City: unknown
Region: unknown
Country: Thailand
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 119.42.94.133 | attackbotsspam | Unauthorized connection attempt from IP address 119.42.94.133 on Port 445(SMB) |
2020-02-03 19:58:45 |
| 119.42.94.194 | attackbots | SMTP unauthorised login attempts |
2020-01-28 19:43:50 |
| 119.42.94.36 | attack | Jan 13 05:47:30 cvbnet sshd[13504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.42.94.36 Jan 13 05:47:32 cvbnet sshd[13504]: Failed password for invalid user admina from 119.42.94.36 port 50861 ssh2 ... |
2020-01-13 19:09:31 |
| 119.42.94.130 | attackspambots | 445/tcp [2019-11-01]1pkt |
2019-11-01 15:42:31 |
| 119.42.94.191 | attackbotsspam | 119.42.94.191 - - [18/Oct/2019:07:40:01 -0400] "GET /?page=products&action=../../../etc/passwd&manufacturerID=61&productID=4701-RIM&linkID=16812 HTTP/1.1" 200 17416 "https://exitdevice.com/?page=products&action=../../../etc/passwd&manufacturerID=61&productID=4701-RIM&linkID=16812" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0" ... |
2019-10-18 23:07:59 |
| 119.42.94.76 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-06-26 04:00:31,275 INFO [shellcode_manager] (119.42.94.76) no match, writing hexdump (63e4bd557ef625c2aa17460fe799c98e :2080238) - MS17010 (EternalBlue) |
2019-06-27 19:16:16 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.42.94.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15542
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;119.42.94.68. IN A
;; AUTHORITY SECTION:
. 286 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030800 1800 900 604800 86400
;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 08 18:48:42 CST 2022
;; MSG SIZE rcvd: 105Host 68.94.42.119.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 68.94.42.119.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 93.56.21.228 | attackspam | Aug 6 16:29:36 server sshd\[24223\]: Invalid user network from 93.56.21.228 port 48260 Aug 6 16:29:36 server sshd\[24223\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.56.21.228 Aug 6 16:29:38 server sshd\[24223\]: Failed password for invalid user network from 93.56.21.228 port 48260 ssh2 Aug 6 16:36:22 server sshd\[27734\]: Invalid user remove from 93.56.21.228 port 42236 Aug 6 16:36:22 server sshd\[27734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.56.21.228 |
2019-08-06 21:40:22 |
| 23.129.64.170 | attack | Aug 6 14:48:13 jane sshd\[25406\]: Invalid user apc from 23.129.64.170 port 16093 Aug 6 14:48:13 jane sshd\[25406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.129.64.170 Aug 6 14:48:15 jane sshd\[25406\]: Failed password for invalid user apc from 23.129.64.170 port 16093 ssh2 ... |
2019-08-06 21:39:51 |
| 180.254.197.90 | attackspam | scan z |
2019-08-06 21:27:52 |
| 113.116.50.126 | attackspam | Aug 6 16:05:21 www4 sshd\[35639\]: Invalid user mailman from 113.116.50.126 Aug 6 16:05:21 www4 sshd\[35639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.116.50.126 Aug 6 16:05:23 www4 sshd\[35639\]: Failed password for invalid user mailman from 113.116.50.126 port 49722 ssh2 ... |
2019-08-06 21:21:27 |
| 107.170.235.19 | attackbots | Automatic report - Banned IP Access |
2019-08-06 21:07:07 |
| 115.68.47.184 | attack | Aug 6 16:26:56 srv-4 sshd\[24172\]: Invalid user lw from 115.68.47.184 Aug 6 16:26:56 srv-4 sshd\[24172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.68.47.184 Aug 6 16:26:58 srv-4 sshd\[24172\]: Failed password for invalid user lw from 115.68.47.184 port 39742 ssh2 ... |
2019-08-06 21:46:15 |
| 54.255.195.172 | attackspam | Aug 6 13:19:32 MK-Soft-VM4 sshd\[2275\]: Invalid user melissa from 54.255.195.172 port 56382 Aug 6 13:19:32 MK-Soft-VM4 sshd\[2275\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.255.195.172 Aug 6 13:19:33 MK-Soft-VM4 sshd\[2275\]: Failed password for invalid user melissa from 54.255.195.172 port 56382 ssh2 ... |
