City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.42.44.206 | attackspam | Tried sshing with brute force. |
2020-07-16 07:18:15 |
| 104.42.44.206 | attackbotsspam | 2020-06-30T17:44:46.582668ks3355764 sshd[29854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.44.206 user=root 2020-06-30T17:44:48.845230ks3355764 sshd[29854]: Failed password for root from 104.42.44.206 port 4759 ssh2 ... |
2020-07-01 08:29:32 |
| 104.42.44.206 | attack | $f2bV_matches | Triggered by Fail2Ban at Vostok web server |
2020-06-28 07:16:15 |
| 104.42.44.206 | attackbots | sshd: Failed password for .... from 104.42.44.206 port 1255 ssh2 |
2020-06-27 17:15:45 |
| 104.42.44.206 | attack | Lines containing failures of 104.42.44.206 Jun 24 23:45:32 shared11 sshd[17243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.44.206 user=r.r Jun 24 23:45:32 shared11 sshd[17245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.44.206 user=r.r Jun 24 23:45:34 shared11 sshd[17243]: Failed password for r.r from 104.42.44.206 port 11403 ssh2 Jun 24 23:45:34 shared11 sshd[17243]: Received disconnect from 104.42.44.206 port 11403:11: Client disconnecting normally [preauth] Jun 24 23:45:34 shared11 sshd[17243]: Disconnected from authenticating user r.r 104.42.44.206 port 11403 [preauth] Jun 24 23:45:34 shared11 sshd[17245]: Failed password for r.r from 104.42.44.206 port 11487 ssh2 Jun 24 23:45:34 shared11 sshd[17245]: Received disconnect from 104.42.44.206 port 11487:11: Client disconnecting normally [preauth] Jun 24 23:45:34 shared11 sshd[17245]: Disconnected from authenticatin........ ------------------------------ |
2020-06-27 01:28:38 |
| 104.42.44.206 | attackbotsspam | Lines containing failures of 104.42.44.206 Jun 24 23:45:32 shared11 sshd[17243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.44.206 user=r.r Jun 24 23:45:32 shared11 sshd[17245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.44.206 user=r.r Jun 24 23:45:34 shared11 sshd[17243]: Failed password for r.r from 104.42.44.206 port 11403 ssh2 Jun 24 23:45:34 shared11 sshd[17243]: Received disconnect from 104.42.44.206 port 11403:11: Client disconnecting normally [preauth] Jun 24 23:45:34 shared11 sshd[17243]: Disconnected from authenticating user r.r 104.42.44.206 port 11403 [preauth] Jun 24 23:45:34 shared11 sshd[17245]: Failed password for r.r from 104.42.44.206 port 11487 ssh2 Jun 24 23:45:34 shared11 sshd[17245]: Received disconnect from 104.42.44.206 port 11487:11: Client disconnecting normally [preauth] Jun 24 23:45:34 shared11 sshd[17245]: Disconnected from authenticatin........ ------------------------------ |
2020-06-26 03:28:02 |
| 104.42.44.206 | attack | Lines containing failures of 104.42.44.206 Jun 24 23:45:32 shared11 sshd[17243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.44.206 user=r.r Jun 24 23:45:32 shared11 sshd[17245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.44.206 user=r.r Jun 24 23:45:34 shared11 sshd[17243]: Failed password for r.r from 104.42.44.206 port 11403 ssh2 Jun 24 23:45:34 shared11 sshd[17243]: Received disconnect from 104.42.44.206 port 11403:11: Client disconnecting normally [preauth] Jun 24 23:45:34 shared11 sshd[17243]: Disconnected from authenticating user r.r 104.42.44.206 port 11403 [preauth] Jun 24 23:45:34 shared11 sshd[17245]: Failed password for r.r from 104.42.44.206 port 11487 ssh2 Jun 24 23:45:34 shared11 sshd[17245]: Received disconnect from 104.42.44.206 port 11487:11: Client disconnecting normally [preauth] Jun 24 23:45:34 shared11 sshd[17245]: Disconnected from authenticatin........ ------------------------------ |
