Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Wuhan

Region: Hubei

Country: China

Internet Service Provider: ChinaNet Hubei Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspambots
Oct  1 12:35:28 mockhub sshd[307470]: Invalid user amsftp from 219.139.131.134 port 39134
Oct  1 12:35:30 mockhub sshd[307470]: Failed password for invalid user amsftp from 219.139.131.134 port 39134 ssh2
Oct  1 12:37:02 mockhub sshd[307545]: Invalid user nathalie from 219.139.131.134 port 34490
...
2020-10-02 03:47:29
attackspambots
Invalid user rohit from 219.139.131.134 port 56816
2020-10-01 20:00:24
attackbots
Oct  1 02:21:14 OPSO sshd\[27518\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134  user=root
Oct  1 02:21:16 OPSO sshd\[27518\]: Failed password for root from 219.139.131.134 port 43160 ssh2
Oct  1 02:24:55 OPSO sshd\[28016\]: Invalid user git from 219.139.131.134 port 40010
Oct  1 02:24:55 OPSO sshd\[28016\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134
Oct  1 02:24:58 OPSO sshd\[28016\]: Failed password for invalid user git from 219.139.131.134 port 40010 ssh2
2020-10-01 12:08:34
attackbots
2020-08-30T02:29:41.967383linuxbox-skyline sshd[32502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134  user=root
2020-08-30T02:29:44.260005linuxbox-skyline sshd[32502]: Failed password for root from 219.139.131.134 port 44536 ssh2
...
2020-08-30 17:05:09
attackspambots
Aug 26 22:51:03 ns382633 sshd\[16842\]: Invalid user jeffrey from 219.139.131.134 port 52572
Aug 26 22:51:03 ns382633 sshd\[16842\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134
Aug 26 22:51:04 ns382633 sshd\[16842\]: Failed password for invalid user jeffrey from 219.139.131.134 port 52572 ssh2
Aug 26 23:01:04 ns382633 sshd\[18564\]: Invalid user lij from 219.139.131.134 port 44128
Aug 26 23:01:04 ns382633 sshd\[18564\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134
2020-08-27 05:41:53
attackbotsspam
Aug 23 20:17:52 php1 sshd\[9011\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134  user=root
Aug 23 20:17:54 php1 sshd\[9011\]: Failed password for root from 219.139.131.134 port 44616 ssh2
Aug 23 20:23:33 php1 sshd\[9510\]: Invalid user gitlab from 219.139.131.134
Aug 23 20:23:33 php1 sshd\[9510\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134
Aug 23 20:23:35 php1 sshd\[9510\]: Failed password for invalid user gitlab from 219.139.131.134 port 50728 ssh2
2020-08-24 14:26:31
attackbotsspam
Aug 10 06:33:22 buvik sshd[14234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134
Aug 10 06:33:25 buvik sshd[14234]: Failed password for invalid user ftpadmin1 from 219.139.131.134 port 58730 ssh2
Aug 10 06:36:52 buvik sshd[14681]: Invalid user qwe!@#$ from 219.139.131.134
...
2020-08-10 12:59:41
attack
Aug  3 07:10:40 piServer sshd[29297]: Failed password for root from 219.139.131.134 port 55452 ssh2
Aug  3 07:13:13 piServer sshd[29608]: Failed password for root from 219.139.131.134 port 54942 ssh2
...
2020-08-03 15:55:42
attack
2020-07-23T22:20:46.715134-07:00 suse-nuc sshd[16303]: Invalid user vuser from 219.139.131.134 port 52700
...
2020-07-24 13:45:37
attackspam
Jul 19 22:38:32 jumpserver sshd[138736]: Invalid user bdm from 219.139.131.134 port 41536
Jul 19 22:38:34 jumpserver sshd[138736]: Failed password for invalid user bdm from 219.139.131.134 port 41536 ssh2
Jul 19 22:42:21 jumpserver sshd[138775]: Invalid user jie from 219.139.131.134 port 46380
...
2020-07-20 06:46:46
attackspam
Invalid user vlad from 219.139.131.134 port 52370
2020-07-19 03:15:06
attack
$f2bV_matches
2020-06-10 20:19:50
attack
2020-05-27T07:59:25.807088afi-git.jinr.ru sshd[8085]: Failed password for root from 219.139.131.134 port 38854 ssh2
2020-05-27T08:02:15.223464afi-git.jinr.ru sshd[8857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134  user=root
2020-05-27T08:02:16.786804afi-git.jinr.ru sshd[8857]: Failed password for root from 219.139.131.134 port 46464 ssh2
2020-05-27T08:05:11.081432afi-git.jinr.ru sshd[9419]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134 user=test
2020-05-27T08:05:13.672918afi-git.jinr.ru sshd[9419]: Failed password for test from 219.139.131.134 port 54628 ssh2
...
2020-05-27 14:15:29
