City: unknown
Region: unknown
Country: unknown
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.199.131.147 | attack | scans once in preceeding hours on the ports (in chronological order) 6379 resulting in total of 1 scans from 139.199.0.0/16 block. |
2020-05-22 01:20:27 |
| 139.199.13.142 | attackspambots | Unauthorized connection attempt detected from IP address 139.199.13.142 to port 9862 [T] |
2020-04-21 03:14:32 |
| 139.199.133.160 | attack | Apr 11 02:27:53 ny01 sshd[17565]: Failed password for root from 139.199.133.160 port 49756 ssh2 Apr 11 02:32:43 ny01 sshd[18301]: Failed password for root from 139.199.133.160 port 46704 ssh2 |
2020-04-11 14:40:37 |
| 139.199.13.142 | attack | Apr 10 06:54:59 v22019038103785759 sshd\[28223\]: Invalid user centos from 139.199.13.142 port 47924 Apr 10 06:54:59 v22019038103785759 sshd\[28223\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.13.142 Apr 10 06:55:01 v22019038103785759 sshd\[28223\]: Failed password for invalid user centos from 139.199.13.142 port 47924 ssh2 Apr 10 06:57:40 v22019038103785759 sshd\[28439\]: Invalid user docker from 139.199.13.142 port 46590 Apr 10 06:57:40 v22019038103785759 sshd\[28439\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.13.142 ... |
2020-04-10 14:22:01 |
| 139.199.133.160 | attack | Automatic report - Banned IP Access |
2020-04-04 02:45:35 |
| 139.199.13.142 | attackbots | Apr 1 14:30:50 vmd48417 sshd[8440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.13.142 |
2020-04-02 01:57:31 |
| 139.199.133.160 | attackbots | 2020-03-12T22:07:14.940059abusebot-5.cloudsearch.cf sshd[23817]: Invalid user mmr from 139.199.133.160 port 48438 2020-03-12T22:07:14.946220abusebot-5.cloudsearch.cf sshd[23817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.133.160 2020-03-12T22:07:14.940059abusebot-5.cloudsearch.cf sshd[23817]: Invalid user mmr from 139.199.133.160 port 48438 2020-03-12T22:07:16.895435abusebot-5.cloudsearch.cf sshd[23817]: Failed password for invalid user mmr from 139.199.133.160 port 48438 ssh2 2020-03-12T22:13:35.835631abusebot-5.cloudsearch.cf sshd[23878]: Invalid user tester from 139.199.133.160 port 36224 2020-03-12T22:13:35.840764abusebot-5.cloudsearch.cf sshd[23878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.133.160 2020-03-12T22:13:35.835631abusebot-5.cloudsearch.cf sshd[23878]: Invalid user tester from 139.199.133.160 port 36224 2020-03-12T22:13:38.095964abusebot-5.cloudsearch.cf sshd[2387 ... |
2020-03-13 07:28:52 |
| 139.199.133.160 | attack | Unauthorized connection attempt detected from IP address 139.199.133.160 to port 2220 [J] |
2020-01-24 04:13:43 |
| 139.199.133.160 | attackspam | Jan 16 00:21:43 ny01 sshd[9620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.133.160 Jan 16 00:21:45 ny01 sshd[9620]: Failed password for invalid user 1 from 139.199.133.160 port 57432 ssh2 Jan 16 00:24:47 ny01 sshd[9917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.133.160 |
2020-01-16 13:40:31 |
| 139.199.133.160 | attackbots | Jan 1 01:21:05 v22018086721571380 sshd[7131]: Failed password for invalid user conti from 139.199.133.160 port 45654 ssh2 |
2020-01-01 09:07:37 |
| 139.199.13.142 | attackbots | Dec 17 17:43:53 * sshd[18180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.13.142 Dec 17 17:43:55 * sshd[18180]: Failed password for invalid user user from 139.199.13.142 port 52542 ssh2 |
2019-12-18 01:59:30 |
