City: unknown
Region: unknown
Country: China
Internet Service Provider: Guangzhou Haizhiguang Communication Technology Limited
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attack | $f2bV_matches |
2020-08-12 04:06:14 |
| attack | 2020-06-15T03:45:22.698026ionos.janbro.de sshd[114760]: Invalid user nps from 122.51.104.166 port 38884 2020-06-15T03:45:24.751203ionos.janbro.de sshd[114760]: Failed password for invalid user nps from 122.51.104.166 port 38884 ssh2 2020-06-15T03:51:04.803692ionos.janbro.de sshd[114797]: Invalid user virus from 122.51.104.166 port 41690 2020-06-15T03:51:04.852603ionos.janbro.de sshd[114797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.104.166 2020-06-15T03:51:04.803692ionos.janbro.de sshd[114797]: Invalid user virus from 122.51.104.166 port 41690 2020-06-15T03:51:06.838503ionos.janbro.de sshd[114797]: Failed password for invalid user virus from 122.51.104.166 port 41690 ssh2 2020-06-15T03:53:43.094257ionos.janbro.de sshd[114815]: Invalid user www from 122.51.104.166 port 43092 2020-06-15T03:53:43.157169ionos.janbro.de sshd[114815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.104.166 20 ... |
2020-06-15 14:45:58 |
| attackspambots | Jun 8 05:20:39 gestao sshd[6952]: Failed password for root from 122.51.104.166 port 55116 ssh2 Jun 8 05:22:52 gestao sshd[7008]: Failed password for root from 122.51.104.166 port 50500 ssh2 ... |
2020-06-08 12:52:32 |
| attackspam | (sshd) Failed SSH login from 122.51.104.166 (CN/China/-): 5 in the last 3600 secs |
2020-06-08 03:37:36 |
| attackspam | Invalid user tig from 122.51.104.166 port 55892 |
2020-05-24 16:06:35 |
| attack | SSH authentication failure x 6 reported by Fail2Ban ... |
2020-05-14 22:08:00 |
| attack | 5x Failed Password |
2020-05-01 15:44:52 |
| attackspambots | $f2bV_matches |
2020-04-26 17:02:09 |
| attackspambots | Apr 24 04:40:27 124388 sshd[17333]: Invalid user cz from 122.51.104.166 port 58688 Apr 24 04:40:27 124388 sshd[17333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.104.166 Apr 24 04:40:27 124388 sshd[17333]: Invalid user cz from 122.51.104.166 port 58688 Apr 24 04:40:29 124388 sshd[17333]: Failed password for invalid user cz from 122.51.104.166 port 58688 ssh2 Apr 24 04:43:16 124388 sshd[17341]: Invalid user admin from 122.51.104.166 port 59986 |
2020-04-24 15:07:23 |
| attack | web-1 [ssh] SSH Attack |
2020-04-07 17:30:35 |
| attackspambots | Mar 28 01:43:10 Ubuntu-1404-trusty-64-minimal sshd\[7581\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.104.166 user=mail Mar 28 01:43:12 Ubuntu-1404-trusty-64-minimal sshd\[7581\]: Failed password for mail from 122.51.104.166 port 42102 ssh2 Mar 29 01:02:39 Ubuntu-1404-trusty-64-minimal sshd\[30189\]: Invalid user vjj from 122.51.104.166 Mar 29 01:02:39 Ubuntu-1404-trusty-64-minimal sshd\[30189\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.104.166 Mar 29 01:02:41 Ubuntu-1404-trusty-64-minimal sshd\[30189\]: Failed password for invalid user vjj from 122.51.104.166 port 34974 ssh2 |
2020-03-29 08:10:40 |
| attack | Mar 20 17:26:09 XXX sshd[53169]: Invalid user postgres from 122.51.104.166 port 41888 |
2020-03-21 08:09:36 |
| attackspambots | Mar 19 14:55:32 hurricane sshd[10475]: Invalid user www-upload from 122.51.104.166 port 60078 Mar 19 14:55:32 hurricane sshd[10475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.104.166 Mar 19 14:55:35 hurricane sshd[10475]: Failed password for invalid user www-upload from 122.51.104.166 port 60078 ssh2 Mar 19 14:55:35 hurricane sshd[10475]: Received disconnect from 122.51.104.166 port 60078:11: Bye Bye [preauth] Mar 19 14:55:35 hurricane sshd[10475]: Disconnected from 122.51.104.166 port 60078 [preauth] Mar 19 14:59:38 hurricane sshd[10538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.104.166 user=r.r Mar 19 14:59:40 hurricane sshd[10538]: Failed password for r.r from 122.51.104.166 port 38952 ssh2 Mar 19 14:59:41 hurricane sshd[10538]: Received disconnect from 122.51.104.166 port 38952:11: Bye Bye [preauth] Mar 19 14:59:41 hurricane sshd[10538]: Disconnected from 122......... ------------------------------- |
