城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 139.199.104.65 | attackbotsspam | firewall-block, port(s): 28010/tcp |
2020-09-25 11:22:59 |
| 139.199.104.65 | attackspam | Jun 23 07:49:51 ns381471 sshd[30724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.104.65 Jun 23 07:49:53 ns381471 sshd[30724]: Failed password for invalid user zsy from 139.199.104.65 port 58588 ssh2 |
2020-06-23 15:39:02 |
| 139.199.104.65 | attackbots | (sshd) Failed SSH login from 139.199.104.65 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 9 23:09:20 s1 sshd[16584]: Invalid user webmaster from 139.199.104.65 port 35356 Jun 9 23:09:22 s1 sshd[16584]: Failed password for invalid user webmaster from 139.199.104.65 port 35356 ssh2 Jun 9 23:17:59 s1 sshd[16724]: Invalid user kanejima from 139.199.104.65 port 42226 Jun 9 23:18:02 s1 sshd[16724]: Failed password for invalid user kanejima from 139.199.104.65 port 42226 ssh2 Jun 9 23:20:59 s1 sshd[16787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.104.65 user=root |
2020-06-10 04:26:56 |
| 139.199.104.65 | attackbotsspam | Triggered by Fail2Ban at Ares web server |
2020-06-06 07:41:27 |
| 139.199.104.217 | attackspambots | 2020-06-03T05:38:00.179011struts4.enskede.local sshd\[7426\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.104.217 user=root 2020-06-03T05:38:03.339478struts4.enskede.local sshd\[7426\]: Failed password for root from 139.199.104.217 port 60584 ssh2 2020-06-03T05:44:34.592346struts4.enskede.local sshd\[7453\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.104.217 user=root 2020-06-03T05:44:36.887063struts4.enskede.local sshd\[7453\]: Failed password for root from 139.199.104.217 port 46636 ssh2 2020-06-03T05:47:50.904908struts4.enskede.local sshd\[7463\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.104.217 user=root ... |
2020-06-03 19:19:09 |
| 139.199.104.217 | attackbotsspam | May 27 15:18:45 mx sshd[12129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.104.217 May 27 15:18:46 mx sshd[12129]: Failed password for invalid user cactiuser from 139.199.104.217 port 59520 ssh2 |
2020-05-28 06:04:48 |
| 139.199.104.65 | attackbotsspam | May 25 12:15:20 *** sshd[5645]: User root from 139.199.104.65 not allowed because not listed in AllowUsers |
2020-05-25 23:34:05 |
| 139.199.104.65 | attack | May 23 19:16:43 firewall sshd[14536]: Invalid user bcq from 139.199.104.65 May 23 19:16:45 firewall sshd[14536]: Failed password for invalid user bcq from 139.199.104.65 port 46416 ssh2 May 23 19:18:05 firewall sshd[14573]: Invalid user lvf from 139.199.104.65 ... |
2020-05-24 06:37:03 |
| 139.199.104.65 | attackbots | May 23 11:27:32 inter-technics sshd[4224]: Invalid user ndp from 139.199.104.65 port 34644 May 23 11:27:32 inter-technics sshd[4224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.104.65 May 23 11:27:32 inter-technics sshd[4224]: Invalid user ndp from 139.199.104.65 port 34644 May 23 11:27:34 inter-technics sshd[4224]: Failed password for invalid user ndp from 139.199.104.65 port 34644 ssh2 May 23 11:31:41 inter-technics sshd[4497]: Invalid user nah from 139.199.104.65 port 52952 ... |
2020-05-23 18:56:50 |
| 139.199.104.217 | attackspam | May 22 15:50:20 lukav-desktop sshd\[18866\]: Invalid user cdv from 139.199.104.217 May 22 15:50:20 lukav-desktop sshd\[18866\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.104.217 May 22 15:50:22 lukav-desktop sshd\[18866\]: Failed password for invalid user cdv from 139.199.104.217 port 43480 ssh2 May 22 15:54:08 lukav-desktop sshd\[18936\]: Invalid user kstrive from 139.199.104.217 May 22 15:54:08 lukav-desktop sshd\[18936\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.104.217 |
2020-05-23 03:35:59 |
| 139.199.104.217 | attack | 2020-05-21T16:45:04.486323abusebot-6.cloudsearch.cf sshd[4258]: Invalid user aab from 139.199.104.217 port 59156 2020-05-21T16:45:04.495006abusebot-6.cloudsearch.cf sshd[4258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.104.217 2020-05-21T16:45:04.486323abusebot-6.cloudsearch.cf sshd[4258]: Invalid user aab from 139.199.104.217 port 59156 2020-05-21T16:45:07.169643abusebot-6.cloudsearch.cf sshd[4258]: Failed password for invalid user aab from 139.199.104.217 port 59156 ssh2 2020-05-21T16:49:09.640616abusebot-6.cloudsearch.cf sshd[4467]: Invalid user fin from 139.199.104.217 port 45508 2020-05-21T16:49:09.646958abusebot-6.cloudsearch.cf sshd[4467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.104.217 2020-05-21T16:49:09.640616abusebot-6.cloudsearch.cf sshd[4467]: Invalid user fin from 139.199.104.217 port 45508 2020-05-21T16:49:11.956197abusebot-6.cloudsearch.cf sshd[4467]: Failed pas ... |
