City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 124.90.53.117 | attack | Unauthorized connection attempt detected from IP address 124.90.53.117 to port 8123 [J] |
2020-03-02 14:58:23 |
| 124.90.53.192 | attackbots | The IP has triggered Cloudflare WAF. CF-Ray: 5433b18c5dbc9406 | WAF_Rule_ID: 1112825 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Mobile Safari/537.36 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-12 03:52:16 |
| 124.90.53.53 | attack | The IP has triggered Cloudflare WAF. CF-Ray: 5410570a3a7a9629 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: ip.skk.moe | User-Agent: Mozilla/5.081397758 Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0) | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 03:49:39 |
| 124.90.53.173 | attack | The IP has triggered Cloudflare WAF. CF-Ray: 540fa701ee9a2808 | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: api.skk.moe | User-Agent: Mozilla/4.049897920 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729) | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 02:15:34 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.90.53.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43993
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;124.90.53.5. IN A
;; AUTHORITY SECTION:
. 585 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030801 1800 900 604800 86400
;; Query time: 74 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 00:37:19 CST 2022
;; MSG SIZE rcvd: 104Host 5.53.90.124.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 5.53.90.124.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.155.17.74 | attackbotsspam | Jul 12 00:01:36 main sshd[16938]: Failed password for invalid user jenkins from 139.155.17.74 port 38048 ssh2 Jul 12 00:03:55 main sshd[16967]: Failed password for invalid user lianqing from 139.155.17.74 port 42422 ssh2 Jul 12 00:06:25 main sshd[17004]: Failed password for invalid user gengxin from 139.155.17.74 port 46816 ssh2 |
2020-07-13 07:27:11 |
| 143.0.82.81 | attackspam | Email rejected due to spam filtering |
2020-07-13 07:04:38 |
| 45.141.84.110 | attackbotsspam | Jul 12 23:48:53 backup kernel: [1542072.116856] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=45.141.84.110 DST=79.143.186.54 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=65026 PROTO=TCP SPT=47617 DPT=8767 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 13 00:36:54 backup kernel: [1544952.745902] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=45.141.84.110 DST=79.143.186.54 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=44218 PROTO=TCP SPT=47617 DPT=9753 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 13 00:46:32 backup kernel: [1545531.347230] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=45.141.84.110 DST=79.143.186.54 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=34229 PROTO=TCP SPT=47617 DPT=6731 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2020-07-13 07:16:37 |
| 103.125.190.103 | attackbotsspam | ET CINS Active Threat Intelligence Poor Reputation IP group 87 - port: 3389 proto: tcp cat: Misc Attackbytes: 60 |
2020-07-13 07:35:03 |
| 222.186.42.137 | attackbots | 2020-07-13T01:12:28.391894sd-86998 sshd[17568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.137 user=root 2020-07-13T01:12:30.253191sd-86998 sshd[17568]: Failed password for root from 222.186.42.137 port 19935 ssh2 2020-07-13T01:12:32.409246sd-86998 sshd[17568]: Failed password for root from 222.186.42.137 port 19935 ssh2 2020-07-13T01:12:28.391894sd-86998 sshd[17568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.137 user=root 2020-07-13T01:12:30.253191sd-86998 sshd[17568]: Failed password for root from 222.186.42.137 port 19935 ssh2 2020-07-13T01:12:32.409246sd-86998 sshd[17568]: Failed password for root from 222.186.42.137 port 19935 ssh2 2020-07-13T01:12:28.391894sd-86998 sshd[17568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.137 user=root 2020-07-13T01:12:30.253191sd-86998 sshd[17568]: Failed password for root from ... |
2020-07-13 07:19:29 |
| 123.253.228.166 | attack | Jul 12 22:49:01 main sshd[5214]: Failed password for invalid user ronak from 123.253.228.166 port 56262 ssh2 |
2020-07-13 07:36:26 |
| 54.36.163.141 | attackspam | Jul 13 00:17:23 backup sshd[360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.163.141 Jul 13 00:17:25 backup sshd[360]: Failed password for invalid user nathan from 54.36.163.141 port 53870 ssh2 ... |
2020-07-13 07:11:19 |
| 94.102.51.16 | attackbots | ET DROP Dshield Block Listed Source group 1 - port: 1120 proto: tcp cat: Misc Attackbytes: 60 |
2020-07-13 07:04:59 |
| 120.71.145.254 | attack | 2020-07-12T22:07:22+0200 Failed SSH Authentication/Brute Force Attack.(Server 2) |
2020-07-13 07:31:32 |
| 106.12.59.245 | attack | Unauthorised connection attempt detected at AUO FR1 NODE2. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) |
2020-07-13 07:20:56 |
| 202.143.111.42 | attackspam | Invalid user luella from 202.143.111.42 port 54594 |
2020-07-13 07:32:26 |
| 159.65.216.161 | attackbots | Jul 13 00:55:55 ns381471 sshd[27971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.216.161 Jul 13 00:55:57 ns381471 sshd[27971]: Failed password for invalid user pava from 159.65.216.161 port 55832 ssh2 |
2020-07-13 07:10:29 |
| 37.59.224.39 | attack | Jul 12 22:51:42 rocket sshd[6079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.224.39 Jul 12 22:51:44 rocket sshd[6079]: Failed password for invalid user manu from 37.59.224.39 port 42436 ssh2 ... |
2020-07-13 07:05:20 |
| 190.145.160.68 | attackbotsspam | Unauthorized connection attempt from IP address 190.145.160.68 on Port 445(SMB) |
2020-07-13 07:35:55 |
| 139.59.45.45 | attackbotsspam | 2020-07-12T23:25:50.782420mail.csmailer.org sshd[8960]: Invalid user verdaccio from 139.59.45.45 port 50836 2020-07-12T23:25:50.786208mail.csmailer.org sshd[8960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.45.45 2020-07-12T23:25:50.782420mail.csmailer.org sshd[8960]: Invalid user verdaccio from 139.59.45.45 port 50836 2020-07-12T23:25:53.415014mail.csmailer.org sshd[8960]: Failed password for invalid user verdaccio from 139.59.45.45 port 50836 ssh2 2020-07-12T23:28:04.841543mail.csmailer.org sshd[9117]: Invalid user akim from 139.59.45.45 port 48978 ... |
2020-07-13 07:23:26 |