City: Shanghai
Region: Shanghai
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.54.120.49 | attack | Automatic report - Banned IP Access |
2020-07-27 02:15:05 |
| 106.54.120.49 | attackspam | 20 attempts against mh-misbehave-ban on ice |
2020-03-07 22:26:55 |
| 106.54.120.44 | attack | Feb 10 14:40:22 srv206 sshd[7658]: Invalid user mzk from 106.54.120.44 Feb 10 14:40:22 srv206 sshd[7658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.120.44 Feb 10 14:40:22 srv206 sshd[7658]: Invalid user mzk from 106.54.120.44 Feb 10 14:40:24 srv206 sshd[7658]: Failed password for invalid user mzk from 106.54.120.44 port 46192 ssh2 ... |
2020-02-11 00:10:22 |
| 106.54.120.247 | attackspam | 2019-12-26T10:58:28.165121shield sshd\[25219\]: Invalid user egerman from 106.54.120.247 port 57164 2019-12-26T10:58:28.169741shield sshd\[25219\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.120.247 2019-12-26T10:58:30.281768shield sshd\[25219\]: Failed password for invalid user egerman from 106.54.120.247 port 57164 ssh2 2019-12-26T11:07:02.236636shield sshd\[27664\]: Invalid user ponnusam from 106.54.120.247 port 60634 2019-12-26T11:07:02.240655shield sshd\[27664\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.120.247 |
2019-12-26 19:44:28 |
| 106.54.120.247 | attackspam | Dec 25 08:52:01 www sshd\[11778\]: Invalid user operator from 106.54.120.247Dec 25 08:52:02 www sshd\[11778\]: Failed password for invalid user operator from 106.54.120.247 port 39806 ssh2Dec 25 08:59:09 www sshd\[11808\]: Invalid user squid from 106.54.120.247 ... |
2019-12-25 15:12:43 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.54.120.253
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23802
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;106.54.120.253. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021300 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 23:13:48 CST 2025
;; MSG SIZE rcvd: 107Host 253.120.54.106.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 253.120.54.106.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 203.228.92.83 | attack | Scanning |
2020-04-16 17:34:48 |
| 222.186.175.169 | attackspambots | 04/16/2020-05:03:34.508982 222.186.175.169 Protocol: 6 ET SCAN Potential SSH Scan |
2020-04-16 17:12:39 |
| 64.190.90.71 | attackspam | [2020/4/14 下午 08:25:57] [1316] SMTP 服務接受從 64.190.90.71 來的連線 [2020/4/14 下午 08:26:08] [1316] 64.190.90.71 找不到此信箱 : Hacker@64.190.90.71 [2020/4/14 下午 08:26:08] [1316] SMTP 服務中斷從 64.190.90.71 來的連線 |
2020-04-16 17:10:54 |
| 37.187.100.50 | attack | Invalid user user from 37.187.100.50 port 54170 |
2020-04-16 17:27:55 |
| 45.143.220.140 | attackbots | MultiHost/MultiPort Probe, Scan, Hack - |
2020-04-16 17:11:55 |
| 67.245.202.208 | attackspambots | k+ssh-bruteforce |
2020-04-16 17:15:31 |
| 156.96.155.239 | attackbots | [portscan] udp/1900 [ssdp] *(RWIN=-)(04161050) |
2020-04-16 17:01:00 |
| 165.227.66.215 | attackbots | " " |
2020-04-16 17:29:34 |
| 65.49.20.122 | attackbots | firewall-block, port(s): 22/tcp |
2020-04-16 17:05:42 |
| 222.186.173.215 | attack | Apr 16 11:21:23 legacy sshd[5155]: Failed password for root from 222.186.173.215 port 34598 ssh2 Apr 16 11:21:36 legacy sshd[5155]: error: maximum authentication attempts exceeded for root from 222.186.173.215 port 34598 ssh2 [preauth] Apr 16 11:21:43 legacy sshd[5159]: Failed password for root from 222.186.173.215 port 11250 ssh2 ... |
2020-04-16 17:34:30 |
| 82.227.214.152 | attackbotsspam | Apr 16 05:49:34 vmd48417 sshd[13542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.227.214.152 |
2020-04-16 17:30:09 |
| 140.143.16.248 | attack | SSH brute-force: detected 9 distinct usernames within a 24-hour window. |
2020-04-16 17:24:09 |
| 2.139.174.205 | attackspam | Apr 16 08:21:42 mail sshd[27127]: Invalid user middle from 2.139.174.205 Apr 16 08:21:42 mail sshd[27127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.139.174.205 Apr 16 08:21:42 mail sshd[27127]: Invalid user middle from 2.139.174.205 Apr 16 08:21:45 mail sshd[27127]: Failed password for invalid user middle from 2.139.174.205 port 43068 ssh2 Apr 16 08:30:32 mail sshd[8264]: Invalid user bao from 2.139.174.205 ... |
2020-04-16 17:06:34 |
| 36.91.164.171 | attack | Apr 16 05:34:06 svapp01 sshd[391]: User r.r from 36.91.164.171 not allowed because not listed in AllowUsers Apr 16 05:34:06 svapp01 sshd[391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.91.164.171 user=r.r Apr 16 05:34:08 svapp01 sshd[391]: Failed password for invalid user r.r from 36.91.164.171 port 9224 ssh2 Apr 16 05:34:08 svapp01 sshd[391]: Connection closed by 36.91.164.171 [preauth] Apr 16 06:36:01 svapp01 sshd[20735]: User r.r from 36.91.164.171 not allowed because not listed in AllowUsers Apr 16 06:36:01 svapp01 sshd[20735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.91.164.171 user=r.r ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=36.91.164.171 |
2020-04-16 17:06:00 |
| 78.96.32.107 | attack | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-04-16 17:03:37 |