城市(city): Asunción
省份(region): Asuncion
国家(country): Paraguay
运营商(isp): E-Life Paraguay S.A.
主机名(hostname): unknown
机构(organization): E-life Paraguay S.A.
使用类型(Usage Type): Fixed Line ISP
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attackbotsspam | Oct 5 13:00:03 cp sshd[3971]: Failed password for root from 200.108.139.242 port 55076 ssh2 Oct 5 13:03:43 cp sshd[6376]: Failed password for root from 200.108.139.242 port 46112 ssh2 |
2020-10-06 02:36:18 |
| attack | 5x Failed Password |
2020-10-05 18:24:22 |
| attackbotsspam | SSH / Telnet Brute Force Attempts on Honeypot |
2020-10-04 08:16:25 |
| attack | 2020-10-03T23:04:24.374094hostname sshd[63591]: Invalid user testing from 200.108.139.242 port 55036 ... |
2020-10-04 00:42:33 |
| attack | Oct 3 04:07:43 lanister sshd[16240]: Invalid user jake from 200.108.139.242 Oct 3 04:07:43 lanister sshd[16240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 Oct 3 04:07:43 lanister sshd[16240]: Invalid user jake from 200.108.139.242 Oct 3 04:07:46 lanister sshd[16240]: Failed password for invalid user jake from 200.108.139.242 port 57422 ssh2 |
2020-10-03 16:32:07 |
| attackbots | Sep 6 12:32:33 plg sshd[16546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 Sep 6 12:32:36 plg sshd[16546]: Failed password for invalid user luthor from 200.108.139.242 port 59930 ssh2 Sep 6 12:35:41 plg sshd[16592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 user=root Sep 6 12:35:42 plg sshd[16592]: Failed password for invalid user root from 200.108.139.242 port 53605 ssh2 Sep 6 12:38:49 plg sshd[16645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 user=root Sep 6 12:38:51 plg sshd[16645]: Failed password for invalid user root from 200.108.139.242 port 47277 ssh2 Sep 6 12:41:59 plg sshd[16743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 user=root ... |
2020-09-07 01:20:55 |
| attackspam | Sep 6 10:27:41 plg sshd[14702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 user=root Sep 6 10:27:43 plg sshd[14702]: Failed password for invalid user root from 200.108.139.242 port 52592 ssh2 Sep 6 10:30:58 plg sshd[14743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 user=root Sep 6 10:31:00 plg sshd[14743]: Failed password for invalid user root from 200.108.139.242 port 46263 ssh2 Sep 6 10:34:16 plg sshd[14781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 user=root Sep 6 10:34:18 plg sshd[14781]: Failed password for invalid user root from 200.108.139.242 port 39935 ssh2 Sep 6 10:37:25 plg sshd[14809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 user=root ... |
2020-09-06 16:42:25 |
| attack | 2020-09-05T13:09:15.437293morrigan.ad5gb.com sshd[1253523]: Failed password for root from 200.108.139.242 port 35145 ssh2 2020-09-05T13:09:16.074877morrigan.ad5gb.com sshd[1253523]: Disconnected from authenticating user root 200.108.139.242 port 35145 [preauth] |
2020-09-06 08:42:31 |
| attackbotsspam | (sshd) Failed SSH login from 200.108.139.242 (PY/Paraguay/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 3 09:45:10 server sshd[31869]: Invalid user git from 200.108.139.242 port 51073 Sep 3 09:45:12 server sshd[31869]: Failed password for invalid user git from 200.108.139.242 port 51073 ssh2 Sep 3 09:53:35 server sshd[1660]: Invalid user admin from 200.108.139.242 port 45010 Sep 3 09:53:38 server sshd[1660]: Failed password for invalid user admin from 200.108.139.242 port 45010 ssh2 Sep 3 09:58:22 server sshd[3032]: Invalid user server from 200.108.139.242 port 48578 |
2020-09-04 01:02:28 |
| attackspam | SSH / Telnet Brute Force Attempts on Honeypot |
