City: unknown
Region: unknown
Country: China
Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackbots | ECShop Remote Code Execution Vulnerability |
2019-07-07 18:15:35 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 129.204.42.59 | attackspambots | Oct 12 17:52:33 host1 sshd[2044949]: Failed password for invalid user web from 129.204.42.59 port 59794 ssh2 Oct 12 17:54:56 host1 sshd[2045026]: Invalid user platon from 129.204.42.59 port 56908 Oct 12 17:54:56 host1 sshd[2045026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.42.59 Oct 12 17:54:56 host1 sshd[2045026]: Invalid user platon from 129.204.42.59 port 56908 Oct 12 17:54:58 host1 sshd[2045026]: Failed password for invalid user platon from 129.204.42.59 port 56908 ssh2 ... |
2020-10-13 00:08:20 |
| 129.204.42.59 | attackbots | Failed password for invalid user teamspeak3 from 129.204.42.59 port 36598 ssh2 |
2020-10-12 15:31:05 |
| 129.204.42.59 | attackspam | Sep 27 11:55:09 rancher-0 sshd[334573]: Invalid user usuario from 129.204.42.59 port 48020 ... |
2020-09-28 00:37:45 |
| 129.204.42.59 | attackspambots | Invalid user da from 129.204.42.59 port 40244 |
2020-09-27 16:39:42 |
| 129.204.42.59 | attackbotsspam | Sep 11 18:30:57 sshgateway sshd\[24343\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.42.59 user=root Sep 11 18:30:59 sshgateway sshd\[24343\]: Failed password for root from 129.204.42.59 port 48806 ssh2 Sep 11 18:35:27 sshgateway sshd\[24985\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.42.59 user=root |
2020-09-12 03:30:07 |
| 129.204.42.59 | attackbots | ... |
2020-09-07 19:29:50 |
| 129.204.42.144 | attackspam | Aug 28 23:25:04 ip106 sshd[2493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.42.144 Aug 28 23:25:07 ip106 sshd[2493]: Failed password for invalid user olga from 129.204.42.144 port 60108 ssh2 ... |
2020-08-29 07:28:52 |
| 129.204.42.59 | attack | Aug 25 02:57:48 gw1 sshd[24161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.42.59 Aug 25 02:57:50 gw1 sshd[24161]: Failed password for invalid user alice from 129.204.42.59 port 54922 ssh2 ... |
2020-08-25 07:22:55 |
| 129.204.42.144 | attackspam | $f2bV_matches |
2020-08-23 23:10:25 |
| 129.204.42.59 | attackspambots | Aug 16 08:51:42 roki-contabo sshd\[18874\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.42.59 user=root Aug 16 08:51:44 roki-contabo sshd\[18874\]: Failed password for root from 129.204.42.59 port 34418 ssh2 Aug 16 09:02:06 roki-contabo sshd\[19037\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.42.59 user=root Aug 16 09:02:08 roki-contabo sshd\[19037\]: Failed password for root from 129.204.42.59 port 58142 ssh2 Aug 16 09:07:18 roki-contabo sshd\[19091\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.42.59 user=root ... |
2020-08-16 15:36:16 |
| 129.204.42.59 | attackbots | Failed password for root from 129.204.42.59 port 59116 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.42.59 user=root Failed password for root from 129.204.42.59 port 52862 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.42.59 user=root Failed password for root from 129.204.42.59 port 46604 ssh2 |
2020-08-15 16:43:41 |
| 129.204.42.59 | attack | Aug 14 14:37:21 ns382633 sshd\[19311\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.42.59 user=root Aug 14 14:37:24 ns382633 sshd\[19311\]: Failed password for root from 129.204.42.59 port 36836 ssh2 Aug 14 14:47:22 ns382633 sshd\[21167\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.42.59 user=root Aug 14 14:47:25 ns382633 sshd\[21167\]: Failed password for root from 129.204.42.59 port 51486 ssh2 Aug 14 14:53:56 ns382633 sshd\[22138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.42.59 user=root |
2020-08-14 23:46:05 |
| 129.204.42.59 | attack | Failed password for root from 129.204.42.59 port 58686 ssh2 |
2020-08-12 06:18:42 |