2020-05-22 01:54:31 |
| 139.199.104.65 | attackbotsspam | May 11 16:30:07 vps639187 sshd\[16244\]: Invalid user mongodb from 139.199.104.65 port 34170 May 11 16:30:07 vps639187 sshd\[16244\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.104.65 May 11 16:30:08 vps639187 sshd\[16244\]: Failed password for invalid user mongodb from 139.199.104.65 port 34170 ssh2 ... |
2020-05-12 01:27:59 |
| 139.199.104.65 | attack | (sshd) Failed SSH login from 139.199.104.65 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 8 09:08:22 amsweb01 sshd[10098]: Invalid user cristian from 139.199.104.65 port 58826 May 8 09:08:25 amsweb01 sshd[10098]: Failed password for invalid user cristian from 139.199.104.65 port 58826 ssh2 May 8 09:22:16 amsweb01 sshd[11353]: Invalid user sebi from 139.199.104.65 port 56792 May 8 09:22:18 amsweb01 sshd[11353]: Failed password for invalid user sebi from 139.199.104.65 port 56792 ssh2 May 8 09:34:10 amsweb01 sshd[12376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.104.65 user=root |
2020-05-08 17:18:17 |
| 139.199.104.65 | attack | Invalid user facai from 139.199.104.65 port 33338 |
2020-05-03 20:13:15 |
| 139.199.104.65 | attackbotsspam | 2020-05-02T19:02:38.118983abusebot-3.cloudsearch.cf sshd[7399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.104.65 user=root 2020-05-02T19:02:39.835584abusebot-3.cloudsearch.cf sshd[7399]: Failed password for root from 139.199.104.65 port 54982 ssh2 2020-05-02T19:07:36.838190abusebot-3.cloudsearch.cf sshd[7701]: Invalid user rabbitmq from 139.199.104.65 port 54894 2020-05-02T19:07:36.846718abusebot-3.cloudsearch.cf sshd[7701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.104.65 2020-05-02T19:07:36.838190abusebot-3.cloudsearch.cf sshd[7701]: Invalid user rabbitmq from 139.199.104.65 port 54894 2020-05-02T19:07:39.140237abusebot-3.cloudsearch.cf sshd[7701]: Failed password for invalid user rabbitmq from 139.199.104.65 port 54894 ssh2 2020-05-02T19:12:32.045443abusebot-3.cloudsearch.cf sshd[7995]: Invalid user lzy from 139.199.104.65 port 54816 ... |
2020-05-03 03:42:55 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.104.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57852
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.199.104.8. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022200 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 22 17:11:48 CST 2025
;; MSG SIZE rcvd: 106Host 8.104.199.139.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 8.104.199.139.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 192.241.234.83 | attackspam | 2020-10-02 12:47:21 wonderland sendmail[17554]: 092AlLK8017554: rejecting commands from zg-0915a-294.stretchoid.com [192.241.234.83] due to pre-greeting traffic after 0 seconds |
2020-10-02 22:03:18 |
| 118.100.24.79 | attackbotsspam | Oct 2 13:26:58 XXX sshd[1582]: Invalid user contact from 118.100.24.79 port 41954 |
2020-10-02 22:00:56 |
| 185.242.85.136 | attackspambots | Phishing Attack |
2020-10-02 22:09:06 |
| 182.61.36.44 | attackbots | Oct 2 13:02:03 rocket sshd[20434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.36.44 Oct 2 13:02:05 rocket sshd[20434]: Failed password for invalid user password from 182.61.36.44 port 59128 ssh2 ... |
2020-10-02 21:59:22 |
| 5.8.10.202 | attackbots |
|
2020-10-02 22:24:10 |
| 210.4.106.130 | attackbotsspam | 445/tcp 445/tcp 445/tcp... [2020-08-07/10-01]9pkt,1pt.(tcp) |
2020-10-02 22:24:30 |
| 122.155.93.23 | attackspam | 1433/tcp 1433/tcp 1433/tcp [2020-08-28/10-01]3pkt |
2020-10-02 22:33:24 |
| 41.72.197.182 | attackbots | SSH login attempts. |
2020-10-02 22:32:36 |
| 140.143.127.36 | attackspam | SSH invalid-user multiple login try |
2020-10-02 22:27:47 |
| 178.128.22.249 | attack | Oct 1 16:53:48 NPSTNNYC01T sshd[31731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.22.249 Oct 1 16:53:50 NPSTNNYC01T sshd[31731]: Failed password for invalid user ftpuser from 178.128.22.249 port 37031 ssh2 Oct 1 17:01:06 NPSTNNYC01T sshd[32191]: Failed password for root from 178.128.22.249 port 54285 ssh2 ... |
2020-10-02 22:13:47 |
| 106.12.18.125 | attackspam | Oct 2 11:44:06 |
2020-10-02 21:56:08 |
| 89.248.171.97 | attackspambots | Port scanning [2 denied] |
2020-10-02 22:14:46 |
| 35.232.22.47 | attack | 35.232.22.47 - - - [02/Oct/2020:10:48:48 +0200] "GET /.env HTTP/1.1" 404 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "-" "-" |
2020-10-02 22:02:40 |
| 203.142.70.26 | attackspam | 445/tcp 445/tcp 445/tcp... [2020-08-29/10-01]4pkt,1pt.(tcp) |
2020-10-02 22:25:58 |
| 139.155.86.214 | attack | SSH Brute-Forcing (server1) |
2020-10-02 22:30:55 |