City: unknown
Region: unknown
Country: China
Internet Service Provider: Shanghai Jiaotong University
Hostname: unknown
Organization: unknown
Usage Type: University/College/School
| Type | Details | Datetime |
|---|---|---|
| attackbots | 25.11.2019 06:35:17 Connection to port 2222 blocked by firewall |
2019-11-25 16:51:58 |
| attackbotsspam | Nov 25 00:07:00 albuquerque sshd\[9718\]: User root from 202.120.39.141 not allowed because not listed in AllowUsersNov 25 00:07:01 albuquerque sshd\[9719\]: User root from 202.120.39.141 not allowed because not listed in AllowUsersNov 25 00:07:01 albuquerque sshd\[9727\]: User root from 202.120.39.141 not allowed because not listed in AllowUsers ... |
2019-11-25 08:45:27 |
| attackbots | Fail2Ban Ban Triggered |
2019-11-18 04:52:30 |
| attackbotsspam | Fail2Ban Ban Triggered |
2019-11-17 06:34:49 |
| attackbotsspam | Nov 16 15:11:45 lukav-desktop sshd\[13172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.120.39.141 user=root Nov 16 15:11:45 lukav-desktop sshd\[13108\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.120.39.141 user=root Nov 16 15:11:45 lukav-desktop sshd\[13233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.120.39.141 user=root Nov 16 15:11:47 lukav-desktop sshd\[13172\]: Failed password for root from 202.120.39.141 port 60822 ssh2 Nov 16 15:11:47 lukav-desktop sshd\[13108\]: Failed password for root from 202.120.39.141 port 36030 ssh2 |
2019-11-16 21:49:46 |
| attackbots | 202.120.39.141 was recorded 5 times by 5 hosts attempting to connect to the following ports: 2222. Incident counter (4h, 24h, all-time): 5, 5, 5 |
2019-11-15 07:24:46 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 202.120.39.132 | attack | 2019-11-15T06:31:40.606366abusebot-2.cloudsearch.cf sshd\[7653\]: Invalid user admin from 202.120.39.132 port 26593 |
2019-11-15 14:41:04 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 202.120.39.141
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16551
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;202.120.39.141. IN A
;; AUTHORITY SECTION:
. 394 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019111402 1800 900 604800 86400
;; Query time: 101 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 15 07:24:43 CST 2019
;; MSG SIZE rcvd: 118Host 141.39.120.202.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 141.39.120.202.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.3.133.11 | attackspam | Failed SSH login from 5 in the last 3600 secs |
2019-08-26 00:00:29 |
| 164.132.62.233 | attack | 2019-08-25T15:30:23.359688abusebot-8.cloudsearch.cf sshd\[21410\]: Invalid user alessandro from 164.132.62.233 port 60992 |
2019-08-25 23:41:34 |
| 92.119.160.125 | attack | Port scan on 9 port(s): 11515 11634 11657 11678 11700 11718 11750 11769 11785 |
2019-08-25 23:21:36 |
| 178.60.38.58 | attack | Aug 25 16:52:34 ubuntu-2gb-nbg1-dc3-1 sshd[17813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.60.38.58 Aug 25 16:52:36 ubuntu-2gb-nbg1-dc3-1 sshd[17813]: Failed password for invalid user cvsroot from 178.60.38.58 port 40583 ssh2 ... |
2019-08-25 23:18:30 |
| 107.170.76.170 | attack | Aug 25 02:12:52 php2 sshd\[18473\]: Invalid user smmsp from 107.170.76.170 Aug 25 02:12:52 php2 sshd\[18473\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.76.170 Aug 25 02:12:54 php2 sshd\[18473\]: Failed password for invalid user smmsp from 107.170.76.170 port 41517 ssh2 Aug 25 02:20:09 php2 sshd\[19208\]: Invalid user soap from 107.170.76.170 Aug 25 02:20:09 php2 sshd\[19208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.76.170 |
2019-08-26 00:07:34 |
| 197.15.26.58 | attack | Automatic report - Port Scan Attack |
2019-08-25 23:35:27 |
| 117.187.139.201 | attack | Automatic report - Port Scan Attack |
2019-08-26 00:10:34 |
| 124.74.248.218 | attack | Aug 25 10:49:59 pkdns2 sshd\[56700\]: Invalid user dionisia from 124.74.248.218Aug 25 10:50:01 pkdns2 sshd\[56700\]: Failed password for invalid user dionisia from 124.74.248.218 port 57472 ssh2Aug 25 10:54:38 pkdns2 sshd\[56943\]: Invalid user test from 124.74.248.218Aug 25 10:54:40 pkdns2 sshd\[56943\]: Failed password for invalid user test from 124.74.248.218 port 38616 ssh2Aug 25 10:59:20 pkdns2 sshd\[57155\]: Invalid user garey from 124.74.248.218Aug 25 10:59:21 pkdns2 sshd\[57155\]: Failed password for invalid user garey from 124.74.248.218 port 47950 ssh2 ... |
2019-08-25 23:50:01 |
| 108.60.244.5 | attackspambots | Automatic report - Port Scan Attack |
2019-08-26 00:27:48 |
| 115.231.218.134 | attackspambots | Aug 25 12:23:32 game-panel sshd[14491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.231.218.134 Aug 25 12:23:34 game-panel sshd[14491]: Failed password for invalid user wildan from 115.231.218.134 port 33494 ssh2 Aug 25 12:28:12 game-panel sshd[14688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.231.218.134 |
2019-08-26 00:06:18 |
| 94.177.250.221 | attack | Aug 25 17:03:50 lnxmysql61 sshd[3977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.250.221 |
2019-08-25 23:50:38 |
| 154.197.27.251 | attackspambots | Brute force RDP, port 3389 |
2019-08-26 00:02:11 |
| 123.30.154.184 | attackbotsspam | Aug 25 16:31:57 srv206 sshd[13622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.30.154.184 user=root Aug 25 16:31:59 srv206 sshd[13622]: Failed password for root from 123.30.154.184 port 45852 ssh2 Aug 25 16:38:23 srv206 sshd[13642]: Invalid user peu01 from 123.30.154.184 ... |
2019-08-25 23:27:13 |
| 81.22.45.239 | attack | Aug 25 17:49:59 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.239 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=12421 PROTO=TCP SPT=50306 DPT=21685 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-08-26 00:19:38 |
| 85.209.0.115 | attackspambots | Port scan on 15 port(s): 13591 14858 38346 38776 38840 40821 41465 42885 43712 46438 46648 47202 50793 56082 57403 |
2019-08-26 00:08:43 |