139.217.131.52

Basic Info

City: Shanghai

Region: Shanghai

Country: China

Internet Service Provider: Microsoft (China) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Oct 27 14:53:23 server sshd\[30158\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.131.52 user=root Oct 27 14:53:25 server sshd\[30158\]: Failed password for root from 139.217.131.52 port 1152 ssh2 Oct 27 15:05:08 server sshd\[32742\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.131.52 user=root Oct 27 15:05:10 server sshd\[32742\]: Failed password for root from 139.217.131.52 port 1152 ssh2 Oct 27 15:09:48 server sshd\[1051\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.131.52 user=root ...	2019-10-27 21:56:06
attackspam	Invalid user test from 139.217.131.52 port 1152	2019-10-21 01:57:05
attack	Oct 15 04:07:17 elenin sshd[5090]: Invalid user r.rme from 139.217.131.52 Oct 15 04:07:17 elenin sshd[5090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.131.52 Oct 15 04:07:20 elenin sshd[5090]: Failed password for invalid user r.rme from 139.217.131.52 port 1152 ssh2 Oct 15 04:07:20 elenin sshd[5090]: Received disconnect from 139.217.131.52: 11: Bye Bye [preauth] Oct 15 04:13:06 elenin sshd[5135]: Invalid user fang from 139.217.131.52 Oct 15 04:13:06 elenin sshd[5135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.131.52 Oct 15 04:13:08 elenin sshd[5135]: Failed password for invalid user fang from 139.217.131.52 port 1152 ssh2 Oct 15 04:13:08 elenin sshd[5135]: Received disconnect from 139.217.131.52: 11: Bye Bye [preauth] Oct 15 04:18:04 elenin sshd[5194]: User r.r from 139.217.131.52 not allowed because not listed in AllowUsers Oct 15 04:18:04 elenin sshd[5194]: pa........ -------------------------------	2019-10-19 19:59:24
attackspam	Oct 17 01:30:35 wbs sshd\[11616\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.131.52 user=root Oct 17 01:30:38 wbs sshd\[11616\]: Failed password for root from 139.217.131.52 port 1152 ssh2 Oct 17 01:35:58 wbs sshd\[12058\]: Invalid user estheti from 139.217.131.52 Oct 17 01:35:58 wbs sshd\[12058\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.131.52 Oct 17 01:36:00 wbs sshd\[12058\]: Failed password for invalid user estheti from 139.217.131.52 port 1152 ssh2	2019-10-18 02:28:08

Comments on same subnet:

IP	Type	Details	Datetime
139.217.131.17	attackbotsspam	Automatic report - Banned IP Access	2019-11-04 18:28:11

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.217.131.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45343
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.217.131.52.			IN	A

;; AUTHORITY SECTION:
.			279	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101700 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 18 02:28:04 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 52.131.217.139.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 52.131.217.139.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
50.196.36.169	attack	Hits on port :	2020-09-26 22:09:57
1.169.36.90	attack	2020-09-24T06:30:01.485072suse-nuc sshd[19189]: Invalid user admin from 1.169.36.90 port 36551 ...	2020-09-26 21:59:36
103.214.170.86	attackspambots	Brute-force attempt banned	2020-09-26 21:37:04
1.179.137.10	attack	Sep 26 15:14:43 s2 sshd[11996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.179.137.10 Sep 26 15:14:44 s2 sshd[11996]: Failed password for invalid user admin from 1.179.137.10 port 41238 ssh2 Sep 26 15:29:05 s2 sshd[12765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.179.137.10	2020-09-26 21:57:49
40.88.123.179	attack	Brute-force attempt banned	2020-09-26 22:03:14
111.229.159.76	attackspam	Invalid user canal from 111.229.159.76 port 59368 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.159.76 Invalid user canal from 111.229.159.76 port 59368 Failed password for invalid user canal from 111.229.159.76 port 59368 ssh2 Invalid user admin from 111.229.159.76 port 48284	2020-09-26 22:06:18
1.10.202.42	attackbotsspam	2020-05-20T00:35:13.020177suse-nuc sshd[12549]: Invalid user dircreate from 1.10.202.42 port 23392 ...	2020-09-26 22:14:33
157.230.243.163	attackspam	2020-09-26T05:39:23.670519-07:00 suse-nuc sshd[387]: Invalid user odoo from 157.230.243.163 port 57856 ...	2020-09-26 21:53:55
77.43.80.224	attackbotsspam	$f2bV_matches	2020-09-26 21:55:36
151.106.10.139	attack	Unauthorized IMAP connection attempt	2020-09-26 22:06:05
1.161.251.73	attack	2020-06-05T12:14:37.422530suse-nuc sshd[29899]: Invalid user admin from 1.161.251.73 port 2344 ...	2020-09-26 22:05:09
207.154.242.82	attackspam	Sep 26 15:55:24 localhost sshd\[8919\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.242.82 user=root Sep 26 15:55:26 localhost sshd\[8919\]: Failed password for root from 207.154.242.82 port 43264 ssh2 Sep 26 15:55:27 localhost sshd\[8921\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.242.82 user=root Sep 26 15:55:28 localhost sshd\[8921\]: Failed password for root from 207.154.242.82 port 49242 ssh2 Sep 26 15:55:30 localhost sshd\[8923\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.242.82 user=root ...	2020-09-26 21:56:45
1.174.150.111	attackbotsspam	2020-09-10T10:32:10.266590suse-nuc sshd[31887]: Invalid user admin from 1.174.150.111 port 45441 ...	2020-09-26 21:58:18
95.188.70.130	attack	2020-09-25 UTC: (15x) - administrator,alexis,debian,git,nina,odroid,oracle(2x),redis,root(2x),ts,vyatta,william,xh	2020-09-26 21:37:34
49.12.118.79	attack	Amazon phisg. Received: from mx.steamfair.co.uk () by mx-ha.gmx.net (mxgmx016 ) with ESMTPS (Nemesis) id 1MvJ8l-1kRfbn0yv3-00rKiM for ; Thu, 24 Sep 2020 21:48:01 +0200 Tracking message source: 49.12.118.79: Routing details for 49.12.118.79 Report routing for 49.12.118.79: abuse@hetzner.de "From: (Gluckwunsch! Exklusive Pramien uber 50 USD- uber Amazon Prime!) Gesendet: Donnerstag, 24. Septemb er 2020 um 21:48 Uhr"	2020-09-26 21:47:00

Recently Reported IPs

50.47.89.24	5.15.129.76	98.243.164.84	23.67.49.84
174.246.137.166	97.154.119.91	90.65.253.225	187.56.68.159
90.19.53.153	76.175.206.123	109.175.9.33	177.250.180.201
222.34.158.192	206.253.175.149	79.180.86.34	198.53.251.2
216.245.196.6	113.74.66.12	176.62.3.186	106.111.215.215