City: San Francisco
Region: California
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 192.241.220.25 | proxy | VPN fraud |
2023-04-03 13:03:49 |
| 192.241.220.144 | attackbots | 26/tcp 3391/udp 771/tcp... [2020-09-16/10-05]15pkt,12pt.(tcp),2pt.(udp) |
2020-10-07 06:19:08 |
| 192.241.220.144 | attack | 26/tcp 3391/udp 771/tcp... [2020-09-16/10-05]15pkt,12pt.(tcp),2pt.(udp) |
2020-10-06 22:34:49 |
| 192.241.220.144 | attackbotsspam | 26/tcp 3391/udp 771/tcp... [2020-09-16/10-05]15pkt,12pt.(tcp),2pt.(udp) |
2020-10-06 14:20:10 |
| 192.241.220.224 | attackspambots |
|
2020-10-06 04:26:35 |
| 192.241.220.224 | attackspam |
|
2020-10-05 20:27:56 |
| 192.241.220.224 | attackbotsspam |
|
2020-10-05 12:18:29 |
| 192.241.220.248 | attack | Port scan: Attack repeated for 24 hours |
2020-09-28 05:06:46 |
| 192.241.220.248 | attackspambots | TCP ports : 139 / 4200 |
2020-09-27 21:25:06 |
| 192.241.220.248 | attackspam | 2020-09-26 22:41:32 wonderland sendmail[2203]: 08QKfWgQ002203: rejecting commands from zg-0915a-156.stretchoid.com [192.241.220.248] due to pre-greeting traffic after 0 seconds |
2020-09-27 13:07:39 |
| 192.241.220.199 | attackspambots |
|
2020-09-14 02:28:14 |
| 192.241.220.199 | attackbotsspam | port scan and connect, tcp 27017 (mongodb) |
2020-09-13 18:26:03 |
| 192.241.220.88 | attack | TCP ports : 3306 / 5431 / 8443 |
2020-09-07 20:25:36 |
| 192.241.220.88 | attackbotsspam | Scanned 1 times in the last 24 hours on port 22 |
2020-09-07 12:10:25 |
| 192.241.220.88 | attackspam | *Port Scan* detected from 192.241.220.88 (US/United States/California/San Francisco/zg-0823a-66.stretchoid.com). 4 hits in the last 291 seconds |
2020-09-07 04:54:32 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 192.241.220.246
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40014
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;192.241.220.246. IN A
;; AUTHORITY SECTION:
. 137 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022061102 1800 900 604800 86400
;; Query time: 70 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 12 08:44:46 CST 2022
;; MSG SIZE rcvd: 108246.220.241.192.in-addr.arpa domain name pointer zg-0421d-93.stretchoid.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
246.220.241.192.in-addr.arpa name = zg-0421d-93.stretchoid.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.234.18.158 | attack | Sep 6 02:55:10 sshgateway sshd\[13391\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.18.158 user=root Sep 6 02:55:12 sshgateway sshd\[13391\]: Failed password for root from 49.234.18.158 port 59986 ssh2 Sep 6 03:03:58 sshgateway sshd\[14605\]: Invalid user test from 49.234.18.158 |
2020-09-06 16:47:57 |
| 195.54.161.85 | attackbots | [MK-VM6] Blocked by UFW |
2020-09-06 16:58:56 |
| 62.4.19.112 | attackbotsspam | 1 Attack(s) Detected [DoS Attack: SYN/ACK Scan] from source: 62.4.19.112, port 80, Saturday, September 05, 2020 05:55:37 |
2020-09-06 16:31:04 |
| 85.209.0.253 | attackspam | Brute-force attempt banned |
2020-09-06 16:42:00 |
| 190.214.30.18 | attack | 20/9/6@02:50:30: FAIL: Alarm-Network address from=190.214.30.18 20/9/6@02:50:30: FAIL: Alarm-Network address from=190.214.30.18 ... |
2020-09-06 17:00:10 |
| 117.5.46.250 | attack | Unauthorized connection attempt from IP address 117.5.46.250 on Port 445(SMB) |
2020-09-06 17:04:23 |
| 190.203.65.170 | attack | 445/tcp [2020-09-05]1pkt |
2020-09-06 16:36:38 |
| 38.122.188.83 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-09-06 16:51:15 |
| 61.7.144.24 | attackbotsspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-09-06 17:01:07 |
| 121.241.244.92 | attackbotsspam | Sep 6 09:52:18 minden010 sshd[5265]: Failed password for root from 121.241.244.92 port 59650 ssh2 Sep 6 09:56:38 minden010 sshd[6778]: Failed password for root from 121.241.244.92 port 46853 ssh2 ... |
2020-09-06 16:43:28 |
| 134.17.94.214 | attackspambots | Sep 6 00:51:00 host sshd\[30217\]: Failed password for root from 134.17.94.214 port 25396 ssh2 Sep 6 00:54:56 host sshd\[30343\]: Invalid user student02 from 134.17.94.214 Sep 6 00:54:56 host sshd\[30343\]: Failed password for invalid user student02 from 134.17.94.214 port 25397 ssh2 ... |
2020-09-06 16:32:35 |
| 190.255.222.73 | attackbotsspam | ... |
2020-09-06 16:49:17 |
| 116.247.81.99 | attack | Sep 6 08:18:20 server sshd[11047]: Failed password for root from 116.247.81.99 port 49775 ssh2 Sep 6 08:21:53 server sshd[15542]: Failed password for root from 116.247.81.99 port 41563 ssh2 Sep 6 08:25:29 server sshd[20618]: Failed password for root from 116.247.81.99 port 33551 ssh2 |
2020-09-06 16:53:37 |
| 50.196.46.20 | attack | Honeypot attack, port: 81, PTR: 50-196-46-20-static.hfc.comcastbusiness.net. |
2020-09-06 16:27:15 |
| 2.92.159.63 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-09-06 16:33:50 |