City: unknown
Region: unknown
Country: China
Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspam | Automatic report - Banned IP Access |
2020-10-12 21:23:15 |
| attack | Oct 12 04:47:44 *** sshd[4974]: User root from 148.70.149.39 not allowed because not listed in AllowUsers |
2020-10-12 12:53:33 |
| attackbots | SSH Bruteforce Attempt on Honeypot |
2020-10-05 07:52:36 |
| attackbotsspam | vps:sshd-InvalidUser |
2020-10-05 00:12:23 |
| attackbotsspam | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-28T21:05:13Z and 2020-09-28T21:22:52Z |
2020-09-29 06:55:27 |
| attackbots | (sshd) Failed SSH login from 148.70.149.39 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 28 14:01:30 server2 sshd[13641]: Invalid user trade from 148.70.149.39 port 34092 Sep 28 14:01:33 server2 sshd[13641]: Failed password for invalid user trade from 148.70.149.39 port 34092 ssh2 Sep 28 14:14:11 server2 sshd[16006]: Invalid user lj from 148.70.149.39 port 54884 Sep 28 14:14:13 server2 sshd[16006]: Failed password for invalid user lj from 148.70.149.39 port 54884 ssh2 Sep 28 14:22:37 server2 sshd[17482]: Invalid user sistema from 148.70.149.39 port 33408 |
2020-09-28 23:23:37 |
| attack | Sep 21 12:42:43 ourumov-web sshd\[15034\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.149.39 user=root Sep 21 12:42:45 ourumov-web sshd\[15034\]: Failed password for root from 148.70.149.39 port 51236 ssh2 Sep 21 12:48:22 ourumov-web sshd\[15390\]: Invalid user jenkins from 148.70.149.39 port 45552 ... |
2020-09-21 21:08:48 |
| attack | fail2ban detected brute force on sshd |
2020-09-21 12:55:48 |
| attackspam | Bruteforce detected by fail2ban |
2020-09-21 04:47:23 |
| attack | 148.70.149.39 (CN/China/-), 9 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 20 13:03:10 server4 sshd[16368]: Invalid user admin from 71.11.134.32 Sep 20 12:53:10 server4 sshd[10082]: Invalid user admin from 24.237.89.47 Sep 20 12:53:17 server4 sshd[10390]: Invalid user admin from 148.70.149.39 Sep 20 12:53:19 server4 sshd[10390]: Failed password for invalid user admin from 148.70.149.39 port 59694 ssh2 Sep 20 12:57:11 server4 sshd[12743]: Failed password for invalid user admin from 96.42.78.206 port 35605 ssh2 Sep 20 12:57:12 server4 sshd[12773]: Invalid user admin from 96.42.78.206 Sep 20 12:57:07 server4 sshd[12739]: Invalid user admin from 96.42.78.206 Sep 20 12:57:08 server4 sshd[12739]: Failed password for invalid user admin from 96.42.78.206 port 35526 ssh2 Sep 20 12:57:09 server4 sshd[12743]: Invalid user admin from 96.42.78.206 IP Addresses Blocked: 71.11.134.32 (US/United States/-) 24.237.89.47 (US/United States/-) |
2020-09-21 01:26:05 |
| attackspambots | 2020-09-20T10:10:30.071493ollin.zadara.org sshd[788155]: Invalid user postgresql from 148.70.149.39 port 46284 2020-09-20T10:10:31.682239ollin.zadara.org sshd[788155]: Failed password for invalid user postgresql from 148.70.149.39 port 46284 ssh2 ... |
2020-09-20 17:25:03 |
| attackbots | Time: Mon Sep 7 18:38:15 2020 +0200 IP: 148.70.149.39 (CN/China/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 7 18:33:10 mail-03 sshd[30399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.149.39 user=root Sep 7 18:33:12 mail-03 sshd[30399]: Failed password for root from 148.70.149.39 port 34256 ssh2 Sep 7 18:36:18 mail-03 sshd[30568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.149.39 user=root Sep 7 18:36:20 mail-03 sshd[30568]: Failed password for root from 148.70.149.39 port 58714 ssh2 Sep 7 18:38:11 mail-03 sshd[30677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.149.39 user=root |
2020-09-08 02:30:22 |
| attackbots | Sep 7 16:28:31 webhost01 sshd[663]: Failed password for root from 148.70.149.39 port 41884 ssh2 ... |
