City: unknown
Region: unknown
Country: China
Internet Service Provider: V6Yun (Beijing) Network Co. Ltd
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attack | Oct 6 23:29:19 server sshd[8577]: Failed password for root from 139.199.62.142 port 34656 ssh2 Oct 6 23:31:54 server sshd[10037]: Failed password for root from 139.199.62.142 port 35938 ssh2 Oct 6 23:34:27 server sshd[11498]: Failed password for root from 139.199.62.142 port 37216 ssh2 |
2020-10-07 06:50:21 |
| attackbotsspam | SSH login attempts. |
2020-10-06 23:09:11 |
| attackspam | Oct 5 07:17:09 ovpn sshd[31807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.62.142 user=r.r Oct 5 07:17:11 ovpn sshd[31807]: Failed password for r.r from 139.199.62.142 port 47194 ssh2 Oct 5 07:17:12 ovpn sshd[31807]: Received disconnect from 139.199.62.142 port 47194:11: Bye Bye [preauth] Oct 5 07:17:12 ovpn sshd[31807]: Disconnected from 139.199.62.142 port 47194 [preauth] Oct 5 07:29:47 ovpn sshd[2406]: Connection closed by 139.199.62.142 port 48164 [preauth] Oct 5 07:33:51 ovpn sshd[3496]: Bad protocol version identification '-HSS2.0-libssh-0.6.3' from 139.199.62.142 port 34662 Oct 5 07:37:58 ovpn sshd[4519]: Bad protocol version identification '-HSS2.0-libssh-0.6.3' from 139.199.62.142 port 49380 Oct 5 07:42:07 ovpn sshd[5550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.62.142 user=r.r Oct 5 07:42:10 ovpn sshd[5550]: Failed password for r.r from 139.1........ ------------------------------ |
2020-10-06 14:57:05 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.199.62.214 | attack | Aug 17 00:05:45 pornomens sshd\[13743\]: Invalid user balaji from 139.199.62.214 port 43446 Aug 17 00:05:45 pornomens sshd\[13743\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.62.214 Aug 17 00:05:46 pornomens sshd\[13743\]: Failed password for invalid user balaji from 139.199.62.214 port 43446 ssh2 ... |
2019-08-17 10:29:17 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.62.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45632
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.199.62.142. IN A
;; AUTHORITY SECTION:
. 172 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020100600 1800 900 604800 86400
;; Query time: 87 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 06 14:56:57 CST 2020
;; MSG SIZE rcvd: 118Host 142.62.199.139.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 142.62.199.139.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 119.28.177.36 | attackspam | Apr 23 01:25:23 mout sshd[4706]: Invalid user testing from 119.28.177.36 port 54430 Apr 23 01:25:26 mout sshd[4706]: Failed password for invalid user testing from 119.28.177.36 port 54430 ssh2 Apr 23 01:32:03 mout sshd[5080]: Invalid user cj from 119.28.177.36 port 40958 |
2020-04-23 07:54:16 |
| 210.121.223.61 | attackbotsspam | SSH brute force |
2020-04-23 07:59:51 |
| 106.54.142.79 | attackbots | 2020-04-22T17:36:36.0612081495-001 sshd[63261]: Failed password for root from 106.54.142.79 port 58916 ssh2 2020-04-22T17:42:35.7644491495-001 sshd[63555]: Invalid user ftpuser from 106.54.142.79 port 41584 2020-04-22T17:42:35.7676641495-001 sshd[63555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.142.79 2020-04-22T17:42:35.7644491495-001 sshd[63555]: Invalid user ftpuser from 106.54.142.79 port 41584 2020-04-22T17:42:37.4987301495-001 sshd[63555]: Failed password for invalid user ftpuser from 106.54.142.79 port 41584 ssh2 2020-04-22T17:48:40.1312601495-001 sshd[63909]: Invalid user vc from 106.54.142.79 port 52488 ... |