2019-08-06 21:33:29 |
| 106.13.109.19 | attackspam | Aug 6 13:19:24 localhost sshd\[16472\]: Invalid user ts3 from 106.13.109.19 port 55066 Aug 6 13:19:24 localhost sshd\[16472\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.109.19 Aug 6 13:19:27 localhost sshd\[16472\]: Failed password for invalid user ts3 from 106.13.109.19 port 55066 ssh2 Aug 6 13:21:40 localhost sshd\[16536\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.109.19 user=root Aug 6 13:21:43 localhost sshd\[16536\]: Failed password for root from 106.13.109.19 port 44502 ssh2 ... |
2019-08-06 21:32:22 |
| 221.231.25.26 | attack | Aug 6 14:24:04 www1 sshd\[5550\]: Invalid user netscreen from 221.231.25.26Aug 6 14:24:06 www1 sshd\[5550\]: Failed password for invalid user netscreen from 221.231.25.26 port 54656 ssh2Aug 6 14:24:08 www1 sshd\[5552\]: Invalid user nexthink from 221.231.25.26Aug 6 14:24:10 www1 sshd\[5552\]: Failed password for invalid user nexthink from 221.231.25.26 port 55572 ssh2Aug 6 14:24:11 www1 sshd\[5554\]: Invalid user misp from 221.231.25.26Aug 6 14:24:14 www1 sshd\[5554\]: Failed password for invalid user misp from 221.231.25.26 port 56447 ssh2 ... |
2019-08-06 20:35:36 |
| 45.247.143.194 | attackbots | 3389BruteforceIDS |
2019-08-06 20:54:58 |
| 185.143.221.104 | attackspambots | Port scan on 7 port(s): 2003 2014 4499 9990 13305 13310 33911 |
2019-08-06 20:55:38 |
| 185.176.27.178 | attackbotsspam | Aug 6 11:58:53 mail kernel: [174360.904631] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=185.176.27.178 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=7236 PROTO=TCP SPT=45632 DPT=38061 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 6 11:59:31 mail kernel: [174398.792063] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=185.176.27.178 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=65412 PROTO=TCP SPT=45632 DPT=52925 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 6 11:59:39 mail kernel: [174406.005930] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=185.176.27.178 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=39171 PROTO=TCP SPT=45632 DPT=31287 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 6 12:00:24 mail kernel: [174451.062960] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=185.176.27.178 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=51744 PROTO=TCP SPT=45632 DPT=43338 WINDOW=1024 RES=0x00 S |
2019-08-06 21:37:54 |
| 42.200.66.164 | attack | Aug 6 13:18:33 mail sshd[17782]: Invalid user family from 42.200.66.164 Aug 6 13:18:33 mail sshd[17782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.200.66.164 Aug 6 13:18:33 mail sshd[17782]: Invalid user family from 42.200.66.164 Aug 6 13:18:35 mail sshd[17782]: Failed password for invalid user family from 42.200.66.164 port 47504 ssh2 Aug 6 13:23:46 mail sshd[18372]: Invalid user samuel from 42.200.66.164 ... |
2019-08-06 20:48:55 |
| 118.24.9.152 | attackspam | Automatic report - Banned IP Access |
2019-08-06 21:27:32 |
| 193.144.61.81 | attack | Aug 6 09:22:09 xtremcommunity sshd\[6011\]: Invalid user testuser from 193.144.61.81 port 49147 Aug 6 09:22:09 xtremcommunity sshd\[6011\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.144.61.81 Aug 6 09:22:11 xtremcommunity sshd\[6011\]: Failed password for invalid user testuser from 193.144.61.81 port 49147 ssh2 Aug 6 09:26:17 xtremcommunity sshd\[6104\]: Invalid user sammy from 193.144.61.81 port 44174 Aug 6 09:26:17 xtremcommunity sshd\[6104\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.144.61.81 ... |
2019-08-06 21:37:24 |