City: Betanzos
Region: Galicia
Country: Spain
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 2.139.185.217 | attack | firewall-block, port(s): 445/tcp |
2020-09-21 01:24:53 |
| 2.139.185.217 | attack | firewall-block, port(s): 445/tcp |
2020-09-20 17:23:44 |
| 2.139.155.90 | attackspambots |
|
2020-08-27 02:14:51 |
| 2.139.155.90 | attackspambots | 2323/tcp 23/tcp... [2020-08-05/23]7pkt,2pt.(tcp) |
2020-08-24 06:40:41 |
| 2.139.174.205 | attackspam | 2020-07-23T10:33:47.011024shield sshd\[10750\]: Invalid user stc from 2.139.174.205 port 53007 2020-07-23T10:33:47.019853shield sshd\[10750\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.red-2-139-174.staticip.rima-tde.net 2020-07-23T10:33:48.682281shield sshd\[10750\]: Failed password for invalid user stc from 2.139.174.205 port 53007 ssh2 2020-07-23T10:35:42.228881shield sshd\[10959\]: Invalid user mailman from 2.139.174.205 port 34730 2020-07-23T10:35:42.237257shield sshd\[10959\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.red-2-139-174.staticip.rima-tde.net |
2020-07-23 18:41:36 |
| 2.139.174.205 | attackbots | Jul 19 16:57:48 vm1 sshd[15250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.174.205 Jul 19 16:57:50 vm1 sshd[15250]: Failed password for invalid user radicale from 2.139.174.205 port 39494 ssh2 ... |
2020-07-19 23:26:06 |
| 2.139.174.205 | attackspam | 2020-06-25T06:33:18.606214galaxy.wi.uni-potsdam.de sshd[25659]: Invalid user lu from 2.139.174.205 port 55704 2020-06-25T06:33:18.608072galaxy.wi.uni-potsdam.de sshd[25659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.red-2-139-174.staticip.rima-tde.net 2020-06-25T06:33:18.606214galaxy.wi.uni-potsdam.de sshd[25659]: Invalid user lu from 2.139.174.205 port 55704 2020-06-25T06:33:20.617995galaxy.wi.uni-potsdam.de sshd[25659]: Failed password for invalid user lu from 2.139.174.205 port 55704 ssh2 2020-06-25T06:34:59.656449galaxy.wi.uni-potsdam.de sshd[25867]: Invalid user benoit from 2.139.174.205 port 36155 2020-06-25T06:34:59.658442galaxy.wi.uni-potsdam.de sshd[25867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.red-2-139-174.staticip.rima-tde.net 2020-06-25T06:34:59.656449galaxy.wi.uni-potsdam.de sshd[25867]: Invalid user benoit from 2.139.174.205 port 36155 2020-06-25T06:35:00.870243galaxy. ... |
2020-06-25 16:41:51 |
| 2.139.174.205 | attackbotsspam | 2020-06-24T09:50:30.624840xentho-1 sshd[631956]: Invalid user mali from 2.139.174.205 port 33589 2020-06-24T09:50:31.724284xentho-1 sshd[631956]: Failed password for invalid user mali from 2.139.174.205 port 33589 ssh2 2020-06-24T09:52:36.543017xentho-1 sshd[632010]: Invalid user mono from 2.139.174.205 port 44864 2020-06-24T09:52:36.551473xentho-1 sshd[632010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.174.205 2020-06-24T09:52:36.543017xentho-1 sshd[632010]: Invalid user mono from 2.139.174.205 port 44864 2020-06-24T09:52:37.942693xentho-1 sshd[632010]: Failed password for invalid user mono from 2.139.174.205 port 44864 ssh2 2020-06-24T09:54:48.238307xentho-1 sshd[632058]: Invalid user kye from 2.139.174.205 port 56144 2020-06-24T09:54:48.244155xentho-1 sshd[632058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.174.205 2020-06-24T09:54:48.238307xentho-1 sshd[632058]: Invalid user kye f ... |
2020-06-24 21:55:04 |
| 2.139.174.205 | attack | Jun 22 08:20:06 rush sshd[763]: Failed password for root from 2.139.174.205 port 37206 ssh2 Jun 22 08:21:35 rush sshd[797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.174.205 Jun 22 08:21:38 rush sshd[797]: Failed password for invalid user ramses from 2.139.174.205 port 44832 ssh2 ... |
2020-06-22 16:46:01 |
| 2.139.174.205 | attack | Jun 20 05:54:38 mout sshd[23038]: Invalid user edo from 2.139.174.205 port 41740 |
2020-06-20 13:31:52 |
| 2.139.174.205 | attack | bruteforce detected |
2020-05-29 03:10:25 |
| 2.139.159.96 | attack | Unauthorized connection attempt from IP address 2.139.159.96 on Port 445(SMB) |
2020-05-14 04:14:23 |
