City: Seoul
Region: Seoul
Country: South Korea
Internet Service Provider: LG Dacom Corporation
Hostname: unknown
Organization: unknown
Usage Type: unknown
| Type | Details | Datetime |
|---|---|---|
| attackbots | Brute-force attempt banned |
2020-07-12 18:14:18 |
| attackspambots | Jul 11 13:00:31 sigma sshd\[8631\]: Invalid user ling from 106.254.255.42Jul 11 13:00:33 sigma sshd\[8631\]: Failed password for invalid user ling from 106.254.255.42 port 60198 ssh2 ... |
2020-07-11 22:12:21 |
| attack | Jul 10 08:47:56 host sshd[12381]: Invalid user glynis from 106.254.255.42 port 50046 ... |
2020-07-10 18:39:58 |
| attack | SSH-BruteForce |
2020-07-08 11:35:02 |
| attackbots | 2020-07-03T22:38:48.400433lavrinenko.info sshd[15305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.254.255.42 2020-07-03T22:38:48.389230lavrinenko.info sshd[15305]: Invalid user thomas from 106.254.255.42 port 41512 2020-07-03T22:38:49.696113lavrinenko.info sshd[15305]: Failed password for invalid user thomas from 106.254.255.42 port 41512 ssh2 2020-07-03T22:41:25.181093lavrinenko.info sshd[15421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.254.255.42 user=root 2020-07-03T22:41:27.028879lavrinenko.info sshd[15421]: Failed password for root from 106.254.255.42 port 50276 ssh2 ... |
2020-07-04 03:49:17 |
| attackspambots | Jul 3 04:12:01 php1 sshd\[6348\]: Invalid user smkim from 106.254.255.42 Jul 3 04:12:01 php1 sshd\[6348\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.254.255.42 Jul 3 04:12:04 php1 sshd\[6348\]: Failed password for invalid user smkim from 106.254.255.42 port 54124 ssh2 Jul 3 04:15:43 php1 sshd\[6691\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.254.255.42 user=root Jul 3 04:15:45 php1 sshd\[6691\]: Failed password for root from 106.254.255.42 port 55478 ssh2 |
2020-07-03 22:16:42 |
| attackbotsspam | (sshd) Failed SSH login from 106.254.255.42 (KR/South Korea/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 30 20:12:02 grace sshd[11660]: Invalid user internal from 106.254.255.42 port 40590 Jun 30 20:12:04 grace sshd[11660]: Failed password for invalid user internal from 106.254.255.42 port 40590 ssh2 Jun 30 20:25:45 grace sshd[13623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.254.255.42 user=root Jun 30 20:25:47 grace sshd[13623]: Failed password for root from 106.254.255.42 port 36374 ssh2 Jun 30 20:28:44 grace sshd[13843]: Invalid user postgres from 106.254.255.42 port 34126 |
2020-07-02 01:58:08 |
| attackbotsspam | 2020-06-30T01:33:53.2141951495-001 sshd[29548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.254.255.42 user=root 2020-06-30T01:33:55.6569461495-001 sshd[29548]: Failed password for root from 106.254.255.42 port 54918 ssh2 2020-06-30T01:37:24.1336971495-001 sshd[29728]: Invalid user benjamin from 106.254.255.42 port 39228 2020-06-30T01:37:24.1373741495-001 sshd[29728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.254.255.42 2020-06-30T01:37:24.1336971495-001 sshd[29728]: Invalid user benjamin from 106.254.255.42 port 39228 2020-06-30T01:37:26.2136061495-001 sshd[29728]: Failed password for invalid user benjamin from 106.254.255.42 port 39228 ssh2 ... |
2020-06-30 17:01:03 |
| attackspam | $f2bV_matches |
2020-06-07 14:30:47 |
| attack | May 30 21:24:48 sigma sshd\[15648\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.254.255.42 user=rootMay 30 21:32:15 sigma sshd\[15753\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.254.255.42 ... |
2020-05-31 04:39:44 |
| attackbots | 5x Failed Password |
2020-05-29 07:36:56 |
| attackbotsspam | SSH/22 MH Probe, BF, Hack - |
2020-05-17 07:09:41 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.254.255.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13882
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.254.255.42. IN A
;; AUTHORITY SECTION:
. 329 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020051601 1800 900 604800 86400
;; Query time: 154 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 17 07:09:38 CST 2020
;; MSG SIZE rcvd: 118Host 42.255.254.106.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 42.255.254.106.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 35.246.66.189 | attack | Invalid user admin from 35.246.66.189 port 53538 |
2020-01-21 22:51:25 |
| 156.198.32.118 | attack | Invalid user admin from 156.198.32.118 port 58829 |
2020-01-21 23:14:27 |
| 51.91.102.173 | attackbots | Jan 21 04:09:50 server sshd\[20459\]: Failed password for invalid user postgres from 51.91.102.173 port 36304 ssh2 Jan 21 17:39:59 server sshd\[27214\]: Invalid user midgear from 51.91.102.173 Jan 21 17:39:59 server sshd\[27214\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.ip-51-91-102.eu Jan 21 17:40:01 server sshd\[27214\]: Failed password for invalid user midgear from 51.91.102.173 port 54682 ssh2 Jan 21 17:40:47 server sshd\[27786\]: Invalid user postgres from 51.91.102.173 ... |
2020-01-21 22:41:17 |
| 198.199.100.5 | attack | SSH/22 MH Probe, BF, Hack - |
2020-01-21 23:02:49 |
| 177.125.20.40 | attackbots | Invalid user admin from 177.125.20.40 port 48684 |
2020-01-21 23:12:21 |
| 188.165.24.200 | attack | Unauthorized connection attempt detected from IP address 188.165.24.200 to port 2220 [J] |
2020-01-21 23:05:34 |
| 187.109.170.115 | attackbots | Invalid user admin from 187.109.170.115 port 53524 |
2020-01-21 23:05:56 |
| 222.113.52.66 | attackspam | Invalid user nix from 222.113.52.66 port 44912 |
2020-01-21 22:55:00 |
| 71.107.31.98 | attack | Unauthorized connection attempt detected from IP address 71.107.31.98 to port 2220 [J] |
2020-01-21 22:37:21 |
| 220.191.208.204 | attack | $f2bV_matches |
2020-01-21 22:56:21 |
| 14.187.141.253 | attack | Invalid user admin from 14.187.141.253 port 41559 |
2020-01-21 22:52:54 |
| 51.77.212.188 | attackspambots | 21.01.2020 13:16:32 SSH access blocked by firewall |
2020-01-21 22:42:14 |
| 218.69.16.26 | attackspam | Unauthorized connection attempt detected from IP address 218.69.16.26 to port 2220 [J] |
2020-01-21 22:57:20 |
| 60.29.241.2 | attackbots | Invalid user abdul from 60.29.241.2 port 48387 |
2020-01-21 22:38:36 |
| 192.241.201.182 | attack | Invalid user ying from 192.241.201.182 port 36666 |
2020-01-21 23:03:23 |