City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.13.134.142 | attackspam | (sshd) Failed SSH login from 106.13.134.142 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 8 10:48:46 optimus sshd[26065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.134.142 user=root Sep 8 10:48:48 optimus sshd[26065]: Failed password for root from 106.13.134.142 port 58966 ssh2 Sep 8 10:54:08 optimus sshd[28026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.134.142 user=root Sep 8 10:54:10 optimus sshd[28026]: Failed password for root from 106.13.134.142 port 57340 ssh2 Sep 8 10:59:37 optimus sshd[29889]: Did not receive identification string from 106.13.134.142 |
2020-09-09 00:13:09 |
| 106.13.134.142 | attackspam | firewall-block, port(s): 7374/tcp |
2020-09-08 15:44:46 |
| 106.13.134.142 | attackspambots | k+ssh-bruteforce |
2020-09-08 08:18:33 |
| 106.13.134.142 | attackbotsspam | firewall-block, port(s): 29420/tcp |
2020-09-03 03:43:07 |
| 106.13.134.142 | attack | Invalid user zt from 106.13.134.142 port 38514 |
2020-09-02 19:21:55 |
| 106.13.134.142 | attackbots | " " |
2020-09-01 00:36:51 |
| 106.13.134.142 | attackbots | Invalid user anon from 106.13.134.142 port 49572 |
2020-08-17 04:12:17 |
| 106.13.134.19 | attackbots | May 19 20:50:46 vmd48417 sshd[18889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.134.19 |
2020-05-20 04:03:28 |
| 106.13.134.19 | attackspambots | May 8 23:00:10 vps46666688 sshd[31277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.134.19 May 8 23:00:13 vps46666688 sshd[31277]: Failed password for invalid user anonymous from 106.13.134.19 port 41980 ssh2 ... |
2020-05-10 01:38:55 |
| 106.13.134.19 | attackspambots | May 1 13:38:17 ns392434 sshd[13174]: Invalid user pai from 106.13.134.19 port 34706 May 1 13:38:17 ns392434 sshd[13174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.134.19 May 1 13:38:17 ns392434 sshd[13174]: Invalid user pai from 106.13.134.19 port 34706 May 1 13:38:19 ns392434 sshd[13174]: Failed password for invalid user pai from 106.13.134.19 port 34706 ssh2 May 1 13:45:20 ns392434 sshd[13444]: Invalid user kalista from 106.13.134.19 port 45798 May 1 13:45:20 ns392434 sshd[13444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.134.19 May 1 13:45:20 ns392434 sshd[13444]: Invalid user kalista from 106.13.134.19 port 45798 May 1 13:45:22 ns392434 sshd[13444]: Failed password for invalid user kalista from 106.13.134.19 port 45798 ssh2 May 1 13:47:52 ns392434 sshd[13496]: Invalid user test_user from 106.13.134.19 port 43416 |
2020-05-02 00:47:01 |
| 106.13.134.19 | attack | 2020-04-21T12:55:14.597397homeassistant sshd[7451]: Invalid user admin from 106.13.134.19 port 57042 2020-04-21T12:55:14.609134homeassistant sshd[7451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.134.19 ... |
2020-04-21 23:49:49 |
| 106.13.134.248 | attack | Automatic report - SSH Brute-Force Attack |
2020-04-12 21:16:58 |
| 106.13.134.19 | attack | SSH Brute-Force reported by Fail2Ban |
2020-04-11 05:38:52 |
| 106.13.134.19 | attackbots | Apr 9 23:21:42 php1 sshd\[20825\]: Invalid user deploy from 106.13.134.19 Apr 9 23:21:42 php1 sshd\[20825\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.134.19 Apr 9 23:21:44 php1 sshd\[20825\]: Failed password for invalid user deploy from 106.13.134.19 port 45516 ssh2 Apr 9 23:25:43 php1 sshd\[21241\]: Invalid user deploy from 106.13.134.19 Apr 9 23:25:43 php1 sshd\[21241\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.134.19 |
2020-04-10 19:34:21 |
| 106.13.134.164 | attackbots | Apr 6 00:47:38 vmd48417 sshd[14398]: Failed password for root from 106.13.134.164 port 50976 ssh2 |
2020-04-06 07:17:15 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.134.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65250
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;106.13.134.12. IN A
;; AUTHORITY SECTION:
. 157 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022401 1800 900 604800 86400
;; Query time: 44 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 12:29:25 CST 2022
;; MSG SIZE rcvd: 106Host 12.134.13.106.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 12.134.13.106.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 200.38.225.102 | attack | Automatic report - Port Scan Attack |
