City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.159.192.13 | attackbots | 1433/tcp 445/tcp [2019-10-22/11-19]2pkt |
2019-11-20 07:56:05 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.159.192.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22401
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.159.192.42. IN A
;; AUTHORITY SECTION:
. 266 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 12:34:39 CST 2022
;; MSG SIZE rcvd: 10742.192.159.139.in-addr.arpa domain name pointer ecs-139-159-192-42.compute.hwclouds-dns.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
42.192.159.139.in-addr.arpa name = ecs-139-159-192-42.compute.hwclouds-dns.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.88.112.68 | attack | 2019-09-23 11:21:11,654 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 49.88.112.68 2019-09-23 11:51:58,194 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 49.88.112.68 2019-09-23 12:22:31,738 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 49.88.112.68 2019-09-23 12:53:16,885 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 49.88.112.68 2019-09-24 06:59:31,217 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 49.88.112.68 ... |
2019-09-24 17:07:40 |
| 66.249.75.31 | attack | Automatic report - Banned IP Access |
2019-09-24 17:22:00 |
| 206.189.156.198 | attackbots | Sep 24 10:45:08 mail sshd\[10324\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.156.198 Sep 24 10:45:10 mail sshd\[10324\]: Failed password for invalid user tester from 206.189.156.198 port 36998 ssh2 Sep 24 10:49:55 mail sshd\[11073\]: Invalid user ubuntu from 206.189.156.198 port 48984 Sep 24 10:49:55 mail sshd\[11073\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.156.198 Sep 24 10:49:57 mail sshd\[11073\]: Failed password for invalid user ubuntu from 206.189.156.198 port 48984 ssh2 |
2019-09-24 17:05:06 |
| 51.38.199.241 | attack | Sep 24 16:08:19 webhost01 sshd[1421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.199.241 Sep 24 16:08:21 webhost01 sshd[1421]: Failed password for invalid user fastuser from 51.38.199.241 port 51880 ssh2 ... |
2019-09-24 17:23:36 |
| 173.245.239.219 | attack | Sep 24 05:50:23 xeon cyrus/imap[48195]: badlogin: [173.245.239.219] plain [SASL(-13): authentication failure: Password verification failed] |
2019-09-24 17:02:31 |
| 37.139.4.138 | attack | Sep 24 06:48:53 site3 sshd\[24076\]: Invalid user yz from 37.139.4.138 Sep 24 06:48:53 site3 sshd\[24076\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.139.4.138 Sep 24 06:48:56 site3 sshd\[24076\]: Failed password for invalid user yz from 37.139.4.138 port 32947 ssh2 Sep 24 06:52:27 site3 sshd\[24160\]: Invalid user verwalter from 37.139.4.138 Sep 24 06:52:27 site3 sshd\[24160\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.139.4.138 ... |
2019-09-24 16:42:35 |
| 35.196.238.16 | attackbotsspam | 3389BruteforceFW22 |
2019-09-24 17:13:32 |
| 220.130.222.156 | attackspam | Sep 24 10:36:36 localhost sshd\[15918\]: Invalid user dsetiadi from 220.130.222.156 port 45694 Sep 24 10:36:36 localhost sshd\[15918\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.130.222.156 Sep 24 10:36:38 localhost sshd\[15918\]: Failed password for invalid user dsetiadi from 220.130.222.156 port 45694 ssh2 |
2019-09-24 16:48:35 |
| 218.92.0.187 | attack | Sep 24 10:02:15 MK-Soft-Root2 sshd[23334]: Failed password for root from 218.92.0.187 port 1807 ssh2 Sep 24 10:02:20 MK-Soft-Root2 sshd[23334]: Failed password for root from 218.92.0.187 port 1807 ssh2 ... |
2019-09-24 17:09:00 |
| 112.78.1.86 | attackspam | [24/Sep/2019:05:52:05 +0200] Web-Request: "GET /wp-login.php", User-Agent: "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-09-24 16:57:44 |
| 118.24.95.153 | attack | Sep 24 03:42:13 ip-172-31-62-245 sshd\[2033\]: Invalid user laurentiu from 118.24.95.153\ Sep 24 03:42:15 ip-172-31-62-245 sshd\[2033\]: Failed password for invalid user laurentiu from 118.24.95.153 port 49604 ssh2\ Sep 24 03:46:58 ip-172-31-62-245 sshd\[2056\]: Invalid user owncloud from 118.24.95.153\ Sep 24 03:47:00 ip-172-31-62-245 sshd\[2056\]: Failed password for invalid user owncloud from 118.24.95.153 port 58446 ssh2\ Sep 24 03:51:48 ip-172-31-62-245 sshd\[2092\]: Invalid user linas from 118.24.95.153\ |
2019-09-24 17:13:04 |
| 148.70.163.48 | attackspambots | $f2bV_matches |
2019-09-24 17:15:08 |
| 220.92.16.78 | attack | Sep 24 08:13:13 XXX sshd[54762]: Invalid user ofsaa from 220.92.16.78 port 36128 |
2019-09-24 16:47:18 |
| 209.15.37.34 | attackbotsspam | php WP PHPmyadamin ABUSE blocked for 12h |
2019-09-24 17:03:23 |
| 58.150.46.6 | attackspambots | F2B jail: sshd. Time: 2019-09-24 10:49:06, Reported by: VKReport |
2019-09-24 16:52:18 |