城市(city): Jakarta
省份(region): Jakarta
国家(country): Indonesia
运营商(isp): PT. First Media TBK
主机名(hostname): unknown
机构(organization): Linknet ASN
使用类型(Usage Type): Fixed Line ISP
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attackbots | 445/tcp [2019-07-30]1pkt |
2019-07-31 03:27:38 |
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 139.255.52.58 | attackbotsspam | 445/tcp [2020-10-03]1pkt |
2020-10-05 08:03:32 |
| 139.255.52.58 | attackbotsspam | 445/tcp [2020-10-03]1pkt |
2020-10-05 00:25:34 |
| 139.255.52.58 | attackbotsspam | 445/tcp [2020-10-03]1pkt |
2020-10-04 16:08:24 |
| 139.255.52.218 | attackspam | Unauthorized connection attempt from IP address 139.255.52.218 on Port 445(SMB) |
2020-02-08 04:49:50 |
| 139.255.52.203 | attack | 2019-07-09 06:35:35 1hkhqo-0006V5-70 SMTP connection from \(ln-static-139-255-52-203.link.net.id\) \[139.255.52.203\]:39249 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-09 06:35:46 1hkhqz-0006VG-2e SMTP connection from \(ln-static-139-255-52-203.link.net.id\) \[139.255.52.203\]:36139 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-09 06:35:54 1hkhr7-0006VN-HF SMTP connection from \(ln-static-139-255-52-203.link.net.id\) \[139.255.52.203\]:48745 I=\[193.107.88.166\]:25 closed by DROP in ACL ... |
2020-02-05 00:47:16 |
| 139.255.52.98 | attackbotsspam | Unauthorized connection attempt from IP address 139.255.52.98 on Port 445(SMB) |
2020-01-17 23:50:34 |
| 139.255.52.203 | attackbots | Mail sent to address hacked/leaked from Last.fm |
2019-07-15 14:19:36 |
| 139.255.52.218 | attackspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-06 00:20:46,229 INFO [shellcode_manager] (139.255.52.218) no match, writing hexdump (7edbc2fd47b865f111efd673b193f6b5 :2164185) - MS17010 (EternalBlue) |
2019-07-06 13:28:06 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.255.52.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34982
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.255.52.68. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019073002 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 31 03:27:32 CST 2019
;; MSG SIZE rcvd: 117
68.52.255.139.in-addr.arpa domain name pointer ln-static-139-255-52-68.link.net.id.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
68.52.255.139.in-addr.arpa name = ln-static-139-255-52-68.link.net.id.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 46.38.144.57 | attackspambots | Dec 23 00:37:31 ns3367391 postfix/smtpd[18134]: warning: unknown[46.38.144.57]: SASL LOGIN authentication failed: authentication failure Dec 23 00:38:59 ns3367391 postfix/smtpd[18134]: warning: unknown[46.38.144.57]: SASL LOGIN authentication failed: authentication failure ... |
2019-12-23 07:45:48 |
| 222.186.175.151 | attackspam | Dec 23 05:01:36 gw1 sshd[19406]: Failed password for root from 222.186.175.151 port 28258 ssh2 Dec 23 05:01:39 gw1 sshd[19406]: Failed password for root from 222.186.175.151 port 28258 ssh2 ... |
2019-12-23 08:05:49 |
| 123.140.114.252 | attackbots | Dec 22 23:51:58 h2177944 sshd\[10506\]: Failed password for invalid user newhoff from 123.140.114.252 port 38502 ssh2 Dec 23 00:52:09 h2177944 sshd\[14027\]: Invalid user snart from 123.140.114.252 port 59528 Dec 23 00:52:09 h2177944 sshd\[14027\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.140.114.252 Dec 23 00:52:12 h2177944 sshd\[14027\]: Failed password for invalid user snart from 123.140.114.252 port 59528 ssh2 ... |
2019-12-23 07:59:53 |
| 181.129.161.28 | attackbots | Dec 23 06:23:04 webhost01 sshd[25136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.129.161.28 Dec 23 06:23:06 webhost01 sshd[25136]: Failed password for invalid user nerina from 181.129.161.28 port 41254 ssh2 ... |
2019-12-23 07:58:21 |
| 123.152.121.5 | attackspambots | Automatic report - FTP Brute Force |
2019-12-23 07:41:47 |
| 49.88.112.59 | attackbotsspam | Unauthorized connection attempt detected from IP address 49.88.112.59 to port 22 |
2019-12-23 07:51:01 |
| 190.8.80.42 | attack | Invalid user osaze from 190.8.80.42 port 51578 |
2019-12-23 08:06:14 |
| 197.156.92.153 | attack | $f2bV_matches |
2019-12-23 07:36:06 |
| 202.131.126.142 | attackbotsspam | Dec 22 23:22:12 game-panel sshd[18281]: Failed password for bin from 202.131.126.142 port 55404 ssh2 Dec 22 23:28:11 game-panel sshd[18554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.131.126.142 Dec 22 23:28:14 game-panel sshd[18554]: Failed password for invalid user vladamir from 202.131.126.142 port 60900 ssh2 |
2019-12-23 07:37:57 |
| 103.36.84.100 | attackspam | Dec 22 18:05:35 ny01 sshd[32300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.36.84.100 Dec 22 18:05:36 ny01 sshd[32300]: Failed password for invalid user mumbleserver from 103.36.84.100 port 46146 ssh2 Dec 22 18:12:01 ny01 sshd[438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.36.84.100 |
2019-12-23 07:30:53 |
| 105.100.71.50 | attackbotsspam | Attempts to probe for or exploit a Drupal 7.67 site on url: /wp-login.php. Reported by the module https://www.drupal.org/project/abuseipdb. |
2019-12-23 07:49:13 |
| 51.68.231.103 | attack | Dec 23 01:45:14 server sshd\[487\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.ip-51-68-231.eu user=root Dec 23 01:45:16 server sshd\[487\]: Failed password for root from 51.68.231.103 port 59082 ssh2 Dec 23 01:52:00 server sshd\[2152\]: Invalid user charle from 51.68.231.103 Dec 23 01:52:00 server sshd\[2152\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.ip-51-68-231.eu Dec 23 01:52:02 server sshd\[2152\]: Failed password for invalid user charle from 51.68.231.103 port 57766 ssh2 ... |
2019-12-23 07:53:48 |
| 152.136.191.138 | attackbots | Dec 22 23:52:17 lnxmysql61 sshd[2594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.191.138 |
2019-12-23 07:39:12 |
| 222.186.175.183 | attack | Dec 23 04:29:26 gw1 sshd[18226]: Failed password for root from 222.186.175.183 port 61022 ssh2 Dec 23 04:29:39 gw1 sshd[18226]: error: maximum authentication attempts exceeded for root from 222.186.175.183 port 61022 ssh2 [preauth] ... |
2019-12-23 07:38:36 |
| 182.254.151.66 | attack | 20 attempts against mh-ssh on cloud.magehost.pro |
2019-12-23 07:49:43 |