116.93.124.130

Basic Info

City: Quezon City

Region: Metro Manila

Country: Philippines

Internet Service Provider: IP-Converge Internet Data Center.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Lines containing failures of 116.93.124.130 Oct 12 00:41:06 g2 sshd[32435]: Invalid user ryan from 116.93.124.130 port 61453 Oct 12 00:41:06 g2 sshd[32435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.93.124.130 Oct 12 00:41:08 g2 sshd[32435]: Failed password for invalid user ryan from 116.93.124.130 port 61453 ssh2 Oct 12 00:41:08 g2 sshd[32435]: Received disconnect from 116.93.124.130 port 61453:11: Bye Bye [preauth] Oct 12 00:41:08 g2 sshd[32435]: Disconnected from invalid user ryan 116.93.124.130 port 61453 [preauth] Oct 12 00:46:46 g2 sshd[32567]: Invalid user server from 116.93.124.130 port 35308 Oct 12 00:46:46 g2 sshd[32567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.93.124.130 Oct 12 00:46:47 g2 sshd[32567]: Failed password for invalid user server from 116.93.124.130 port 35308 ssh2 Oct 12 00:46:49 g2 sshd[32567]: Received disconnect from 116.93.124.130 port 35308........ ------------------------------	2020-10-13 03:47:14
attack	SSH/22 MH Probe, BF, Hack -	2020-10-12 19:20:58

Type

Details

Datetime

attack

Lines containing failures of 116.93.124.130
Oct 12 00:41:06 g2 sshd[32435]: Invalid user ryan from 116.93.124.130 port 61453
Oct 12 00:41:06 g2 sshd[32435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.93.124.130 
Oct 12 00:41:08 g2 sshd[32435]: Failed password for invalid user ryan from 116.93.124.130 port 61453 ssh2
Oct 12 00:41:08 g2 sshd[32435]: Received disconnect from 116.93.124.130 port 61453:11: Bye Bye [preauth]
Oct 12 00:41:08 g2 sshd[32435]: Disconnected from invalid user ryan 116.93.124.130 port 61453 [preauth]
Oct 12 00:46:46 g2 sshd[32567]: Invalid user server from 116.93.124.130 port 35308
Oct 12 00:46:46 g2 sshd[32567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.93.124.130 
Oct 12 00:46:47 g2 sshd[32567]: Failed password for invalid user server from 116.93.124.130 port 35308 ssh2
Oct 12 00:46:49 g2 sshd[32567]: Received disconnect from 116.93.124.130 port 35308........
------------------------------

2020-10-13 03:47:14

attack

SSH/22 MH Probe, BF, Hack -

2020-10-12 19:20:58

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.93.124.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39600
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.93.124.130.			IN	A

;; AUTHORITY SECTION:
.			174	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020101200 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 12 19:20:53 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 130.124.93.116.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 130.124.93.116.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
77.158.71.118	attackbotsspam	Failed password for invalid user test2 from 77.158.71.118 port 38740 ssh2	2020-09-07 18:01:00
51.38.239.53	attackbotsspam	Failed password for root from 51.38.239.53 port 51458 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=solution-info-services.fr user=root Failed password for root from 51.38.239.53 port 58096 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=solution-info-services.fr user=root Failed password for root from 51.38.239.53 port 36496 ssh2	2020-09-07 17:37:13
37.76.147.31	attack	Sep 7 11:25:34 dev0-dcde-rnet sshd[24733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.76.147.31 Sep 7 11:25:36 dev0-dcde-rnet sshd[24733]: Failed password for invalid user ec2-user from 37.76.147.31 port 60472 ssh2 Sep 7 11:29:33 dev0-dcde-rnet sshd[24839]: Failed password for root from 37.76.147.31 port 39448 ssh2	2020-09-07 17:31:39
200.194.48.210	attackspam	Automatic report - Port Scan Attack	2020-09-07 17:46:24
94.181.241.214	attackspam	Wordpress File Manager Plugin Remote Code Execution Vulnerability, PTR: dynamicip-94-181-241-214.pppoe.kirov.ertelecom.ru.	2020-09-07 17:39:24
124.156.50.118	attackspambots	Port Scan detected! ...	2020-09-07 17:30:45
137.117.192.55	attackbotsspam	TCP (SYN) 137.117.192.55:1088 -> port 445, len 44	2020-09-07 17:57:38
195.136.141.13	attack	Icarus honeypot on github	2020-09-07 17:55:30
90.103.51.1	attack	Netgear DGN Device Remote Command Execution Vulnerability , PTR: lfbn-lil-1-1228-1.w90-103.abo.wanadoo.fr.	2020-09-07 17:47:53
36.72.214.80	attack	Wordpress File Manager Plugin Remote Code Execution Vulnerability, PTR: PTR record not found	2020-09-07 17:36:07
106.53.255.167	attackbotsspam	Sep 7 07:53:01 h2779839 sshd[19349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.255.167 user=root Sep 7 07:53:03 h2779839 sshd[19349]: Failed password for root from 106.53.255.167 port 60968 ssh2 Sep 7 07:53:56 h2779839 sshd[19351]: Invalid user dsj from 106.53.255.167 port 41684 Sep 7 07:53:56 h2779839 sshd[19351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.255.167 Sep 7 07:53:56 h2779839 sshd[19351]: Invalid user dsj from 106.53.255.167 port 41684 Sep 7 07:53:57 h2779839 sshd[19351]: Failed password for invalid user dsj from 106.53.255.167 port 41684 ssh2 Sep 7 07:54:52 h2779839 sshd[19482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.255.167 user=root Sep 7 07:54:54 h2779839 sshd[19482]: Failed password for root from 106.53.255.167 port 50636 ssh2 Sep 7 07:55:46 h2779839 sshd[19511]: pam_unix(sshd:auth): authentication ...	2020-09-07 17:43:17
104.248.237.70	attack	Sep 7 06:42:52 firewall sshd[9401]: Failed password for root from 104.248.237.70 port 34715 ssh2 Sep 7 06:44:33 firewall sshd[9452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.237.70 user=root Sep 7 06:44:35 firewall sshd[9452]: Failed password for root from 104.248.237.70 port 64437 ssh2 ...	2020-09-07 18:02:55
49.88.112.118	attack	Sep 7 09:13:00 vm1 sshd[26765]: Failed password for root from 49.88.112.118 port 48083 ssh2 ...	2020-09-07 17:49:17
54.38.53.251	attackspam	Sep 7 08:47:36 root sshd[14592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.53.251 Sep 7 08:53:42 root sshd[19800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.53.251 ...	2020-09-07 17:45:42
109.111.172.39	attack	TCP (SYN) 109.111.172.39:41162 -> port 23, len 44	2020-09-07 17:44:30

Recently Reported IPs

64.52.85.67	128.70.119.228	103.42.255.245	75.24.48.249
91.134.201.164	52.187.145.135	119.184.62.179	45.242.8.118
83.142.55.205	59.92.234.12	45.62.112.135	80.108.101.70
192.241.215.97	165.22.3.210	118.24.109.221	117.80.3.141
54.245.185.144	180.76.234.185	183.105.99.30	183.165.41.139