City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.168.243.221 | spam | Spammer using interterkgroup.org. [104.168.243.221] Blacklisted in https://multirbl.valli.org/lookup/104.168.243.221.html, https://cleantalk.org/blacklists/104.168.243.221#anc131368, https://www.liveipmap.com/104.168.243.221?lang=en_us |
2022-09-21 02:15:19 |
| 104.168.243.105 | attackbots | Apr 24 13:10:50 ip-172-31-61-156 sshd[628]: Invalid user ftpnew from 104.168.243.105 Apr 24 13:10:50 ip-172-31-61-156 sshd[628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.243.105 Apr 24 13:10:50 ip-172-31-61-156 sshd[628]: Invalid user ftpnew from 104.168.243.105 Apr 24 13:10:52 ip-172-31-61-156 sshd[628]: Failed password for invalid user ftpnew from 104.168.243.105 port 58992 ssh2 Apr 24 13:14:51 ip-172-31-61-156 sshd[811]: Invalid user oradata from 104.168.243.105 ... |
2020-04-24 22:18:11 |
| 104.168.243.113 | attack | Mar 26 04:54:43 debian-2gb-nbg1-2 kernel: \[7453960.080440\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.168.243.113 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=54321 PROTO=TCP SPT=46193 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 |
2020-03-26 12:55:27 |
| 104.168.243.80 | attack | Oct 22 08:35:18 mxgate1 postfix/postscreen[29065]: CONNECT from [104.168.243.80]:45310 to [176.31.12.44]:25 Oct 22 08:35:18 mxgate1 postfix/dnsblog[29066]: addr 104.168.243.80 listed by domain b.barracudacentral.org as 127.0.0.2 Oct 22 08:35:24 mxgate1 postfix/postscreen[30288]: PASS NEW [104.168.243.80]:45310 Oct 22 08:35:27 mxgate1 postfix/smtpd[30333]: connect from slot0.violetpisces.com[104.168.243.80] Oct x@x Oct 22 08:35:28 mxgate1 postfix/smtpd[30333]: disconnect from slot0.violetpisces.com[104.168.243.80] ehlo=2 starttls=1 mail=1 rcpt=0/1 quhostname=1 commands=5/6 Oct 22 08:45:27 mxgate1 postfix/anvil[30340]: statistics: max connection rate 1/60s for (smtpd:104.168.243.80) at Oct 22 08:35:27 Oct 22 08:45:27 mxgate1 postfix/anvil[30340]: statistics: max connection count 1 for (smtpd:104.168.243.80) at Oct 22 08:35:27 Oct 22 08:45:27 mxgate1 postfix/anvil[30340]: statistics: max message rate 1/60s for (smtpd:104.168.243.80) at Oct 22 08:35:28 Oct 22 09:05:29 mxgat........ ------------------------------- |
2019-10-24 18:34:50 |
| 104.168.243.214 | attackspam | 2019-07-28T01:13:22.053931abusebot-2.cloudsearch.cf sshd\[25337\]: Invalid user p0\$12 from 104.168.243.214 port 56212 |
2019-07-28 11:51:40 |
| 104.168.243.214 | attackspam | Jul 26 15:38:06 meumeu sshd[3721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.243.214 Jul 26 15:38:08 meumeu sshd[3721]: Failed password for invalid user 3 from 104.168.243.214 port 55742 ssh2 Jul 26 15:45:58 meumeu sshd[5079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.243.214 ... |
2019-07-26 21:50:45 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.168.243.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15117
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.168.243.1. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022092001 1800 900 604800 86400
;; Query time: 25 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 21 02:59:37 CST 2022
;; MSG SIZE rcvd: 106Host 1.243.168.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 1.243.168.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 92.118.161.25 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-11-20 22:46:12 |
| 171.249.117.20 | attackbots | Unauthorized connection attempt from IP address 171.249.117.20 on Port 445(SMB) |
2019-11-20 22:54:30 |
| 14.166.2.204 | attackspam | Unauthorised access (Nov 20) SRC=14.166.2.204 LEN=52 TTL=111 ID=5733 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-20 23:08:50 |
| 188.70.18.4 | attackspambots | 2019-11-20 14:30:02 H=([188.70.18.4]) [188.70.18.4]:10407 I=[10.100.18.25]:25 F= |
2019-11-20 22:48:52 |
| 223.17.179.90 | attackbots | Telnet/23 MH Probe, BF, Hack - |
2019-11-20 22:38:58 |
| 82.117.212.110 | attackspam | Unauthorized connection attempt from IP address 82.117.212.110 on Port 445(SMB) |
2019-11-20 22:55:32 |
| 103.27.9.133 | attackspam | Unauthorized connection attempt from IP address 103.27.9.133 on Port 445(SMB) |
2019-11-20 23:03:49 |
| 118.24.114.192 | attackspambots | Nov 20 15:46:40 ArkNodeAT sshd\[12640\]: Invalid user P@\$\$w0rd2011 from 118.24.114.192 Nov 20 15:46:40 ArkNodeAT sshd\[12640\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.114.192 Nov 20 15:46:42 ArkNodeAT sshd\[12640\]: Failed password for invalid user P@\$\$w0rd2011 from 118.24.114.192 port 37778 ssh2 |
2019-11-20 23:09:12 |
| 106.13.45.212 | attack | 2019-11-20 12:41:00,571 fail2ban.actions: WARNING [ssh] Ban 106.13.45.212 |
2019-11-20 22:42:32 |
| 62.80.228.68 | attackspam | port scan/probe/communication attempt; port 23 |
2019-11-20 22:44:09 |
| 83.226.201.18 | attackbotsspam | Connection by 83.226.201.18 on port: 23 got caught by honeypot at 11/20/2019 5:19:12 AM |
2019-11-20 22:32:39 |
| 216.169.91.106 | attack | Telnet/23 MH Probe, BF, Hack - |
2019-11-20 22:43:16 |
| 125.160.207.186 | attackspambots | Unauthorized connection attempt from IP address 125.160.207.186 on Port 445(SMB) |
2019-11-20 22:51:27 |
| 129.211.10.228 | attackspambots | Nov 20 17:41:21 server sshd\[10005\]: Invalid user wans from 129.211.10.228 Nov 20 17:41:21 server sshd\[10005\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.10.228 Nov 20 17:41:23 server sshd\[10005\]: Failed password for invalid user wans from 129.211.10.228 port 42722 ssh2 Nov 20 17:47:02 server sshd\[11335\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.10.228 user=root Nov 20 17:47:05 server sshd\[11335\]: Failed password for root from 129.211.10.228 port 28082 ssh2 ... |
2019-11-20 22:49:58 |
| 210.190.168.90 | attackspam | webserver:80 [20/Nov/2019] "GET /wp-login.php HTTP/1.1" 302 438 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" webserver:80 [20/Nov/2019] "GET /wp-login.php HTTP/1.1" 302 448 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-11-20 23:02:56 |