2020-03-04 15:57:49 |
| 177.75.65.18 | attackspambots | 20/3/3@23:58:08: FAIL: Alarm-Network address from=177.75.65.18 ... |
2020-03-04 15:19:18 |
| 122.51.194.250 | attackspam | 2020-03-04T05:58:06.826132 sshd[27829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.194.250 2020-03-04T05:58:06.813045 sshd[27829]: Invalid user mother from 122.51.194.250 port 26140 2020-03-04T05:58:08.461553 sshd[27829]: Failed password for invalid user mother from 122.51.194.250 port 26140 ssh2 2020-03-04T07:59:14.945149 sshd[30067]: Invalid user jeff from 122.51.194.250 port 19553 ... |
2020-03-04 15:20:11 |
| 2.178.121.23 | attackspam | Telnet Server BruteForce Attack |
2020-03-04 15:37:46 |
| 68.183.219.43 | attack | 2020-03-04T08:22:36.601873vps773228.ovh.net sshd[21968]: Invalid user nx from 68.183.219.43 port 32828 2020-03-04T08:22:36.613510vps773228.ovh.net sshd[21968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.219.43 2020-03-04T08:22:36.601873vps773228.ovh.net sshd[21968]: Invalid user nx from 68.183.219.43 port 32828 2020-03-04T08:22:38.824470vps773228.ovh.net sshd[21968]: Failed password for invalid user nx from 68.183.219.43 port 32828 ssh2 2020-03-04T08:30:44.340508vps773228.ovh.net sshd[22250]: Invalid user cubie from 68.183.219.43 port 38748 2020-03-04T08:30:44.359874vps773228.ovh.net sshd[22250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.219.43 2020-03-04T08:30:44.340508vps773228.ovh.net sshd[22250]: Invalid user cubie from 68.183.219.43 port 38748 2020-03-04T08:30:46.897137vps773228.ovh.net sshd[22250]: Failed password for invalid user cubie from 68.183.219.43 port 38748 ssh2 2020- ... |
2020-03-04 15:43:46 |
| 139.59.67.82 | attackspambots | Mar 3 21:10:47 hanapaa sshd\[5829\]: Invalid user ts3srv from 139.59.67.82 Mar 3 21:10:47 hanapaa sshd\[5829\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.67.82 Mar 3 21:10:49 hanapaa sshd\[5829\]: Failed password for invalid user ts3srv from 139.59.67.82 port 36688 ssh2 Mar 3 21:20:25 hanapaa sshd\[6958\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.67.82 user=root Mar 3 21:20:27 hanapaa sshd\[6958\]: Failed password for root from 139.59.67.82 port 41198 ssh2 |
2020-03-04 15:29:59 |
| 127.0.0.1 | attackbotsspam | Test Connectivity |
2020-03-04 15:58:17 |
| 37.120.144.46 | attackbotsspam | Mar 3 21:24:17 php1 sshd\[2796\]: Invalid user hauolimauloa from 37.120.144.46 Mar 3 21:24:17 php1 sshd\[2796\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.120.144.46 Mar 3 21:24:19 php1 sshd\[2796\]: Failed password for invalid user hauolimauloa from 37.120.144.46 port 48104 ssh2 Mar 3 21:29:49 php1 sshd\[3277\]: Invalid user hauolimauloa from 37.120.144.46 Mar 3 21:29:49 php1 sshd\[3277\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.120.144.46 |
2020-03-04 15:32:32 |
| 222.254.59.140 | attackspam | 1583297874 - 03/04/2020 05:57:54 Host: 222.254.59.140/222.254.59.140 Port: 445 TCP Blocked |
2020-03-04 15:27:44 |
| 211.193.58.173 | attackspam | 2020-03-04T07:36:28.743650randservbullet-proofcloud-66.localdomain sshd[7498]: Invalid user yyg from 211.193.58.173 port 57816 2020-03-04T07:36:28.753028randservbullet-proofcloud-66.localdomain sshd[7498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.193.58.173 2020-03-04T07:36:28.743650randservbullet-proofcloud-66.localdomain sshd[7498]: Invalid user yyg from 211.193.58.173 port 57816 2020-03-04T07:36:30.181271randservbullet-proofcloud-66.localdomain sshd[7498]: Failed password for invalid user yyg from 211.193.58.173 port 57816 ssh2 ... |
2020-03-04 15:50:23 |
| 103.74.123.6 | attackspam | GET /wp-login.php HTTP/1.1 |
2020-03-04 15:21:03 |
| 87.27.23.202 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2020-03-04 15:51:43 |
| 132.232.1.106 | attackbots | Mar 4 12:22:46 gw1 sshd[31791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.1.106 Mar 4 12:22:48 gw1 sshd[31791]: Failed password for invalid user pramod from 132.232.1.106 port 49236 ssh2 ... |
2020-03-04 15:34:28 |
| 88.215.177.19 | attackbotsspam | MultiHost/MultiPort Probe, Scan, Hack - |
2020-03-04 15:30:33 |
| 88.247.50.184 | attackspam | MultiHost/MultiPort Probe, Scan, Hack - |
2020-03-04 15:16:31 |