219.92.5.140 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Malaysia

运营商(isp): Telekom Malaysia Berhad

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	12/21/2019-15:54:21.544756 219.92.5.140 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2019-12-22 01:17:47

相同子网IP讨论:

IP	类型	评论内容	时间
219.92.50.41	attack	Lines containing failures of 219.92.50.41 Oct 8 16:57:52 nemesis sshd[30964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.92.50.41 user=r.r Oct 8 16:57:54 nemesis sshd[30964]: Failed password for r.r from 219.92.50.41 port 28538 ssh2 Oct 8 16:57:56 nemesis sshd[30964]: Received disconnect from 219.92.50.41 port 28538:11: Bye Bye [preauth] Oct 8 16:57:56 nemesis sshd[30964]: Disconnected from authenticating user r.r 219.92.50.41 port 28538 [preauth] Oct 8 17:04:38 nemesis sshd[32651]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.92.50.41 user=r.r Oct 8 17:04:40 nemesis sshd[32651]: Failed password for r.r from 219.92.50.41 port 44348 ssh2 Oct 8 17:04:41 nemesis sshd[32651]: Received disconnect from 219.92.50.41 port 44348:11: Bye Bye [preauth] Oct 8 17:04:41 nemesis sshd[32651]: Disconnected from authenticating user r.r 219.92.50.41 port 44348 [preauth] ........ -------------------------------------------	2020-10-10 02:25:59
219.92.50.41	attackspam	Lines containing failures of 219.92.50.41 Oct 8 16:57:52 nemesis sshd[30964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.92.50.41 user=r.r Oct 8 16:57:54 nemesis sshd[30964]: Failed password for r.r from 219.92.50.41 port 28538 ssh2 Oct 8 16:57:56 nemesis sshd[30964]: Received disconnect from 219.92.50.41 port 28538:11: Bye Bye [preauth] Oct 8 16:57:56 nemesis sshd[30964]: Disconnected from authenticating user r.r 219.92.50.41 port 28538 [preauth] Oct 8 17:04:38 nemesis sshd[32651]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.92.50.41 user=r.r Oct 8 17:04:40 nemesis sshd[32651]: Failed password for r.r from 219.92.50.41 port 44348 ssh2 Oct 8 17:04:41 nemesis sshd[32651]: Received disconnect from 219.92.50.41 port 44348:11: Bye Bye [preauth] Oct 8 17:04:41 nemesis sshd[32651]: Disconnected from authenticating user r.r 219.92.50.41 port 44348 [preauth] ........ -------------------------------------------	2020-10-09 18:11:11
219.92.54.249	attackspam	Fail2Ban Ban Triggered	2020-06-16 23:54:12
219.92.55.193	attackspambots	TCP (SYN) 219.92.55.193:62760 -> port 23, len 44	2020-05-29 16:32:24
219.92.54.249	attackspam	suspicious action Fri, 28 Feb 2020 10:27:49 -0300	2020-02-29 03:25:01
219.92.54.211	attack	Jan 24 05:28:14 motanud sshd\[32400\]: Invalid user noemi from 219.92.54.211 port 41536 Jan 24 05:28:14 motanud sshd\[32400\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.92.54.211 Jan 24 05:28:16 motanud sshd\[32400\]: Failed password for invalid user noemi from 219.92.54.211 port 41536 ssh2 Mar 7 02:00:44 motanud sshd\[12390\]: Invalid user zf from 219.92.54.211 port 37110 Mar 7 02:00:44 motanud sshd\[12390\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.92.54.211 Mar 7 02:00:45 motanud sshd\[12390\]: Failed password for invalid user zf from 219.92.54.211 port 37110 ssh2	2019-08-11 14:17:12

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 219.92.5.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18568
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;219.92.5.140.			IN	A

;; AUTHORITY SECTION:
.			351	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122100 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 22 01:17:33 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

