城市(city): Beijing
省份(region): Beijing
国家(country): China
运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd.
主机名(hostname): unknown
机构(organization): Shenzhen Tencent Computer Systems Company Limited
使用类型(Usage Type): Data Center/Web Hosting/Transit
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attackspambots | Feb 23 03:22:13 motanud sshd\[30052\]: Invalid user andrew from 139.199.34.112 port 33302 Feb 23 03:22:13 motanud sshd\[30052\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.34.112 Feb 23 03:22:15 motanud sshd\[30052\]: Failed password for invalid user andrew from 139.199.34.112 port 33302 ssh2 |
2019-08-04 14:42:56 |
| attackspambots | SSH-BruteForce |
2019-07-31 14:25:08 |
| attack | Invalid user vsftpd from 139.199.34.112 port 55342 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.34.112 Failed password for invalid user vsftpd from 139.199.34.112 port 55342 ssh2 Invalid user anna from 139.199.34.112 port 36992 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.34.112 |
2019-06-30 12:46:36 |
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 139.199.34.54 | attackbots | May 2 09:56:18 santamaria sshd\[22903\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.34.54 user=root May 2 09:56:20 santamaria sshd\[22903\]: Failed password for root from 139.199.34.54 port 26637 ssh2 May 2 10:01:24 santamaria sshd\[22997\]: Invalid user vel from 139.199.34.54 May 2 10:01:24 santamaria sshd\[22997\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.34.54 ... |
2020-05-02 16:24:21 |
| 139.199.34.54 | attackspam | Apr 30 16:04:41 webhost01 sshd[21041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.34.54 Apr 30 16:04:43 webhost01 sshd[21041]: Failed password for invalid user ratna from 139.199.34.54 port 30154 ssh2 ... |
2020-04-30 17:33:19 |
| 139.199.34.54 | attackbotsspam | Apr 27 06:03:20 h2646465 sshd[789]: Invalid user gene from 139.199.34.54 Apr 27 06:03:20 h2646465 sshd[789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.34.54 Apr 27 06:03:20 h2646465 sshd[789]: Invalid user gene from 139.199.34.54 Apr 27 06:03:22 h2646465 sshd[789]: Failed password for invalid user gene from 139.199.34.54 port 64556 ssh2 Apr 27 06:14:52 h2646465 sshd[2284]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.34.54 user=root Apr 27 06:14:54 h2646465 sshd[2284]: Failed password for root from 139.199.34.54 port 45286 ssh2 Apr 27 06:17:48 h2646465 sshd[2869]: Invalid user ubuntu from 139.199.34.54 Apr 27 06:17:48 h2646465 sshd[2869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.34.54 Apr 27 06:17:48 h2646465 sshd[2869]: Invalid user ubuntu from 139.199.34.54 Apr 27 06:17:51 h2646465 sshd[2869]: Failed password for invalid user ubuntu from 139.199.34. |
2020-04-27 12:48:11 |
| 139.199.34.54 | attack | Apr 18 13:25:30 lanister sshd[31799]: Failed password for invalid user ubuntu from 139.199.34.54 port 11170 ssh2 Apr 18 13:42:23 lanister sshd[32150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.34.54 user=postgres Apr 18 13:42:25 lanister sshd[32150]: Failed password for postgres from 139.199.34.54 port 16947 ssh2 Apr 18 13:49:02 lanister sshd[32260]: Invalid user xv from 139.199.34.54 |
2020-04-19 02:03:48 |
| 139.199.34.54 | attack | Apr 16 14:09:38 eventyay sshd[3617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.34.54 Apr 16 14:09:41 eventyay sshd[3617]: Failed password for invalid user demo from 139.199.34.54 port 39839 ssh2 Apr 16 14:12:40 eventyay sshd[3726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.34.54 ... |
2020-04-16 23:54:12 |
| 139.199.34.54 | attackspam | leo_www |
2020-04-07 13:30:08 |
| 139.199.34.54 | attackbots | Automatic report - SSH Brute-Force Attack |
2020-03-12 03:37:11 |
| 139.199.34.54 | attackbotsspam | Invalid user cpaneleximfilter from 139.199.34.54 port 11931 |
2020-03-11 17:17:46 |
| 139.199.34.54 | attackspambots | SSH bruteforce (Triggered fail2ban) |
2020-03-08 20:26:30 |
