City: unknown
Region: unknown
Country: China
Internet Service Provider: ChinaNet Hainan Province Network
Hostname: unknown
Organization: unknown
Usage Type: unknown
| Type | Details | Datetime |
|---|---|---|
| attack | Unauthorized connection attempt detected from IP address 124.225.42.7 to port 8908 [J] |
2020-01-22 21:07:56 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 124.225.42.93 | attack |
|
2020-09-23 02:15:00 |
| 124.225.42.93 | attackspam |
|
2020-09-22 18:17:42 |
| 124.225.42.179 | attackbotsspam | Web Server Scan. RayID: 55e0473e3d4ed362, UA: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E), Country: CN |
2020-02-01 20:58:37 |
| 124.225.42.152 | attackbotsspam | Unauthorized connection attempt detected from IP address 124.225.42.152 to port 8080 |
2019-12-31 06:24:00 |
| 124.225.42.39 | attackbots | The IP has triggered Cloudflare WAF. CF-Ray: 543038dc19b1e4fa | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: ip.skk.moe | User-Agent: Mozilla/4.038533357 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1) QQBrowser/6.0 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-12 03:27:05 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.225.42.7
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53162
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;124.225.42.7. IN A
;; AUTHORITY SECTION:
. 438 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020012200 1800 900 604800 86400
;; Query time: 114 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 21:07:51 CST 2020
;; MSG SIZE rcvd: 116Host 7.42.225.124.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 100.100.2.136, trying next server
;; Got SERVFAIL reply from 100.100.2.138, trying next server
Server: 100.100.2.138
Address: 100.100.2.138#53
** server can't find 7.42.225.124.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.85.109.44 | attack | Automatic report generated by Wazuh |
2019-08-04 15:07:11 |
| 122.195.200.148 | attackspam | Aug 4 06:52:02 thevastnessof sshd[29606]: Failed password for root from 122.195.200.148 port 17468 ssh2 ... |
2019-08-04 14:55:11 |
| 125.227.57.223 | attackbots | Aug 4 03:30:25 ncomp sshd[18789]: Invalid user bowling from 125.227.57.223 Aug 4 03:30:25 ncomp sshd[18789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.227.57.223 Aug 4 03:30:25 ncomp sshd[18789]: Invalid user bowling from 125.227.57.223 Aug 4 03:30:27 ncomp sshd[18789]: Failed password for invalid user bowling from 125.227.57.223 port 34030 ssh2 |
2019-08-04 15:37:21 |
| 101.230.198.136 | attack | SSH-BruteForce |
2019-08-04 15:28:41 |
| 191.136.19.231 | attackbotsspam | Unauthorised access (Aug 4) SRC=191.136.19.231 LEN=44 TTL=49 ID=21272 TCP DPT=23 WINDOW=53199 SYN |
2019-08-04 15:08:53 |
| 118.25.99.137 | attack | SSH/22 MH Probe, BF, Hack - |
2019-08-04 14:48:11 |
| 85.93.93.57 | attackbots | MultiHost/MultiPort Probe, Scan, Hack - |
2019-08-04 15:11:36 |
| 162.144.109.122 | attackspam | Aug 4 05:50:11 srv-4 sshd\[5430\]: Invalid user amir from 162.144.109.122 Aug 4 05:50:11 srv-4 sshd\[5430\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.144.109.122 Aug 4 05:50:13 srv-4 sshd\[5430\]: Failed password for invalid user amir from 162.144.109.122 port 54708 ssh2 ... |
2019-08-04 15:01:34 |
| 1.172.50.33 | attackbots | Aug 2 04:06:12 localhost kernel: [15977365.327059] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=1.172.50.33 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=13663 PROTO=TCP SPT=5993 DPT=37215 WINDOW=16196 RES=0x00 SYN URGP=0 Aug 2 04:06:12 localhost kernel: [15977365.327084] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=1.172.50.33 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=13663 PROTO=TCP SPT=5993 DPT=37215 SEQ=758669438 ACK=0 WINDOW=16196 RES=0x00 SYN URGP=0 Aug 3 20:44:38 localhost kernel: [16123671.699839] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=1.172.50.33 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=37184 PROTO=TCP SPT=44294 DPT=37215 WINDOW=34091 RES=0x00 SYN URGP=0 Aug 3 20:44:38 localhost kernel: [16123671.699857] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=1.172.50.33 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x0 |
2019-08-04 15:45:26 |
| 112.16.93.184 | attackbots | Aug 4 03:46:56 lnxded64 sshd[14879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.16.93.184 |
2019-08-04 15:13:11 |
| 106.52.126.205 | attack | Aug 4 03:36:07 site1 sshd\[56144\]: Invalid user tomcat from 106.52.126.205Aug 4 03:36:08 site1 sshd\[56144\]: Failed password for invalid user tomcat from 106.52.126.205 port 40056 ssh2Aug 4 03:40:54 site1 sshd\[56621\]: Invalid user webin from 106.52.126.205Aug 4 03:40:57 site1 sshd\[56621\]: Failed password for invalid user webin from 106.52.126.205 port 35850 ssh2Aug 4 03:45:43 site1 sshd\[57655\]: Invalid user zaky from 106.52.126.205Aug 4 03:45:45 site1 sshd\[57655\]: Failed password for invalid user zaky from 106.52.126.205 port 59883 ssh2 ... |
2019-08-04 14:56:33 |
| 79.187.192.249 | attackspam | detected by Fail2Ban |
2019-08-04 15:43:00 |
| 54.38.36.210 | attackspambots | SSH Brute Force |
2019-08-04 15:13:47 |
| 193.201.224.214 | attack | Aug 4 06:39:53 andromeda sshd\[20091\]: Invalid user 0 from 193.201.224.214 port 41986 Aug 4 06:39:53 andromeda sshd\[20091\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.201.224.214 Aug 4 06:39:55 andromeda sshd\[20091\]: Failed password for invalid user 0 from 193.201.224.214 port 41986 ssh2 |
2019-08-04 15:14:24 |
| 101.109.83.140 | attackspam | SSH-BruteForce |
2019-08-04 15:32:06 |