219.139.131.138

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Hubei Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Feb 4 03:26:17 host dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=219.139.131.138, lip=62.210.151.217, session= Feb 4 03:26:24 host dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=219.139.131.138, lip=62.210.151.217, session=<+/DTw7adwuLbi4OK> ...	2020-02-05 14:27:15

类型

评论内容

时间

attackbots

Feb  4 03:26:17 host dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=219.139.131.138, lip=62.210.151.217, session=
Feb  4 03:26:24 host dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=219.139.131.138, lip=62.210.151.217, session=<+/DTw7adwuLbi4OK>
...

2020-02-05 14:27:15

相同子网IP讨论:

IP	类型	评论内容	时间
219.139.131.134	attackspambots	Oct 1 12:35:28 mockhub sshd[307470]: Invalid user amsftp from 219.139.131.134 port 39134 Oct 1 12:35:30 mockhub sshd[307470]: Failed password for invalid user amsftp from 219.139.131.134 port 39134 ssh2 Oct 1 12:37:02 mockhub sshd[307545]: Invalid user nathalie from 219.139.131.134 port 34490 ...	2020-10-02 03:47:29
219.139.131.134	attackspambots	Invalid user rohit from 219.139.131.134 port 56816	2020-10-01 20:00:24
219.139.131.134	attackbots	Oct 1 02:21:14 OPSO sshd\[27518\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134 user=root Oct 1 02:21:16 OPSO sshd\[27518\]: Failed password for root from 219.139.131.134 port 43160 ssh2 Oct 1 02:24:55 OPSO sshd\[28016\]: Invalid user git from 219.139.131.134 port 40010 Oct 1 02:24:55 OPSO sshd\[28016\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134 Oct 1 02:24:58 OPSO sshd\[28016\]: Failed password for invalid user git from 219.139.131.134 port 40010 ssh2	2020-10-01 12:08:34
219.139.131.134	attackbots	2020-08-30T02:29:41.967383linuxbox-skyline sshd[32502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134 user=root 2020-08-30T02:29:44.260005linuxbox-skyline sshd[32502]: Failed password for root from 219.139.131.134 port 44536 ssh2 ...	2020-08-30 17:05:09
219.139.131.134	attackspambots	Aug 26 22:51:03 ns382633 sshd\[16842\]: Invalid user jeffrey from 219.139.131.134 port 52572 Aug 26 22:51:03 ns382633 sshd\[16842\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134 Aug 26 22:51:04 ns382633 sshd\[16842\]: Failed password for invalid user jeffrey from 219.139.131.134 port 52572 ssh2 Aug 26 23:01:04 ns382633 sshd\[18564\]: Invalid user lij from 219.139.131.134 port 44128 Aug 26 23:01:04 ns382633 sshd\[18564\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134	2020-08-27 05:41:53
219.139.131.134	attackbotsspam	Aug 23 20:17:52 php1 sshd\[9011\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134 user=root Aug 23 20:17:54 php1 sshd\[9011\]: Failed password for root from 219.139.131.134 port 44616 ssh2 Aug 23 20:23:33 php1 sshd\[9510\]: Invalid user gitlab from 219.139.131.134 Aug 23 20:23:33 php1 sshd\[9510\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134 Aug 23 20:23:35 php1 sshd\[9510\]: Failed password for invalid user gitlab from 219.139.131.134 port 50728 ssh2	2020-08-24 14:26:31
219.139.131.21	attack	Fail2Ban Ban Triggered HTTP SQL Injection Attempt	2020-08-21 19:11:17
219.139.131.134	attackbotsspam	Aug 10 06:33:22 buvik sshd[14234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134 Aug 10 06:33:25 buvik sshd[14234]: Failed password for invalid user ftpadmin1 from 219.139.131.134 port 58730 ssh2 Aug 10 06:36:52 buvik sshd[14681]: Invalid user qwe!@#$ from 219.139.131.134 ...	2020-08-10 12:59:41
219.139.131.134	attack	Aug 3 07:10:40 piServer sshd[29297]: Failed password for root from 219.139.131.134 port 55452 ssh2 Aug 3 07:13:13 piServer sshd[29608]: Failed password for root from 219.139.131.134 port 54942 ssh2 ...	2020-08-03 15:55:42
219.139.131.134	attack	2020-07-23T22:20:46.715134-07:00 suse-nuc sshd[16303]: Invalid user vuser from 219.139.131.134 port 52700 ...	2020-07-24 13:45:37
219.139.131.134	attackspam	Jul 19 22:38:32 jumpserver sshd[138736]: Invalid user bdm from 219.139.131.134 port 41536 Jul 19 22:38:34 jumpserver sshd[138736]: Failed password for invalid user bdm from 219.139.131.134 port 41536 ssh2 Jul 19 22:42:21 jumpserver sshd[138775]: Invalid user jie from 219.139.131.134 port 46380 ...	2020-07-20 06:46:46
219.139.131.134	attackspam	Invalid user vlad from 219.139.131.134 port 52370	2020-07-19 03:15:06
219.139.131.134	attack	$f2bV_matches	2020-06-10 20:19:50
219.139.131.134	attack	2020-05-27T07:59:25.807088afi-git.jinr.ru sshd[8085]: Failed password for root from 219.139.131.134 port 38854 ssh2 2020-05-27T08:02:15.223464afi-git.jinr.ru sshd[8857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134 user=root 2020-05-27T08:02:16.786804afi-git.jinr.ru sshd[8857]: Failed password for root from 219.139.131.134 port 46464 ssh2 2020-05-27T08:05:11.081432afi-git.jinr.ru sshd[9419]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134 user=test 2020-05-27T08:05:13.672918afi-git.jinr.ru sshd[9419]: Failed password for test from 219.139.131.134 port 54628 ssh2 ...	2020-05-27 14:15:29
219.139.131.134	attack	web-1 [ssh] SSH Attack	2020-05-26 09:50:11

