City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 219.135.139.130 | attack | port scan and connect, tcp 1433 (ms-sql-s) |
2020-07-17 00:45:22 |
| 219.135.139.242 | attackbots | Mar 23 01:05:03 WHD8 postfix/smtpd\[49804\]: warning: unknown\[219.135.139.242\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 23 01:05:11 WHD8 postfix/smtpd\[49869\]: warning: unknown\[219.135.139.242\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 31 00:02:49 WHD8 postfix/smtpd\[35160\]: warning: unknown\[219.135.139.242\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-05-06 03:04:46 |
| 219.135.139.243 | attackbotsspam | Mar 26 05:43:59 WHD8 postfix/smtpd\[94626\]: warning: unknown\[219.135.139.243\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 6 07:18:50 WHD8 postfix/smtpd\[93580\]: warning: unknown\[219.135.139.243\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 6 07:18:59 WHD8 postfix/smtpd\[93467\]: warning: unknown\[219.135.139.243\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-05-06 02:49:23 |
| 219.135.139.244 | attackspam | Dec 31 09:53:01 web1 postfix/smtpd[26895]: warning: unknown[219.135.139.244]: SASL LOGIN authentication failed: authentication failure ... |
2019-12-31 23:54:28 |
| 219.135.139.242 | attackspam | Dec 31 09:53:07 web1 postfix/smtpd[27446]: warning: unknown[219.135.139.242]: SASL LOGIN authentication failed: authentication failure ... |
2019-12-31 23:46:07 |
| 219.135.139.245 | attackbots | Dec 31 09:53:11 web1 postfix/smtpd[27446]: warning: unknown[219.135.139.245]: SASL LOGIN authentication failed: authentication failure ... |
2019-12-31 23:43:37 |
| 219.135.139.245 | attack | Nov 17 00:21:23 mail postfix/smtpd[14787]: warning: unknown[219.135.139.245]: SASL LOGIN authentication failed: authentication failure |
2019-11-17 21:06:08 |
| 219.135.139.242 | attack | Nov 17 00:21:31 mail postfix/smtpd[14815]: warning: unknown[219.135.139.242]: SASL LOGIN authentication failed: authentication failure |
2019-11-17 20:59:20 |
| 219.135.139.244 | attackspam | 2019-10-21 22:51:20 dovecot_login authenticator failed for (sienawx.org) [219.135.139.244]:23459 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=nologin@lerctr.org) 2019-10-21 22:51:55 dovecot_login authenticator failed for (sienawx.org) [219.135.139.244]:16062 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=android@lerctr.org) 2019-10-21 22:52:12 dovecot_login authenticator failed for (sienawx.org) [219.135.139.244]:62968 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=android@lerctr.org) ... |
2019-10-22 16:44:47 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 219.135.139.246
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 531
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;219.135.139.246. IN A
;; AUTHORITY SECTION:
. 256 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400
;; Query time: 49 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 23:16:45 CST 2022
;; MSG SIZE rcvd: 108246.139.135.219.in-addr.arpa domain name pointer 246.139.135.219.broad.gz.gd.dynamic.163data.com.cn.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
246.139.135.219.in-addr.arpa name = 246.139.135.219.broad.gz.gd.dynamic.163data.com.cn.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 2001:e68:4429:46c7:5c07:2734:9b71:871a | attack | C1,WP GET /wp-login.php |
2019-08-13 03:02:33 |
| 81.95.119.136 | attack | 19/8/12@08:17:48: FAIL: Alarm-SSH address from=81.95.119.136 ... |
2019-08-13 02:50:58 |
| 191.242.232.10 | attack | $f2bV_matches |
2019-08-13 02:55:32 |
| 139.59.79.56 | attackspam | Aug 12 18:30:55 work-partkepr sshd\[4361\]: Invalid user ubuntu from 139.59.79.56 port 40198 Aug 12 18:30:55 work-partkepr sshd\[4361\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.79.56 ... |
2019-08-13 03:12:09 |
| 117.146.251.138 | attack | 1001/tcp 1010/tcp 1003/tcp... [2019-07-16/08-12]59pkt,26pt.(tcp) |
2019-08-13 03:21:46 |
| 107.170.201.70 | attackspambots | " " |
2019-08-13 03:05:06 |
| 196.196.34.41 | attack | Automatic report - Banned IP Access |
2019-08-13 03:26:52 |
| 222.172.198.165 | attack | Unauthorised access (Aug 12) SRC=222.172.198.165 LEN=40 TTL=48 ID=50519 TCP DPT=8080 WINDOW=50636 SYN |
2019-08-13 03:23:56 |
| 80.41.67.90 | attackspam | scan z |
2019-08-13 03:09:20 |
| 134.73.76.15 | attackspambots | Postfix RBL failed |
2019-08-13 03:26:22 |
| 198.108.67.46 | attack | 9005/tcp 9047/tcp 9214/tcp... [2019-06-12/08-12]138pkt,127pt.(tcp) |
2019-08-13 03:31:29 |
| 210.102.196.180 | attackbots | 2019-08-12T19:11:58.673375abusebot-2.cloudsearch.cf sshd\[4564\]: Invalid user mysql from 210.102.196.180 port 47154 |
2019-08-13 03:19:01 |
| 196.52.43.55 | attackbotsspam | 8888/tcp 27017/tcp 5984/tcp... [2019-06-10/08-10]101pkt,59pt.(tcp),9pt.(udp),1tp.(icmp) |
2019-08-13 03:19:31 |
| 3.16.163.31 | attackbots | Fail2Ban Ban Triggered HTTP Exploit Attempt |
2019-08-13 03:30:55 |
| 178.128.247.181 | attack | Aug 12 11:36:55 sanyalnet-awsem3-1 sshd[29614]: Connection from 178.128.247.181 port 53028 on 172.30.0.184 port 22 Aug 12 11:36:56 sanyalnet-awsem3-1 sshd[29614]: Invalid user cjc from 178.128.247.181 Aug 12 11:36:56 sanyalnet-awsem3-1 sshd[29614]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.247.181 Aug 12 11:36:58 sanyalnet-awsem3-1 sshd[29614]: Failed password for invalid user cjc from 178.128.247.181 port 53028 ssh2 Aug 12 11:36:58 sanyalnet-awsem3-1 sshd[29614]: Received disconnect from 178.128.247.181: 11: Bye Bye [preauth] Aug 12 11:47:54 sanyalnet-awsem3-1 sshd[30047]: Connection from 178.128.247.181 port 44398 on 172.30.0.184 port 22 Aug 12 11:47:54 sanyalnet-awsem3-1 sshd[30047]: Invalid user plesk from 178.128.247.181 Aug 12 11:47:54 sanyalnet-awsem3-1 sshd[30047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.247.181 ........ ----------------------------------------------- https://www.blocklist |
2019-08-13 03:14:12 |