City: unknown
Region: unknown
Country: Singapore
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 116.12.52.141 | attackspambots | 2020-10-11T03:38:46.359711hostname sshd[15523]: Failed password for root from 116.12.52.141 port 48152 ssh2 ... |
2020-10-12 05:40:19 |
| 116.12.52.141 | attackspambots | SSH login attempts. |
2020-10-11 21:46:52 |
| 116.12.52.141 | attackbotsspam | Oct 11 02:11:07 mx sshd[14228]: Failed password for root from 116.12.52.141 port 36256 ssh2 Oct 11 02:23:47 mx sshd[23092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.12.52.141 |
2020-10-11 13:43:57 |
| 116.12.52.141 | attackspambots | Oct 10 23:31:38 mavik sshd[4912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ds33.ds.ns01.net user=root Oct 10 23:31:40 mavik sshd[4912]: Failed password for root from 116.12.52.141 port 39068 ssh2 Oct 10 23:35:28 mavik sshd[5072]: Invalid user postfix from 116.12.52.141 Oct 10 23:35:28 mavik sshd[5072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ds33.ds.ns01.net Oct 10 23:35:30 mavik sshd[5072]: Failed password for invalid user postfix from 116.12.52.141 port 41457 ssh2 ... |
2020-10-11 07:07:31 |
| 116.12.52.141 | attackspambots | Sep 27 16:01:28 plex-server sshd[3274667]: Failed password for invalid user ps from 116.12.52.141 port 52888 ssh2 Sep 27 16:05:42 plex-server sshd[3276482]: Invalid user target from 116.12.52.141 port 56053 Sep 27 16:05:42 plex-server sshd[3276482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.12.52.141 Sep 27 16:05:42 plex-server sshd[3276482]: Invalid user target from 116.12.52.141 port 56053 Sep 27 16:05:45 plex-server sshd[3276482]: Failed password for invalid user target from 116.12.52.141 port 56053 ssh2 ... |
2020-09-28 05:12:28 |
| 116.12.52.141 | attackspam | 2020-09-27T07:49:36.167926dmca.cloudsearch.cf sshd[18488]: Invalid user app from 116.12.52.141 port 34144 2020-09-27T07:49:36.173320dmca.cloudsearch.cf sshd[18488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ds33.ds.ns01.net 2020-09-27T07:49:36.167926dmca.cloudsearch.cf sshd[18488]: Invalid user app from 116.12.52.141 port 34144 2020-09-27T07:49:37.996147dmca.cloudsearch.cf sshd[18488]: Failed password for invalid user app from 116.12.52.141 port 34144 ssh2 2020-09-27T07:56:04.198431dmca.cloudsearch.cf sshd[18635]: Invalid user System from 116.12.52.141 port 48866 2020-09-27T07:56:04.205178dmca.cloudsearch.cf sshd[18635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ds33.ds.ns01.net 2020-09-27T07:56:04.198431dmca.cloudsearch.cf sshd[18635]: Invalid user System from 116.12.52.141 port 48866 2020-09-27T07:56:06.294626dmca.cloudsearch.cf sshd[18635]: Failed password for invalid user System from 116.12. ... |
2020-09-27 21:30:06 |
| 116.12.52.141 | attack | Brute force attempt |
2020-09-27 13:13:34 |
| 116.12.52.141 | attackspambots | Failed password for invalid user root from 116.12.52.141 port 36545 ssh2 |
2020-09-17 18:26:34 |
| 116.12.52.141 | attackspambots | SSH Bruteforce Attempt on Honeypot |
2020-09-17 09:38:58 |
| 116.12.52.141 | attackbotsspam | Aug 31 23:12:10 sshgateway sshd\[28494\]: Invalid user gama from 116.12.52.141 Aug 31 23:12:10 sshgateway sshd\[28494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ds33.ds.ns01.net Aug 31 23:12:12 sshgateway sshd\[28494\]: Failed password for invalid user gama from 116.12.52.141 port 37923 ssh2 |
2020-09-01 06:22:42 |
| 116.12.52.141 | attack | Aug 22 15:56:21 ip106 sshd[404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.12.52.141 Aug 22 15:56:23 ip106 sshd[404]: Failed password for invalid user ftptest from 116.12.52.141 port 54081 ssh2 ... |
2020-08-22 21:59:46 |
| 116.12.52.141 | attack | Aug 18 22:47:03 cosmoit sshd[7277]: Failed password for root from 116.12.52.141 port 41047 ssh2 |
2020-08-19 04:54:49 |
| 116.12.52.141 | attack | Aug 18 17:06:35 vpn01 sshd[1871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.12.52.141 Aug 18 17:06:37 vpn01 sshd[1871]: Failed password for invalid user test1 from 116.12.52.141 port 60242 ssh2 ... |
2020-08-18 23:55:00 |
| 116.12.52.141 | attackbots | Aug 9 10:30:56 santamaria sshd\[21325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.12.52.141 user=root Aug 9 10:30:59 santamaria sshd\[21325\]: Failed password for root from 116.12.52.141 port 35614 ssh2 Aug 9 10:39:12 santamaria sshd\[21514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.12.52.141 user=root ... |
2020-08-09 17:23:11 |
| 116.12.52.141 | attackspam | $f2bV_matches |
2020-08-06 19:11:17 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.12.52.25
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38962
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;116.12.52.25. IN A
;; AUTHORITY SECTION:
. 109 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022202 1800 900 604800 86400
;; Query time: 74 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 23 13:12:34 CST 2022