attack
web-1 [ssh] SSH Attack
2020-05-26 09:50:11
attackspambots
2020-05-25T20:39:54.312261abusebot-7.cloudsearch.cf sshd[19184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134  user=root
2020-05-25T20:39:56.492323abusebot-7.cloudsearch.cf sshd[19184]: Failed password for root from 219.139.131.134 port 41094 ssh2
2020-05-25T20:42:48.620391abusebot-7.cloudsearch.cf sshd[19329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134  user=root
2020-05-25T20:42:50.353757abusebot-7.cloudsearch.cf sshd[19329]: Failed password for root from 219.139.131.134 port 60766 ssh2
2020-05-25T20:45:43.575565abusebot-7.cloudsearch.cf sshd[19511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134  user=root
2020-05-25T20:45:46.001382abusebot-7.cloudsearch.cf sshd[19511]: Failed password for root from 219.139.131.134 port 52152 ssh2
2020-05-25T20:48:59.107607abusebot-7.cloudsearch.cf sshd[19673]: Invalid user v
...
2020-05-26 06:52:16
attackspambots
May 18 23:21:42 our-server-hostname sshd[4120]: Invalid user rku from 219.139.131.134
May 18 23:21:42 our-server-hostname sshd[4120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134 
May 18 23:21:44 our-server-hostname sshd[4120]: Failed password for invalid user rku from 219.139.131.134 port 59266 ssh2
May 18 23:30:53 our-server-hostname sshd[5727]: Invalid user gld from 219.139.131.134
May 18 23:30:53 our-server-hostname sshd[5727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.134 
May 18 23:30:55 our-server-hostname sshd[5727]: Failed password for invalid user gld from 219.139.131.134 port 54192 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=219.139.131.134
2020-05-23 15:58:58
attack
May 22 01:20:36 [host] sshd[8373]: Invalid user xs
May 22 01:20:36 [host] sshd[8373]: pam_unix(sshd:a
May 22 01:20:38 [host] sshd[8373]: Failed password
2020-05-22 07:52:32
Comments on same subnet:
IP Type Details Datetime
219.139.131.21 attack
Fail2Ban Ban Triggered
HTTP SQL Injection Attempt
2020-08-21 19:11:17
219.139.131.131 attackbotsspam
May  9 00:52:56 sip sshd[171091]: Invalid user kodiak from 219.139.131.131 port 39632
May  9 00:52:58 sip sshd[171091]: Failed password for invalid user kodiak from 219.139.131.131 port 39632 ssh2
May  9 00:55:38 sip sshd[171170]: Invalid user sharon from 219.139.131.131 port 55040
...
2020-05-09 07:28:42
219.139.131.131 attackbotsspam
Apr 12 15:11:34 pve sshd[23182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.131 
Apr 12 15:11:35 pve sshd[23182]: Failed password for invalid user students from 219.139.131.131 port 43700 ssh2
Apr 12 15:19:24 pve sshd[29413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.131
2020-04-12 21:56:27
219.139.131.131 attack
SASL PLAIN auth failed: ruser=...
2020-04-10 09:20:58
219.139.131.131 attack
Apr  1 09:52:13 server sshd[14507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.131  user=r.r
Apr  1 09:52:16 server sshd[14507]: Failed password for r.r from 219.139.131.131 port 44748 ssh2
Apr  1 09:52:16 server sshd[14507]: Received disconnect from 219.139.131.131: 11: Bye Bye [preauth]
Apr  1 09:54:19 server sshd[14520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.131  user=r.r
Apr  1 09:54:21 server sshd[14520]: Failed password for r.r from 219.139.131.131 port 59760 ssh2
Apr  1 09:54:21 server sshd[14520]: Received disconnect from 219.139.131.131: 11: Bye Bye [preauth]
Apr  1 09:59:03 server sshd[14600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.139.131.131  user=r.r
Apr  1 09:59:05 server sshd[14600]: Failed password for r.r from 219.139.131.131 port 39470 ssh2
Apr  1 09:59:06 server sshd[14600]: Receive........
-------------------------------
2020-04-02 01:05:50
219.139.131.138 attackbots
Feb  4 03:26:17 host dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=219.139.131.138, lip=62.210.151.217, session=
Feb  4 03:26:24 host dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=219.139.131.138, lip=62.210.151.217, session=<+/DTw7adwuLbi4OK>
...
2020-02-05 14:27:15
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 219.139.131.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56030
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;219.139.131.134.		IN	A

