City: unknown
Region: unknown
Country: Singapore
Internet Service Provider: OVH Singapore Pte. Ltd
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackbots | TCP src-port=49192 dst-port=25 dnsbl-sorbs abuseat-org spamcop (810) |
2019-06-22 07:56:31 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.99.122.158 | attackspam | SSH login attempts. |
2020-07-10 02:56:55 |
| 139.99.122.194 | attack | 2020-04-01 16:10:52 SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=ns558397.ip-139-99-122.net [139.99.122.194]:62000 I=[192.147.25.65]:25 input="CONNECT 104.26.13.200:443 HTTP/1" 2020-04-01 16:10:57 SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=ns558397.ip-139-99-122.net [139.99.122.194]:62499 I=[192.147.25.65]:25 input="\004\001\001\273h\032\r\310" 2020-04-01 16:11:02 SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=ns558397.ip-139-99-122.net [139.99.122.194]:61195 I=[192.147.25.65]:25 input="\005\001" ... |
2020-04-02 09:16:18 |
| 139.99.122.172 | attackbotsspam | Scanning random ports - tries to find possible vulnerable services |
2019-06-26 04:04:49 |
| 139.99.122.172 | attackbotsspam | MultiHost/MultiPort Probe, Scan, Hack - |
2019-06-22 14:16:21 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.99.122.26
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6875
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.99.122.26. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019062101 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jun 22 07:56:26 CST 2019
;; MSG SIZE rcvd: 11726.122.99.139.in-addr.arpa domain name pointer sg-wp03.awesomesites.org.Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
26.122.99.139.in-addr.arpa name = sg-wp03.awesomesites.org.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.233.135.26 | attack | (sshd) Failed SSH login from 49.233.135.26 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 9 19:19:51 srv sshd[15181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.135.26 user=root Sep 9 19:19:52 srv sshd[15181]: Failed password for root from 49.233.135.26 port 60804 ssh2 Sep 9 19:40:54 srv sshd[15616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.135.26 user=root Sep 9 19:40:57 srv sshd[15616]: Failed password for root from 49.233.135.26 port 49372 ssh2 Sep 9 19:45:36 srv sshd[15709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.135.26 user=root |
2020-09-10 20:07:51 |
| 101.71.129.48 | attackbotsspam | 2020-09-10T07:01:25.619260dreamphreak.com sshd[270510]: Invalid user aleksey from 101.71.129.48 port 2128 2020-09-10T07:01:27.994140dreamphreak.com sshd[270510]: Failed password for invalid user aleksey from 101.71.129.48 port 2128 ssh2 ... |
2020-09-10 20:19:47 |
| 220.79.74.11 | attackspambots | Hits on port : 23 |
2020-09-10 20:23:38 |
| 117.103.2.114 | attackspambots | $f2bV_matches |
2020-09-10 20:19:59 |
| 107.161.181.74 | attack | Professional Website & Graphic Designing Solutions |
2020-09-10 20:14:14 |
| 40.107.138.88 | attackbotsspam | Spam from jane@linkinfo.biz |
2020-09-10 20:16:07 |
| 103.25.4.80 | attackbotsspam | Attempted connection to port 445. |
2020-09-10 19:59:23 |
| 71.167.45.4 | attackbotsspam | 1599692275 - 09/10/2020 00:57:55 Host: 71.167.45.4/71.167.45.4 Port: 445 TCP Blocked |
2020-09-10 19:43:20 |
| 85.110.171.173 | attackspam | Unauthorized connection attempt from IP address 85.110.171.173 on Port 445(SMB) |
2020-09-10 19:56:53 |
| 200.205.174.66 | attackbots | Attempted connection to port 1433. |
2020-09-10 19:44:34 |
| 165.227.211.13 | attackbotsspam | 2020-09-10T10:04:26.996834randservbullet-proofcloud-66.localdomain sshd[6233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.211.13 user=root 2020-09-10T10:04:29.442722randservbullet-proofcloud-66.localdomain sshd[6233]: Failed password for root from 165.227.211.13 port 44896 ssh2 2020-09-10T10:17:01.371888randservbullet-proofcloud-66.localdomain sshd[6243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.211.13 user=root 2020-09-10T10:17:03.797888randservbullet-proofcloud-66.localdomain sshd[6243]: Failed password for root from 165.227.211.13 port 49454 ssh2 ... |
2020-09-10 20:12:29 |
| 136.49.210.126 | attack | 136.49.210.126 (US/United States/-), 3 distributed sshd attacks on account [pi] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 10 06:31:33 internal2 sshd[25588]: Invalid user pi from 91.96.28.254 port 54428 Sep 10 06:31:34 internal2 sshd[25591]: Invalid user pi from 91.96.28.254 port 54434 Sep 10 06:53:56 internal2 sshd[10150]: Invalid user pi from 136.49.210.126 port 52514 IP Addresses Blocked: 91.96.28.254 (DE/Germany/dyndsl-091-096-028-254.ewe-ip-backbone.de) |
2020-09-10 20:10:34 |
| 84.2.226.70 | attackspambots | ... |
2020-09-10 20:22:59 |
| 36.81.15.227 | attack | 1599691064 - 09/10/2020 00:37:44 Host: 36.81.15.227/36.81.15.227 Port: 445 TCP Blocked |
2020-09-10 19:48:24 |
| 73.6.227.20 | attack | Sep 9 18:59:24 nas sshd[28830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.6.227.20 Sep 9 18:59:24 nas sshd[28831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.6.227.20 Sep 9 18:59:26 nas sshd[28830]: Failed password for invalid user pi from 73.6.227.20 port 53448 ssh2 Sep 9 18:59:26 nas sshd[28831]: Failed password for invalid user pi from 73.6.227.20 port 53456 ssh2 ... |
2020-09-10 20:25:11 |