2020-09-03 16:25:56 |
| attackspam | SSH / Telnet Brute Force Attempts on Honeypot |
2020-09-03 08:34:59 |
| attackbotsspam | Aug 25 11:48:51 XXX sshd[23405]: Invalid user backup from 200.108.139.242 port 33902 |
2020-08-25 20:54:33 |
| attackspam | Aug 19 03:55:54 IngegnereFirenze sshd[24555]: Failed password for invalid user postgres from 200.108.139.242 port 37062 ssh2 ... |
2020-08-19 12:46:41 |
| attack | 2020-08-16T15:31:24.274094abusebot-5.cloudsearch.cf sshd[21331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 user=root 2020-08-16T15:31:26.214830abusebot-5.cloudsearch.cf sshd[21331]: Failed password for root from 200.108.139.242 port 60908 ssh2 2020-08-16T15:36:12.942414abusebot-5.cloudsearch.cf sshd[21341]: Invalid user karla from 200.108.139.242 port 36474 2020-08-16T15:36:12.947602abusebot-5.cloudsearch.cf sshd[21341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 2020-08-16T15:36:12.942414abusebot-5.cloudsearch.cf sshd[21341]: Invalid user karla from 200.108.139.242 port 36474 2020-08-16T15:36:14.757841abusebot-5.cloudsearch.cf sshd[21341]: Failed password for invalid user karla from 200.108.139.242 port 36474 ssh2 2020-08-16T15:40:55.819254abusebot-5.cloudsearch.cf sshd[21401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhos ... |
2020-08-17 01:55:43 |
| attackspambots | Ssh brute force |
2020-08-08 08:23:26 |
| attackspam | Aug 5 09:19:05 server sshd[5368]: Failed password for root from 200.108.139.242 port 47476 ssh2 Aug 5 09:24:15 server sshd[13213]: Failed password for root from 200.108.139.242 port 53237 ssh2 Aug 5 09:29:25 server sshd[20255]: Failed password for root from 200.108.139.242 port 58996 ssh2 |
2020-08-05 16:01:06 |
| attack | Jul 16 05:55:18 nextcloud sshd\[24546\]: Invalid user uftp from 200.108.139.242 Jul 16 05:55:18 nextcloud sshd\[24546\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 Jul 16 05:55:20 nextcloud sshd\[24546\]: Failed password for invalid user uftp from 200.108.139.242 port 35026 ssh2 |
2020-07-16 12:38:33 |
| attackspam | $f2bV_matches |
2020-07-07 14:12:14 |
| attack | Invalid user ubnt from 200.108.139.242 port 34303 |
2020-06-20 18:44:45 |
| attackbots | Jun 16 08:41:48 server sshd[30290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 Jun 16 08:41:50 server sshd[30290]: Failed password for invalid user ts3 from 200.108.139.242 port 44358 ssh2 Jun 16 08:45:51 server sshd[30630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 ... |
2020-06-16 15:58:11 |
| attack | May 28 22:03:47 santamaria sshd\[25413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 user=root May 28 22:03:49 santamaria sshd\[25413\]: Failed password for root from 200.108.139.242 port 39514 ssh2 May 28 22:08:15 santamaria sshd\[25459\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 user=root ... |
2020-05-29 06:12:47 |
| attackspam | 2020-05-27T10:10:10.260286vps751288.ovh.net sshd\[25101\]: Invalid user yellow from 200.108.139.242 port 35761 2020-05-27T10:10:10.268724vps751288.ovh.net sshd\[25101\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 2020-05-27T10:10:12.026494vps751288.ovh.net sshd\[25101\]: Failed password for invalid user yellow from 200.108.139.242 port 35761 ssh2 2020-05-27T10:13:47.658919vps751288.ovh.net sshd\[25173\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 user=root 2020-05-27T10:13:49.873495vps751288.ovh.net sshd\[25173\]: Failed password for root from 200.108.139.242 port 32860 ssh2 |
2020-05-27 17:09:36 |
| attackbotsspam | May 14 12:31:51 *** sshd[16159]: Invalid user aeltie from 200.108.139.242 |
2020-05-14 22:29:10 |