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 219.139.131.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10765
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;219.139.131.138.		IN	A

;; AUTHORITY SECTION:
.			410	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020401 1800 900 604800 86400

;; Query time: 87 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 14:27:02 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

Host 138.131.139.219.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 138.131.139.219.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
82.81.103.245	attackspam	Automatic report - Banned IP Access	2020-06-06 04:05:15
217.91.110.132	attackbotsspam	Jun 5 15:16:07 piServer sshd[5521]: Failed password for root from 217.91.110.132 port 39708 ssh2 Jun 5 15:19:38 piServer sshd[5794]: Failed password for root from 217.91.110.132 port 42932 ssh2 ...	2020-06-06 04:21:34
173.236.242.192	attackspambots	XSS	2020-06-06 04:16:53
45.148.10.98	attack	(smtpauth) Failed SMTP AUTH login from 45.148.10.98 (NL/Netherlands/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-06-06 00:58:47 login authenticator failed for (ADMIN) [45.148.10.98]: 535 Incorrect authentication data (set_id=info@taninsanat.com)	2020-06-06 04:36:51
222.186.180.6	attackbotsspam	Jun 5 22:16:56 vmi345603 sshd[13004]: Failed password for root from 222.186.180.6 port 13324 ssh2 Jun 5 22:16:59 vmi345603 sshd[13004]: Failed password for root from 222.186.180.6 port 13324 ssh2 ...	2020-06-06 04:20:39
125.124.91.247	attack	Brute-force attempt banned	2020-06-06 04:00:50
106.13.79.58	attackbots	Triggered by Fail2Ban at Ares web server	2020-06-06 04:06:52
186.83.184.115	attackbotsspam	186.83.184.115 - - \[05/Jun/2020:13:56:11 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 738 "-" "Mozilla/5.0 $Windows NT 6.1\; Win64\; x64$ AppleWebKit/537.36 $KHTML, like Gecko$ Chrome/59.0.3071.109 Safari/537.36" 186.83.184.115 - - \[05/Jun/2020:13:56:17 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 738 "-" "Mozilla/5.0 $Windows NT 6.1\; Win64\; x64$ AppleWebKit/537.36 $KHTML, like Gecko$ Chrome/59.0.3071.109 Safari/537.36" 186.83.184.115 - - \[05/Jun/2020:13:56:22 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 738 "-" "Mozilla/5.0 $Windows NT 6.1\; Win64\; x64$ AppleWebKit/537.36 $KHTML, like Gecko$ Chrome/59.0.3071.109 Safari/537.36"	2020-06-06 04:23:33
167.86.112.160	attackbotsspam	Jun 5 20:08:32 ns3042688 courier-pop3d: LOGIN FAILED, user=sales@makita-dolmar.es, ip=\[::ffff:167.86.112.160\] ...	2020-06-06 04:10:39
193.118.53.194	attackbotsspam	TCP (SYN) 193.118.53.194:24823 -> port 80, len 44	2020-06-06 04:23:14
220.133.231.81	attackspam	Scanning an empty webserver with deny all robots.txt	2020-06-06 04:21:05
92.63.194.35	attack	TCP (SYN) 92.63.194.35:41027 -> port 1723, len 60	2020-06-06 04:10:01
178.175.148.35	attackbotsspam	Automatic report - Banned IP Access	2020-06-06 04:06:16
211.234.119.189	attackbotsspam	Jun 5 12:58:06 pixelmemory sshd[596283]: Failed password for root from 211.234.119.189 port 41204 ssh2 Jun 5 12:58:57 pixelmemory sshd[629121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.234.119.189 user=root Jun 5 12:59:00 pixelmemory sshd[629121]: Failed password for root from 211.234.119.189 port 55386 ssh2 Jun 5 12:59:53 pixelmemory sshd[630459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.234.119.189 user=root Jun 5 12:59:55 pixelmemory sshd[630459]: Failed password for root from 211.234.119.189 port 41464 ssh2 ...	2020-06-06 04:14:34
208.91.109.50	attackbotsspam	TCP (SYN) 208.91.109.50:55869 -> port 80, len 40	2020-06-06 04:21:48

最近上报的IP列表

64.78.19.170	171.225.213.171	113.190.253.205	64.227.0.107
117.1.149.179	103.7.77.7	115.75.6.182	185.143.223.173
27.73.123.137	47.240.85.77	151.3.36.69	2.185.220.235
94.179.177.229	122.167.105.248	186.88.247.66	52.212.228.152
14.169.233.52	197.156.65.138	104.244.225.186	117.58.243.202