City: Houston
Region: Texas
Country: United States
Internet Service Provider: LTD Financial Services
Hostname: unknown
Organization: unknown
Usage Type: Commercial
| Type | Details | Datetime |
|---|---|---|
| attackspambots | Honeypot attack, port: 445, PTR: 244-132-138-139.adstx.net. |
2020-01-13 22:50:46 |
| attackbotsspam | Unauthorized connection attempt detected from IP address 139.138.132.244 to port 1433 |
2019-12-29 18:54:52 |
| attackbots | 1433/tcp 445/tcp... [2019-10-27/12-23]14pkt,2pt.(tcp) |
2019-12-24 04:49:23 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.138.132.244
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23152
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.138.132.244. IN A
;; AUTHORITY SECTION:
. 448 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019122302 1800 900 604800 86400
;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 24 04:49:20 CST 2019
;; MSG SIZE rcvd: 119244.132.138.139.in-addr.arpa domain name pointer 244-132-138-139.adstx.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
244.132.138.139.in-addr.arpa name = 244-132-138-139.adstx.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 167.71.93.230 | attack | DigitalOcean BotNet attack - 10s of requests to non- pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined, XSS attacks UA removed |
2020-04-20 00:29:37 |
| 117.5.225.88 | attack | Apr 19 14:01:03 dev sshd\[1078\]: Invalid user admin from 117.5.225.88 port 43650 Apr 19 14:01:03 dev sshd\[1078\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.5.225.88 Apr 19 14:01:05 dev sshd\[1078\]: Failed password for invalid user admin from 117.5.225.88 port 43650 ssh2 |
2020-04-20 01:00:44 |
| 45.222.74.230 | attackspambots | Automatic report - Port Scan Attack |
2020-04-20 00:31:34 |
| 45.95.168.87 | attackbotsspam | 2020-04-19T12:31:53.330034shield sshd\[15961\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.168.87 user=root 2020-04-19T12:31:55.327333shield sshd\[15961\]: Failed password for root from 45.95.168.87 port 52612 ssh2 2020-04-19T12:31:56.348396shield sshd\[15963\]: Invalid user admin from 45.95.168.87 port 54552 2020-04-19T12:31:56.353285shield sshd\[15963\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.168.87 2020-04-19T12:31:58.764873shield sshd\[15963\]: Failed password for invalid user admin from 45.95.168.87 port 54552 ssh2 |
2020-04-20 00:53:17 |
| 124.65.18.102 | attack | port scan and connect, tcp 22 (ssh) |
2020-04-20 00:50:19 |
| 178.62.79.227 | attackbots | Apr 19 15:47:37 ovpn sshd\[14142\]: Invalid user aa from 178.62.79.227 Apr 19 15:47:37 ovpn sshd\[14142\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.79.227 Apr 19 15:47:39 ovpn sshd\[14142\]: Failed password for invalid user aa from 178.62.79.227 port 47492 ssh2 Apr 19 16:02:07 ovpn sshd\[17494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.79.227 user=root Apr 19 16:02:09 ovpn sshd\[17494\]: Failed password for root from 178.62.79.227 port 43108 ssh2 |
2020-04-20 00:43:22 |
| 87.251.74.15 | attackbotsspam | RU_ru-avm-1-mnt_<177>1587312590 [1:2403456:56800] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 79 [Classification: Misc Attack] [Priority: 2]: |
2020-04-20 00:55:25 |
| 124.6.177.250 | attackbotsspam | Unauthorized connection attempt from IP address 124.6.177.250 on Port 445(SMB) |
2020-04-20 00:56:23 |
| 81.213.152.3 | attackspambots | Unauthorized connection attempt from IP address 81.213.152.3 on Port 445(SMB) |
2020-04-20 00:32:49 |
| 68.52.212.208 | attackbots | Apr 19 11:57:22 ws25vmsma01 sshd[185637]: Failed password for root from 68.52.212.208 port 56438 ssh2 Apr 19 12:01:12 ws25vmsma01 sshd[186803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.52.212.208 ... |
2020-04-20 00:50:59 |
| 14.161.31.159 | attackspam | 'IP reached maximum auth failures for a one day block' |
2020-04-20 01:04:51 |
| 105.159.253.46 | attackspam | "Unauthorized connection attempt on SSHD detected" |
2020-04-20 00:39:28 |
| 51.141.99.198 | attackbots | Brute-force attempt banned |
2020-04-20 00:36:14 |
| 116.237.76.200 | attack | Apr 19 14:08:25 vpn01 sshd[29112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.237.76.200 Apr 19 14:08:27 vpn01 sshd[29112]: Failed password for invalid user postgres from 116.237.76.200 port 52208 ssh2 ... |
2020-04-20 01:01:36 |
| 34.93.190.243 | attack | SSH authentication failure x 6 reported by Fail2Ban ... |
2020-04-20 00:30:40 |