| attack | May 5 06:20:46 vps46666688 sshd[27391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 May 5 06:20:48 vps46666688 sshd[27391]: Failed password for invalid user lisp from 200.108.139.242 port 58021 ssh2 ... |
2020-05-05 17:51:03 |
| attackspam | Apr 16 03:50:45 game-panel sshd[29059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 Apr 16 03:50:47 game-panel sshd[29059]: Failed password for invalid user oracle from 200.108.139.242 port 41812 ssh2 Apr 16 03:55:17 game-panel sshd[29249]: Failed password for root from 200.108.139.242 port 45610 ssh2 |
2020-04-16 13:08:50 |
| attackbotsspam | Apr 11 06:34:07 rotator sshd\[2604\]: Failed password for root from 200.108.139.242 port 48619 ssh2Apr 11 06:36:29 rotator sshd\[3414\]: Failed password for root from 200.108.139.242 port 35055 ssh2Apr 11 06:38:29 rotator sshd\[3461\]: Failed password for root from 200.108.139.242 port 49069 ssh2Apr 11 06:40:26 rotator sshd\[4256\]: Invalid user mysql from 200.108.139.242Apr 11 06:40:28 rotator sshd\[4256\]: Failed password for invalid user mysql from 200.108.139.242 port 34862 ssh2Apr 11 06:42:31 rotator sshd\[4298\]: Failed password for root from 200.108.139.242 port 48878 ssh2 ... |
2020-04-11 13:39:59 |
| attack | Apr 8 15:51:51 ip-172-31-61-156 sshd[12311]: Failed password for invalid user sahil from 200.108.139.242 port 37393 ssh2 Apr 8 15:56:29 ip-172-31-61-156 sshd[12575]: Invalid user user from 200.108.139.242 Apr 8 15:56:29 ip-172-31-61-156 sshd[12575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 Apr 8 15:56:29 ip-172-31-61-156 sshd[12575]: Invalid user user from 200.108.139.242 Apr 8 15:56:30 ip-172-31-61-156 sshd[12575]: Failed password for invalid user user from 200.108.139.242 port 40078 ssh2 ... |
2020-04-09 01:39:14 |
| attackspambots | 2020-03-11T10:38:50.623687shield sshd\[4361\]: Invalid user QWE!@\#ZXC from 200.108.139.242 port 38617 2020-03-11T10:38:50.629550shield sshd\[4361\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 2020-03-11T10:38:52.710017shield sshd\[4361\]: Failed password for invalid user QWE!@\#ZXC from 200.108.139.242 port 38617 ssh2 2020-03-11T10:43:08.563699shield sshd\[5124\]: Invalid user miro from 200.108.139.242 port 41344 2020-03-11T10:43:08.567314shield sshd\[5124\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 |
2020-03-11 23:36:10 |
| attackspam | Feb 26 19:17:01 MK-Soft-Root1 sshd[29898]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 Feb 26 19:17:03 MK-Soft-Root1 sshd[29898]: Failed password for invalid user trung from 200.108.139.242 port 43572 ssh2 ... |
2020-02-27 02:41:52 |
| attackbotsspam | Jan 9 10:07:58 vps46666688 sshd[21006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.139.242 Jan 9 10:08:00 vps46666688 sshd[21006]: Failed password for invalid user bib from 200.108.139.242 port 41663 ssh2 ... |
2020-01-09 23:59:17 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 200.108.139.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10408
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;200.108.139.242. IN A
;; AUTHORITY SECTION:
. 1426 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019032800 1800 900 604800 86400
;; Query time: 209 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 29 02:20:36 CST 2019
;; MSG SIZE rcvd: 119
Host 242.139.108.200.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 242.139.108.200.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 175.24.138.103 | attack | 2020-05-05T20:54:53.408227suse-nuc sshd[18852]: User root from 175.24.138.103 not allowed because listed in DenyUsers ... |
2020-05-06 14:15:51 |