140.5.92.219.in-addr.arpa domain name pointer usj-5-140.tm.net.my.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
140.5.92.219.in-addr.arpa	name = usj-5-140.tm.net.my.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
180.76.174.197	attack	Aug 13 08:38:53 ns3164893 sshd[19572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.174.197 user=root Aug 13 08:38:55 ns3164893 sshd[19572]: Failed password for root from 180.76.174.197 port 40584 ssh2 ...	2020-08-13 19:06:55
128.199.33.67	attack	TCP port : 8545	2020-08-13 19:12:39
114.67.104.35	attackbotsspam	Aug 13 05:54:37 scw-tender-jepsen sshd[1507]: Failed password for root from 114.67.104.35 port 60883 ssh2	2020-08-13 18:48:30
181.52.249.177	attack	2020-08-13T11:59:31.863104amanda2.illicoweb.com sshd\[28939\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.52.249.177 user=root 2020-08-13T11:59:34.450110amanda2.illicoweb.com sshd\[28939\]: Failed password for root from 181.52.249.177 port 52428 ssh2 2020-08-13T12:03:51.665361amanda2.illicoweb.com sshd\[29091\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.52.249.177 user=root 2020-08-13T12:03:53.278804amanda2.illicoweb.com sshd\[29091\]: Failed password for root from 181.52.249.177 port 57592 ssh2 2020-08-13T12:08:24.286258amanda2.illicoweb.com sshd\[29322\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.52.249.177 user=root ...	2020-08-13 18:49:24
186.216.64.97	attackbotsspam	mail brute force	2020-08-13 19:19:04
134.175.59.225	attack	$f2bV_matches	2020-08-13 19:21:12
177.8.172.141	attackspambots	Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-08-13 19:08:58
165.22.33.32	attackspambots	Aug 13 09:29:38 icinga sshd[27716]: Failed password for root from 165.22.33.32 port 51144 ssh2 Aug 13 09:53:10 icinga sshd[63802]: Failed password for root from 165.22.33.32 port 57730 ssh2 ...	2020-08-13 19:11:17
98.143.148.45	attackspam	Aug 13 08:53:22 serwer sshd\[645\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.143.148.45 user=root Aug 13 08:53:24 serwer sshd\[645\]: Failed password for root from 98.143.148.45 port 38704 ssh2 Aug 13 08:59:12 serwer sshd\[1183\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.143.148.45 user=root ...	2020-08-13 19:07:28
180.244.122.143	attackspam	1597290488 - 08/13/2020 05:48:08 Host: 180.244.122.143/180.244.122.143 Port: 445 TCP Blocked	2020-08-13 18:44:25
191.241.242.91	attackbots	1597290462 - 08/13/2020 05:47:42 Host: 191.241.242.91/191.241.242.91 Port: 445 TCP Blocked	2020-08-13 19:01:00
52.191.23.78	attackspam	TCP (SYN) 52.191.23.78:30882 -> port 23, len 44	2020-08-13 19:15:58
186.94.110.207	attack	1597290448 - 08/13/2020 05:47:28 Host: 186.94.110.207/186.94.110.207 Port: 445 TCP Blocked	2020-08-13 19:10:30
31.134.215.1	attackspam	1597290460 - 08/13/2020 05:47:40 Host: 31.134.215.1/31.134.215.1 Port: 445 TCP Blocked	2020-08-13 19:03:45
84.27.182.186	attackspambots	Invalid user pi from 84.27.182.186 port 59074 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84-27-182-186.cable.dynamic.v4.ziggo.nl Invalid user pi from 84.27.182.186 port 59074 Failed password for invalid user pi from 84.27.182.186 port 59074 ssh2 Invalid user pi from 84.27.182.186 port 36136	2020-08-13 19:18:22

最近上报的IP列表

166.147.152.187	93.185.196.221	238.192.203.195	161.57.105.40
212.206.144.74	230.12.219.14	148.67.244.83	95.9.216.25
116.210.91.218	114.237.109.40	13.233.109.96	201.139.46.11
58.22.65.9	5.83.7.23	194.15.36.94	195.154.28.205
83.103.237.117	203.113.25.6	195.209.127.200	113.203.233.65

基本信息:

用户上报:

相同子网IP讨论:

WHOIS信息:

DIG信息:

HOST信息:

NSLOOKUP信息:

相关IP信息:

最新评论:

最近上报的IP列表