219.139.131.138

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Hubei Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Feb 4 03:26:17 host dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=219.139.131.138, lip=62.210.151.217, session= Feb 4 03:26:24 host dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=219.139.131.138, lip=62.210.151.217, session=<+/DTw7adwuLbi4OK> ...	2020-02-05 14:27:15

类型

评论内容

时间

attackbots

Feb  4 03:26:17 host dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=219.139.131.138, lip=62.210.151.217, session=
Feb  4 03:26:24 host dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=219.139.131.138, lip=62.210.151.217, session=<+/DTw7adwuLbi4OK>
...

2020-02-05 14:27:15

相同子网IP讨论:

IP	类型	评论内容	时间
219.139.131.134	attackspambots	Oct 1 12:35:28 mockhub sshd[307470]: Invalid user amsftp from 219.139.131.134 port 39134 Oct 1 12:35:30 mockhub sshd[307470]: Failed password for invalid user amsftp from 219.139.131.134 port 39134 ssh2 Oct 1 12:37:02 mockhub sshd[307545]: Invalid user nathalie from 219.139.131.134 port 34490 ...	2020-10-02 03:47:29
219.139.131.134	attackspambots	Invalid user rohit from 219.139.131.134 port 56816	2020-10-01 20:00:24
219.139.131.134	attackbots	Oct 1 02:21:14 OPSO sshd\[27518\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134 user=root Oct 1 02:21:16 OPSO sshd\[27518\]: Failed password for root from 219.139.131.134 port 43160 ssh2 Oct 1 02:24:55 OPSO sshd\[28016\]: Invalid user git from 219.139.131.134 port 40010 Oct 1 02:24:55 OPSO sshd\[28016\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134 Oct 1 02:24:58 OPSO sshd\[28016\]: Failed password for invalid user git from 219.139.131.134 port 40010 ssh2	2020-10-01 12:08:34
219.139.131.134	attackbots	2020-08-30T02:29:41.967383linuxbox-skyline sshd[32502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134 user=root 2020-08-30T02:29:44.260005linuxbox-skyline sshd[32502]: Failed password for root from 219.139.131.134 port 44536 ssh2 ...	2020-08-30 17:05:09
219.139.131.134	attackspambots	Aug 26 22:51:03 ns382633 sshd\[16842\]: Invalid user jeffrey from 219.139.131.134 port 52572 Aug 26 22:51:03 ns382633 sshd\[16842\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134 Aug 26 22:51:04 ns382633 sshd\[16842\]: Failed password for invalid user jeffrey from 219.139.131.134 port 52572 ssh2 Aug 26 23:01:04 ns382633 sshd\[18564\]: Invalid user lij from 219.139.131.134 port 44128 Aug 26 23:01:04 ns382633 sshd\[18564\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134	2020-08-27 05:41:53
219.139.131.134	attackbotsspam	Aug 23 20:17:52 php1 sshd\[9011\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134 user=root Aug 23 20:17:54 php1 sshd\[9011\]: Failed password for root from 219.139.131.134 port 44616 ssh2 Aug 23 20:23:33 php1 sshd\[9510\]: Invalid user gitlab from 219.139.131.134 Aug 23 20:23:33 php1 sshd\[9510\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134 Aug 23 20:23:35 php1 sshd\[9510\]: Failed password for invalid user gitlab from 219.139.131.134 port 50728 ssh2	2020-08-24 14:26:31
219.139.131.21	attack	Fail2Ban Ban Triggered HTTP SQL Injection Attempt	2020-08-21 19:11:17
219.139.131.134	attackbotsspam	Aug 10 06:33:22 buvik sshd[14234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134 Aug 10 06:33:25 buvik sshd[14234]: Failed password for invalid user ftpadmin1 from 219.139.131.134 port 58730 ssh2 Aug 10 06:36:52 buvik sshd[14681]: Invalid user qwe!@#$ from 219.139.131.134 ...	2020-08-10 12:59:41
219.139.131.134	attack	Aug 3 07:10:40 piServer sshd[29297]: Failed password for root from 219.139.131.134 port 55452 ssh2 Aug 3 07:13:13 piServer sshd[29608]: Failed password for root from 219.139.131.134 port 54942 ssh2 ...	2020-08-03 15:55:42
219.139.131.134	attack	2020-07-23T22:20:46.715134-07:00 suse-nuc sshd[16303]: Invalid user vuser from 219.139.131.134 port 52700 ...	2020-07-24 13:45:37
219.139.131.134	attackspam	Jul 19 22:38:32 jumpserver sshd[138736]: Invalid user bdm from 219.139.131.134 port 41536 Jul 19 22:38:34 jumpserver sshd[138736]: Failed password for invalid user bdm from 219.139.131.134 port 41536 ssh2 Jul 19 22:42:21 jumpserver sshd[138775]: Invalid user jie from 219.139.131.134 port 46380 ...	2020-07-20 06:46:46
219.139.131.134	attackspam	Invalid user vlad from 219.139.131.134 port 52370	2020-07-19 03:15:06
219.139.131.134	attack	$f2bV_matches	2020-06-10 20:19:50
219.139.131.134	attack	2020-05-27T07:59:25.807088afi-git.jinr.ru sshd[8085]: Failed password for root from 219.139.131.134 port 38854 ssh2 2020-05-27T08:02:15.223464afi-git.jinr.ru sshd[8857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134 user=root 2020-05-27T08:02:16.786804afi-git.jinr.ru sshd[8857]: Failed password for root from 219.139.131.134 port 46464 ssh2 2020-05-27T08:05:11.081432afi-git.jinr.ru sshd[9419]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134 user=test 2020-05-27T08:05:13.672918afi-git.jinr.ru sshd[9419]: Failed password for test from 219.139.131.134 port 54628 ssh2 ...	2020-05-27 14:15:29
219.139.131.134	attack	web-1 [ssh] SSH Attack	2020-05-26 09:50:11