| 139.199.13.142 | attack | Dec 14 10:00:45 linuxvps sshd\[62754\]: Invalid user mmmmmm from 139.199.13.142 Dec 14 10:00:45 linuxvps sshd\[62754\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.13.142 Dec 14 10:00:47 linuxvps sshd\[62754\]: Failed password for invalid user mmmmmm from 139.199.13.142 port 52970 ssh2 Dec 14 10:07:17 linuxvps sshd\[1999\]: Invalid user abcdefghij from 139.199.13.142 Dec 14 10:07:17 linuxvps sshd\[1999\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.13.142 |
2019-12-15 00:56:43 |
| 139.199.13.142 | attack | Dec 14 08:21:19 ns3042688 sshd\[18692\]: Invalid user cheungwl from 139.199.13.142 Dec 14 08:21:19 ns3042688 sshd\[18692\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.13.142 Dec 14 08:21:22 ns3042688 sshd\[18692\]: Failed password for invalid user cheungwl from 139.199.13.142 port 45934 ssh2 Dec 14 08:26:13 ns3042688 sshd\[20412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.13.142 user=root Dec 14 08:26:15 ns3042688 sshd\[20412\]: Failed password for root from 139.199.13.142 port 34194 ssh2 ... |
2019-12-14 15:44:05 |
| 139.199.13.142 | attack | Dec 12 14:12:42 kapalua sshd\[7831\]: Invalid user server from 139.199.13.142 Dec 12 14:12:42 kapalua sshd\[7831\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.13.142 Dec 12 14:12:44 kapalua sshd\[7831\]: Failed password for invalid user server from 139.199.13.142 port 57670 ssh2 Dec 12 14:17:26 kapalua sshd\[8229\]: Invalid user solholm from 139.199.13.142 Dec 12 14:17:26 kapalua sshd\[8229\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.13.142 |
2019-12-13 08:20:07 |
| 139.199.13.142 | attackspambots | Dec 4 10:34:44 hanapaa sshd\[32000\]: Invalid user macmillan from 139.199.13.142 Dec 4 10:34:44 hanapaa sshd\[32000\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.13.142 Dec 4 10:34:46 hanapaa sshd\[32000\]: Failed password for invalid user macmillan from 139.199.13.142 port 58746 ssh2 Dec 4 10:41:05 hanapaa sshd\[32662\]: Invalid user ABC1234%\^\&\* from 139.199.13.142 Dec 4 10:41:05 hanapaa sshd\[32662\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.13.142 |
2019-12-05 06:32:38 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.13.208
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1136
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.199.13.208. IN A
;; AUTHORITY SECTION:
. 518 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400
;; Query time: 83 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:21:27 CST 2022
;; MSG SIZE rcvd: 107Host 208.13.199.139.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 208.13.199.139.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 190.147.179.7 | attack | Aug 31 22:15:06 lcl-usvr-02 sshd[13898]: Invalid user zx from 190.147.179.7 port 51798 Aug 31 22:15:06 lcl-usvr-02 sshd[13898]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.147.179.7 Aug 31 22:15:06 lcl-usvr-02 sshd[13898]: Invalid user zx from 190.147.179.7 port 51798 Aug 31 22:15:09 lcl-usvr-02 sshd[13898]: Failed password for invalid user zx from 190.147.179.7 port 51798 ssh2 Aug 31 22:25:02 lcl-usvr-02 sshd[16036]: Invalid user tamara from 190.147.179.7 port 33090 ... |
2019-09-01 01:10:04 |
| 190.121.25.248 | attack | Fail2Ban Ban Triggered |
2019-09-01 01:45:44 |
| 117.50.25.196 | attackspambots | Aug 31 19:29:13 dedicated sshd[5274]: Invalid user deploy from 117.50.25.196 port 40056 |
2019-09-01 01:30:34 |
| 43.226.68.97 | attackbots | Aug 31 12:41:31 MK-Soft-VM6 sshd\[3580\]: Invalid user cvsroot from 43.226.68.97 port 34418 Aug 31 12:41:31 MK-Soft-VM6 sshd\[3580\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.226.68.97 Aug 31 12:41:33 MK-Soft-VM6 sshd\[3580\]: Failed password for invalid user cvsroot from 43.226.68.97 port 34418 ssh2 ... |
2019-09-01 01:19:35 |