;; MSG SIZE rcvd: 10525.52.12.116.in-addr.arpa domain name pointer ascendo.sg.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
25.52.12.116.in-addr.arpa name = ascendo.sg.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 60.168.64.107 | attack | port 23 attempt blocked |
2019-11-09 23:30:07 |
| 111.53.53.118 | attackspam | Port scan on 2 port(s): 1433 65529 |
2019-11-09 23:38:06 |
| 51.89.185.101 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-11-09 23:24:49 |
| 104.131.68.92 | attackspam | www.ft-1848-basketball.de 104.131.68.92 \[09/Nov/2019:15:56:31 +0100\] "POST /wp-login.php HTTP/1.1" 200 2172 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.ft-1848-basketball.de 104.131.68.92 \[09/Nov/2019:15:56:32 +0100\] "POST /wp-login.php HTTP/1.1" 200 2143 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-11-09 23:46:14 |
| 147.135.86.104 | attackspambots | Port scan on 2 port(s): 139 445 |
2019-11-09 23:25:58 |
| 185.176.27.246 | attack | 11/09/2019-10:58:55.740984 185.176.27.246 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-11-09 23:59:01 |
| 148.70.33.136 | attack | F2B jail: sshd. Time: 2019-11-09 16:44:40, Reported by: VKReport |
2019-11-09 23:44:46 |
| 175.197.77.3 | attack | 2019-11-09T16:10:18.438492 sshd[14341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.197.77.3 user=root 2019-11-09T16:10:20.444241 sshd[14341]: Failed password for root from 175.197.77.3 port 57022 ssh2 2019-11-09T16:40:15.823987 sshd[14694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.197.77.3 user=root 2019-11-09T16:40:17.523755 sshd[14694]: Failed password for root from 175.197.77.3 port 40238 ssh2 2019-11-09T16:53:13.593283 sshd[14899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.197.77.3 user=root 2019-11-09T16:53:15.433280 sshd[14899]: Failed password for root from 175.197.77.3 port 50802 ssh2 ... |
2019-11-09 23:59:52 |
| 92.118.38.38 | attackspambots | Nov 9 16:32:42 andromeda postfix/smtpd\[55571\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: authentication failure Nov 9 16:33:02 andromeda postfix/smtpd\[3151\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: authentication failure Nov 9 16:33:06 andromeda postfix/smtpd\[55571\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: authentication failure Nov 9 16:33:18 andromeda postfix/smtpd\[3843\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: authentication failure Nov 9 16:33:37 andromeda postfix/smtpd\[49174\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: authentication failure |
2019-11-09 23:40:47 |
| 220.133.19.42 | attackbots | Fail2Ban Ban Triggered |
2019-11-10 00:02:38 |
| 202.54.157.6 | attack | Automatic report - Banned IP Access |
2019-11-09 23:41:16 |
| 190.17.208.123 | attackspambots | Nov 9 16:25:41 fr01 sshd[3039]: Invalid user yuanwd from 190.17.208.123 Nov 9 16:25:41 fr01 sshd[3039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.17.208.123 Nov 9 16:25:41 fr01 sshd[3039]: Invalid user yuanwd from 190.17.208.123 Nov 9 16:25:43 fr01 sshd[3039]: Failed password for invalid user yuanwd from 190.17.208.123 port 52960 ssh2 Nov 9 16:47:41 fr01 sshd[6914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.17.208.123 user=root Nov 9 16:47:44 fr01 sshd[6914]: Failed password for root from 190.17.208.123 port 58990 ssh2 ... |
2019-11-09 23:51:34 |
| 117.50.38.202 | attackbotsspam | Nov 9 17:14:08 server sshd\[26646\]: Invalid user dvcs from 117.50.38.202 port 44542 Nov 9 17:14:08 server sshd\[26646\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.38.202 Nov 9 17:14:10 server sshd\[26646\]: Failed password for invalid user dvcs from 117.50.38.202 port 44542 ssh2 Nov 9 17:20:14 server sshd\[31771\]: User root from 117.50.38.202 not allowed because listed in DenyUsers Nov 9 17:20:14 server sshd\[31771\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.38.202 user=root |
2019-11-09 23:50:12 |
| 45.227.254.30 | attackbots | Nov 9 15:47:56 mc1 kernel: \[4597165.021198\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.227.254.30 DST=159.69.205.51 LEN=40 TOS=0x08 PREC=0x00 TTL=239 ID=41524 PROTO=TCP SPT=50771 DPT=33891 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 9 15:48:05 mc1 kernel: \[4597174.445413\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.227.254.30 DST=159.69.205.51 LEN=40 TOS=0x08 PREC=0x00 TTL=239 ID=5253 PROTO=TCP SPT=50771 DPT=3489 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 9 15:57:04 mc1 kernel: \[4597712.760584\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.227.254.30 DST=159.69.205.51 LEN=40 TOS=0x08 PREC=0x00 TTL=239 ID=11109 PROTO=TCP SPT=50771 DPT=33894 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-11-09 23:26:35 |
| 103.199.155.26 | attack | postfix (unknown user, SPF fail or relay access denied) |
2019-11-10 00:06:20 |