2020-06-25 13:54:26 |
| 104.42.46.99 | attack | Apr 9 12:11:02 lukav-desktop sshd\[4224\]: Invalid user myftp from 104.42.46.99 Apr 9 12:11:02 lukav-desktop sshd\[4224\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.46.99 Apr 9 12:11:03 lukav-desktop sshd\[4224\]: Failed password for invalid user myftp from 104.42.46.99 port 51476 ssh2 Apr 9 12:18:26 lukav-desktop sshd\[31294\]: Invalid user jira from 104.42.46.99 Apr 9 12:18:26 lukav-desktop sshd\[31294\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.46.99 |
2020-04-09 18:14:35 |
| 104.42.47.203 | attackspambots | RDP Brute-Force (honeypot 6) |
2020-04-09 08:38:13 |
| 104.42.47.121 | attack | RDP Brute Force |
2019-09-26 09:18:36 |
| 104.42.47.225 | attackbotsspam | Brute forcing RDP port 3389 |
2019-09-04 02:46:26 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.42.4.206
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61496
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.42.4.206. IN A
;; AUTHORITY SECTION:
. 420 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022033100 1800 900 604800 86400
;; Query time: 25 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 31 17:17:08 CST 2022
;; MSG SIZE rcvd: 105Host 206.4.42.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 206.4.42.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 111.231.86.75 | attack | Apr 5 05:26:02 IngegnereFirenze sshd[7416]: User root from 111.231.86.75 not allowed because not listed in AllowUsers ... |
2020-04-05 15:10:41 |
| 106.13.87.145 | attackbotsspam | Invalid user mapp from 106.13.87.145 port 55292 |
2020-04-05 15:43:02 |
| 111.229.76.117 | attack | Invalid user frj from 111.229.76.117 port 53514 |
2020-04-05 15:48:07 |
| 206.189.47.166 | attack | Invalid user hadoop from 206.189.47.166 port 58738 |
2020-04-05 15:09:03 |
| 120.28.109.188 | attackspambots | SSH Brute-Force reported by Fail2Ban |
2020-04-05 15:55:31 |
| 140.143.130.52 | attackbots | fail2ban -- 140.143.130.52 ... |
2020-04-05 15:50:01 |
| 49.73.235.149 | attackbotsspam | Apr 5 03:10:32 ws24vmsma01 sshd[244246]: Failed password for root from 49.73.235.149 port 49659 ssh2 ... |
2020-04-05 15:39:43 |
| 18.191.252.211 | attackspambots | Hammered by port scans by Amazon servers with IP addresses from all around the world |
2020-04-05 15:16:16 |
| 49.254.42.156 | attack | Apr 5 01:07:04 vps46666688 sshd[5325]: Failed password for root from 49.254.42.156 port 29502 ssh2 ... |
2020-04-05 15:50:25 |
| 122.44.99.227 | attackspambots | ssh brute force |
2020-04-05 15:20:13 |
| 162.242.251.16 | attackspam | Automated report (2020-04-05T05:00:27+00:00). Caught probing for webshells/backdoors. |
2020-04-05 15:37:53 |
| 157.230.176.155 | attackbots | Automatic report BANNED IP |
2020-04-05 15:31:21 |
| 177.183.47.133 | attackspambots | Fail2Ban Ban Triggered |
2020-04-05 15:13:17 |
| 54.38.139.210 | attack | Apr 5 05:47:08 *** sshd[13336]: User root from 54.38.139.210 not allowed because not listed in AllowUsers |
2020-04-05 15:48:35 |
| 145.239.92.175 | attackbots | 2020-04-04T22:45:09.635610linuxbox-skyline sshd[66241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.92.175 user=root 2020-04-04T22:45:11.824789linuxbox-skyline sshd[66241]: Failed password for root from 145.239.92.175 port 51598 ssh2 ... |
2020-04-05 15:16:40 |