| 217.77.221.85 | attack | Aug 31 06:55:28 hcbb sshd\[8957\]: Invalid user bentley from 217.77.221.85 Aug 31 06:55:29 hcbb sshd\[8957\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static-217-77-221-85.wildpark.net Aug 31 06:55:31 hcbb sshd\[8957\]: Failed password for invalid user bentley from 217.77.221.85 port 57141 ssh2 Aug 31 06:59:49 hcbb sshd\[9300\]: Invalid user ravi from 217.77.221.85 Aug 31 06:59:49 hcbb sshd\[9300\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static-217-77-221-85.wildpark.net |
2019-09-01 01:02:53 |
| 143.137.5.64 | attackbotsspam | port scan and connect, tcp 8080 (http-proxy) |
2019-09-01 01:03:39 |
| 178.62.64.107 | attackbotsspam | Aug 31 16:11:36 yabzik sshd[15265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.64.107 Aug 31 16:11:38 yabzik sshd[15265]: Failed password for invalid user user from 178.62.64.107 port 33968 ssh2 Aug 31 16:15:41 yabzik sshd[16816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.64.107 |
2019-09-01 01:43:26 |
| 89.45.17.11 | attackspam | Aug 31 06:41:18 lcdev sshd\[31162\]: Invalid user aaaaa from 89.45.17.11 Aug 31 06:41:18 lcdev sshd\[31162\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.45.17.11 Aug 31 06:41:20 lcdev sshd\[31162\]: Failed password for invalid user aaaaa from 89.45.17.11 port 35900 ssh2 Aug 31 06:45:43 lcdev sshd\[31559\]: Invalid user rocky from 89.45.17.11 Aug 31 06:45:43 lcdev sshd\[31559\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.45.17.11 |
2019-09-01 00:56:30 |
| 202.40.187.17 | attack | Honeypot attack, port: 445, PTR: ritt-187-17.ranksitt.net. |
2019-09-01 00:38:39 |
| 167.114.153.77 | attackbotsspam | Aug 31 16:24:43 MK-Soft-VM4 sshd\[27396\]: Invalid user kaire from 167.114.153.77 port 60918 Aug 31 16:24:43 MK-Soft-VM4 sshd\[27396\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.153.77 Aug 31 16:24:46 MK-Soft-VM4 sshd\[27396\]: Failed password for invalid user kaire from 167.114.153.77 port 60918 ssh2 ... |
2019-09-01 01:28:02 |
| 75.80.193.222 | attackspam | Aug 30 17:02:35 itv-usvr-01 sshd[15577]: Invalid user kenny from 75.80.193.222 Aug 30 17:02:35 itv-usvr-01 sshd[15577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.80.193.222 Aug 30 17:02:35 itv-usvr-01 sshd[15577]: Invalid user kenny from 75.80.193.222 Aug 30 17:02:37 itv-usvr-01 sshd[15577]: Failed password for invalid user kenny from 75.80.193.222 port 56470 ssh2 Aug 30 17:08:26 itv-usvr-01 sshd[15793]: Invalid user iolee from 75.80.193.222 |
2019-09-01 01:11:39 |
| 200.159.254.114 | attackbots | Lines containing failures of 200.159.254.114 Aug 31 14:43:44 shared10 sshd[32133]: Invalid user xh from 200.159.254.114 port 36866 Aug 31 14:43:44 shared10 sshd[32133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.159.254.114 Aug 31 14:43:46 shared10 sshd[32133]: Failed password for invalid user xh from 200.159.254.114 port 36866 ssh2 Aug 31 14:43:46 shared10 sshd[32133]: Received disconnect from 200.159.254.114 port 36866:11: Bye Bye [preauth] Aug 31 14:43:46 shared10 sshd[32133]: Disconnected from invalid user xh 200.159.254.114 port 36866 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=200.159.254.114 |
2019-09-01 01:44:53 |
| 145.239.76.62 | attackspam | Aug 31 18:26:11 SilenceServices sshd[21291]: Failed password for bind from 145.239.76.62 port 33357 ssh2 Aug 31 18:26:50 SilenceServices sshd[21533]: Failed password for bind from 145.239.76.62 port 56723 ssh2 |
2019-09-01 00:43:34 |
| 45.117.97.229 | attack | Honeypot attack, port: 445, PTR: mail.evoc.com. |
2019-09-01 00:45:42 |
| 109.195.177.136 | attackbots | /ucp.php?mode=register&sid=33ae2c64da127ec3ff8fe9e6c3a4ffa5 |
2019-09-01 01:38:05 |