;; AUTHORITY SECTION:
.			363	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052102 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 22 07:52:27 CST 2020
;; MSG SIZE  rcvd: 119
Host info
Host 134.131.139.219.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 134.131.139.219.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
37.209.101.251 attackspambots
Jan  2 12:46:39 itv-usvr-02 sshd[17821]: Invalid user bybee from 37.209.101.251 port 56956
Jan  2 12:46:39 itv-usvr-02 sshd[17821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.209.101.251
Jan  2 12:46:39 itv-usvr-02 sshd[17821]: Invalid user bybee from 37.209.101.251 port 56956
Jan  2 12:46:41 itv-usvr-02 sshd[17821]: Failed password for invalid user bybee from 37.209.101.251 port 56956 ssh2
2020-01-02 13:55:22
222.186.42.155 attack
Jan  2 06:40:14 localhost sshd\[8869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.155  user=root
Jan  2 06:40:17 localhost sshd\[8869\]: Failed password for root from 222.186.42.155 port 29295 ssh2
Jan  2 06:40:19 localhost sshd\[8869\]: Failed password for root from 222.186.42.155 port 29295 ssh2
2020-01-02 13:42:38
71.105.251.198 attack
Honeypot attack, port: 445, PTR: static-71-105-251-198.nycmny.fios.verizon.net.
2020-01-02 13:23:36
95.241.44.156 attackspam
Invalid user rpm from 95.241.44.156 port 52851
2020-01-02 14:02:30
77.94.123.207 attackbots
Automatic report - Port Scan Attack
2020-01-02 13:59:05
142.44.160.173 attack
Invalid user wolcott from 142.44.160.173 port 54088
2020-01-02 14:02:03
203.109.95.174 attackbots
Jan  2 05:58:41 debian-2gb-nbg1-2 kernel: \[200452.145283\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=203.109.95.174 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=30050 PROTO=TCP SPT=46065 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0
2020-01-02 13:44:05
185.9.230.228 attackspambots
Automatic report - Banned IP Access
2020-01-02 13:25:12
179.232.1.252 attack
Jan  2 06:10:56 sd-53420 sshd\[11398\]: Invalid user levernier from 179.232.1.252
Jan  2 06:10:56 sd-53420 sshd\[11398\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.232.1.252
Jan  2 06:10:59 sd-53420 sshd\[11398\]: Failed password for invalid user levernier from 179.232.1.252 port 37870 ssh2
Jan  2 06:15:09 sd-53420 sshd\[12701\]: Invalid user tkcox from 179.232.1.252
Jan  2 06:15:09 sd-53420 sshd\[12701\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.232.1.252
...
2020-01-02 13:50:01
197.253.6.249 attackbotsspam
Jan  2 06:25:20 vps691689 sshd[28727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.253.6.249
Jan  2 06:25:22 vps691689 sshd[28727]: Failed password for invalid user y@123 from 197.253.6.249 port 39273 ssh2
Jan  2 06:29:13 vps691689 sshd[28911]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.253.6.249
...
2020-01-02 13:38:27
171.229.250.150 attack
port scan and connect, tcp 23 (telnet)
2020-01-02 14:00:25
150.109.170.60 attackspambots
Unauthorized connection attempt detected from IP address 150.109.170.60 to port 8500
2020-01-02 13:48:02
123.206.128.207 attack
Jan  2 05:52:34 ns382633 sshd\[15412\]: Invalid user burzlaff from 123.206.128.207 port 44872
Jan  2 05:52:34 ns382633 sshd\[15412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.128.207
Jan  2 05:52:36 ns382633 sshd\[15412\]: Failed password for invalid user burzlaff from 123.206.128.207 port 44872 ssh2
Jan  2 06:00:18 ns382633 sshd\[16928\]: Invalid user sanjeev from 123.206.128.207 port 33350
Jan  2 06:00:18 ns382633 sshd\[16928\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.128.207
2020-01-02 13:34:17
183.235.220.232 attackspambots
Jan  2 05:11:26 zeus sshd[22343]: Failed password for root from 183.235.220.232 port 45217 ssh2
Jan  2 05:15:12 zeus sshd[22439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.235.220.232 
Jan  2 05:15:14 zeus sshd[22439]: Failed password for invalid user heyvaert from 183.235.220.232 port 55611 ssh2
2020-01-02 13:26:44
190.85.71.129 attack
$f2bV_matches
2020-01-02 13:35:00

Recently Reported IPs

101.50.205.142 65.99.227.30 32.154.153.155 88.184.188.198
75.46.58.172 184.251.105.106 184.226.75.19 112.17.62.165
63.49.41.32 110.251.36.151 129.21.137.11 196.80.77.93
213.37.98.157 178.125.131.8 31.231.70.215 51.158.110.2
219.51.7.12 190.236.197.228 146.243.77.166 93.0.37.99