City: unknown
Region: unknown
Country: Singapore
Internet Service Provider: Digital Ocean Inc.
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspambots | May 17 11:53:33 server sshd\[116832\]: Invalid user appuser from 139.59.1.138 May 17 11:53:33 server sshd\[116832\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.1.138 May 17 11:53:35 server sshd\[116832\]: Failed password for invalid user appuser from 139.59.1.138 port 49178 ssh2 ... |
2019-07-12 07:40:34 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.59.157.225 | attackproxy | Brute-force attacker IP |
2024-06-13 12:39:38 |
| 139.59.173.205 | attack | Fraud connect |
2024-05-12 23:34:25 |
| 139.59.11.31 | attackproxy | , e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A |
2023-01-16 21:48:53 |
| 139.59.108.225 | attackspam | Oct 13 23:27:26 vps647732 sshd[5538]: Failed password for root from 139.59.108.225 port 45492 ssh2 ... |
2020-10-14 08:41:11 |
| 139.59.18.215 | attackbots | SSH_scan |
2020-10-14 08:03:41 |
| 139.59.148.56 | attack | Oct 13 14:30:51 staging sshd[30119]: Invalid user adm from 139.59.148.56 port 59726 Oct 13 14:30:51 staging sshd[30119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.148.56 Oct 13 14:30:51 staging sshd[30119]: Invalid user adm from 139.59.148.56 port 59726 Oct 13 14:30:53 staging sshd[30119]: Failed password for invalid user adm from 139.59.148.56 port 59726 ssh2 ... |
2020-10-14 04:31:27 |
| 139.59.135.84 | attackbots | Invalid user kureyon from 139.59.135.84 port 48782 |
2020-10-13 22:04:05 |
| 139.59.135.84 | attack | Invalid user kureyon from 139.59.135.84 port 48782 |
2020-10-13 13:30:00 |
| 139.59.135.84 | attackspambots | Oct 12 22:40:32 eventyay sshd[28379]: Failed password for root from 139.59.135.84 port 59232 ssh2 Oct 12 22:44:59 eventyay sshd[28632]: Failed password for root from 139.59.135.84 port 35022 ssh2 ... |
2020-10-13 06:14:29 |
| 139.59.104.134 | attackbots | (sshd) Failed SSH login from 139.59.104.134 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 12 18:45:52 server2 sshd[16898]: Invalid user ed from 139.59.104.134 port 19534 Oct 12 18:45:55 server2 sshd[16898]: Failed password for invalid user ed from 139.59.104.134 port 19534 ssh2 Oct 12 18:47:43 server2 sshd[17237]: Invalid user neeraj from 139.59.104.134 port 36290 Oct 12 18:47:45 server2 sshd[17237]: Failed password for invalid user neeraj from 139.59.104.134 port 36290 ssh2 Oct 12 18:49:00 server2 sshd[17586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.104.134 user=root |
2020-10-13 04:34:53 |
| 139.59.151.124 | attackspam | Invalid user wille from 139.59.151.124 port 45162 |
2020-10-13 00:43:35 |
| 139.59.104.134 | attack | SSH/22 MH Probe, BF, Hack - |
2020-10-12 20:14:50 |
| 139.59.151.124 | attackspambots | Oct 6 17:55:26 myhostname sshd[20688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.151.124 user=r.r Oct 6 17:55:28 myhostname sshd[20688]: Failed password for r.r from 139.59.151.124 port 55302 ssh2 Oct 6 17:55:28 myhostname sshd[20688]: Received disconnect from 139.59.151.124 port 55302:11: Bye Bye [preauth] Oct 6 17:55:28 myhostname sshd[20688]: Disconnected from 139.59.151.124 port 55302 [preauth] Oct 6 18:17:38 myhostname sshd[13694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.151.124 user=r.r Oct 6 18:17:40 myhostname sshd[13694]: Failed password for r.r from 139.59.151.124 port 35740 ssh2 Oct 6 18:17:40 myhostname sshd[13694]: Received disconnect from 139.59.151.124 port 35740:11: Bye Bye [preauth] Oct 6 18:17:40 myhostname sshd[13694]: Disconnected from 139.59.151.124 port 35740 [preauth] Oct 6 18:21:58 myhostname sshd[18541]: pam_unix(sshd:auth): aut........ ------------------------------- |
2020-10-12 16:08:26 |
| 139.59.138.115 | attackbotsspam | (sshd) Failed SSH login from 139.59.138.115 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 11 20:43:50 server sshd[3364]: Invalid user ssh from 139.59.138.115 Oct 11 20:43:51 server sshd[3364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.138.115 Oct 11 20:43:53 server sshd[3364]: Failed password for invalid user ssh from 139.59.138.115 port 58372 ssh2 Oct 11 20:48:12 server sshd[4014]: Invalid user teste from 139.59.138.115 Oct 11 20:48:12 server sshd[4014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.138.115 |
2020-10-12 05:11:22 |
| 139.59.102.170 | attack | 2020-10-11T22:29:07+0200 Failed SSH Authentication/Brute Force Attack. (Server 4) |
2020-10-12 04:32:28 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.59.1.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61285
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.59.1.138. IN A
;; AUTHORITY SECTION:
. 3126 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019051504 1800 900 604800 86400
;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu May 16 07:32:53 CST 2019
;; MSG SIZE rcvd: 116
Host 138.1.59.139.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 138.1.59.139.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 138.97.244.185 | attack | Honeypot attack, port: 81, PTR: PTR record not found |
2020-02-19 16:57:34 |
| 78.40.185.130 | attackspam | unauthorized connection attempt |
2020-02-19 16:54:17 |
| 116.103.140.87 | attack | unauthorized connection attempt |
2020-02-19 17:11:42 |
| 220.133.145.176 | attack | unauthorized connection attempt |
2020-02-19 16:45:55 |
| 171.235.35.99 | attack | unauthorized connection attempt |
2020-02-19 16:33:37 |
| 5.14.189.240 | attackspam | unauthorized connection attempt |
2020-02-19 16:32:15 |
| 110.55.100.64 | attackbotsspam | DATE:2020-02-19 06:41:06, IP:110.55.100.64, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq) |
2020-02-19 16:44:46 |
| 122.100.110.121 | attack | unauthorized connection attempt |
2020-02-19 16:35:39 |
| 171.242.112.19 | attackspam | unauthorized connection attempt |
2020-02-19 17:08:00 |
| 178.46.213.34 | attackspam | Port 23 (Telnet) access denied |
2020-02-19 17:06:34 |
| 115.78.231.175 | attack | unauthorized connection attempt |
2020-02-19 17:12:43 |
| 170.231.196.78 | attackspam | unauthorized connection attempt |
2020-02-19 17:08:34 |
| 139.219.13.246 | attack | unauthorized connection attempt |
2020-02-19 17:10:10 |
| 181.114.219.19 | attack | unauthorized connection attempt |
2020-02-19 17:05:41 |
| 116.106.245.203 | attackbots | unauthorized connection attempt |
2020-02-19 16:51:06 |