City: Clifton
Region: New Jersey
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.131.74.131 | attack | Scanning for exploits - /.env |
2020-10-08 05:49:08 |
| 104.131.74.131 | attackspam | (mod_security) mod_security (id:210492) triggered by 104.131.74.131 (US/United States/-): 5 in the last 3600 secs |
2020-10-07 14:05:03 |
| 104.131.74.38 | attackbots | 10s of requests to none existent pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined node-superagent/4.1.0 |
2019-07-20 19:52:13 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.131.74.141
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12696
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.131.74.141. IN A
;; AUTHORITY SECTION:
. 573 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022031901 1800 900 604800 86400
;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 20 11:50:02 CST 2022
;; MSG SIZE rcvd: 107Host 141.74.131.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 141.74.131.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 129.204.139.206 | attack | Sep 10 17:10:49 eddieflores sshd\[7354\]: Invalid user usuario from 129.204.139.206 Sep 10 17:10:49 eddieflores sshd\[7354\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.139.206 Sep 10 17:10:50 eddieflores sshd\[7354\]: Failed password for invalid user usuario from 129.204.139.206 port 51792 ssh2 Sep 10 17:17:51 eddieflores sshd\[7971\]: Invalid user tommy from 129.204.139.206 Sep 10 17:17:51 eddieflores sshd\[7971\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.139.206 |
2019-09-11 11:26:05 |
| 118.169.34.184 | attackspam | port 23 attempt blocked |
2019-09-11 11:05:27 |
| 217.67.21.68 | attackbotsspam | 2019-09-10T22:10:18.569461abusebot-3.cloudsearch.cf sshd\[20040\]: Invalid user test101 from 217.67.21.68 port 40510 |
2019-09-11 11:31:09 |
| 118.169.42.249 | attack | port 23 attempt blocked |
2019-09-11 10:57:28 |
| 146.196.52.47 | attackspambots | 2019-09-11T03:25:00.671685abusebot-3.cloudsearch.cf sshd\[21417\]: Invalid user postgres from 146.196.52.47 port 36130 |
2019-09-11 11:36:01 |
| 148.70.65.167 | attackspambots | Sep 10 16:30:18 hanapaa sshd\[13461\]: Invalid user testftp from 148.70.65.167 Sep 10 16:30:18 hanapaa sshd\[13461\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.65.167 Sep 10 16:30:20 hanapaa sshd\[13461\]: Failed password for invalid user testftp from 148.70.65.167 port 52348 ssh2 Sep 10 16:38:35 hanapaa sshd\[14185\]: Invalid user chris from 148.70.65.167 Sep 10 16:38:35 hanapaa sshd\[14185\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.65.167 |
2019-09-11 10:53:04 |
| 103.197.242.220 | attackbots | Sep 11 00:00:09 mxgate1 postfix/postscreen[22092]: CONNECT from [103.197.242.220]:42608 to [176.31.12.44]:25 Sep 11 00:00:09 mxgate1 postfix/dnsblog[22093]: addr 103.197.242.220 listed by domain zen.spamhaus.org as 127.0.0.9 Sep 11 00:00:09 mxgate1 postfix/dnsblog[22093]: addr 103.197.242.220 listed by domain zen.spamhaus.org as 127.0.0.3 Sep 11 00:00:09 mxgate1 postfix/dnsblog[22093]: addr 103.197.242.220 listed by domain zen.spamhaus.org as 127.0.0.2 Sep 11 00:00:09 mxgate1 postfix/dnsblog[22097]: addr 103.197.242.220 listed by domain b.barracudacentral.org as 127.0.0.2 Sep 11 00:00:15 mxgate1 postfix/postscreen[22092]: DNSBL rank 3 for [103.197.242.220]:42608 Sep x@x Sep 11 00:00:15 mxgate1 postfix/postscreen[22092]: DISCONNECT [103.197.242.220]:42608 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=103.197.242.220 |
2019-09-11 10:59:31 |
| 145.239.77.64 | attack | Sep 10 21:44:46 mercury sshd[15471]: Invalid user devuser from 145.239.77.64 port 41676 Sep 10 21:45:53 mercury sshd[15502]: Invalid user devuser from 145.239.77.64 port 47960 Sep 10 21:46:56 mercury sshd[15512]: Invalid user devuser from 145.239.77.64 port 54352 Sep 10 21:48:03 mercury sshd[15514]: Invalid user download from 145.239.77.64 port 60656 Sep 10 21:49:12 mercury sshd[15528]: Invalid user download from 145.239.77.64 port 38682 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=145.239.77.64 |
2019-09-11 11:15:40 |
| 196.52.43.91 | attackbotsspam | firewall-block, port(s): 118/tcp |
2019-09-11 11:20:38 |
| 113.235.123.56 | attack | Lines containing failures of 113.235.123.56 Sep 10 23:49:53 mx-in-01 sshd[26548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.235.123.56 user=r.r Sep 10 23:49:55 mx-in-01 sshd[26548]: Failed password for r.r from 113.235.123.56 port 52532 ssh2 Sep 10 23:49:59 mx-in-01 sshd[26548]: Failed password for r.r from 113.235.123.56 port 52532 ssh2 Sep 10 23:50:02 mx-in-01 sshd[26548]: Failed password for r.r from 113.235.123.56 port 52532 ssh2 Sep 10 23:50:05 mx-in-01 sshd[26548]: Failed password for r.r from 113.235.123.56 port 52532 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=113.235.123.56 |
2019-09-11 11:34:49 |
| 185.176.27.186 | attack | 09/10/2019-20:58:43.911023 185.176.27.186 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-09-11 11:24:39 |
| 122.241.87.197 | attackspam | Sep 10 17:10:42 mailman postfix/smtpd[18199]: warning: unknown[122.241.87.197]: SASL LOGIN authentication failed: authentication failure |
2019-09-11 11:02:25 |
| 94.191.8.31 | attackbotsspam | $f2bV_matches |
2019-09-11 11:03:29 |
| 178.32.218.192 | attack | Sep 11 06:24:37 www5 sshd\[30454\]: Invalid user support from 178.32.218.192 Sep 11 06:24:37 www5 sshd\[30454\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.32.218.192 Sep 11 06:24:39 www5 sshd\[30454\]: Failed password for invalid user support from 178.32.218.192 port 44022 ssh2 ... |
2019-09-11 11:39:28 |
| 106.12.203.210 | attackspam | 2019-09-11T00:18:02.201557abusebot.cloudsearch.cf sshd\[27697\]: Invalid user guest from 106.12.203.210 port 52757 |
2019-09-11 11:01:24 |