City: unknown
Region: unknown
Country: United States
Internet Service Provider: Frantech Solutions
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attack | TCP port : 11211 |
2020-09-17 19:15:58 |
| attackspam |
|
2020-09-17 10:32:37 |
| attackbots | TCP port : 11211; UDP ports : 123 / 1900 |
2020-09-09 02:55:54 |
| attack | TCP port : 11211; UDP ports : 123 / 1900 |
2020-09-08 18:28:06 |
| attackbots |
|
2020-08-30 07:51:48 |
| attackspam | Port scanning [2 denied] |
2020-08-28 16:04:11 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 209.141.52.58 | attackbotsspam | Tor exit node |
2020-05-28 05:53:27 |
| 209.141.52.28 | attackbotsspam | Invalid user fake from 209.141.52.28 port 43316 |
2020-04-03 23:38:34 |
| 209.141.52.28 | attackspambots | 2020-03-31T23:29:23.960103struts4.enskede.local sshd\[15895\]: Invalid user fake from 209.141.52.28 port 56462 2020-03-31T23:29:23.966908struts4.enskede.local sshd\[15895\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.52.28 2020-03-31T23:29:26.370910struts4.enskede.local sshd\[15895\]: Failed password for invalid user fake from 209.141.52.28 port 56462 ssh2 2020-03-31T23:29:27.837719struts4.enskede.local sshd\[15899\]: Invalid user admin from 209.141.52.28 port 33692 2020-03-31T23:29:27.843750struts4.enskede.local sshd\[15899\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.52.28 ... |
2020-04-01 06:01:27 |
| 209.141.52.28 | attackbots | Unauthorized connection attempt detected from IP address 209.141.52.28 to port 22 |
2020-03-31 17:59:14 |
| 209.141.52.137 | attack | Potential Directory Traversal Attempt. |
2020-03-10 15:57:11 |
| 209.141.52.141 | attack | Aug 29 06:52:12 ny01 sshd[5434]: Failed password for root from 209.141.52.141 port 32968 ssh2 Aug 29 06:58:15 ny01 sshd[6966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.52.141 Aug 29 06:58:17 ny01 sshd[6966]: Failed password for invalid user russ from 209.141.52.141 port 50054 ssh2 |
2019-08-29 19:12:24 |
| 209.141.52.141 | attackspambots | 2019-08-27T12:34:18.123081abusebot-6.cloudsearch.cf sshd\[27122\]: Invalid user server1 from 209.141.52.141 port 53642 |
2019-08-28 00:08:37 |
| 209.141.52.141 | attack | *Port Scan* detected from 209.141.52.141 (US/United States/-). 4 hits in the last 160 seconds |
2019-08-14 02:18:22 |
| 209.141.52.141 | attack | Aug 7 17:41:13 *** sshd[27021]: Invalid user sales from 209.141.52.141 |
2019-08-08 04:28:13 |
| 209.141.52.61 | attackbotsspam | 22/tcp 22/tcp 22/tcp... [2019-06-29/07-24]8pkt,1pt.(tcp) |
2019-07-25 01:52:11 |
| 209.141.52.61 | attackspambots | MultiHost/MultiPort Probe, Scan, Hack - |
2019-07-17 16:21:22 |
| 209.141.52.61 | attackbotsspam | 22/tcp 22/tcp 22/tcp [2019-06-29/07-04]3pkt |
2019-07-04 23:42:44 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 209.141.52.232
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30708
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;209.141.52.232. IN A
;; AUTHORITY SECTION:
. 575 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020082800 1800 900 604800 86400
;; Query time: 88 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 28 16:04:05 CST 2020
;; MSG SIZE rcvd: 118232.52.141.209.in-addr.arpa domain name pointer fictionblue.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
232.52.141.209.in-addr.arpa name = fictionblue.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 89.66.86.98 | attack | Feb 12 16:48:51 lukav-desktop sshd\[16121\]: Invalid user rundstein from 89.66.86.98 Feb 12 16:48:51 lukav-desktop sshd\[16121\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.66.86.98 Feb 12 16:48:53 lukav-desktop sshd\[16121\]: Failed password for invalid user rundstein from 89.66.86.98 port 38306 ssh2 Feb 12 16:51:54 lukav-desktop sshd\[16690\]: Invalid user xnc from 89.66.86.98 Feb 12 16:51:54 lukav-desktop sshd\[16690\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.66.86.98 |