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 219.139.131.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10765
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;219.139.131.138.		IN	A

;; AUTHORITY SECTION:
.			410	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020401 1800 900 604800 86400

;; Query time: 87 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 14:27:02 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

Host 138.131.139.219.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 138.131.139.219.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
45.55.206.241	attackspambots	Nov 29 10:53:01 TORMINT sshd\[24792\]: Invalid user guest from 45.55.206.241 Nov 29 10:53:01 TORMINT sshd\[24792\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.206.241 Nov 29 10:53:03 TORMINT sshd\[24792\]: Failed password for invalid user guest from 45.55.206.241 port 47687 ssh2 ...	2019-11-30 01:50:08
212.69.18.7	attackbots	3389BruteforceFW21	2019-11-30 01:55:29
78.39.152.11	attackbotsspam	smtp attack	2019-11-30 01:15:27
68.183.73.185	attackspambots	WordPress login Brute force / Web App Attack on client site.	2019-11-30 01:52:23
116.239.107.113	attackspambots	Nov 29 10:01:48 eola postfix/smtpd[17797]: connect from unknown[116.239.107.113] Nov 29 10:01:50 eola postfix/smtpd[17797]: lost connection after AUTH from unknown[116.239.107.113] Nov 29 10:01:50 eola postfix/smtpd[17797]: disconnect from unknown[116.239.107.113] ehlo=1 auth=0/1 commands=1/2 Nov 29 10:01:50 eola postfix/smtpd[17797]: connect from unknown[116.239.107.113] Nov 29 10:01:51 eola postfix/smtpd[17797]: lost connection after AUTH from unknown[116.239.107.113] Nov 29 10:01:51 eola postfix/smtpd[17797]: disconnect from unknown[116.239.107.113] ehlo=1 auth=0/1 commands=1/2 Nov 29 10:01:51 eola postfix/smtpd[17797]: connect from unknown[116.239.107.113] Nov 29 10:01:53 eola postfix/smtpd[17797]: lost connection after AUTH from unknown[116.239.107.113] Nov 29 10:01:53 eola postfix/smtpd[17797]: disconnect from unknown[116.239.107.113] ehlo=1 auth=0/1 commands=1/2 Nov 29 10:01:56 eola postfix/smtpd[17797]: connect from unknown[116.239.107.113] Nov 29 10:01:57 eola ........ -------------------------------	2019-11-30 01:32:34
220.121.97.43	attackbots	proto=tcp . spt=48821 . dpt=3389 . src=220.121.97.43 . dst=xx.xx.4.1 . (Listed on zen-spamhaus plus rbldns-ru) (573)	2019-11-30 01:16:52
186.38.19.1	attackspambots	Spam Timestamp : 29-Nov-19 14:30 BlockList Provider combined abuse (550)	2019-11-30 01:39:34
