City: unknown
Region: unknown
Country: Singapore
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 116.12.51.216 | attack | 116.12.51.216 - - [12/Jul/2019:23:29:53 +0200] "GET /wp-login.php HTTP/1.1" 200 4404 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 116.12.51.216 - - [12/Jul/2019:23:29:55 +0200] "POST /wp-login.php HTTP/1.1" 200 4404 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 116.12.51.216 - - [12/Jul/2019:23:29:56 +0200] "GET /wp-login.php HTTP/1.1" 200 4404 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 116.12.51.216 - - [12/Jul/2019:23:29:57 +0200] "POST /wp-login.php HTTP/1.1" 200 4404 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 116.12.51.216 - - [12/Jul/2019:23:29:58 +0200] "GET /wp-login.php HTTP/1.1" 200 4404 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 116.12.51.216 - - [12/Jul/2019:23:29:59 +0200] "POST /wp-login.php HTTP/1.1" 200 4404 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-07-13 11:36:05 |
| 116.12.51.216 | attack | Wordpress Admin Login attack |
2019-07-05 04:46:02 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.12.51.63
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46770
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;116.12.51.63. IN A
;; AUTHORITY SECTION:
. 127 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022040801 1800 900 604800 86400
;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Apr 09 05:13:10 CST 2022
;; MSG SIZE rcvd: 10563.51.12.116.in-addr.arpa domain name pointer test.iss.edu.sg.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
63.51.12.116.in-addr.arpa name = test.iss.edu.sg.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 118.69.76.169 | attackspambots | Unauthorized connection attempt detected from IP address 118.69.76.169 to port 5555 [T] |
2020-04-05 04:56:13 |
| 61.175.97.108 | attackspambots | 139/tcp 1432/tcp 1433/tcp... [2020-03-07/04-04]45pkt,22pt.(tcp) |
2020-04-05 04:42:43 |
| 206.189.47.166 | attackbots | Apr 4 15:22:53 debian sshd[6676]: Unable to negotiate with 206.189.47.166 port 36942: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] Apr 4 15:24:52 debian sshd[6742]: Unable to negotiate with 206.189.47.166 port 56966: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] ... |
2020-04-05 04:34:18 |
| 159.203.27.98 | attack | Apr 4 15:25:37 rotator sshd\[13350\]: Invalid user admin from 159.203.27.98Apr 4 15:25:40 rotator sshd\[13350\]: Failed password for invalid user admin from 159.203.27.98 port 58088 ssh2Apr 4 15:30:30 rotator sshd\[14136\]: Invalid user harry from 159.203.27.98Apr 4 15:30:32 rotator sshd\[14136\]: Failed password for invalid user harry from 159.203.27.98 port 39608 ssh2Apr 4 15:34:53 rotator sshd\[14175\]: Invalid user tests from 159.203.27.98Apr 4 15:34:55 rotator sshd\[14175\]: Failed password for invalid user tests from 159.203.27.98 port 49104 ssh2 ... |
2020-04-05 04:34:50 |
| 87.138.169.10 | attack | Apr 4 21:24:38 minden010 sshd[24501]: Failed password for root from 87.138.169.10 port 36771 ssh2 Apr 4 21:28:40 minden010 sshd[26810]: Failed password for root from 87.138.169.10 port 42876 ssh2 ... |
2020-04-05 04:26:33 |
| 117.0.58.248 | attackspam | 445/tcp 445/tcp 445/tcp [2020-04-04]3pkt |
2020-04-05 04:49:56 |
| 122.116.40.219 | attackbotsspam | 8080/tcp 23/tcp [2020-02-21/04-04]2pkt |
2020-04-05 04:29:47 |
| 51.255.101.8 | attackbotsspam | xmlrpc attack |
2020-04-05 04:23:45 |
| 121.162.235.44 | attack | 5x Failed Password |
2020-04-05 04:30:30 |
| 66.68.187.145 | attackspam | 2020-04-04T19:11:04.320321shield sshd\[13213\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpe-66-68-187-145.austin.res.rr.com user=root 2020-04-04T19:11:06.144293shield sshd\[13213\]: Failed password for root from 66.68.187.145 port 36248 ssh2 2020-04-04T19:15:11.334564shield sshd\[13810\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpe-66-68-187-145.austin.res.rr.com user=root 2020-04-04T19:15:13.067850shield sshd\[13810\]: Failed password for root from 66.68.187.145 port 46074 ssh2 2020-04-04T19:19:14.219029shield sshd\[14732\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpe-66-68-187-145.austin.res.rr.com user=root |
2020-04-05 04:23:29 |
| 58.187.67.169 | attackbots | 445/tcp [2020-04-04]1pkt |
2020-04-05 04:59:24 |
| 50.31.89.8 | attack | firewall-block, port(s): 1099/tcp |
2020-04-05 04:30:48 |
| 104.131.215.120 | attackspambots | DigitalOcean BotNet attack - 10s of requests to non- pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined, XSS attacks UA removed |
2020-04-05 04:42:26 |
| 83.240.179.190 | attackspam | 445/tcp 445/tcp [2020-04-04]2pkt |
2020-04-05 04:55:26 |
| 107.170.129.141 | attack | (sshd) Failed SSH login from 107.170.129.141 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 4 19:10:39 amsweb01 sshd[9408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.129.141 user=root Apr 4 19:10:40 amsweb01 sshd[9408]: Failed password for root from 107.170.129.141 port 50350 ssh2 Apr 4 19:16:18 amsweb01 sshd[10054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.129.141 user=root Apr 4 19:16:21 amsweb01 sshd[10054]: Failed password for root from 107.170.129.141 port 40482 ssh2 Apr 4 19:21:07 amsweb01 sshd[10565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.129.141 user=root |
2020-04-05 04:50:51 |