| 2.139.174.205 | attackspam | May 4 14:18:07 ip-172-31-62-245 sshd\[7488\]: Invalid user sasha from 2.139.174.205\ May 4 14:18:10 ip-172-31-62-245 sshd\[7488\]: Failed password for invalid user sasha from 2.139.174.205 port 58241 ssh2\ May 4 14:18:38 ip-172-31-62-245 sshd\[7490\]: Invalid user opi from 2.139.174.205\ May 4 14:18:41 ip-172-31-62-245 sshd\[7490\]: Failed password for invalid user opi from 2.139.174.205 port 60313 ssh2\ May 4 14:19:03 ip-172-31-62-245 sshd\[7492\]: Invalid user admin from 2.139.174.205\ |
2020-05-04 22:25:30 |
| 2.139.174.205 | attack | Brute force attempt |
2020-04-27 08:28:16 |
| 2.139.174.205 | attack | (sshd) Failed SSH login from 2.139.174.205 (ES/Spain/205.red-2-139-174.staticip.rima-tde.net): 5 in the last 3600 secs |
2020-04-20 17:10:41 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.139.1.23
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47462
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;2.139.1.23. IN A
;; AUTHORITY SECTION:
. 214 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020051001 1800 900 604800 86400
;; Query time: 98 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 11 09:26:13 CST 2020
;; MSG SIZE rcvd: 114
23.1.139.2.in-addr.arpa domain name pointer 23.red-2-139-1.dynamicip.rima-tde.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
23.1.139.2.in-addr.arpa name = 23.red-2-139-1.dynamicip.rima-tde.net.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 95.169.13.22 | attackspambots | $f2bV_matches |
2020-09-14 00:54:52 |
| 185.40.240.135 | attackspambots | Brute force attempt |
2020-09-14 00:59:29 |
| 112.85.42.195 | attackspam | Sep 13 16:50:24 game-panel sshd[18480]: Failed password for root from 112.85.42.195 port 35209 ssh2 Sep 13 16:51:18 game-panel sshd[18508]: Failed password for root from 112.85.42.195 port 38655 ssh2 |
2020-09-14 01:07:52 |
| 106.53.249.204 | attackbotsspam | $f2bV_matches |
2020-09-14 01:03:38 |
| 106.53.20.166 | attackspam | (sshd) Failed SSH login from 106.53.20.166 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 13 09:50:27 server sshd[4321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.20.166 user=root Sep 13 09:50:29 server sshd[4321]: Failed password for root from 106.53.20.166 port 53104 ssh2 Sep 13 10:01:40 server sshd[6992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.20.166 user=root Sep 13 10:01:42 server sshd[6992]: Failed password for root from 106.53.20.166 port 42378 ssh2 Sep 13 10:03:55 server sshd[7509]: Invalid user lara from 106.53.20.166 port 35600 |
2020-09-14 00:45:00 |
| 192.241.234.121 | attackbotsspam | 1 web vulnerability exploit attempt from 192.241.234.121 in past 24 hours |
2020-09-14 01:03:16 |
| 35.204.152.99 | attackbotsspam | Automatic report - XMLRPC Attack |
2020-09-14 01:15:33 |
| 49.233.147.108 | attackbots | $f2bV_matches |
2020-09-14 01:02:55 |
| 140.143.193.52 | attackspambots | Automatic Fail2ban report - Trying login SSH |
2020-09-14 01:02:41 |
| 5.132.115.161 | attack | Sep 13 17:25:00 rancher-0 sshd[25864]: Invalid user jenkins from 5.132.115.161 port 55224 ... |
2020-09-14 00:42:09 |
| 185.247.224.55 | attackbots | Sep 13 19:10:49 serwer sshd\[28014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.247.224.55 user=root Sep 13 19:10:51 serwer sshd\[28014\]: Failed password for root from 185.247.224.55 port 52332 ssh2 Sep 13 19:10:53 serwer sshd\[28014\]: Failed password for root from 185.247.224.55 port 52332 ssh2 ... |
2020-09-14 01:12:26 |
| 115.97.136.195 | attack |
|
2020-09-14 00:49:20 |
| 79.7.144.97 | attackbots | DATE:2020-09-12 18:52:19, IP:79.7.144.97, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq) |
2020-09-14 00:45:59 |
| 54.36.182.244 | attackbotsspam | s2.hscode.pl - SSH Attack |
2020-09-14 00:46:43 |
| 222.186.173.142 | attack | Sep 13 13:16:40 NPSTNNYC01T sshd[9187]: Failed password for root from 222.186.173.142 port 12836 ssh2 Sep 13 13:16:53 NPSTNNYC01T sshd[9187]: error: maximum authentication attempts exceeded for root from 222.186.173.142 port 12836 ssh2 [preauth] Sep 13 13:16:59 NPSTNNYC01T sshd[9195]: Failed password for root from 222.186.173.142 port 21766 ssh2 ... |
2020-09-14 01:17:36 |