2020-03-21 05:01:02 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 122.51.104.100 | attack | 2020-08-29T00:52:30.981665vps751288.ovh.net sshd\[26018\]: Invalid user db2inst3 from 122.51.104.100 port 56726 2020-08-29T00:52:30.989176vps751288.ovh.net sshd\[26018\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.104.100 2020-08-29T00:52:33.165921vps751288.ovh.net sshd\[26018\]: Failed password for invalid user db2inst3 from 122.51.104.100 port 56726 ssh2 2020-08-29T00:57:46.413841vps751288.ovh.net sshd\[26076\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.104.100 user=root 2020-08-29T00:57:48.309134vps751288.ovh.net sshd\[26076\]: Failed password for root from 122.51.104.100 port 58900 ssh2 |
2020-08-29 08:08:43 |
| 122.51.104.100 | attackspam | Aug 16 16:45:22 inter-technics sshd[12765]: Invalid user orange from 122.51.104.100 port 54786 Aug 16 16:45:22 inter-technics sshd[12765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.104.100 Aug 16 16:45:22 inter-technics sshd[12765]: Invalid user orange from 122.51.104.100 port 54786 Aug 16 16:45:24 inter-technics sshd[12765]: Failed password for invalid user orange from 122.51.104.100 port 54786 ssh2 Aug 16 16:50:21 inter-technics sshd[13086]: Invalid user aml from 122.51.104.100 port 49358 ... |
2020-08-17 02:48:02 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 122.51.104.166
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51344
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;122.51.104.166. IN A
;; AUTHORITY SECTION:
. 162 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020032001 1800 900 604800 86400
;; Query time: 48 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 21 05:00:59 CST 2020
;; MSG SIZE rcvd: 118Host 166.104.51.122.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 166.104.51.122.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 77.247.108.119 | attack | scans 2 times in preceeding hours on the ports (in chronological order) 8441 8443 resulting in total of 2 scans from 77.247.108.0/24 block. |
2020-07-05 21:58:06 |
| 103.205.5.179 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 95 - port: 7817 proto: TCP cat: Misc Attack |
2020-07-05 21:33:31 |
| 192.241.221.243 | attackbots | Fail2Ban Ban Triggered |
2020-07-05 21:26:27 |
| 60.251.133.73 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 53 - port: 2717 proto: TCP cat: Misc Attack |
2020-07-05 22:00:51 |
| 192.241.217.227 | attack | ET SCAN Zmap User-Agent (Inbound) - port: 80 proto: TCP cat: Detection of a Network Scan |
2020-07-05 21:28:04 |
| 193.228.91.110 | attackspam | ET COMPROMISED Known Compromised or Hostile Host Traffic group 10 - port: 22 proto: TCP cat: Misc Attack |
2020-07-05 21:44:46 |
| 62.210.189.183 | attackspambots | 07/05/2020-09:20:23.410564 62.210.189.183 Protocol: 17 ET SCAN Sipvicious Scan |
2020-07-05 21:59:24 |
| 60.246.92.145 | attack | 5555/tcp 5555/tcp 5555/tcp [2020-07-02/04]3pkt |
2020-07-05 22:01:27 |
| 220.163.15.100 | attackbotsspam | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2020-07-05 21:41:58 |
| 192.241.227.87 | attackbotsspam | Unauthorized connection attempt detected from IP address 192.241.227.87 to port 80 |
2020-07-05 21:45:35 |
| 104.236.136.172 | attackspam | ET CINS Active Threat Intelligence Poor Reputation IP group 100 - port: 11356 proto: TCP cat: Misc Attack |
2020-07-05 21:32:58 |
| 41.160.119.218 | attack | SSH Brute Force |
2020-07-05 21:22:20 |
| 124.193.236.144 | attack | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2020-07-05 21:52:08 |
| 45.14.150.130 | attackbots | SSH Brute Force |
2020-07-05 21:22:05 |
| 104.131.189.4 | attackbotsspam | 2020-07-05T15:38:27.505240ns386461 sshd\[24274\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.189.4 user=root 2020-07-05T15:38:29.374426ns386461 sshd\[24274\]: Failed password for root from 104.131.189.4 port 40395 ssh2 2020-07-05T15:40:29.295662ns386461 sshd\[26289\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.189.4 user=root 2020-07-05T15:40:31.581794ns386461 sshd\[26289\]: Failed password for root from 104.131.189.4 port 51164 ssh2 2020-07-05T15:41:08.229829ns386461 sshd\[26949\]: Invalid user user2 from 104.131.189.4 port 55246 2020-07-05T15:41:08.234351ns386461 sshd\[26949\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.189.4 ... |
2020-07-05 21:53:41 |