175.20.219.139

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Unicom Jilin Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Automatic report - Port Scan Attack	2019-08-30 11:25:03

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 175.20.219.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46900
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;175.20.219.139.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082901 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Aug 30 11:24:55 CST 2019
;; MSG SIZE  rcvd: 118

Host info

139.219.20.175.in-addr.arpa domain name pointer 139.219.20.175.adsl-pool.jlccptt.net.cn.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
139.219.20.175.in-addr.arpa	name = 139.219.20.175.adsl-pool.jlccptt.net.cn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
91.121.110.97	attackbots	Feb 27 22:30:13 hanapaa sshd\[7843\]: Invalid user frodo from 91.121.110.97 Feb 27 22:30:14 hanapaa sshd\[7843\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns350624.ip-91-121-110.eu Feb 27 22:30:16 hanapaa sshd\[7843\]: Failed password for invalid user frodo from 91.121.110.97 port 53156 ssh2 Feb 27 22:35:57 hanapaa sshd\[8299\]: Invalid user dan from 91.121.110.97 Feb 27 22:35:57 hanapaa sshd\[8299\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns350624.ip-91-121-110.eu	2020-02-28 16:52:39
13.52.243.83	attackbotsspam	Feb 28 09:37:49 sshd\[13633\]: User lp from ec2-13-52-243-83.us-west-1.compute.amazonaws.com not allowed because not listed in AllowUsersFeb 28 09:37:51 sshd\[13633\]: Failed password for invalid user lp from 13.52.243.83 port 52832 ssh2 ...	2020-02-28 17:06:01
207.32.63.24	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 17:14:55
138.68.234.162	attack	Feb 27 19:30:50 hanapaa sshd\[22586\]: Invalid user ftpuser from 138.68.234.162 Feb 27 19:30:50 hanapaa sshd\[22586\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.234.162 Feb 27 19:30:52 hanapaa sshd\[22586\]: Failed password for invalid user ftpuser from 138.68.234.162 port 52018 ssh2 Feb 27 19:38:34 hanapaa sshd\[23242\]: Invalid user postgres from 138.68.234.162 Feb 27 19:38:34 hanapaa sshd\[23242\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.234.162	2020-02-28 17:04:20
141.98.80.173	attackspam	Feb 28 10:02:06 server sshd[219285]: Failed password for invalid user admin from 141.98.80.173 port 3235 ssh2 Feb 28 10:02:13 server sshd[219290]: Failed password for invalid user ubnt from 141.98.80.173 port 4581 ssh2 Feb 28 10:02:20 server sshd[219319]: Failed password for invalid user supervisor from 141.98.80.173 port 5619 ssh2	2020-02-28 17:19:58
61.36.232.56	attack	Feb 28 11:02:34 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 4 secs$: user=\, method=PLAIN, rip=61.36.232.56, lip=212.111.212.230, session=\ Feb 28 11:02:43 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 8 secs$: user=\, method=PLAIN, rip=61.36.232.56, lip=212.111.212.230, session=\ Feb 28 11:02:56 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 12 secs$: user=\, method=PLAIN, rip=61.36.232.56, lip=212.111.212.230, session=\<53PIGZ+f3rI9JOg4\> Feb 28 11:09:27 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 4 secs$: user=\, method=PLAIN, rip=61.36.232.56, lip=212.111.212.230, session=\ Feb 28 11:09:36 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 8 secs$: user=\, method=PLAIN, rip=61.36.232.56, lip=212.111.212.23 ...	2020-02-28 17:13:40
49.145.229.68	attackbots	1582865574 - 02/28/2020 05:52:54 Host: 49.145.229.68/49.145.229.68 Port: 445 TCP Blocked	2020-02-28 17:10:20
109.195.198.27	attack	$f2bV_matches_ltvn	2020-02-28 17:16:12
74.199.108.162	attackbots	Feb 27 22:47:27 tdfoods sshd\[15491\]: Invalid user webadmin from 74.199.108.162 Feb 27 22:47:27 tdfoods sshd\[15491\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=d199-74-162-108.nap.wideopenwest.com Feb 27 22:47:29 tdfoods sshd\[15491\]: Failed password for invalid user webadmin from 74.199.108.162 port 37728 ssh2 Feb 27 22:53:59 tdfoods sshd\[16123\]: Invalid user carlos from 74.199.108.162 Feb 27 22:53:59 tdfoods sshd\[16123\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=d199-74-162-108.nap.wideopenwest.com	2020-02-28 17:07:48
115.70.116.84	attack	unauthorized connection attempt	2020-02-28 17:07:14
183.88.16.142	attackspambots	unauthorized connection attempt	2020-02-28 17:19:36
40.84.192.254	attackspambots	"Test Inject un'a=0"	2020-02-28 16:46:04
117.5.72.109	attackbotsspam	Honeypot attack, port: 445, PTR: localhost.	2020-02-28 16:49:40
118.68.165.0	attackbotsspam	1582865599 - 02/28/2020 05:53:19 Host: 118.68.165.0/118.68.165.0 Port: 445 TCP Blocked	2020-02-28 16:47:53
196.52.43.128	attack	Port scan: Attack repeated for 24 hours	2020-02-28 16:56:25

Recently Reported IPs

113.131.183.4	220.135.212.118	190.215.0.189	191.241.166.23
160.108.51.150	221.231.57.245	116.236.80.18	42.239.111.238
207.93.25.10	139.155.104.121	42.177.109.9	75.145.135.250
42.117.113.159	206.81.27.182	192.210.189.124	186.236.20.211
146.88.240.128	153.143.202.230	20.152.25.181	239.54.185.4