Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Hubei Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspam
Jun 13 06:04:20 piServer sshd[4734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.130.49 
Jun 13 06:04:21 piServer sshd[4734]: Failed password for invalid user admin from 219.139.130.49 port 6865 ssh2
Jun 13 06:07:31 piServer sshd[5094]: Failed password for root from 219.139.130.49 port 6866 ssh2
...
2020-06-13 16:32:00
attack
May 24 00:15:40 lnxded64 sshd[25023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.130.49
2020-05-24 06:35:55
attack
May 15 22:10:40 game-panel sshd[12896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.130.49
May 15 22:10:42 game-panel sshd[12896]: Failed password for invalid user nuo from 219.139.130.49 port 6732 ssh2
May 15 22:13:02 game-panel sshd[12984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.130.49
2020-05-16 07:07:22
attackspambots
2020-04-02T22:31:57.622351abusebot-3.cloudsearch.cf sshd[6964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.130.49  user=root
2020-04-02T22:31:59.013047abusebot-3.cloudsearch.cf sshd[6964]: Failed password for root from 219.139.130.49 port 2200 ssh2
2020-04-02T22:38:06.046624abusebot-3.cloudsearch.cf sshd[7272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.130.49  user=root
2020-04-02T22:38:08.430589abusebot-3.cloudsearch.cf sshd[7272]: Failed password for root from 219.139.130.49 port 2201 ssh2
2020-04-02T22:39:15.515382abusebot-3.cloudsearch.cf sshd[7335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.130.49  user=root
2020-04-02T22:39:17.036422abusebot-3.cloudsearch.cf sshd[7335]: Failed password for root from 219.139.130.49 port 2202 ssh2
2020-04-02T22:40:12.595212abusebot-3.cloudsearch.cf sshd[7384]: pam_unix(sshd:auth): authentic
...
2020-04-03 07:28:54
attack
Invalid user cpanelrrdtool from 219.139.130.49 port 2048
2020-03-13 08:32:24
Comments on same subnet:
IP Type Details Datetime
219.139.130.144 attack
Brute force blocker - service: proftpd1 - aantal: 70 - Fri Apr 20 19:10:14 2018
2020-03-09 02:35:37
219.139.130.144 attackbots
Brute force blocker - service: proftpd1 - aantal: 70 - Fri Apr 20 19:10:14 2018
2020-02-13 10:49:16
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 219.139.130.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42991
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;219.139.130.49.			IN	A

;; AUTHORITY SECTION:
.			268	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031202 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 13 08:32:18 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 49.130.139.219.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 49.130.139.219.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
222.186.30.167 attackspam
2020-02-13T08:24:16.239481scmdmz1 sshd[10962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.167  user=root
2020-02-13T08:24:17.538397scmdmz1 sshd[10962]: Failed password for root from 222.186.30.167 port 59994 ssh2
2020-02-13T08:24:29.649299scmdmz1 sshd[11023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.167  user=root
2020-02-13T08:24:32.067132scmdmz1 sshd[11023]: Failed password for root from 222.186.30.167 port 55840 ssh2
2020-02-13T08:24:29.649299scmdmz1 sshd[11023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.167  user=root
2020-02-13T08:24:32.067132scmdmz1 sshd[11023]: Failed password for root from 222.186.30.167 port 55840 ssh2
2020-02-13T08:24:34.476145scmdmz1 sshd[11023]: Failed password for root from 222.186.30.167 port 55840 ssh2
...
2020-02-13 15:27:50
185.175.93.101 attackbotsspam
Feb 13 07:22:48 debian-2gb-nbg1-2 kernel: \[3834197.283970\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.175.93.101 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=12873 PROTO=TCP SPT=48549 DPT=5917 WINDOW=1024 RES=0x00 SYN URGP=0
2020-02-13 15:04:58
142.93.204.221 attack
142.93.204.221 - - \[13/Feb/2020:06:40:07 +0100\] "POST /wp-login.php HTTP/1.0" 200 6640 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
142.93.204.221 - - \[13/Feb/2020:06:40:09 +0100\] "POST /wp-login.php HTTP/1.0" 200 6453 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
142.93.204.221 - - \[13/Feb/2020:06:40:16 +0100\] "POST /wp-login.php HTTP/1.0" 200 6453 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-02-13 14:55:54
123.206.41.12 attackbotsspam
Feb 13 07:23:17 nextcloud sshd\[7108\]: Invalid user www from 123.206.41.12
Feb 13 07:23:17 nextcloud sshd\[7108\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.41.12
Feb 13 07:23:20 nextcloud sshd\[7108\]: Failed password for invalid user www from 123.206.41.12 port 34906 ssh2
2020-02-13 15:32:55
94.191.52.53 attack
Feb 13 04:53:04 *** sshd[5564]: Invalid user rinehart from 94.191.52.53
2020-02-13 14:49:41
162.247.74.216 attack
Chat Spam
2020-02-13 15:02:06
122.176.97.29 attack
Feb 13 05:52:52 web2 sshd[11571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.176.97.29
Feb 13 05:52:54 web2 sshd[11571]: Failed password for invalid user dircreate from 122.176.97.29 port 65056 ssh2
2020-02-13 15:15:55
125.25.203.212 attack
1581569546 - 02/13/2020 05:52:26 Host: 125.25.203.212/125.25.203.212 Port: 445 TCP Blocked
2020-02-13 15:34:19
159.65.155.227 attackspam
Feb 13 07:12:39 legacy sshd[28238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.155.227
Feb 13 07:12:41 legacy sshd[28238]: Failed password for invalid user clamav123 from 159.65.155.227 port 44370 ssh2
Feb 13 07:16:07 legacy sshd[28453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.155.227
...
2020-02-13 15:06:04
157.245.67.214 attackspambots
2020-02-13T07:52:51.955253  sshd[13704]: Invalid user gnuworld from 157.245.67.214 port 45766
2020-02-13T07:52:51.969803  sshd[13704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.67.214
2020-02-13T07:52:51.955253  sshd[13704]: Invalid user gnuworld from 157.245.67.214 port 45766
2020-02-13T07:52:53.494613  sshd[13704]: Failed password for invalid user gnuworld from 157.245.67.214 port 45766 ssh2
2020-02-13T07:55:47.779810  sshd[13748]: Invalid user three from 157.245.67.214 port 46562
...
2020-02-13 15:19:52
46.25.200.212 attack
Automatic report - Port Scan Attack
2020-02-13 15:01:52
61.2.0.173 attackspam
SMB Server BruteForce Attack
2020-02-13 14:48:39
222.186.42.155 attackbots
Feb 13 08:25:37 v22018076622670303 sshd\[27991\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.155  user=root
Feb 13 08:25:39 v22018076622670303 sshd\[27991\]: Failed password for root from 222.186.42.155 port 48609 ssh2
Feb 13 08:25:41 v22018076622670303 sshd\[27991\]: Failed password for root from 222.186.42.155 port 48609 ssh2
...
2020-02-13 15:34:58
193.32.161.31 attack
ET DROP Dshield Block Listed Source group 1 - port: 3369 proto: TCP cat: Misc Attack
2020-02-13 14:59:23
185.176.27.30 attackbots
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-13 15:22:18

Recently Reported IPs

54.75.57.181 162.212.174.191 73.244.104.253 140.143.155.172
97.225.128.164 151.101.52.84 58.59.142.128 60.250.150.89
176.190.48.60 154.16.0.198 115.159.190.52 137.216.100.128
204.151.30.108 194.87.103.39 165.231.84.60 120.71.145.181
12.156.69.248 203.186.146.224 94.181.235.8 108.232.231.200