城市(city): unknown
省份(region): unknown
国家(country): Canada
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 139.99.120.194 | attack | firewall-block, port(s): 8001/tcp |
2020-10-14 08:54:02 |
| 139.99.120.194 | attackbots |
|
2020-09-27 03:10:29 |
| 139.99.120.194 | attackbotsspam | " " |
2020-09-26 19:08:07 |
| 139.99.120.130 | attack | 5x Failed Password |
2020-09-05 04:15:07 |
| 139.99.120.130 | attackspam | 5x Failed Password |
2020-09-04 19:49:59 |
| 139.99.120.194 | attack | *Port Scan* detected from 139.99.120.194 (SG/Singapore/-/Singapore (Downtown Core)/ns558209.ip-139-99-120.net). 4 hits in the last 75 seconds |
2020-09-01 08:16:19 |
| 139.99.120.194 | attackspam | scans 35 times in preceeding hours on the ports (in chronological order) 2006 2007 2008 2009 2010 2010 2012 2013 2014 2015 2016 2017 2018 2021 2026 2027 2028 2029 2030 2031 2032 2010 2034 2035 2036 2037 2038 2039 2040 2041 2042 2043 2044 2045 2046 |
2020-08-26 23:59:05 |
| 139.99.120.130 | attackspambots | 'Fail2Ban' |
2020-08-20 01:20:19 |
| 139.99.120.130 | attack | Jul 9 11:55:52 nas sshd[1870]: Failed password for root from 139.99.120.130 port 36984 ssh2 Jul 9 11:55:55 nas sshd[1870]: Failed password for root from 139.99.120.130 port 36984 ssh2 Jul 9 11:55:57 nas sshd[1870]: Failed password for root from 139.99.120.130 port 36984 ssh2 Jul 9 11:56:00 nas sshd[1870]: Failed password for root from 139.99.120.130 port 36984 ssh2 ... |
2020-07-09 18:08:46 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.99.120.237
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17496
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.99.120.237. IN A
;; AUTHORITY SECTION:
. 100 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021801 1800 900 604800 86400
;; Query time: 43 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 19 03:38:21 CST 2022
;; MSG SIZE rcvd: 107237.120.99.139.in-addr.arpa domain name pointer sgprm50.fastcpanelserver.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
237.120.99.139.in-addr.arpa name = sgprm50.fastcpanelserver.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 49.37.203.119 | attack | 1591184868 - 06/03/2020 13:47:48 Host: 49.37.203.119/49.37.203.119 Port: 445 TCP Blocked |
2020-06-04 03:21:20 |
| 218.69.16.26 | attackspam | prod11 ... |
2020-06-04 03:08:32 |
| 39.62.53.19 | attackbotsspam | Automatic report - Port Scan Attack |
2020-06-04 02:53:11 |
| 37.49.226.157 | attackbotsspam | Jun 3 20:56:13 h2779839 sshd[12509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.49.226.157 user=root Jun 3 20:56:15 h2779839 sshd[12509]: Failed password for root from 37.49.226.157 port 42012 ssh2 Jun 3 20:56:40 h2779839 sshd[12513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.49.226.157 user=root Jun 3 20:56:41 h2779839 sshd[12513]: Failed password for root from 37.49.226.157 port 41524 ssh2 Jun 3 20:57:08 h2779839 sshd[12519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.49.226.157 user=root Jun 3 20:57:10 h2779839 sshd[12519]: Failed password for root from 37.49.226.157 port 40912 ssh2 Jun 3 20:57:34 h2779839 sshd[12546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.49.226.157 user=root Jun 3 20:57:36 h2779839 sshd[12546]: Failed password for root from 37.49.226.157 port 40426 ssh2 Jun ... |
2020-06-04 02:59:04 |
| 54.38.240.23 | attackbotsspam | Jun 3 14:27:20 firewall sshd[4961]: Failed password for root from 54.38.240.23 port 38228 ssh2 Jun 3 14:30:46 firewall sshd[5111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.240.23 user=root Jun 3 14:30:48 firewall sshd[5111]: Failed password for root from 54.38.240.23 port 42910 ssh2 ... |