| 129.204.42.144 | attack | Aug 10 22:59:04 master sshd[12705]: Failed password for root from 129.204.42.144 port 38402 ssh2 Aug 10 23:09:51 master sshd[13268]: Failed password for root from 129.204.42.144 port 48378 ssh2 Aug 10 23:16:30 master sshd[13415]: Failed password for root from 129.204.42.144 port 59494 ssh2 Aug 10 23:22:57 master sshd[13533]: Failed password for root from 129.204.42.144 port 42382 ssh2 Aug 10 23:29:22 master sshd[14138]: Failed password for root from 129.204.42.144 port 53506 ssh2 |
2020-08-11 06:57:49 |
| 129.204.42.144 | attack | 2020-07-10T17:10:38.248786na-vps210223 sshd[26409]: Invalid user odoo from 129.204.42.144 port 50978 2020-07-10T17:10:38.261482na-vps210223 sshd[26409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.42.144 2020-07-10T17:10:38.248786na-vps210223 sshd[26409]: Invalid user odoo from 129.204.42.144 port 50978 2020-07-10T17:10:40.154867na-vps210223 sshd[26409]: Failed password for invalid user odoo from 129.204.42.144 port 50978 ssh2 2020-07-10T17:15:24.050389na-vps210223 sshd[7143]: Invalid user userftp from 129.204.42.144 port 55434 ... |
2020-07-11 05:54:05 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 129.204.42.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48857
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;129.204.42.145. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019070700 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jul 07 18:15:19 CST 2019
;; MSG SIZE rcvd: 118Host 145.42.204.129.in-addr.arpa. not found: 3(NXDOMAIN)Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 145.42.204.129.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 205.185.119.219 | attackspambots | "SSH brute force auth login attempt." |
2020-01-23 17:52:05 |
| 149.202.148.185 | attackspam | Unauthorized connection attempt detected from IP address 149.202.148.185 to port 2220 [J] |
2020-01-23 17:43:34 |
| 110.56.16.157 | attack | 2020-01-23T10:44:09.8129501240 sshd\[19787\]: Invalid user demo from 110.56.16.157 port 38617 2020-01-23T10:44:09.8159881240 sshd\[19787\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.56.16.157 2020-01-23T10:44:12.1439001240 sshd\[19787\]: Failed password for invalid user demo from 110.56.16.157 port 38617 ssh2 ... |
2020-01-23 17:50:37 |
| 14.241.226.136 | attack | "SMTP brute force auth login attempt." |
2020-01-23 17:27:17 |
| 185.176.27.26 | attack | 01/23/2020-09:42:05.488259 185.176.27.26 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2020-01-23 17:23:22 |
| 167.172.51.13 | attackbots | Unauthorized connection attempt detected from IP address 167.172.51.13 to port 2220 [J] |
2020-01-23 17:32:02 |
| 14.63.162.208 | attack | Jan 23 10:14:52 sd-53420 sshd\[3147\]: Invalid user scanner from 14.63.162.208 Jan 23 10:14:52 sd-53420 sshd\[3147\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.162.208 Jan 23 10:14:54 sd-53420 sshd\[3147\]: Failed password for invalid user scanner from 14.63.162.208 port 42190 ssh2 Jan 23 10:18:08 sd-53420 sshd\[3728\]: Invalid user user from 14.63.162.208 Jan 23 10:18:08 sd-53420 sshd\[3728\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.162.208 ... |
2020-01-23 17:29:26 |
| 117.62.231.81 | attackspambots | "SSH brute force auth login attempt." |
2020-01-23 17:48:06 |
| 118.24.104.152 | attackbotsspam | Unauthorized connection attempt detected from IP address 118.24.104.152 to port 2220 [J] |
2020-01-23 17:11:36 |
| 121.229.25.154 | attackspambots | Jan 23 09:58:51 MK-Soft-VM8 sshd[2119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.25.154 Jan 23 09:58:53 MK-Soft-VM8 sshd[2119]: Failed password for invalid user public from 121.229.25.154 port 58428 ssh2 ... |
2020-01-23 17:21:56 |
| 14.63.169.33 | attack | Unauthorized connection attempt detected from IP address 14.63.169.33 to port 2220 [J] |
2020-01-23 17:23:00 |
| 51.83.255.44 | attackspam | "SSH brute force auth login attempt." |
2020-01-23 17:52:41 |
| 165.22.247.246 | attackbots | Unauthorized connection attempt detected from IP address 165.22.247.246 to port 2220 [J] |
2020-01-23 17:09:14 |
| 168.63.207.28 | attackbotsspam | "SSH brute force auth login attempt." |
2020-01-23 17:23:43 |
| 111.231.139.30 | attack | Jan 23 09:36:34 lnxmail61 sshd[1775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.139.30 |
2020-01-23 17:24:15 |