| 139.199.34.54 | attack | suspicious action Wed, 26 Feb 2020 15:32:50 -0300 |
2020-02-27 03:30:23 |
| 139.199.34.54 | attackspambots | Invalid user ivan from 139.199.34.54 port 38183 |
2020-02-18 16:33:02 |
| 139.199.34.191 | attack | [SatNov1615:51:48.0385302019][:error][pid2258:tid140571762964224][client139.199.34.191:24201][client139.199.34.191]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\\\\\\\\\(chr\?\\\\\\\\\(\?[0-9]{1\,3}\?\\\\\\\\\)\|\?=\?f\(\?:open\|write\)\?\\\\\\\\\(\|\\\\\\\\b\(\?:passthru\|serialize\|php_uname\|phpinfo\|shell_exec\|preg_\\\\\\\\w \|mysql_query\|exec\|eval\|base64_decode\|decode_base64\|rot13\|base64_url_decode\|gz\(\?:inflate\|decode\|uncompress\)\|strrev\|zlib_\\\\\\\\w \)\\\\\\\\b\?\(\?..."atARGS:admin.[file"/usr/local/apache.ea3/conf/modsec_rules/10_asl_rules.conf"][line"767"][id"340095"][rev"53"][msg"Atomicorp.comWAFRules:AttackBlocked-PHPfunctioninArgument-thismaybeanattack."][data"die\(@md5\,ARGS:admin"][severity"CRITICAL"][hostname"81.17.25.237"][uri"/App.php"][unique_id"XdANBES@OZ7eHP60T7GfSAAAANE"][SatNov1615:52:11.3014982019][:error][pid2171:tid140571855283968][client139.199.34.191:28165][client139.199.34.191]ModSecurity:Accessdeniedwithcode403\(phase2\).Patt |
2019-11-16 23:31:16 |
| 139.199.34.191 | attackspam | ECShop Remote Code Execution Vulnerability, PTR: PTR record not found |
2019-09-08 19:53:02 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.199.34.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31303
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.199.34.112. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019040903 1800 900 604800 86400
;; Query time: 71 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Wed Apr 10 10:28:04 +08 2019
;; MSG SIZE rcvd: 118
Host 112.34.199.139.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.3
Address: 67.207.67.3#53
** server can't find 112.34.199.139.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 148.228.15.4 | attackspambots | ... |
2020-02-02 00:10:47 |
| 125.231.106.171 | attackbotsspam | 1433/tcp [2020-02-01]1pkt |
2020-02-02 00:49:02 |
| 112.85.42.174 | attackbots | Feb 1 23:02:11 webhost01 sshd[12154]: Failed password for root from 112.85.42.174 port 22777 ssh2 Feb 1 23:02:23 webhost01 sshd[12154]: error: maximum authentication attempts exceeded for root from 112.85.42.174 port 22777 ssh2 [preauth] ... |
2020-02-02 00:07:23 |
| 185.39.10.25 | attackspambots | 152/tcp 201/tcp 142/tcp... [2019-12-24/2020-02-01]247pkt,244pt.(tcp) |
2020-02-02 00:05:27 |
| 188.87.101.119 | attack | Unauthorized connection attempt detected from IP address 188.87.101.119 to port 2220 [J] |
2020-02-02 00:51:14 |
| 148.204.211.249 | attackbotsspam | ... |
2020-02-02 00:13:10 |
| 1.162.144.40 | attack | 23/tcp 23/tcp [2020-01-26/02-01]2pkt |
2020-02-02 00:27:57 |
| 18.218.125.17 | attackbotsspam | Forbidden directory scan :: 2020/02/01 13:36:03 [error] 1007#1007: *1280 access forbidden by rule, client: 18.218.125.17, server: [censored_2], request: "HEAD /~onixpw/cfg/AppleID.logln.myaccount.JAZ2834HQSD7Q7SD6Q6SD67QSD5Q7S6D6QSD76QSD67Q67D6QQSJDQLJF HTTP/1.1", host: "[censored_2]" |
2020-02-02 00:34:44 |
| 147.78.152.98 | attackbots | ... |
2020-02-02 00:18:00 |
| 148.245.13.21 | attack | Unauthorized connection attempt detected from IP address 148.245.13.21 to port 2220 [J] |
2020-02-02 00:05:46 |
| 123.140.114.252 | attack | Unauthorized connection attempt detected from IP address 123.140.114.252 to port 2220 [J] |
2020-02-02 00:38:12 |
| 180.251.92.31 | attackspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-02-02 00:11:16 |
| 182.73.45.90 | attackspambots | Honeypot attack, port: 445, PTR: PTR record not found |
2020-02-02 00:36:06 |
| 147.50.3.30 | attackbotsspam | Unauthorized connection attempt detected from IP address 147.50.3.30 to port 2220 [J] |
2020-02-02 00:21:53 |
| 147.135.156.89 | attackbots | ... |
2020-02-02 00:33:44 |