City: unknown
Region: unknown
Country: Indonesia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 202.138.242.111 | attack | Telnetd brute force attack detected by fail2ban |
2020-06-01 07:18:38 |
| 202.138.242.37 | attack | 1588363984 - 05/01/2020 22:13:04 Host: 202.138.242.37/202.138.242.37 Port: 445 TCP Blocked |
2020-05-02 06:50:18 |
| 202.138.242.21 | attack | 2020-04-05T02:01:49.009163struts4.enskede.local sshd\[27803\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.138.242.21 user=root 2020-04-05T02:01:51.378143struts4.enskede.local sshd\[27803\]: Failed password for root from 202.138.242.21 port 39604 ssh2 2020-04-05T02:04:48.606620struts4.enskede.local sshd\[27872\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.138.242.21 user=root 2020-04-05T02:04:51.540384struts4.enskede.local sshd\[27872\]: Failed password for root from 202.138.242.21 port 51584 ssh2 2020-04-05T02:06:27.282474struts4.enskede.local sshd\[27914\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.138.242.21 user=root ... |
2020-04-05 08:23:26 |
| 202.138.242.47 | attack | Unauthorized SSH connection attempt |
2019-11-08 21:20:11 |
| 202.138.242.22 | attackbots | IP: 202.138.242.22 ASN: AS9657 Melsa-i-net AS Port: Simple Mail Transfer 25 Found in one or more Blacklists Date: 12/10/2019 6:06:23 AM UTC |
2019-10-12 19:27:31 |
| 202.138.242.22 | attackspam | proto=tcp . spt=55919 . dpt=25 . (Found on Blocklist de Oct 03) (497) |
2019-10-05 02:03:34 |
| 202.138.242.101 | attack | postfix (unknown user, SPF fail or relay access denied) |
2019-10-02 07:18:29 |
| 202.138.242.6 | attackspambots | Mail sent to address hacked/leaked from atari.st |
2019-09-16 01:53:53 |
| 202.138.242.121 | attackbots | Aug 22 22:27:14 dedicated sshd[10267]: Invalid user rso from 202.138.242.121 port 44700 |
2019-08-23 09:45:45 |
| 202.138.242.121 | attack | Aug 18 14:14:56 XXX sshd[12187]: Invalid user testphp from 202.138.242.121 port 35348 |
2019-08-19 02:23:21 |
| 202.138.242.121 | attackspambots | Aug 15 02:09:59 web9 sshd\[26350\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.138.242.121 user=mysql Aug 15 02:10:00 web9 sshd\[26350\]: Failed password for mysql from 202.138.242.121 port 43046 ssh2 Aug 15 02:15:44 web9 sshd\[27399\]: Invalid user omsagent from 202.138.242.121 Aug 15 02:15:44 web9 sshd\[27399\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.138.242.121 Aug 15 02:15:46 web9 sshd\[27399\]: Failed password for invalid user omsagent from 202.138.242.121 port 36398 ssh2 |
2019-08-15 20:22:52 |
| 202.138.242.121 | attackspam | $f2bV_matches |
2019-08-14 18:07:42 |
| 202.138.242.6 | attack | Unauthorized connection attempt from IP address 202.138.242.6 on Port 25(SMTP) |
2019-08-12 10:43:30 |
| 202.138.242.121 | attackbots | 2019-07-15T08:23:28.942435lon01.zurich-datacenter.net sshd\[22264\]: Invalid user odbc from 202.138.242.121 port 46070 2019-07-15T08:23:28.946718lon01.zurich-datacenter.net sshd\[22264\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.138.242.121 2019-07-15T08:23:30.935706lon01.zurich-datacenter.net sshd\[22264\]: Failed password for invalid user odbc from 202.138.242.121 port 46070 ssh2 2019-07-15T08:29:17.459106lon01.zurich-datacenter.net sshd\[22360\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.138.242.121 user=root 2019-07-15T08:29:19.693844lon01.zurich-datacenter.net sshd\[22360\]: Failed password for root from 202.138.242.121 port 45104 ssh2 ... |
2019-07-15 15:06:34 |
| 202.138.242.121 | attackspam | 2019-07-13T16:49:51.179215abusebot-4.cloudsearch.cf sshd\[9858\]: Invalid user oracle from 202.138.242.121 port 44994 |
2019-07-14 01:06:26 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 202.138.242.41
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1333
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;202.138.242.41. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020401 1800 900 604800 86400
;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 02:09:39 CST 2025
;; MSG SIZE rcvd: 107Host 41.242.138.202.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 41.242.138.202.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 89.22.152.24 | attackbotsspam | Unauthorized connection attempt detected from IP address 89.22.152.24 to port 81 [T] |
2020-07-22 01:14:28 |
| 196.219.163.197 | attackbotsspam |
|
2020-07-22 01:04:30 |
| 52.163.203.13 | attack | Unauthorized connection attempt detected from IP address 52.163.203.13 to port 1433 [T] |
2020-07-22 00:59:08 |
| 164.68.112.178 | attackbots |
|
2020-07-22 01:08:17 |
| 40.76.67.205 | attackspam | Unauthorized connection attempt detected from IP address 40.76.67.205 to port 1433 [T] |
2020-07-22 00:42:44 |
| 89.248.174.193 | attackbots | ET DROP Dshield Block Listed Source group 1 - port: 5986 proto: tcp cat: Misc Attackbytes: 60 |
2020-07-22 01:13:57 |
| 52.152.130.194 | attackspam | Unauthorized connection attempt detected from IP address 52.152.130.194 to port 1433 [T] |
2020-07-22 01:16:45 |
| 218.92.0.215 | attack | Jul 21 18:41:25 v22018053744266470 sshd[14001]: Failed password for root from 218.92.0.215 port 10314 ssh2 Jul 21 18:41:37 v22018053744266470 sshd[14014]: Failed password for root from 218.92.0.215 port 44207 ssh2 ... |
2020-07-22 00:45:46 |
| 104.211.78.121 | attackspambots | Unauthorized connection attempt detected from IP address 104.211.78.121 to port 1433 |
2020-07-22 01:12:39 |
| 174.138.41.13 | attackbots | 174.138.41.13 - - [21/Jul/2020:15:03:01 +0100] "POST /wp/wp-login.php HTTP/1.1" 200 1865 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 174.138.41.13 - - [21/Jul/2020:15:03:02 +0100] "POST /wp/wp-login.php HTTP/1.1" 200 1857 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 174.138.41.13 - - [21/Jul/2020:15:03:03 +0100] "POST /wp/xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-07-22 00:50:43 |
| 187.174.237.26 | attack | Unauthorized connection attempt detected from IP address 187.174.237.26 to port 445 [T] |
2020-07-22 01:05:32 |
| 34.76.17.151 | attackbots | Unauthorized connection attempt detected from IP address 34.76.17.151 to port 2121 [T] |
2020-07-22 01:01:27 |
| 52.142.12.39 | attackspambots | Unauthorized connection attempt detected from IP address 52.142.12.39 to port 1433 [T] |
2020-07-22 00:40:24 |
| 91.105.139.37 | attack | Unauthorized connection attempt detected from IP address 91.105.139.37 to port 23 [T] |
2020-07-22 00:36:04 |
| 52.186.85.231 | attack | Unauthorized connection attempt detected from IP address 52.186.85.231 to port 1433 |
2020-07-22 00:58:23 |