城市(city): unknown
省份(region): unknown
国家(country): Indonesia
运营商(isp): PT. First Media TBK
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): Fixed Line ISP
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/139.194.45.167/ ID - 1H : (36) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : ID NAME ASN : ASN23700 IP : 139.194.45.167 CIDR : 139.194.32.0/19 PREFIX COUNT : 110 UNIQUE IP COUNT : 765440 ATTACKS DETECTED ASN23700 : 1H - 2 3H - 2 6H - 2 12H - 3 24H - 6 DateTime : 2019-11-17 05:58:01 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-17 13:25:37 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.194.45.167
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54314
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.194.45.167. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019111700 1800 900 604800 86400
;; Query time: 167 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Nov 17 13:25:34 CST 2019
;; MSG SIZE rcvd: 118167.45.194.139.in-addr.arpa domain name pointer fm-dyn-139-194-45-167.fast.net.id.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
167.45.194.139.in-addr.arpa name = fm-dyn-139-194-45-167.fast.net.id.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 54.39.104.201 | attackbots | Port scan on 3 port(s): 4085 5095 8060 |
2020-04-27 07:26:12 |
| 104.140.209.135 | attackbotsspam | REQUESTED PAGE: / |
2020-04-27 07:17:42 |
| 3.22.194.250 | attack | mue-0 : Trying access unauthorized files=>/images/jdownloads/screenshots/update.php() |
2020-04-27 07:34:19 |
| 182.61.45.42 | attackbots | k+ssh-bruteforce |
2020-04-27 06:55:26 |
| 46.101.183.105 | attack | Apr 27 01:27:51 mail sshd[21892]: Failed password for root from 46.101.183.105 port 37928 ssh2 Apr 27 01:31:26 mail sshd[22617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.183.105 Apr 27 01:31:27 mail sshd[22617]: Failed password for invalid user administrator from 46.101.183.105 port 49024 ssh2 |
2020-04-27 07:35:22 |
| 51.158.30.15 | attackbots | [2020-04-26 19:18:24] NOTICE[1170][C-00006392] chan_sip.c: Call from '' (51.158.30.15:63916) to extension '71011972592277524' rejected because extension not found in context 'public'. [2020-04-26 19:18:24] SECURITY[1184] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-26T19:18:24.111-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="71011972592277524",SessionID="0x7f6c08545828",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.158.30.15/63916",ACLName="no_extension_match" [2020-04-26 19:22:32] NOTICE[1170][C-0000639f] chan_sip.c: Call from '' (51.158.30.15:54125) to extension '81011972592277524' rejected because extension not found in context 'public'. [2020-04-26 19:22:32] SECURITY[1184] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-26T19:22:32.552-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="81011972592277524",SessionID="0x7f6c080ab528",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4 ... |
2020-04-27 07:28:43 |
| 180.76.237.54 | attackbotsspam | Apr 26 22:22:25 scw-6657dc sshd[18320]: Failed password for root from 180.76.237.54 port 59658 ssh2 Apr 26 22:22:25 scw-6657dc sshd[18320]: Failed password for root from 180.76.237.54 port 59658 ssh2 Apr 26 22:26:19 scw-6657dc sshd[18455]: Invalid user pilot from 180.76.237.54 port 33816 ... |
2020-04-27 07:22:48 |
| 211.159.186.63 | attackbotsspam | Apr 27 00:47:21 legacy sshd[19562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.186.63 Apr 27 00:47:22 legacy sshd[19562]: Failed password for invalid user melo from 211.159.186.63 port 40878 ssh2 Apr 27 00:49:35 legacy sshd[19641]: Failed password for root from 211.159.186.63 port 46012 ssh2 ... |
2020-04-27 07:00:27 |
| 45.55.222.162 | attackspambots | k+ssh-bruteforce |
2020-04-27 07:09:46 |
| 192.241.246.167 | attackbotsspam | Apr 26 22:32:24 srv-ubuntu-dev3 sshd[66179]: Invalid user aree from 192.241.246.167 Apr 26 22:32:24 srv-ubuntu-dev3 sshd[66179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.246.167 Apr 26 22:32:24 srv-ubuntu-dev3 sshd[66179]: Invalid user aree from 192.241.246.167 Apr 26 22:32:26 srv-ubuntu-dev3 sshd[66179]: Failed password for invalid user aree from 192.241.246.167 port 53080 ssh2 Apr 26 22:34:49 srv-ubuntu-dev3 sshd[66579]: Invalid user debug from 192.241.246.167 Apr 26 22:34:49 srv-ubuntu-dev3 sshd[66579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.246.167 Apr 26 22:34:49 srv-ubuntu-dev3 sshd[66579]: Invalid user debug from 192.241.246.167 Apr 26 22:34:51 srv-ubuntu-dev3 sshd[66579]: Failed password for invalid user debug from 192.241.246.167 port 16943 ssh2 Apr 26 22:37:27 srv-ubuntu-dev3 sshd[67067]: Invalid user yang from 192.241.246.167 ... |
2020-04-27 07:25:19 |
| 222.186.42.155 | attack | Apr 26 18:45:56 NPSTNNYC01T sshd[20890]: Failed password for root from 222.186.42.155 port 54623 ssh2 Apr 26 18:46:03 NPSTNNYC01T sshd[20918]: Failed password for root from 222.186.42.155 port 25685 ssh2 ... |
2020-04-27 07:08:11 |
| 192.126.161.27 | attack | REQUESTED PAGE: / |
2020-04-27 07:00:49 |
| 77.65.79.150 | attack | (sshd) Failed SSH login from 77.65.79.150 (PL/Poland/d79-150.icpnet.pl): 5 in the last 3600 secs |
2020-04-27 07:11:39 |
| 222.186.175.215 | attackspam | Apr 27 00:03:34 combo sshd[19253]: Failed password for root from 222.186.175.215 port 26012 ssh2 Apr 27 00:03:37 combo sshd[19253]: Failed password for root from 222.186.175.215 port 26012 ssh2 Apr 27 00:03:41 combo sshd[19253]: Failed password for root from 222.186.175.215 port 26012 ssh2 ... |
2020-04-27 07:07:39 |
| 106.54.214.101 | attackbotsspam | Port scan detected on ports: 1433[TCP], 1433[TCP], 65529[TCP] |
2020-04-27 07:33:51 |