AbuseIPDB » 219.148.31.135

219.148.31.135 was found in our database!

This IP was reported 7,694 times. Confidence of Abuse is 100%: ?

100%

ISP	ChinaNet Hebei Province Network
Usage Type	Data Center/Web Hosting/Transit
Domain Name	chinatelecom.com.cn
Country	China
City	Shijiazhuang, Hebei

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 219.148.31.135

Whois 219.148.31.135

IP Abuse Reports for 219.148.31.135:

This IP address has been reported a total of 7,694 times from 1,025 distinct sources. 219.148.31.135 was first reported on January 19th 2021, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp	Comment	Categories
ManagedStack	2023-12-07 09:48:37 (2 days ago)	Unauthorized path/IP Access (full log not revealed as it contains sensitive data)	Hacking Web App Attack
zwh	2023-11-30 17:21:27 (1 week ago)	SSH Brute-Force	Brute-Force SSH
aureliancnx	2023-11-30 09:55:53 (1 week ago)	Bruteforce attempt	Brute-Force SSH
30p87	2023-11-30 09:42:20 (1 week ago)	2023-11-30T10:42:19.673435+01:00 server sshd[337586]: Invalid user brian from 219.148.31.135 port 51 ... show more2023-11-30T10:42:19.673435+01:00 server sshd[337586]: Invalid user brian from 219.148.31.135 port 51468 ... show less	Brute-Force SSH
AzurCrystal	2023-11-30 08:28:42 (1 week ago)	2023-11-30T08:28:42.183488+00:00 kh-sg-1 sshd[1205929]: Invalid user postgres from 219.148.31.135 po ... show more2023-11-30T08:28:42.183488+00:00 kh-sg-1 sshd[1205929]: Invalid user postgres from 219.148.31.135 port 34008 ... show less	Brute-Force SSH
Jeff Sutch	2023-11-30 08:14:09 (1 week ago)	Nov 30 08:12:24 tank sshd[30080]: Failed password for invalid user vpn from 219.148.31.135 port 3962 ... show moreNov 30 08:12:24 tank sshd[30080]: Failed password for invalid user vpn from 219.148.31.135 port 39628 ssh2 Nov 30 08:14:06 tank sshd[30090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.148.31.135 user=root Nov 30 08:14:08 tank sshd[30090]: Failed password for root from 219.148.31.135 port 38196 ssh2 ... show less	Brute-Force SSH
Asaman	2023-11-30 07:58:59 (1 week ago)	2023-11-30T08:58:56.854125+01:00 aligw01.aneirin.net sshd[45176]: Connection from 219.148.31.135 por ... show more2023-11-30T08:58:56.854125+01:00 aligw01.aneirin.net sshd[45176]: Connection from 219.148.31.135 port 35068 on 80.67.179.244 port 22 rdomain "" 2023-11-30T08:58:58.517603+01:00 aligw01.aneirin.net sshd[45176]: Invalid user admin from 219.148.31.135 port 35068 2023-11-30T08:58:58.727871+01:00 aligw01.aneirin.net sshd[45176]: Disconnected from invalid user admin 219.148.31.135 port 35068 [preauth] ... show less	Brute-Force SSH
Anonymous	2023-11-30 07:51:16 (1 week ago)	219.148.31.135 (CN/China/-), 8 distributed sshd attacks on account [root] in the last 3600 secs; Por ... show more219.148.31.135 (CN/China/-), 8 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Nov 30 02:43:41 server2 sshd[9280]: Failed password for root from 113.204.50.98 port 52790 ssh2 Nov 30 02:39:34 server2 sshd[8365]: Failed password for root from 89.152.169.44 port 59868 ssh2 Nov 30 02:51:11 server2 sshd[10954]: Failed password for root from 219.148.31.135 port 35702 ssh2 Nov 30 02:42:26 server2 sshd[9017]: Failed password for root from 188.14.147.111 port 58284 ssh2 Nov 30 02:42:29 server2 sshd[9050]: Failed password for root from 188.14.147.111 port 60690 ssh2 Nov 30 02:41:47 server2 sshd[8833]: Failed password for root from 188.14.147.111 port 60490 ssh2 Nov 30 02:42:22 server2 sshd[9000]: Failed password for root from 188.14.147.111 port 50740 ssh2 Nov 30 02:50:43 server2 sshd[10886]: Failed password for root from 89.152.169.44 port 40610 ssh2 IP Addresses Blocked: 113.204.50.98 (CN/China/-) 89.152.169.44 (PT/Portugal/-) show less	Brute-Force
MazenHost	2023-11-30 05:24:12 (1 week ago)	Nov 30 06:24:10 hiena sshd[193025]: Invalid user ubuntu from 219.148.31.135 port 52828 Nov 30 ... show moreNov 30 06:24:10 hiena sshd[193025]: Invalid user ubuntu from 219.148.31.135 port 52828 Nov 30 06:24:10 hiena sshd[193025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.148.31.135 Nov 30 06:24:10 hiena sshd[193025]: Invalid user ubuntu from 219.148.31.135 port 52828 Nov 30 06:24:12 hiena sshd[193025]: Failed password for invalid user ubuntu from 219.148.31.135 port 52828 ssh2 ... show less	Brute-Force SSH
Samuil Warshan	2023-11-30 02:34:05 (1 week ago)	F2B blocked SSH BF	Brute-Force SSH
ranklord	2023-11-30 02:20:21 (1 week ago)	Nov 30 02:20:18 webo sshd[22370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show moreNov 30 02:20:18 webo sshd[22370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.148.31.135 user=root Nov 30 02:20:21 webo sshd[22370]: Received disconnect from 219.148.31.135 port 43216:11: Bye Bye [preauth] ... show less	Brute-Force SSH
Anonymous	2023-11-30 01:52:55 (1 week ago)	2023-11-30T09:44:02.755703cvm-3jsy9v825i225.novalocal sshd[22991]: Failed password for invalid user ... show more2023-11-30T09:44:02.755703cvm-3jsy9v825i225.novalocal sshd[22991]: Failed password for invalid user andrea from 219.148.31.135 port 52600 ssh2 2023-11-30T09:52:52.325378cvm-3jsy9v825i225.novalocal sshd[23025]: Invalid user int from 219.148.31.135 port 54338 2023-11-30T09:52:52.336000cvm-3jsy9v825i225.novalocal sshd[23025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.148.31.135 2023-11-30T09:52:54.507355cvm-3jsy9v825i225.novalocal sshd[23025]: Failed password for invalid user int from 219.148.31.135 port 54338 ssh2 ... show less	Brute-Force SSH
Anonymous	2023-11-30 01:05:23 (1 week ago)	$f2bV_matches	Brute-Force SSH
ThreatBook.io	2023-11-29 23:29:37 (1 week ago)	ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/219.148.31.135	SSH
schnism	2023-11-29 21:35:54 (1 week ago)	Nov 29 22:35:53 minecraftdedi sshd[207906]: Invalid user mehdi from 219.148.31.135 port 50664 ... show moreNov 29 22:35:53 minecraftdedi sshd[207906]: Invalid user mehdi from 219.148.31.135 port 50664 Nov 29 22:35:54 minecraftdedi sshd[207906]: Disconnected from invalid user mehdi 219.148.31.135 port 50664 [preauth] ... show less	Brute-Force SSH