城市(city): unknown
省份(region): unknown
国家(country): Indonesia
运营商(isp): PT. First Media TBK
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): Fixed Line ISP
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attackspambots | 2019-03-08 17:53:54 1h2Ikr-0001C7-H0 SMTP connection from \(fm-dyn-139-194-216-169.fast.net.id\) \[139.194.216.169\]:49080 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-08 17:55:08 1h2Im3-0001FP-Mj SMTP connection from \(fm-dyn-139-194-216-169.fast.net.id\) \[139.194.216.169\]:49486 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-03-08 17:55:49 1h2Imi-0001Gc-Du SMTP connection from \(fm-dyn-139-194-216-169.fast.net.id\) \[139.194.216.169\]:49778 I=\[193.107.88.166\]:25 closed by DROP in ACL ... |
2020-02-05 00:58:45 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.194.216.169
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27724
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.194.216.169. IN A
;; AUTHORITY SECTION:
. 389 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020020400 1800 900 604800 86400
;; Query time: 126 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 00:58:34 CST 2020
;; MSG SIZE rcvd: 119169.216.194.139.in-addr.arpa domain name pointer fm-dyn-139-194-216-169.fast.net.id.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
*** Can't find 169.216.194.139.in-addr.arpa.: No answer
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 132.232.230.220 | attack | Invalid user nagios from 132.232.230.220 port 55777 |
2020-08-01 08:25:29 |
| 49.228.50.53 | attack | Unauthorized connection attempt from IP address 49.228.50.53 on Port 445(SMB) |
2020-08-01 08:10:44 |
| 190.12.66.27 | attack | SSH Invalid Login |
2020-08-01 08:28:04 |
| 111.229.4.186 | attackbotsspam | Aug 1 04:52:52 rocket sshd[26168]: Failed password for root from 111.229.4.186 port 46922 ssh2 Aug 1 04:58:37 rocket sshd[26993]: Failed password for root from 111.229.4.186 port 51342 ssh2 ... |
2020-08-01 12:04:41 |
| 170.130.140.2 | attack | IP: 170.130.140.2
Ports affected
Simple Mail Transfer (25)
Found in DNSBL('s)
ASN Details
AS62904 EONIX-COMMUNICATIONS-ASBLOCK-62904
United States (US)
CIDR 170.130.128.0/19
Log Date: 31/07/2020 7:43:03 PM UTC |
2020-08-01 08:11:30 |
| 45.55.32.34 | attackspambots | firewall-block, port(s): 4802/tcp |
2020-08-01 08:12:23 |
| 78.85.216.163 | attackspam | Brute forcing RDP port 3389 |
2020-08-01 08:17:12 |
| 187.188.90.141 | attackspam | $f2bV_matches |
2020-08-01 08:39:14 |
| 106.12.212.100 | attackbots | Jul 31 20:49:26 firewall sshd[13412]: Failed password for root from 106.12.212.100 port 51320 ssh2 Jul 31 20:54:23 firewall sshd[13557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.212.100 user=root Jul 31 20:54:24 firewall sshd[13557]: Failed password for root from 106.12.212.100 port 60704 ssh2 ... |
2020-08-01 08:37:14 |
| 14.29.148.201 | attack | Aug 1 02:03:44 pornomens sshd\[5962\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.148.201 user=root Aug 1 02:03:46 pornomens sshd\[5962\]: Failed password for root from 14.29.148.201 port 51730 ssh2 Aug 1 02:18:24 pornomens sshd\[5992\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.148.201 user=root ... |
2020-08-01 08:28:31 |
| 218.92.0.211 | attackspambots | (sshd) Failed SSH login from 218.92.0.211 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 1 05:56:58 amsweb01 sshd[19943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.211 user=root Aug 1 05:57:01 amsweb01 sshd[19943]: Failed password for root from 218.92.0.211 port 35819 ssh2 Aug 1 05:57:03 amsweb01 sshd[19943]: Failed password for root from 218.92.0.211 port 35819 ssh2 Aug 1 05:57:06 amsweb01 sshd[19943]: Failed password for root from 218.92.0.211 port 35819 ssh2 Aug 1 05:58:36 amsweb01 sshd[20208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.211 user=root |
2020-08-01 12:01:36 |
| 114.237.109.30 | attack | Spammer |
2020-08-01 08:13:33 |
| 67.189.245.119 | attack | Port scan detected on ports: 85[TCP], 85[TCP], 85[TCP] |
2020-08-01 08:23:50 |
| 106.54.255.11 | attack | " " |
2020-08-01 08:08:50 |
| 194.87.138.88 | attack | Aug 1 01:04:59 ns382633 sshd\[10546\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.87.138.88 user=root Aug 1 01:05:01 ns382633 sshd\[10546\]: Failed password for root from 194.87.138.88 port 53842 ssh2 Aug 1 01:14:28 ns382633 sshd\[12429\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.87.138.88 user=root Aug 1 01:14:30 ns382633 sshd\[12429\]: Failed password for root from 194.87.138.88 port 37398 ssh2 Aug 1 01:20:17 ns382633 sshd\[13964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.87.138.88 user=root |
2020-08-01 08:27:44 |