City: Osaka
Region: Ōsaka
Country: Japan
Internet Service Provider: Sakura Internet Inc.
Hostname: unknown
Organization: SAKURA Internet Inc.
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackbotsspam | Aug 14 08:05:44 dallas01 sshd[29897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.212.148.139 Aug 14 08:05:46 dallas01 sshd[29897]: Failed password for invalid user gary from 49.212.148.139 port 49138 ssh2 Aug 14 08:11:07 dallas01 sshd[31662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.212.148.139 |
2019-08-14 22:18:13 |
| attack | Aug 9 06:50:42 ubuntu-2gb-nbg1-dc3-1 sshd[28717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.212.148.139 Aug 9 06:50:44 ubuntu-2gb-nbg1-dc3-1 sshd[28717]: Failed password for invalid user lim from 49.212.148.139 port 43270 ssh2 ... |
2019-08-09 13:51:09 |
| attack | Aug 8 09:15:49 xm3 sshd[9868]: Failed password for invalid user pr from 49.212.148.139 port 51574 ssh2 Aug 8 09:15:49 xm3 sshd[9868]: Received disconnect from 49.212.148.139: 11: Bye Bye [preauth] Aug 8 09:32:03 xm3 sshd[11365]: Failed password for invalid user brix from 49.212.148.139 port 52414 ssh2 Aug 8 09:32:03 xm3 sshd[11365]: Received disconnect from 49.212.148.139: 11: Bye Bye [preauth] Aug 8 09:37:07 xm3 sshd[22836]: Failed password for invalid user test1 from 49.212.148.139 port 50486 ssh2 Aug 8 09:37:08 xm3 sshd[22836]: Received disconnect from 49.212.148.139: 11: Bye Bye [preauth] Aug 8 09:42:03 xm3 sshd[32617]: Failed password for invalid user nagios from 49.212.148.139 port 49040 ssh2 Aug 8 09:42:03 xm3 sshd[32617]: Received disconnect from 49.212.148.139: 11: Bye Bye [preauth] Aug 8 09:46:46 xm3 sshd[11512]: Failed password for invalid user john from 49.212.148.139 port 46896 ssh2 Aug 8 09:46:47 xm3 sshd[11512]: Received disconnect from 49.212.1........ ------------------------------- |
2019-08-09 04:06:31 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.212.148.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38302
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.212.148.139. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019080801 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Aug 09 04:06:26 CST 2019
;; MSG SIZE rcvd: 118139.148.212.49.in-addr.arpa domain name pointer www11125ue.sakura.ne.jp.Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
139.148.212.49.in-addr.arpa name = www11125ue.sakura.ne.jp.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.114.107.149 | attackspambots | SSH brute-force attempt |
2020-09-12 04:10:58 |
| 211.38.132.37 | attackbots | Sep 11 17:13:44 sshgateway sshd\[14478\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.38.132.37 user=root Sep 11 17:13:45 sshgateway sshd\[14478\]: Failed password for root from 211.38.132.37 port 38876 ssh2 Sep 11 17:15:24 sshgateway sshd\[14664\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.38.132.37 user=root |
2020-09-12 03:40:22 |
| 45.248.71.169 | attack | $f2bV_matches |
2020-09-12 04:03:42 |
| 190.144.135.118 | attackspam | 2020-09-11 07:44:46.927443-0500 localhost sshd[29055]: Failed password for root from 190.144.135.118 port 35203 ssh2 |
2020-09-12 03:45:45 |
| 77.88.5.111 | attackbotsspam | port scan and connect, tcp 80 (http) |
2020-09-12 03:47:18 |
| 177.16.98.132 | attackbots | Sep 11 19:44:31 ns308116 sshd[9975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.16.98.132 user=root Sep 11 19:44:33 ns308116 sshd[9975]: Failed password for root from 177.16.98.132 port 48602 ssh2 Sep 11 19:50:39 ns308116 sshd[16240]: Invalid user takeo from 177.16.98.132 port 59972 Sep 11 19:50:39 ns308116 sshd[16240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.16.98.132 Sep 11 19:50:41 ns308116 sshd[16240]: Failed password for invalid user takeo from 177.16.98.132 port 59972 ssh2 ... |
2020-09-12 04:04:26 |
| 128.199.212.15 | attackbotsspam | Sep 11 19:21:33 freedom sshd\[31638\]: Invalid user pustyu12345 from 128.199.212.15 port 54690 Sep 11 19:23:22 freedom sshd\[31657\]: Invalid user qw from 128.199.212.15 port 48228 Sep 11 19:25:06 freedom sshd\[31668\]: Invalid user qwe from 128.199.212.15 port 35682 Sep 11 19:26:48 freedom sshd\[31680\]: Invalid user qwe123 from 128.199.212.15 port 52958 Sep 11 19:28:26 freedom sshd\[31692\]: Invalid user qweasd from 128.199.212.15 port 37854 ... |
2020-09-12 03:54:20 |
| 202.107.226.4 | attack | Persistent port scanning [29 denied] |
2020-09-12 03:34:00 |
| 222.186.30.76 | attack | Sep 11 20:51:12 rocket sshd[13162]: Failed password for root from 222.186.30.76 port 55822 ssh2 Sep 11 20:51:18 rocket sshd[13178]: Failed password for root from 222.186.30.76 port 17482 ssh2 ... |
2020-09-12 03:52:02 |
| 140.143.61.200 | attack | 2020-09-11T21:53:46.172725snf-827550 sshd[31706]: Failed password for root from 140.143.61.200 port 58270 ssh2 2020-09-11T21:58:18.838282snf-827550 sshd[32289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.61.200 user=root 2020-09-11T21:58:21.270490snf-827550 sshd[32289]: Failed password for root from 140.143.61.200 port 49914 ssh2 ... |
2020-09-12 03:48:18 |
| 148.229.3.242 | attackspam | Sep 11 16:10:54 XXXXXX sshd[52013]: Invalid user testuser07 from 148.229.3.242 port 50204 |
2020-09-12 03:54:09 |
| 124.110.9.75 | attack | Sep 11 18:50:23 rotator sshd\[10392\]: Failed password for root from 124.110.9.75 port 44560 ssh2Sep 11 18:53:28 rotator sshd\[10440\]: Invalid user ngatwiri from 124.110.9.75Sep 11 18:53:30 rotator sshd\[10440\]: Failed password for invalid user ngatwiri from 124.110.9.75 port 35042 ssh2Sep 11 18:56:31 rotator sshd\[11218\]: Invalid user admin from 124.110.9.75Sep 11 18:56:33 rotator sshd\[11218\]: Failed password for invalid user admin from 124.110.9.75 port 53766 ssh2Sep 11 18:59:42 rotator sshd\[11255\]: Failed password for root from 124.110.9.75 port 44250 ssh2 ... |
2020-09-12 04:02:53 |
| 159.203.81.28 | attackbots |
|
2020-09-12 03:40:08 |
| 162.243.22.191 | attack | Lines containing failures of 162.243.22.191 Sep 10 18:05:42 MAKserver06 sshd[12030]: Invalid user teamspeak1 from 162.243.22.191 port 34303 Sep 10 18:05:42 MAKserver06 sshd[12030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.22.191 Sep 10 18:05:43 MAKserver06 sshd[12030]: Failed password for invalid user teamspeak1 from 162.243.22.191 port 34303 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=162.243.22.191 |
2020-09-12 03:37:54 |
| 114.34.6.93 | attackbots | firewall-block, port(s): 23/tcp |
2020-09-12 03:43:19 |