2020-04-23 07:49:17 |
| 95.167.39.12 | attackbots | 2020-04-23T01:01:54.168671rocketchat.forhosting.nl sshd[15093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.167.39.12 2020-04-23T01:01:54.164623rocketchat.forhosting.nl sshd[15093]: Invalid user admin from 95.167.39.12 port 58486 2020-04-23T01:01:56.897226rocketchat.forhosting.nl sshd[15093]: Failed password for invalid user admin from 95.167.39.12 port 58486 ssh2 ... |
2020-04-23 07:52:57 |
| 139.199.248.156 | attackspambots | Apr 22 20:20:27 : SSH login attempts with invalid user |
2020-04-23 07:56:27 |
| 66.42.43.150 | attack | Invalid user test1 from 66.42.43.150 port 33682 |
2020-04-23 07:56:15 |
| 210.175.50.124 | attackbotsspam | Invalid user ubuntu from 210.175.50.124 port 6161 |
2020-04-23 07:51:44 |
| 171.103.158.58 | attackspambots | Unauthorized SMTP/IMAP/POP3 connection attempt |
2020-04-23 07:54:47 |
| 195.155.65.98 | attackspam | Apr 22 22:12:05 debian-2gb-nbg1-2 kernel: \[9845277.832266\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=195.155.65.98 DST=195.201.40.59 LEN=52 TOS=0x02 PREC=0x00 TTL=117 ID=16594 DF PROTO=TCP SPT=61792 DPT=3389 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 |
2020-04-23 08:07:36 |
| 45.195.151.226 | attackspambots | Lines containing failures of 45.195.151.226 Apr 22 13:45:29 kmh-vmh-001-fsn03 sshd[4720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.195.151.226 user=r.r Apr 22 13:45:31 kmh-vmh-001-fsn03 sshd[4720]: Failed password for r.r from 45.195.151.226 port 34084 ssh2 Apr 22 13:45:33 kmh-vmh-001-fsn03 sshd[4720]: Received disconnect from 45.195.151.226 port 34084:11: Bye Bye [preauth] Apr 22 13:45:33 kmh-vmh-001-fsn03 sshd[4720]: Disconnected from authenticating user r.r 45.195.151.226 port 34084 [preauth] Apr 22 13:51:55 kmh-vmh-001-fsn03 sshd[17665]: Invalid user ubuntu from 45.195.151.226 port 44346 Apr 22 13:51:55 kmh-vmh-001-fsn03 sshd[17665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.195.151.226 Apr 22 13:51:57 kmh-vmh-001-fsn03 sshd[17665]: Failed password for invalid user ubuntu from 45.195.151.226 port 44346 ssh2 Apr 22 13:51:58 kmh-vmh-001-fsn03 sshd[17665]: Received disco........ ------------------------------ |
2020-04-23 08:07:06 |
| 178.128.121.180 | attackbots | Invalid user eo from 178.128.121.180 port 59816 |
2020-04-23 08:02:05 |
| 80.241.214.222 | attack | Invalid user postgres from 80.241.214.222 port 59082 |
2020-04-23 07:55:32 |
| 193.112.219.207 | attackspam | Apr 23 03:12:06 itv-usvr-01 sshd[13104]: Invalid user fk from 193.112.219.207 Apr 23 03:12:06 itv-usvr-01 sshd[13104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.219.207 Apr 23 03:12:06 itv-usvr-01 sshd[13104]: Invalid user fk from 193.112.219.207 Apr 23 03:12:07 itv-usvr-01 sshd[13104]: Failed password for invalid user fk from 193.112.219.207 port 54530 ssh2 |
2020-04-23 08:06:06 |
| 35.182.42.90 | attackbots | SASL PLAIN auth failed: ruser=... |
2020-04-23 07:49:35 |
| 155.94.240.109 | attack | REQUESTED PAGE: /Scripts/sendform.php |
2020-04-23 07:44:11 |