2020-02-12 23:17:28 |
| 12.182.205.18 | attack | Unauthorized connection attempt from IP address 12.182.205.18 on Port 445(SMB) |
2020-02-12 22:52:31 |
| 139.224.149.86 | attackspambots | SSH/22 MH Probe, BF, Hack - |
2020-02-12 23:16:06 |
| 104.244.78.197 | attack | Feb 12 16:18:16 server2 sshd\[22244\]: Invalid user fake from 104.244.78.197 Feb 12 16:18:17 server2 sshd\[22246\]: Invalid user admin from 104.244.78.197 Feb 12 16:18:17 server2 sshd\[22248\]: User root from 104.244.78.197 not allowed because not listed in AllowUsers Feb 12 16:18:17 server2 sshd\[22250\]: Invalid user ubnt from 104.244.78.197 Feb 12 16:18:17 server2 sshd\[22252\]: Invalid user guest from 104.244.78.197 Feb 12 16:18:17 server2 sshd\[22254\]: Invalid user support from 104.244.78.197 |
2020-02-12 22:56:57 |
| 171.236.245.183 | attack | Unauthorized connection attempt from IP address 171.236.245.183 on Port 445(SMB) |
2020-02-12 23:02:47 |
| 89.248.167.141 | attackbotsspam | Excessive Port-Scanning |
2020-02-12 22:44:17 |
| 58.213.26.114 | attackspam | Distributed brute force attack |
2020-02-12 23:07:38 |
| 14.231.100.180 | attackbots | 1581515185 - 02/12/2020 14:46:25 Host: 14.231.100.180/14.231.100.180 Port: 445 TCP Blocked |
2020-02-12 22:43:14 |
| 197.209.196.212 | attackbots | Unauthorized connection attempt from IP address 197.209.196.212 on Port 445(SMB) |
2020-02-12 23:07:05 |
| 113.21.116.29 | attackspam | Distributed brute force attack |
2020-02-12 23:11:21 |
| 182.75.248.254 | attack | Feb 12 14:46:26 lnxmysql61 sshd[15984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.75.248.254 |
2020-02-12 22:41:34 |
| 41.231.5.207 | attackspambots | Feb 12 04:38:31 web9 sshd\[26048\]: Invalid user nadmin from 41.231.5.207 Feb 12 04:38:31 web9 sshd\[26048\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.231.5.207 Feb 12 04:38:33 web9 sshd\[26048\]: Failed password for invalid user nadmin from 41.231.5.207 port 50964 ssh2 Feb 12 04:41:14 web9 sshd\[26425\]: Invalid user postgres from 41.231.5.207 Feb 12 04:41:14 web9 sshd\[26425\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.231.5.207 |
2020-02-12 23:03:45 |
| 80.66.81.148 | attack | Feb 12 15:01:10 mail postfix/smtpd\[16060\]: warning: unknown\[80.66.81.148\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Feb 12 15:31:16 mail postfix/smtpd\[16681\]: warning: unknown\[80.66.81.148\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Feb 12 15:31:36 mail postfix/smtpd\[16681\]: warning: unknown\[80.66.81.148\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Feb 12 15:32:15 mail postfix/smtpd\[16681\]: warning: unknown\[80.66.81.148\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ |
2020-02-12 22:42:40 |
| 36.155.102.212 | attack | Feb 12 11:31:21 vps46666688 sshd[29300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.155.102.212 Feb 12 11:31:23 vps46666688 sshd[29300]: Failed password for invalid user monitoring from 36.155.102.212 port 41300 ssh2 ... |
2020-02-12 23:04:02 |
| 149.202.52.221 | attackbots | Feb 12 11:46:50 firewall sshd[15487]: Invalid user saeuberlich from 149.202.52.221 Feb 12 11:46:51 firewall sshd[15487]: Failed password for invalid user saeuberlich from 149.202.52.221 port 43204 ssh2 Feb 12 11:49:52 firewall sshd[15611]: Invalid user ryan from 149.202.52.221 ... |
2020-02-12 23:22:18 |