2020-09-07 17:56:12 |
| attackspambots | Invalid user drake from 148.70.149.39 port 33452 |
2020-08-30 18:01:25 |
| attack | Invalid user media from 148.70.149.39 port 38948 |
2020-08-29 06:01:40 |
| attackspambots | Aug 21 09:42:59 meumeu sshd[17159]: Invalid user suisse from 148.70.149.39 port 33344 Aug 21 09:42:59 meumeu sshd[17159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.149.39 Aug 21 09:42:59 meumeu sshd[17159]: Invalid user suisse from 148.70.149.39 port 33344 Aug 21 09:43:01 meumeu sshd[17159]: Failed password for invalid user suisse from 148.70.149.39 port 33344 ssh2 Aug 21 09:46:33 meumeu sshd[17252]: Invalid user amavis from 148.70.149.39 port 59120 Aug 21 09:46:33 meumeu sshd[17252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.149.39 Aug 21 09:46:33 meumeu sshd[17252]: Invalid user amavis from 148.70.149.39 port 59120 Aug 21 09:46:35 meumeu sshd[17252]: Failed password for invalid user amavis from 148.70.149.39 port 59120 ssh2 Aug 21 09:49:54 meumeu sshd[17320]: Invalid user dxz from 148.70.149.39 port 56670 ... |
2020-08-21 16:01:29 |
| attackbotsspam | 'Fail2Ban' |
2020-08-12 02:58:40 |
| attackbotsspam | Aug 8 05:53:30 v22019038103785759 sshd\[16048\]: Invalid user \>\;\<\; from 148.70.149.39 port 55524 Aug 8 05:53:30 v22019038103785759 sshd\[16048\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.149.39 Aug 8 05:53:32 v22019038103785759 sshd\[16048\]: Failed password for invalid user \>\;\<\; from 148.70.149.39 port 55524 ssh2 Aug 8 05:59:20 v22019038103785759 sshd\[16232\]: Invalid user admin2123 from 148.70.149.39 port 43456 Aug 8 05:59:20 v22019038103785759 sshd\[16232\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.149.39 ... |
2020-08-08 12:06:42 |
| attackspam | Aug 7 19:31:33 icinga sshd[38005]: Failed password for root from 148.70.149.39 port 44468 ssh2 Aug 7 19:49:34 icinga sshd[763]: Failed password for root from 148.70.149.39 port 44776 ssh2 ... |
2020-08-08 03:34:30 |
| attack | 2020-08-04T20:54:50.929103mail.standpoint.com.ua sshd[17369]: Failed password for root from 148.70.149.39 port 42570 ssh2 2020-08-04T20:57:01.171019mail.standpoint.com.ua sshd[17666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.149.39 user=root 2020-08-04T20:57:03.302833mail.standpoint.com.ua sshd[17666]: Failed password for root from 148.70.149.39 port 60008 ssh2 2020-08-04T20:59:15.190957mail.standpoint.com.ua sshd[17985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.149.39 user=root 2020-08-04T20:59:17.718935mail.standpoint.com.ua sshd[17985]: Failed password for root from 148.70.149.39 port 49222 ssh2 ... |
2020-08-05 02:27:38 |
| attackbots | Jul 29 08:06:33 george sshd[27918]: Failed password for invalid user XiaB from 148.70.149.39 port 51538 ssh2 Jul 29 08:10:24 george sshd[28393]: Invalid user libimei from 148.70.149.39 port 53756 Jul 29 08:10:24 george sshd[28393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.149.39 Jul 29 08:10:26 george sshd[28393]: Failed password for invalid user libimei from 148.70.149.39 port 53756 ssh2 Jul 29 08:14:16 george sshd[28428]: Invalid user haoxian from 148.70.149.39 port 55978 ... |
2020-07-29 20:25:44 |
| attackspambots | " " |
2020-07-20 20:44:37 |
| attack | Jun 28 07:31:59 DAAP sshd[25095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.149.39 user=root Jun 28 07:32:01 DAAP sshd[25095]: Failed password for root from 148.70.149.39 port 60362 ssh2 Jun 28 07:40:41 DAAP sshd[25228]: Invalid user mongod from 148.70.149.39 port 48034 Jun 28 07:40:41 DAAP sshd[25228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.149.39 Jun 28 07:40:41 DAAP sshd[25228]: Invalid user mongod from 148.70.149.39 port 48034 Jun 28 07:40:42 DAAP sshd[25228]: Failed password for invalid user mongod from 148.70.149.39 port 48034 ssh2 ... |
