City: unknown
Region: unknown
Country: Singapore
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.250.52.136 | attackspambots | Invalid user dongjie from 104.250.52.136 port 46732 |
2020-07-29 07:23:56 |
| 104.250.52.130 | attack | Invalid user wei from 104.250.52.130 port 35572 |
2020-05-16 15:01:46 |
| 104.250.52.130 | attackspambots | 2020-05-11T06:17:48.408183shield sshd\[24708\]: Invalid user daniel from 104.250.52.130 port 49052 2020-05-11T06:17:48.411840shield sshd\[24708\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.250.52.130 2020-05-11T06:17:50.500348shield sshd\[24708\]: Failed password for invalid user daniel from 104.250.52.130 port 49052 ssh2 2020-05-11T06:21:49.867223shield sshd\[25882\]: Invalid user timo from 104.250.52.130 port 37914 2020-05-11T06:21:49.870826shield sshd\[25882\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.250.52.130 |
2020-05-11 14:51:55 |
| 104.250.52.130 | attack | 2020-04-29T23:35:53.2249601495-001 sshd[7503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.250.52.130 2020-04-29T23:35:53.2169301495-001 sshd[7503]: Invalid user temp1 from 104.250.52.130 port 65174 2020-04-29T23:35:55.2458011495-001 sshd[7503]: Failed password for invalid user temp1 from 104.250.52.130 port 65174 ssh2 2020-04-29T23:39:27.8276541495-001 sshd[7673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.250.52.130 user=root 2020-04-29T23:39:29.2261031495-001 sshd[7673]: Failed password for root from 104.250.52.130 port 44334 ssh2 2020-04-29T23:42:58.3277251495-001 sshd[7872]: Invalid user simon from 104.250.52.130 port 23498 ... |
2020-04-30 12:04:01 |
| 104.250.52.209 | attackbots | Wordpress malicious attack:[sshd] |
2020-04-20 14:33:37 |
| 104.250.52.130 | attackbotsspam | Apr 9 14:46:49 icinga sshd[28312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.250.52.130 Apr 9 14:46:52 icinga sshd[28312]: Failed password for invalid user test from 104.250.52.130 port 55236 ssh2 Apr 9 14:59:54 icinga sshd[49972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.250.52.130 ... |
2020-04-10 02:39:36 |
| 104.250.52.130 | attackbotsspam | $f2bV_matches |
2020-04-09 19:07:12 |
| 104.250.52.130 | attackspambots | 2020-04-08T03:41:36.574956abusebot.cloudsearch.cf sshd[6371]: Invalid user postgres from 104.250.52.130 port 3822 2020-04-08T03:41:36.581168abusebot.cloudsearch.cf sshd[6371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.250.52.130 2020-04-08T03:41:36.574956abusebot.cloudsearch.cf sshd[6371]: Invalid user postgres from 104.250.52.130 port 3822 2020-04-08T03:41:38.287943abusebot.cloudsearch.cf sshd[6371]: Failed password for invalid user postgres from 104.250.52.130 port 3822 ssh2 2020-04-08T03:51:22.860817abusebot.cloudsearch.cf sshd[7143]: Invalid user team1 from 104.250.52.130 port 60378 2020-04-08T03:51:22.869354abusebot.cloudsearch.cf sshd[7143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.250.52.130 2020-04-08T03:51:22.860817abusebot.cloudsearch.cf sshd[7143]: Invalid user team1 from 104.250.52.130 port 60378 2020-04-08T03:51:25.358583abusebot.cloudsearch.cf sshd[7143]: Failed password f ... |
2020-04-08 19:41:31 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.250.52.189
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11111
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.250.52.189. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020600 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 22:52:19 CST 2025
;; MSG SIZE rcvd: 107
Host 189.52.250.104.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 189.52.250.104.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.13.231.171 | attackbots | SSH bruteforce |
2020-10-05 20:40:47 |
| 45.149.78.103 | attackbots | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-10-05 20:41:36 |
| 149.72.1.74 | attackspam | 2020-10-04 15:23:25.990872-0500 localhost smtpd[1892]: NOQUEUE: reject: RCPT from unknown[149.72.1.74]: 450 4.7.25 Client host rejected: cannot find your hostname, [149.72.1.74]; from= |
2020-10-05 20:06:38 |
| 112.85.42.184 | attack | Oct 5 14:09:23 sshgateway sshd\[18156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.184 user=root Oct 5 14:09:24 sshgateway sshd\[18156\]: Failed password for root from 112.85.42.184 port 54032 ssh2 Oct 5 14:09:36 sshgateway sshd\[18156\]: error: maximum authentication attempts exceeded for root from 112.85.42.184 port 54032 ssh2 \[preauth\] |
2020-10-05 20:23:30 |
| 81.37.31.161 | attackspam | Lines containing failures of 81.37.31.161 Oct 4 22:25:02 dns01 sshd[28623]: Did not receive identification string from 81.37.31.161 port 61620 Oct 4 22:25:05 dns01 sshd[28625]: Invalid user sniffer from 81.37.31.161 port 62012 Oct 4 22:25:05 dns01 sshd[28625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.37.31.161 Oct 4 22:25:07 dns01 sshd[28625]: Failed password for invalid user sniffer from 81.37.31.161 port 62012 ssh2 Oct 4 22:25:07 dns01 sshd[28625]: Connection closed by invalid user sniffer 81.37.31.161 port 62012 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=81.37.31.161 |
2020-10-05 20:12:21 |
| 111.231.202.118 | attackspam | $f2bV_matches |
2020-10-05 20:31:22 |
| 103.100.5.5 | attack | [MK-Root1] Blocked by UFW |
2020-10-05 20:45:29 |
| 193.37.255.114 | attackbotsspam | Listed on zen-spamhaus also abuseat.org / proto=6 . srcport=29011 . dstport=8334 . (1231) |
2020-10-05 20:30:06 |
| 140.143.30.33 | attack | Oct 5 12:57:00 db sshd[32283]: User root from 140.143.30.33 not allowed because none of user's groups are listed in AllowGroups ... |
2020-10-05 20:18:49 |
| 148.70.195.242 | attackbots | Oct 5 09:41:58 haigwepa sshd[11877]: Failed password for root from 148.70.195.242 port 46034 ssh2 ... |
2020-10-05 20:21:17 |
| 223.130.31.240 | attackbotsspam | Port Scan: TCP/23 |
2020-10-05 20:43:20 |
| 210.245.52.91 | attackbotsspam | 445/tcp 445/tcp 445/tcp... [2020-08-07/10-04]4pkt,1pt.(tcp) |
2020-10-05 20:13:14 |
| 218.92.0.165 | attack | detected by Fail2Ban |
2020-10-05 20:05:10 |
| 103.45.150.7 | attackspambots | "fail2ban match" |
2020-10-05 20:27:24 |
| 222.186.31.83 | attackspambots | Oct 5 09:04:21 shivevps sshd[31370]: Failed password for root from 222.186.31.83 port 29500 ssh2 Oct 5 09:04:23 shivevps sshd[31370]: Failed password for root from 222.186.31.83 port 29500 ssh2 Oct 5 09:04:26 shivevps sshd[31370]: Failed password for root from 222.186.31.83 port 29500 ssh2 ... |
2020-10-05 20:07:07 |