City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.93.194.241 | attack | ... |
2020-02-02 03:56:30 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.194.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8596
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;142.93.194.130. IN A
;; AUTHORITY SECTION:
. 199 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 09:44:41 CST 2022
;; MSG SIZE rcvd: 107Host 130.194.93.142.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 130.194.93.142.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 192.241.234.142 | attackspam | Unauthorized connection attempt detected from IP address 192.241.234.142 to port 8022 |
2020-03-31 18:36:02 |
| 106.12.27.213 | attackbotsspam | $f2bV_matches |
2020-03-31 18:32:42 |
| 1.32.238.18 | attackspam | firewall-block, port(s): 19769/tcp |
2020-03-31 19:03:39 |
| 217.133.58.148 | attackbots | Mar 31 08:52:38 sshgateway sshd\[12940\]: Invalid user pa from 217.133.58.148 Mar 31 08:52:38 sshgateway sshd\[12940\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217-133-58-148.static.clienti.tiscali.it Mar 31 08:52:40 sshgateway sshd\[12940\]: Failed password for invalid user pa from 217.133.58.148 port 58847 ssh2 |
2020-03-31 18:40:26 |
| 186.167.243.108 | attack | IP address logged by my Netflix account after the individual hacked into and locked me out of my account. Individual also changed my account settings to the most expensive plan, which allows multiple people (profiles) to watch, and several profiles were added. The name on my account was changed to "Juan". I contacted Netflix to have my account restored, so I was able to see the various IP addresses used. I will report all of them as well. |
2020-03-31 19:18:36 |
| 190.64.213.155 | attackbots | $f2bV_matches | Triggered by Fail2Ban at Vostok web server |
2020-03-31 18:44:27 |
| 27.54.51.69 | attackbots | firewall-block, port(s): 81/tcp |
2020-03-31 19:01:04 |
| 130.185.155.34 | attack | Brute force attempt |
2020-03-31 18:39:51 |
| 106.13.101.220 | attackspam | Jan 10 06:34:09 ms-srv sshd[2466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.101.220 user=root Jan 10 06:34:11 ms-srv sshd[2466]: Failed password for invalid user root from 106.13.101.220 port 54760 ssh2 |
2020-03-31 19:15:40 |
| 61.136.184.75 | attackspambots | Mar 31 16:04:56 itv-usvr-01 sshd[15424]: Invalid user test from 61.136.184.75 Mar 31 16:04:56 itv-usvr-01 sshd[15424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.136.184.75 Mar 31 16:04:56 itv-usvr-01 sshd[15424]: Invalid user test from 61.136.184.75 Mar 31 16:04:58 itv-usvr-01 sshd[15424]: Failed password for invalid user test from 61.136.184.75 port 41681 ssh2 Mar 31 16:08:13 itv-usvr-01 sshd[15549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.136.184.75 user=root Mar 31 16:08:15 itv-usvr-01 sshd[15549]: Failed password for root from 61.136.184.75 port 33159 ssh2 |
2020-03-31 18:55:03 |
| 103.243.141.144 | attack | Mar 31 12:50:58 debian-2gb-nbg1-2 kernel: \[7910912.034706\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=103.243.141.144 DST=195.201.40.59 LEN=40 TOS=0x18 PREC=0xA0 TTL=239 ID=17653 PROTO=TCP SPT=55883 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-03-31 18:53:29 |
| 106.12.215.244 | attack | Mar 31 01:37:31 new sshd[19034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.215.244 user=r.r Mar 31 01:37:34 new sshd[19034]: Failed password for r.r from 106.12.215.244 port 49238 ssh2 Mar 31 01:37:34 new sshd[19034]: Received disconnect from 106.12.215.244: 11: Bye Bye [preauth] Mar 31 01:45:19 new sshd[21614]: Failed password for invalid user lishanbin from 106.12.215.244 port 44466 ssh2 Mar 31 01:45:19 new sshd[21614]: Received disconnect from 106.12.215.244: 11: Bye Bye [preauth] Mar 31 01:47:17 new sshd[22085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.215.244 user=r.r Mar 31 01:47:19 new sshd[22085]: Failed password for r.r from 106.12.215.244 port 39868 ssh2 Mar 31 01:47:19 new sshd[22085]: Received disconnect from 106.12.215.244: 11: Bye Bye [preauth] Mar 31 01:49:13 new sshd[22556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ss........ ------------------------------- |
2020-03-31 18:36:50 |
| 68.183.236.29 | attackbots | $f2bV_matches | Triggered by Fail2Ban at Vostok web server |
2020-03-31 18:39:08 |
| 139.59.211.245 | attackbotsspam | $f2bV_matches |
2020-03-31 18:34:12 |
| 165.227.187.185 | attackbotsspam | Triggered by Fail2Ban at Ares web server |
2020-03-31 18:33:44 |