| 45.67.14.20 | attackspambots | May 6 04:06:08 XXX sshd[59815]: Invalid user ubnt from 45.67.14.20 port 43334 |
2020-05-06 14:11:10 |
| 65.151.163.244 | attackspam | 2020-05-05T23:54:55.062393mail.thespaminator.com sshd[9546]: Invalid user sdbadmin from 65.151.163.244 port 64429 2020-05-05T23:54:56.839318mail.thespaminator.com sshd[9546]: Failed password for invalid user sdbadmin from 65.151.163.244 port 64429 ssh2 ... |
2020-05-06 14:14:48 |
| 180.76.54.123 | attackbotsspam | (sshd) Failed SSH login from 180.76.54.123 (CN/China/-): 5 in the last 3600 secs |
2020-05-06 14:33:47 |
| 167.71.9.180 | attackspam | srv02 SSH BruteForce Attacks 22 .. |
2020-05-06 14:47:35 |
| 217.61.6.112 | attackbots | 5x Failed Password |
2020-05-06 14:35:55 |
| 190.215.48.155 | attack | 2020-05-06T05:55:26.845667server.espacesoutien.com sshd[26971]: Failed password for root from 190.215.48.155 port 60729 ssh2 2020-05-06T05:55:29.939589server.espacesoutien.com sshd[26986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.215.48.155 user=root 2020-05-06T05:55:32.131730server.espacesoutien.com sshd[26986]: Failed password for root from 190.215.48.155 port 61532 ssh2 2020-05-06T05:55:39.723325server.espacesoutien.com sshd[27001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.215.48.155 user=root 2020-05-06T05:55:41.288185server.espacesoutien.com sshd[27001]: Failed password for root from 190.215.48.155 port 62197 ssh2 ... |
2020-05-06 14:34:18 |
| 80.82.69.130 | attackbots | firewall-block, port(s): 25020/tcp, 25050/tcp, 25092/tcp, 25097/tcp, 25099/tcp, 25126/tcp, 25178/tcp |
2020-05-06 14:33:23 |
| 219.153.72.78 | attackspambots | 05/05/2020-23:54:49.760670 219.153.72.78 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-05-06 14:20:27 |
| 195.54.167.14 | attack | May 6 08:45:01 debian-2gb-nbg1-2 kernel: \[11006392.784844\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=195.54.167.14 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=55739 PROTO=TCP SPT=44064 DPT=14581 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-05-06 14:46:40 |
| 14.240.226.4 | attackbots | 20/5/6@01:56:57: FAIL: Alarm-Network address from=14.240.226.4 ... |
2020-05-06 14:23:40 |
| 118.89.229.84 | attackspam | May 6 11:26:43 webhost01 sshd[3758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.229.84 May 6 11:26:45 webhost01 sshd[3758]: Failed password for invalid user zzq from 118.89.229.84 port 54824 ssh2 ... |
2020-05-06 14:38:45 |
| 113.172.10.39 | attackbotsspam | 2020-05-0605:53:471jWB7w-000532-8Q\<=info@whatsup2013.chH=\(localhost\)[170.51.7.30]:49196P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3165id=a266d08388a389811d18ae02e5113b27b8a1e3@whatsup2013.chT="Youareprettyalluring"forchuckiehughes12@yahoo.comcarolinewhit772@gmail.com2020-05-0605:53:111jWB7P-0004zq-0Q\<=info@whatsup2013.chH=\(localhost\)[113.172.10.39]:34749P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3002id=8d8f30636843969abdf84e1de92e24281bf440e6@whatsup2013.chT="Howwasyourownday\?"forwtrav96792@gmail.comleoadrianchuy2@gmail.com2020-05-0605:53:031jWB7G-0004xA-3d\<=info@whatsup2013.chH=\(localhost\)[123.21.160.214]:54116P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3035id=2d5e2c7f745f8a86a1e45201f532383407ab9469@whatsup2013.chT="Iwouldliketotouchyou"forsbielby733@gmail.comguerra72classic@gmail.com2020-05-0605:53:241jWB7b-000521-5b\<=info@whatsup2013.chH=\(localhos |
2020-05-06 14:44:15 |
| 94.177.242.123 | attackspam | May 6 07:40:20 |
2020-05-06 14:17:20 |
| 113.161.210.203 | attack | Port probing on unauthorized port 445 |
2020-05-06 14:37:58 |