City: unknown
Region: unknown
Country: Indonesia
Internet Service Provider: PT. First Media TBK
Hostname: unknown
Organization: unknown
Usage Type: Fixed Line ISP
| Type | Details | Datetime |
|---|---|---|
| attackspambots | Unauthorized connection attempt from IP address 139.0.2.42 on Port 445(SMB) |
2020-05-04 18:41:13 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.0.254.68 | attackbotsspam | Email rejected due to spam filtering |
2020-07-14 02:20:45 |
| 139.0.20.26 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 26-01-2020 04:45:14. |
2020-01-26 18:52:37 |
| 139.0.22.58 | attackbotsspam | Unauthorized connection attempt from IP address 139.0.22.58 on Port 445(SMB) |
2019-08-31 16:40:01 |
| 139.0.26.14 | attackspam | SSH/22 MH Probe, BF, Hack - |
2019-07-29 21:00:36 |
| 139.0.26.14 | attack | Jul 27 05:08:09 vmd24909 sshd[5622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.0.26.14 user=r.r Jul 27 05:08:11 vmd24909 sshd[5622]: Failed password for r.r from 139.0.26.14 port 40968 ssh2 Jul 27 05:20:28 vmd24909 sshd[17182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.0.26.14 user=r.r Jul 27 05:20:30 vmd24909 sshd[17182]: Failed password for r.r from 139.0.26.14 port 43611 ssh2 Jul 27 05:26:55 vmd24909 sshd[23005]: Invalid user com321 from 139.0.26.14 port 33046 Jul 27 05:26:55 vmd24909 sshd[23005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.0.26.14 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=139.0.26.14 |
2019-07-29 09:58:54 |
| 139.0.26.14 | attackspam | Jul 28 12:37:05 localhost sshd\[41931\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.0.26.14 user=root Jul 28 12:37:07 localhost sshd\[41931\]: Failed password for root from 139.0.26.14 port 35201 ssh2 ... |
2019-07-28 22:21:15 |
| 139.0.233.220 | attackspam | IP: 139.0.233.220 ASN: AS23700 Linknet-Fastnet ASN Port: Simple Mail Transfer 25 Found in one or more Blacklists Date: 28/07/2019 1:13:42 AM UTC |
2019-07-28 11:30:12 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.0.2.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22691
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.0.2.42. IN A
;; AUTHORITY SECTION:
. 506 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020050400 1800 900 604800 86400
;; Query time: 119 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 04 18:41:09 CST 2020
;; MSG SIZE rcvd: 114
42.2.0.139.in-addr.arpa domain name pointer ln-static-139-0-2-42.link.net.id.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
42.2.0.139.in-addr.arpa name = ln-static-139-0-2-42.link.net.id.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 173.30.10.184 | attack | Brute force attempt |
2019-11-29 06:34:45 |
| 151.253.45.28 | attackspam | Brute forcing RDP port 3389 |
2019-11-29 06:06:48 |
| 109.70.100.26 | attackbotsspam | Automatic report - XMLRPC Attack |
2019-11-29 06:02:08 |
| 159.203.201.125 | attackspam | port scan and connect, tcp 1521 (oracle-old) |
2019-11-29 06:11:32 |
| 159.224.194.43 | attackspam | 3389BruteforceFW23 |
2019-11-29 06:14:36 |
| 159.203.27.100 | attackspam | Automatic report - XMLRPC Attack |
2019-11-29 06:23:59 |
| 164.132.42.32 | attack | Nov 29 01:03:03 areeb-Workstation sshd[22346]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.42.32 Nov 29 01:03:05 areeb-Workstation sshd[22346]: Failed password for invalid user ident from 164.132.42.32 port 45004 ssh2 ... |
2019-11-29 06:03:27 |
| 162.247.73.192 | attackbots | Unauthorized access detected from banned ip |
2019-11-29 06:04:03 |
| 114.237.109.185 | attack | Nov 28 15:24:38 icecube postfix/smtpd[38520]: NOQUEUE: reject: RCPT from unknown[114.237.109.185]: 554 5.7.1 Service unavailable; Client host [114.237.109.185] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/114.237.109.185; from= |
2019-11-29 05:56:20 |
| 201.238.239.151 | attackspambots | 2019-11-27 10:32:41 server sshd[5576]: Failed password for invalid user root from 201.238.239.151 port 59155 ssh2 |
2019-11-29 06:18:54 |
| 118.25.79.17 | attackbots | xmlrpc attack |
2019-11-29 06:04:48 |
| 177.102.86.244 | attackbots | Automatic report - Port Scan Attack |
2019-11-29 05:55:40 |
| 159.203.201.187 | attackspambots | 11/28/2019-15:55:36.456058 159.203.201.187 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-11-29 05:57:48 |
| 202.103.37.40 | attackspambots | $f2bV_matches_ltvn |
2019-11-29 06:04:22 |
| 82.116.159.242 | attackbotsspam | 3389BruteforceFW21 |
2019-11-29 06:15:54 |