City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 120.85.93.148 | attackbotsspam | The IP has triggered Cloudflare WAF. CF-Ray: 541154ff8872e7a4 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: api.skk.moe | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Safari/605.1.15 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 01:33:11 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.85.93.62
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43859
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;120.85.93.62. IN A
;; AUTHORITY SECTION:
. 464 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400
;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 09:18:16 CST 2022
;; MSG SIZE rcvd: 105Host 62.93.85.120.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 62.93.85.120.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.119.53.58 | attack | root ssh:notty 45.119.53.58 Sat Sep 7 13:28 - 13:28 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:27 - 13:27 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:26 - 13:26 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:25 - 13:25 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:25 - 13:25 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:24 - 13:24 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:23 - 13:23 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:22 - 13:22 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:21 - 13:21 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:21 - 13:21 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:20 - 13:20 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:19 - 13:19 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:18 - 13:18 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:18 - 13:18 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:17 - 13:17 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:16 - 13:16 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:15 - 13:15 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:15 - 13:15 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:14 - 13:14 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:13 - 13:13 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:12 - 13:12 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:11 - 13:11 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:11 - 13:11 (00:00) root ssh:notty 45.119.53.58 Sat Sep 7 13:10 - 13:10 (00:00) |
2019-09-08 13:43:20 |
| 219.92.16.81 | attack | 2019-09-06T04:37:21.107756WS-Zach sshd[20319]: Invalid user support from 219.92.16.81 port 39492 2019-09-06T04:37:21.111075WS-Zach sshd[20319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.92.16.81 2019-09-06T04:37:21.107756WS-Zach sshd[20319]: Invalid user support from 219.92.16.81 port 39492 2019-09-06T04:37:23.300034WS-Zach sshd[20319]: Failed password for invalid user support from 219.92.16.81 port 39492 ssh2 2019-09-06T04:45:56.253815WS-Zach sshd[24496]: Invalid user ftptest from 219.92.16.81 port 44356 2019-09-06T04:45:56.257098WS-Zach sshd[24496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.92.16.81 2019-09-06T04:45:56.253815WS-Zach sshd[24496]: Invalid user ftptest from 219.92.16.81 port 44356 2019-09-06T04:45:57.808105WS-Zach sshd[24496]: Failed password for invalid user ftptest from 219.92.16.81 port 44356 ssh2 ... |
2019-09-08 13:57:48 |
| 84.19.170.254 | attack | 2019-09-08T05:13:57.997627hub.schaetter.us sshd\[16468\]: Invalid user user2 from 84.19.170.254 2019-09-08T05:13:58.044714hub.schaetter.us sshd\[16468\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.19.170.254 2019-09-08T05:14:00.069360hub.schaetter.us sshd\[16468\]: Failed password for invalid user user2 from 84.19.170.254 port 48468 ssh2 2019-09-08T05:18:33.069821hub.schaetter.us sshd\[16505\]: Invalid user test from 84.19.170.254 2019-09-08T05:18:33.114719hub.schaetter.us sshd\[16505\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.19.170.254 ... |
2019-09-08 14:22:34 |
| 45.82.153.37 | attack | Sep 8 08:09:14 mail postfix/smtpd\[25155\]: warning: unknown\[45.82.153.37\]: SASL PLAIN authentication failed: Sep 8 08:09:25 mail postfix/smtpd\[16649\]: warning: unknown\[45.82.153.37\]: SASL PLAIN authentication failed: Sep 8 08:11:36 mail postfix/smtpd\[27738\]: warning: unknown\[45.82.153.37\]: SASL PLAIN authentication failed: |
2019-09-08 14:24:07 |
| 153.129.238.223 | attack | " " |
2019-09-08 13:54:35 |
| 13.71.117.11 | attackbotsspam | Sep 8 02:01:31 xtremcommunity sshd\[72639\]: Invalid user ftpuser from 13.71.117.11 port 55520 Sep 8 02:01:31 xtremcommunity sshd\[72639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.117.11 Sep 8 02:01:33 xtremcommunity sshd\[72639\]: Failed password for invalid user ftpuser from 13.71.117.11 port 55520 ssh2 Sep 8 02:06:32 xtremcommunity sshd\[72767\]: Invalid user webadmin from 13.71.117.11 port 43706 Sep 8 02:06:32 xtremcommunity sshd\[72767\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.71.117.11 ... |
2019-09-08 14:13:21 |
| 77.42.112.80 | attackbots | Automatic report - Port Scan Attack |
2019-09-08 13:58:17 |
| 104.140.188.54 | attack | 10443/tcp 21/tcp 1433/tcp... [2019-07-12/09-07]65pkt,13pt.(tcp),1pt.(udp) |
2019-09-08 14:11:56 |
| 148.70.23.121 | attackbotsspam | Sep 7 13:55:21 aiointranet sshd\[16938\]: Invalid user ftp from 148.70.23.121 Sep 7 13:55:21 aiointranet sshd\[16938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.23.121 Sep 7 13:55:23 aiointranet sshd\[16938\]: Failed password for invalid user ftp from 148.70.23.121 port 41820 ssh2 Sep 7 14:00:31 aiointranet sshd\[17412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.23.121 user=www-data Sep 7 14:00:34 aiointranet sshd\[17412\]: Failed password for www-data from 148.70.23.121 port 54864 ssh2 |
2019-09-08 13:47:57 |
| 51.15.194.117 | attack | firewall-block, port(s): 445/tcp |
2019-09-08 14:23:31 |
| 193.31.117.12 | attackbots | MagicSpam Rule: from_blacklist; Spammer IP: 193.31.117.12 |
2019-09-08 14:17:30 |
| 185.117.244.90 | attackspambots | Sep 8 08:27:47 lenivpn01 kernel: \[156878.309249\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=185.117.244.90 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=1518 PROTO=TCP SPT=42222 DPT=59276 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 8 08:28:28 lenivpn01 kernel: \[156919.524953\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=185.117.244.90 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=42814 PROTO=TCP SPT=42222 DPT=59322 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 8 08:29:38 lenivpn01 kernel: \[156990.175548\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=185.117.244.90 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=17060 PROTO=TCP SPT=42222 DPT=59337 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-09-08 14:36:00 |
| 183.103.35.202 | attack | Sep 8 07:09:50 cvbmail sshd\[12772\]: Invalid user gitadmin from 183.103.35.202 Sep 8 07:09:50 cvbmail sshd\[12772\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.103.35.202 Sep 8 07:09:52 cvbmail sshd\[12772\]: Failed password for invalid user gitadmin from 183.103.35.202 port 58052 ssh2 |
2019-09-08 14:27:32 |
| 42.113.99.241 | attackspam | Sep 7 23:26:12 h2034429 sshd[2595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.113.99.241 user=r.r Sep 7 23:26:14 h2034429 sshd[2595]: Failed password for r.r from 42.113.99.241 port 44588 ssh2 Sep 7 23:26:16 h2034429 sshd[2595]: Failed password for r.r from 42.113.99.241 port 44588 ssh2 Sep 7 23:26:18 h2034429 sshd[2595]: Failed password for r.r from 42.113.99.241 port 44588 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=42.113.99.241 |
2019-09-08 14:20:01 |
| 144.217.42.212 | attackbotsspam | Sep 8 07:58:13 meumeu sshd[16118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.42.212 Sep 8 07:58:14 meumeu sshd[16118]: Failed password for invalid user deploypass from 144.217.42.212 port 39716 ssh2 Sep 8 08:02:12 meumeu sshd[16887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.42.212 ... |
2019-09-08 14:03:42 |