mx01 sshd[13203]: pam_unix(sshd:auth): authentication failure; logname........ ------------------------------- |
2020-05-14 06:56:04 |
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 139.219.0.29 | attackspambots | SSH brute force |
2020-03-17 15:06:11 |
| 139.219.0.29 | attackbotsspam | Invalid user andoria from 139.219.0.29 port 57020 |
2020-03-14 04:43:01 |
| 139.219.0.20 | attack | Invalid user backup from 139.219.0.20 port 47876 |
2020-02-23 07:00:50 |
| 139.219.0.20 | attackspam | Feb 20 17:51:02 ws25vmsma01 sshd[78016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.20 Feb 20 17:51:03 ws25vmsma01 sshd[78016]: Failed password for invalid user logadmin from 139.219.0.20 port 46554 ssh2 ... |
2020-02-21 04:09:05 |
| 139.219.0.29 | attackspambots | $f2bV_matches |
2020-02-13 16:08:41 |
| 139.219.0.29 | attackbots | Automatic report - Banned IP Access |
2020-02-09 15:59:20 |
| 139.219.0.29 | attack | Feb 9 01:41:05 ovpn sshd\[15370\]: Invalid user jce from 139.219.0.29 Feb 9 01:41:05 ovpn sshd\[15370\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.29 Feb 9 01:41:07 ovpn sshd\[15370\]: Failed password for invalid user jce from 139.219.0.29 port 36204 ssh2 Feb 9 01:45:14 ovpn sshd\[16497\]: Invalid user qvv from 139.219.0.29 Feb 9 01:45:14 ovpn sshd\[16497\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.29 |
2020-02-09 11:02:01 |
| 139.219.0.20 | attack | Jan 31 10:50:54 Invalid user sonita from 139.219.0.20 port 48340 |
2020-01-31 18:04:07 |
| 139.219.0.20 | attackspambots | Invalid user postgres from 139.219.0.20 port 45946 |
2020-01-22 07:19:11 |
| 139.219.0.20 | attackbotsspam | Unauthorized connection attempt detected from IP address 139.219.0.20 to port 2220 [J] |
2020-01-19 18:12:41 |
| 139.219.0.29 | attackspambots | Unauthorized connection attempt detected from IP address 139.219.0.29 to port 2220 [J] |
2020-01-12 02:28:39 |
| 139.219.0.20 | attack | $f2bV_matches |
2020-01-12 00:09:20 |
| 139.219.0.20 | attackspam | Jan 8 13:13:41 server sshd\[1869\]: Invalid user user10 from 139.219.0.20 Jan 8 13:13:41 server sshd\[1869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.20 Jan 8 13:13:43 server sshd\[1869\]: Failed password for invalid user user10 from 139.219.0.20 port 40544 ssh2 Jan 8 16:06:12 server sshd\[9356\]: Invalid user nanamiya from 139.219.0.20 Jan 8 16:06:12 server sshd\[9356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.20 ... |
2020-01-08 21:50:11 |
| 139.219.0.29 | attackbotsspam | Invalid user mj from 139.219.0.29 port 54058 |
2020-01-04 04:33:45 |
| 139.219.0.20 | attackbots | Lines containing failures of 139.219.0.20 Dec 31 02:21:43 shared06 sshd[19150]: Invalid user seremet from 139.219.0.20 port 52094 Dec 31 02:21:43 shared06 sshd[19150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.20 Dec 31 02:21:45 shared06 sshd[19150]: Failed password for invalid user seremet from 139.219.0.20 port 52094 ssh2 Dec 31 02:21:45 shared06 sshd[19150]: Received disconnect from 139.219.0.20 port 52094:11: Bye Bye [preauth] Dec 31 02:21:45 shared06 sshd[19150]: Disconnected from invalid user seremet 139.219.0.20 port 52094 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=139.219.0.20 |
2020-01-01 15:38:15 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.219.0.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10469
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.219.0.102. IN A
;; AUTHORITY SECTION:
. 451 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020051302 1800 900 604800 86400