2020-06-28 15:51:24 |
| attack | Jun 23 23:36:25 santamaria sshd\[7144\]: Invalid user vt from 148.70.149.39 Jun 23 23:36:25 santamaria sshd\[7144\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.149.39 Jun 23 23:36:27 santamaria sshd\[7144\]: Failed password for invalid user vt from 148.70.149.39 port 35542 ssh2 ... |
2020-06-24 06:28:56 |
| attack | Jun 12 05:58:45 ns381471 sshd[27908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.149.39 Jun 12 05:58:47 ns381471 sshd[27908]: Failed password for invalid user ares from 148.70.149.39 port 43380 ssh2 |
2020-06-12 12:30:43 |
| attackspambots | 2020-06-06T14:32:54.544219galaxy.wi.uni-potsdam.de sshd[21245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.149.39 user=root 2020-06-06T14:32:56.575572galaxy.wi.uni-potsdam.de sshd[21245]: Failed password for root from 148.70.149.39 port 49858 ssh2 2020-06-06T14:33:43.849709galaxy.wi.uni-potsdam.de sshd[21309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.149.39 user=root 2020-06-06T14:33:45.609136galaxy.wi.uni-potsdam.de sshd[21309]: Failed password for root from 148.70.149.39 port 57028 ssh2 2020-06-06T14:34:31.434259galaxy.wi.uni-potsdam.de sshd[21414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.149.39 user=root 2020-06-06T14:34:33.450347galaxy.wi.uni-potsdam.de sshd[21414]: Failed password for root from 148.70.149.39 port 35968 ssh2 2020-06-06T14:35:19.942069galaxy.wi.uni-potsdam.de sshd[21482]: pam_unix(sshd:auth): authenticati ... |
2020-06-06 20:42:00 |
| attackbots | Invalid user nil from 148.70.149.39 port 38534 |
2020-05-24 03:16:03 |
| attack | 2020-05-22T22:28:02.813307shield sshd\[29671\]: Invalid user gcx from 148.70.149.39 port 56566 2020-05-22T22:28:02.817171shield sshd\[29671\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.149.39 2020-05-22T22:28:04.039638shield sshd\[29671\]: Failed password for invalid user gcx from 148.70.149.39 port 56566 ssh2 2020-05-22T22:33:26.332600shield sshd\[31093\]: Invalid user uou from 148.70.149.39 port 34624 2020-05-22T22:33:26.336455shield sshd\[31093\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.149.39 |
2020-05-23 06:58:58 |
| attackspam | $f2bV_matches |
2020-05-11 19:32:43 |
| attackspam | May 8 20:34:11 server1 sshd\[16589\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.149.39 user=root May 8 20:34:14 server1 sshd\[16589\]: Failed password for root from 148.70.149.39 port 43418 ssh2 May 8 20:39:23 server1 sshd\[18138\]: Invalid user lrq from 148.70.149.39 May 8 20:39:23 server1 sshd\[18138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.149.39 May 8 20:39:25 server1 sshd\[18138\]: Failed password for invalid user lrq from 148.70.149.39 port 46964 ssh2 ... |
2020-05-09 20:07:10 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 148.70.149.92 | attackbotsspam | IP 148.70.149.92 attacked honeypot on port: 6379 at 8/6/2020 6:24:56 AM |
2020-08-06 22:59:35 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.70.149.39
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9434
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;148.70.149.39. IN A
;; AUTHORITY SECTION:
. 595 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020040801 1800 900 604800 86400
;; Query time: 43 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Apr 09 08:31:34 CST 2020
;; MSG SIZE rcvd: 117Host 39.149.70.148.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 39.149.70.148.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 174.209.0.236 | attackbotsspam | Brute forcing email accounts |
2020-05-21 19:23:51 |
| 82.102.173.89 | attackbotsspam | port 23 |
2020-05-21 19:41:11 |
