219.135.139.244

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Guangdong Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Dec 31 09:53:01 web1 postfix/smtpd[26895]: warning: unknown[219.135.139.244]: SASL LOGIN authentication failed: authentication failure ...	2019-12-31 23:54:28
attackspam	2019-10-21 22:51:20 dovecot_login authenticator failed for (sienawx.org) [219.135.139.244]:23459 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=nologin@lerctr.org) 2019-10-21 22:51:55 dovecot_login authenticator failed for (sienawx.org) [219.135.139.244]:16062 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=android@lerctr.org) 2019-10-21 22:52:12 dovecot_login authenticator failed for (sienawx.org) [219.135.139.244]:62968 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=android@lerctr.org) ...	2019-10-22 16:44:47

类型

评论内容

时间

attackspam

Dec 31 09:53:01 web1 postfix/smtpd[26895]: warning: unknown[219.135.139.244]: SASL LOGIN authentication failed: authentication failure
...

2019-12-31 23:54:28

attackspam

2019-10-21 22:51:20 dovecot_login authenticator failed for (sienawx.org) [219.135.139.244]:23459 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=nologin@lerctr.org)
2019-10-21 22:51:55 dovecot_login authenticator failed for (sienawx.org) [219.135.139.244]:16062 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=android@lerctr.org)
2019-10-21 22:52:12 dovecot_login authenticator failed for (sienawx.org) [219.135.139.244]:62968 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=android@lerctr.org)
...

2019-10-22 16:44:47

相同子网IP讨论:

IP	类型	评论内容	时间
219.135.139.130	attack	port scan and connect, tcp 1433 (ms-sql-s)	2020-07-17 00:45:22
219.135.139.242	attackbots	Mar 23 01:05:03 WHD8 postfix/smtpd\[49804\]: warning: unknown\[219.135.139.242\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 23 01:05:11 WHD8 postfix/smtpd\[49869\]: warning: unknown\[219.135.139.242\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 31 00:02:49 WHD8 postfix/smtpd\[35160\]: warning: unknown\[219.135.139.242\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-05-06 03:04:46
219.135.139.243	attackbotsspam	Mar 26 05:43:59 WHD8 postfix/smtpd\[94626\]: warning: unknown\[219.135.139.243\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 6 07:18:50 WHD8 postfix/smtpd\[93580\]: warning: unknown\[219.135.139.243\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 6 07:18:59 WHD8 postfix/smtpd\[93467\]: warning: unknown\[219.135.139.243\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-05-06 02:49:23
219.135.139.242	attackspam	Dec 31 09:53:07 web1 postfix/smtpd[27446]: warning: unknown[219.135.139.242]: SASL LOGIN authentication failed: authentication failure ...	2019-12-31 23:46:07
219.135.139.245	attackbots	Dec 31 09:53:11 web1 postfix/smtpd[27446]: warning: unknown[219.135.139.245]: SASL LOGIN authentication failed: authentication failure ...	2019-12-31 23:43:37
219.135.139.245	attack	Nov 17 00:21:23 mail postfix/smtpd[14787]: warning: unknown[219.135.139.245]: SASL LOGIN authentication failed: authentication failure	2019-11-17 21:06:08
219.135.139.242	attack	Nov 17 00:21:31 mail postfix/smtpd[14815]: warning: unknown[219.135.139.242]: SASL LOGIN authentication failed: authentication failure	2019-11-17 20:59:20

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 219.135.139.244
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61611
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;219.135.139.244.		IN	A

;; AUTHORITY SECTION:
.			570	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102200 1800 900 604800 86400

;; Query time: 116 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 22 16:44:43 CST 2019
;; MSG SIZE  rcvd: 119

HOST信息:

244.139.135.219.in-addr.arpa domain name pointer 244.139.135.219.broad.gz.gd.dynamic.163data.com.cn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
244.139.135.219.in-addr.arpa	name = 244.139.135.219.broad.gz.gd.dynamic.163data.com.cn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
118.24.38.12	attackspambots	$f2bV_matches	2019-08-26 16:06:50
195.154.33.152	attackbots	\[2019-08-26 04:27:29\] NOTICE\[1829\] chan_sip.c: Registration from '\' failed for '195.154.33.152:2309' - Wrong password \[2019-08-26 04:27:29\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-26T04:27:29.189-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2912",SessionID="0x7f7b3038f128",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154.33.152/54705",Challenge="1bfb1e39",ReceivedChallenge="1bfb1e39",ReceivedHash="33e9b3dc6d86bdf9f5d1e7e351ded514" \[2019-08-26 04:35:09\] NOTICE\[1829\] chan_sip.c: Registration from '\' failed for '195.154.33.152:2381' - Wrong password \[2019-08-26 04:35:09\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-26T04:35:09.803-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2913",SessionID="0x7f7b300df5b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154.	2019-08-26 16:36:21
62.210.89.20	attack	" "	2019-08-26 16:32:05
165.227.157.168	attackbotsspam	Aug 26 09:32:05 nextcloud sshd\[17491\]: Invalid user oracle from 165.227.157.168 Aug 26 09:32:05 nextcloud sshd\[17491\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.157.168 Aug 26 09:32:07 nextcloud sshd\[17491\]: Failed password for invalid user oracle from 165.227.157.168 port 54506 ssh2 ...	2019-08-26 16:34:55
112.186.77.126	attackbotsspam	Aug 26 09:53:42 andromeda sshd\[14916\]: Invalid user download from 112.186.77.126 port 33392 Aug 26 09:53:43 andromeda sshd\[14916\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.186.77.126 Aug 26 09:53:45 andromeda sshd\[14916\]: Failed password for invalid user download from 112.186.77.126 port 33392 ssh2	2019-08-26 16:53:20
137.74.26.179	attack	Aug 26 07:14:56 OPSO sshd\[31526\]: Invalid user tomcat from 137.74.26.179 port 44910 Aug 26 07:14:56 OPSO sshd\[31526\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.26.179 Aug 26 07:14:58 OPSO sshd\[31526\]: Failed password for invalid user tomcat from 137.74.26.179 port 44910 ssh2 Aug 26 07:19:04 OPSO sshd\[32206\]: Invalid user spark from 137.74.26.179 port 35144 Aug 26 07:19:04 OPSO sshd\[32206\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.26.179	2019-08-26 16:12:52
77.247.110.20	attackspam	\[2019-08-26 02:09:25\] SECURITY\[1837\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-26T02:09:25.696-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="09981048422069004",SessionID="0x7f7b3071dc58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.20/56283",ACLName="no_extension_match" \[2019-08-26 02:10:54\] SECURITY\[1837\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-26T02:10:54.603-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="009981048422069004",SessionID="0x7f7b3038f128",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.20/60684",ACLName="no_extension_match" \[2019-08-26 02:13:52\] SECURITY\[1837\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-26T02:13:52.567-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="0009981048422069004",SessionID="0x7f7b30b15778",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.20/53542",ACLNam	2019-08-26 16:47:16
75.172.145.45	attackbotsspam	Aug 26 10:26:21 srv206 sshd[19592]: Invalid user hadoop from 75.172.145.45 ...	2019-08-26 16:42:16
112.85.42.174	attack	Aug 26 08:28:02 heissa sshd\[22740\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.174 user=root Aug 26 08:28:04 heissa sshd\[22740\]: Failed password for root from 112.85.42.174 port 50542 ssh2 Aug 26 08:28:07 heissa sshd\[22740\]: Failed password for root from 112.85.42.174 port 50542 ssh2 Aug 26 08:28:10 heissa sshd\[22740\]: Failed password for root from 112.85.42.174 port 50542 ssh2 Aug 26 08:28:12 heissa sshd\[22740\]: Failed password for root from 112.85.42.174 port 50542 ssh2	2019-08-26 16:35:22
161.132.125.203	attackspam	port scan and connect, tcp 80 (http)	2019-08-26 16:37:55
96.84.165.99	attackbots	Honeypot attack, port: 23, PTR: 96-84-165-99-static.hfc.comcastbusiness.net.	2019-08-26 16:51:14
62.75.152.213	attack	Aug 18 19:47:30 vpxxxxxxx22308 sshd[13793]: Invalid user server from 62.75.152.213 Aug 18 19:47:30 vpxxxxxxx22308 sshd[13793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.75.152.213 Aug 18 19:47:33 vpxxxxxxx22308 sshd[13793]: Failed password for invalid user server from 62.75.152.213 port 49908 ssh2 Aug 18 19:51:31 vpxxxxxxx22308 sshd[14856]: Invalid user xapolicymgr from 62.75.152.213 Aug 18 19:51:31 vpxxxxxxx22308 sshd[14856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.75.152.213 Aug 18 19:51:33 vpxxxxxxx22308 sshd[14856]: Failed password for invalid user xapolicymgr from 62.75.152.213 port 43608 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=62.75.152.213	2019-08-26 16:37:33
119.50.138.255	attack	" "	2019-08-26 16:27:15
113.194.90.28	attack	Aug 25 21:53:44 friendsofhawaii sshd\[1335\]: Invalid user ck from 113.194.90.28 Aug 25 21:53:44 friendsofhawaii sshd\[1335\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.194.90.28 Aug 25 21:53:46 friendsofhawaii sshd\[1335\]: Failed password for invalid user ck from 113.194.90.28 port 56842 ssh2 Aug 25 21:57:01 friendsofhawaii sshd\[1671\]: Invalid user pvm from 113.194.90.28 Aug 25 21:57:01 friendsofhawaii sshd\[1671\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.194.90.28	2019-08-26 16:08:46
173.239.37.163	attackspam	Aug 25 22:33:45 wbs sshd\[8030\]: Invalid user nt from 173.239.37.163 Aug 25 22:33:45 wbs sshd\[8030\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.239.37.163 Aug 25 22:33:47 wbs sshd\[8030\]: Failed password for invalid user nt from 173.239.37.163 port 49986 ssh2 Aug 25 22:38:04 wbs sshd\[8411\]: Invalid user zabbix from 173.239.37.163 Aug 25 22:38:04 wbs sshd\[8411\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.239.37.163	2019-08-26 16:38:16

最近上报的IP列表

123.13.153.224	180.69.116.193	81.131.94.50	80.182.234.190
94.51.194.150	80.211.87.63	23.89.101.130	42.55.17.215
202.252.184.64	1.131.49.92	104.155.36.113	78.222.57.83
86.106.82.49	114.39.54.137	118.169.42.208	193.178.51.119
149.200.195.210	178.128.212.51	185.81.153.124	192.21.84.51