;; Query time: 155 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu May 14 06:56:00 CST 2020
;; MSG SIZE rcvd: 117Host 102.0.219.139.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 102.0.219.139.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 58.10.87.142 | attackspam | Automatic report - Port Scan Attack |
2019-08-02 17:10:44 |
| 104.244.76.13 | attackbotsspam | MYH,DEF GET /wp-login.php?action=register |
2019-08-02 17:08:14 |
| 211.151.95.139 | attackbotsspam | Aug 2 10:51:31 icinga sshd[13286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.151.95.139 Aug 2 10:51:33 icinga sshd[13286]: Failed password for invalid user banjob from 211.151.95.139 port 39854 ssh2 ... |
2019-08-02 17:52:25 |
| 206.189.33.131 | attackbots | Aug 2 11:24:41 OPSO sshd\[27407\]: Invalid user matti from 206.189.33.131 port 42176 Aug 2 11:24:41 OPSO sshd\[27407\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.33.131 Aug 2 11:24:43 OPSO sshd\[27407\]: Failed password for invalid user matti from 206.189.33.131 port 42176 ssh2 Aug 2 11:31:15 OPSO sshd\[28436\]: Invalid user usuario from 206.189.33.131 port 37006 Aug 2 11:31:15 OPSO sshd\[28436\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.33.131 |
2019-08-02 17:38:29 |
| 117.6.78.26 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-02 04:25:15,873 INFO [amun_request_handler] PortScan Detected on Port: 445 (117.6.78.26) |
2019-08-02 17:28:00 |
| 138.122.37.82 | attack | Brute force SMTP login attempts. |
2019-08-02 17:07:05 |
| 81.155.96.76 | attack | $f2bV_matches |
2019-08-02 17:47:38 |
| 116.1.149.196 | attackspambots | Aug 2 05:05:07 ny01 sshd[17815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.1.149.196 Aug 2 05:05:10 ny01 sshd[17815]: Failed password for invalid user joe from 116.1.149.196 port 55516 ssh2 Aug 2 05:09:32 ny01 sshd[18146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.1.149.196 |
2019-08-02 17:16:42 |
| 192.99.247.232 | attackbots | Aug 2 10:52:18 dedicated sshd[8735]: Invalid user anup from 192.99.247.232 port 58322 |
2019-08-02 17:18:38 |
| 95.216.121.6 | attack | proto=tcp . spt=53304 . dpt=3389 . src=95.216.121.6 . dst=xx.xx.4.1 . (listed on abuseat-org zen-spamhaus rbldns-ru) (348) |
2019-08-02 17:22:28 |
| 201.49.229.145 | attack | ssh failed login |
2019-08-02 17:05:46 |
| 185.143.221.186 | attackspam | Multiport scan : 104 ports scanned 3011 3018(x2) 3022 3036(x2) 3044(x2) 3056 3061 3068 3092 3093 3123 3139 3145(x2) 3156 3181 3183 3184 3185 3195 3197 3198 3202 3206 3207 3208(x2) 3209 3210 3218 3219 3222 3226 3231 3233 3234 3241 3244(x2) 3245 3246 3248 3251 3256 3257 3259 3260 3264 3272 3276 3279 3283 3287 3288 3289 3292 3297 3312 3313(x2) 3317 3326 3327 3328 3335 3337 3339 3341(x2) 3349 3351 3352 3361 3362 3364 3374 3376 3385 3386 ..... |
2019-08-02 17:11:09 |
| 185.107.45.91 | attackbotsspam | RDP Bruteforce |
2019-08-02 17:27:35 |
| 138.255.14.125 | attackbots | Jul 31 07:17:30 our-server-hostname postfix/smtpd[21057]: connect from unknown[138.255.14.125] Jul x@x Jul x@x Jul x@x Jul 31 07:17:38 our-server-hostname postfix/smtpd[21057]: lost connection after RCPT from unknown[138.255.14.125] Jul 31 07:17:38 our-server-hostname postfix/smtpd[21057]: disconnect from unknown[138.255.14.125] Jul 31 08:36:58 our-server-hostname postfix/smtpd[19335]: connect from unknown[138.255.14.125] Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=138.255.14.125 |
2019-08-02 18:06:06 |
| 64.62.206.232 | attackspambots | B: wlwmanifest.xml scan |
2019-08-02 17:17:46 |