2020-06-04 03:18:33 |
| 192.236.194.123 | attackspam | Telnet Server BruteForce Attack |
2020-06-04 03:06:57 |
| 46.101.137.182 | attack | Jun 3 07:58:02 Tower sshd[13583]: Connection from 46.101.137.182 port 55889 on 192.168.10.220 port 22 rdomain "" Jun 3 07:58:19 Tower sshd[13583]: Failed password for root from 46.101.137.182 port 55889 ssh2 Jun 3 07:58:19 Tower sshd[13583]: Received disconnect from 46.101.137.182 port 55889:11: Bye Bye [preauth] Jun 3 07:58:19 Tower sshd[13583]: Disconnected from authenticating user root 46.101.137.182 port 55889 [preauth] |
2020-06-04 03:15:46 |
| 138.197.5.123 | attackbotsspam | 2020-06-03T20:26:03.420295hz01.yumiweb.com sshd\[20906\]: Invalid user user2 from 138.197.5.123 port 54660 2020-06-03T20:28:28.553886hz01.yumiweb.com sshd\[20908\]: Invalid user user3 from 138.197.5.123 port 34916 2020-06-03T20:30:53.920336hz01.yumiweb.com sshd\[20925\]: Invalid user user4 from 138.197.5.123 port 38972 ... |
2020-06-04 03:30:51 |
| 109.199.91.58 | attack | Automatic report - Banned IP Access |
2020-06-04 03:29:33 |
| 159.89.194.160 | attackspambots | Jun 3 17:24:51 ip-172-31-61-156 sshd[7008]: Failed password for root from 159.89.194.160 port 33582 ssh2 Jun 3 17:28:36 ip-172-31-61-156 sshd[7194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.194.160 user=root Jun 3 17:28:38 ip-172-31-61-156 sshd[7194]: Failed password for root from 159.89.194.160 port 37322 ssh2 Jun 3 17:28:36 ip-172-31-61-156 sshd[7194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.194.160 user=root Jun 3 17:28:38 ip-172-31-61-156 sshd[7194]: Failed password for root from 159.89.194.160 port 37322 ssh2 ... |
2020-06-04 03:19:50 |
| 121.122.49.234 | attack | Jun 3 14:51:05 sip sshd[521721]: Failed password for root from 121.122.49.234 port 49868 ssh2 Jun 3 14:53:48 sip sshd[521763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.122.49.234 user=root Jun 3 14:53:50 sip sshd[521763]: Failed password for root from 121.122.49.234 port 40248 ssh2 ... |
2020-06-04 03:12:50 |
| 36.43.65.28 | attackspambots | Port scan on 1 port(s): 23 |
2020-06-04 02:54:04 |
| 5.173.32.4 | attackbotsspam | xmlrpc attack |
2020-06-04 03:19:00 |
| 219.153.100.153 | attackbots | Jun 3 20:26:25 jane sshd[2388]: Failed password for root from 219.153.100.153 port 45698 ssh2 ... |
2020-06-04 02:56:55 |
| 45.143.220.246 | attackspambots | Lines containing failures of 45.143.220.246 (max 1000) Jun 2 12:35:04 UTC__SANYALnet-Labs__cac1 sshd[32142]: Connection from 45.143.220.246 port 37892 on 64.137.179.160 port 22 Jun 2 12:35:04 UTC__SANYALnet-Labs__cac1 sshd[32143]: Connection from 45.143.220.246 port 37930 on 64.137.179.160 port 22 Jun 2 12:35:04 UTC__SANYALnet-Labs__cac1 sshd[32141]: Connection from 45.143.220.246 port 37925 on 64.137.179.160 port 22 Jun 2 12:35:04 UTC__SANYALnet-Labs__cac1 sshd[32144]: Connection from 45.143.220.246 port 37882 on 64.137.179.160 port 22 Jun 2 12:35:04 UTC__SANYALnet-Labs__cac1 sshd[32142]: Invalid user ubnt from 45.143.220.246 port 37892 Jun 2 12:35:04 UTC__SANYALnet-Labs__cac1 sshd[32141]: Invalid user admin from 45.143.220.246 port 37925 Jun 2 12:35:04 UTC__SANYALnet-Labs__cac1 sshd[32143]: User r.r from 45.143.220.246 not allowed because not listed in AllowUsers Jun 2 12:35:04 UTC__SANYALnet-Labs__cac1 sshd[32144]: User r.r from 45.143.220.246 not allowed beca........ ------------------------------ |
2020-06-04 03:29:53 |