| 163.172.61.214 | attack | 2020-05-21 05:12:29.036516-0500 localhost sshd[66158]: Failed password for invalid user ruy from 163.172.61.214 port 55303 ssh2 |
2020-05-21 19:08:31 |
| 163.172.251.80 | attack | May 21 09:44:36 XXXXXX sshd[30388]: Invalid user wao from 163.172.251.80 port 53710 |
2020-05-21 19:13:37 |
| 45.14.224.165 | attackspambots | May 21 12:58:46 debian-2gb-nbg1-2 kernel: \[12317548.848220\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.14.224.165 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=43560 PROTO=TCP SPT=61485 DPT=8004 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-05-21 19:30:33 |
| 200.27.38.106 | attackbots | frenzy |
2020-05-21 19:29:04 |
| 51.89.23.74 | attack | 51.89.23.74 - - [21/May/2020:05:48:43 +0200] "GET /awstats.pl?framename=mainright&output=refererpages HTTP/1.0" 404 280 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; APCPMS=^N201302070257035267484A37ACF0A41BE63F_2702^; Trident/7.0; rv:11.0) like Gecko,gzip(gfe)" |
2020-05-21 19:35:03 |
| 49.88.112.70 | attackbotsspam | 2020-05-21T11:06:12.383075shield sshd\[18809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.70 user=root 2020-05-21T11:06:14.830125shield sshd\[18809\]: Failed password for root from 49.88.112.70 port 59406 ssh2 2020-05-21T11:06:16.567885shield sshd\[18809\]: Failed password for root from 49.88.112.70 port 59406 ssh2 2020-05-21T11:06:18.777346shield sshd\[18809\]: Failed password for root from 49.88.112.70 port 59406 ssh2 2020-05-21T11:08:04.944518shield sshd\[19114\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.70 user=root |
2020-05-21 19:12:47 |
| 113.53.231.178 | attack | (sshd) Failed SSH login from 113.53.231.178 (TH/Thailand/113-53-231-178.totisp.net): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 21 05:48:33 ubnt-55d23 sshd[24159]: Did not receive identification string from 113.53.231.178 port 63699 May 21 05:48:38 ubnt-55d23 sshd[24186]: Invalid user ubnt from 113.53.231.178 port 64461 |
2020-05-21 19:36:06 |
| 103.94.6.69 | attackspambots | 2020-05-21T07:16:26.952893abusebot-3.cloudsearch.cf sshd[29905]: Invalid user gbz from 103.94.6.69 port 36192 2020-05-21T07:16:26.959731abusebot-3.cloudsearch.cf sshd[29905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.6.69 2020-05-21T07:16:26.952893abusebot-3.cloudsearch.cf sshd[29905]: Invalid user gbz from 103.94.6.69 port 36192 2020-05-21T07:16:28.495200abusebot-3.cloudsearch.cf sshd[29905]: Failed password for invalid user gbz from 103.94.6.69 port 36192 ssh2 2020-05-21T07:20:36.382532abusebot-3.cloudsearch.cf sshd[30203]: Invalid user ryf from 103.94.6.69 port 39115 2020-05-21T07:20:36.391073abusebot-3.cloudsearch.cf sshd[30203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.6.69 2020-05-21T07:20:36.382532abusebot-3.cloudsearch.cf sshd[30203]: Invalid user ryf from 103.94.6.69 port 39115 2020-05-21T07:20:38.247586abusebot-3.cloudsearch.cf sshd[30203]: Failed password for invalid us ... |
2020-05-21 19:39:06 |
| 125.227.240.25 | attackspambots | May 21 05:48:37 mout sshd[509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.227.240.25 user=pi May 21 05:48:39 mout sshd[509]: Failed password for pi from 125.227.240.25 port 34536 ssh2 May 21 05:48:39 mout sshd[509]: Connection closed by 125.227.240.25 port 34536 [preauth] |
2020-05-21 19:37:24 |
| 183.223.222.141 | attackspam | $f2bV_matches |
2020-05-21 19:32:58 |
| 49.88.112.75 | attack | May 21 2020, 11:09:25 [sshd] - Banned from the Cipher Host hosting platform by Fail2ban. |
2020-05-21 19:10:29 |
| 101.108.138.150 | attack | SSH bruteforce more then 50 syn to 22 port per 10 seconds. |
2020-05-21 19:34:41 |
| 222.186.173.183 | attackspam | Automatic report - Banned IP Access |
2020-05-21 19:33:55 |