106.3.228.53	attackbotsspam	port scan/probe/communication attempt	2019-11-30 01:38:05
91.121.7.155	attack	Nov 29 18:25:04 fr01 sshd[28013]: Invalid user http from 91.121.7.155 Nov 29 18:25:04 fr01 sshd[28013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.7.155 Nov 29 18:25:04 fr01 sshd[28013]: Invalid user http from 91.121.7.155 Nov 29 18:25:06 fr01 sshd[28013]: Failed password for invalid user http from 91.121.7.155 port 55238 ssh2 Nov 29 18:28:32 fr01 sshd[28570]: Invalid user frants from 91.121.7.155 ...	2019-11-30 01:41:44
202.106.93.46	attackbotsspam	Nov 29 07:39:53 hpm sshd\[778\]: Invalid user foh from 202.106.93.46 Nov 29 07:39:53 hpm sshd\[778\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.106.93.46 Nov 29 07:39:54 hpm sshd\[778\]: Failed password for invalid user foh from 202.106.93.46 port 54971 ssh2 Nov 29 07:44:45 hpm sshd\[1207\]: Invalid user apache from 202.106.93.46 Nov 29 07:44:45 hpm sshd\[1207\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.106.93.46	2019-11-30 01:59:23
106.124.131.70	attackbots	fail2ban	2019-11-30 01:26:07
163.172.191.192	attack	Nov 29 17:11:24 zeus sshd[21536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.191.192 Nov 29 17:11:27 zeus sshd[21536]: Failed password for invalid user test from 163.172.191.192 port 43918 ssh2 Nov 29 17:14:36 zeus sshd[21584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.191.192 Nov 29 17:14:37 zeus sshd[21584]: Failed password for invalid user test from 163.172.191.192 port 52132 ssh2	2019-11-30 01:28:50
107.175.149.34	attackbots	port scan/probe/communication attempt	2019-11-30 01:23:21
202.176.183.175	attack	firewall-block, port(s): 23/tcp	2019-11-30 01:18:27
80.150.162.146	attack	(sshd) Failed SSH login from 80.150.162.146 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Nov 29 17:19:32 s1 sshd[18560]: Invalid user douglas from 80.150.162.146 port 37352 Nov 29 17:19:34 s1 sshd[18560]: Failed password for invalid user douglas from 80.150.162.146 port 37352 ssh2 Nov 29 17:34:38 s1 sshd[18821]: Invalid user roccaforte from 80.150.162.146 port 33120 Nov 29 17:34:39 s1 sshd[18821]: Failed password for invalid user roccaforte from 80.150.162.146 port 33120 ssh2 Nov 29 17:40:33 s1 sshd[19002]: Invalid user guest from 80.150.162.146 port 35222	2019-11-30 01:54:55

最近上报的IP列表

64.78.19.170	171.225.213.171	113.190.253.205	64.227.0.107
117.1.149.179	103.7.77.7	115.75.6.182	185.143.223.173
27.73.123.137	47.240.85.77	151.3.36.69	2.185.220.235
94.179.177.229	122.167.105.248	186.88.247.66	52.212.228.152
14.169.233.52	197.156.65.138	104.244.225.186	117.58.243.202