City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 41.242.138.30 | attackbots | (sshd) Failed SSH login from 41.242.138.30 (GH/Ghana/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 3 16:39:44 server sshd[5790]: Did not receive identification string from 41.242.138.30 port 56756 Oct 3 16:39:44 server sshd[5789]: Did not receive identification string from 41.242.138.30 port 56748 Oct 3 16:39:44 server sshd[5791]: Did not receive identification string from 41.242.138.30 port 56717 Oct 3 16:39:44 server sshd[5792]: Did not receive identification string from 41.242.138.30 port 56736 Oct 3 16:39:44 server sshd[5793]: Did not receive identification string from 41.242.138.30 port 56830 |
2020-10-05 07:02:56 |
| 41.242.138.30 | attackspam | (sshd) Failed SSH login from 41.242.138.30 (GH/Ghana/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 3 16:39:44 server sshd[5790]: Did not receive identification string from 41.242.138.30 port 56756 Oct 3 16:39:44 server sshd[5789]: Did not receive identification string from 41.242.138.30 port 56748 Oct 3 16:39:44 server sshd[5791]: Did not receive identification string from 41.242.138.30 port 56717 Oct 3 16:39:44 server sshd[5792]: Did not receive identification string from 41.242.138.30 port 56736 Oct 3 16:39:44 server sshd[5793]: Did not receive identification string from 41.242.138.30 port 56830 |
2020-10-04 23:10:50 |
| 41.242.138.30 | attackspambots | (sshd) Failed SSH login from 41.242.138.30 (GH/Ghana/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 3 16:39:44 server sshd[5790]: Did not receive identification string from 41.242.138.30 port 56756 Oct 3 16:39:44 server sshd[5789]: Did not receive identification string from 41.242.138.30 port 56748 Oct 3 16:39:44 server sshd[5791]: Did not receive identification string from 41.242.138.30 port 56717 Oct 3 16:39:44 server sshd[5792]: Did not receive identification string from 41.242.138.30 port 56736 Oct 3 16:39:44 server sshd[5793]: Did not receive identification string from 41.242.138.30 port 56830 |
2020-10-04 14:56:59 |
| 41.242.131.201 | attackspambots | Attempted connection to port 445. |
2020-08-25 03:09:40 |
| 41.242.138.12 | attackbotsspam | port scan and connect, tcp 1433 (ms-sql-s) |
2020-08-24 01:53:28 |
| 41.242.136.18 | attackspam | WordPress brute force |
2020-06-28 05:48:04 |
| 41.242.136.46 | attackbotsspam | WordPress brute force |
2020-06-28 05:47:35 |
| 41.242.139.28 | attack | WordPress brute force |
2020-06-26 06:01:59 |
| 41.242.136.23 | attackspam | Mar 17 19:05:22 b-admin sshd[2734]: Invalid user pi from 41.242.136.23 port 59108 Mar 17 19:05:22 b-admin sshd[2734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.242.136.23 Mar 17 19:05:25 b-admin sshd[2734]: Failed password for invalid user pi from 41.242.136.23 port 59108 ssh2 Mar 17 19:05:26 b-admin sshd[2734]: Connection closed by 41.242.136.23 port 59108 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=41.242.136.23 |
2020-03-18 03:35:34 |
| 41.242.136.148 | attackbotsspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-03-07 19:04:15 |
| 41.242.136.148 | attackbotsspam | unauthorized connection attempt |
2020-02-16 18:33:49 |
| 41.242.131.2 | attackspambots | Honeypot attack, port: 445, PTR: PTR record not found |
2020-01-27 23:38:40 |
| 41.242.131.19 | attack | unauthorized connection attempt |
2020-01-17 17:56:48 |
| 41.242.139.11 | attack | 1576077031 - 12/11/2019 16:10:31 Host: 41.242.139.11/41.242.139.11 Port: 445 TCP Blocked |
2019-12-12 00:02:31 |
| 41.242.139.62 | attackspam | Fail2Ban Ban Triggered HTTP SQL Injection Attempt |
2019-11-03 04:56:31 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.242.13.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37781
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;41.242.13.6. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020600 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 16:07:48 CST 2025
;; MSG SIZE rcvd: 104Host 6.13.242.41.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 6.13.242.41.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 66.240.205.34 | attackbots | Port scan: Attack repeated for 24 hours |
2019-09-25 20:31:23 |
| 59.86.31.68 | attackspambots | Unauthorised access (Sep 25) SRC=59.86.31.68 LEN=40 PREC=0x20 TTL=41 ID=52090 TCP DPT=8080 WINDOW=48344 SYN Unauthorised access (Sep 25) SRC=59.86.31.68 LEN=40 PREC=0x20 TTL=41 ID=63383 TCP DPT=8080 WINDOW=48344 SYN Unauthorised access (Sep 25) SRC=59.86.31.68 LEN=40 PREC=0x20 TTL=41 ID=2360 TCP DPT=8080 WINDOW=48344 SYN Unauthorised access (Sep 24) SRC=59.86.31.68 LEN=40 PREC=0x20 TTL=41 ID=48495 TCP DPT=8080 WINDOW=48344 SYN |
2019-09-25 20:15:38 |
| 222.186.30.165 | attackbotsspam | Sep 25 02:14:58 auw2 sshd\[17468\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.165 user=root Sep 25 02:15:00 auw2 sshd\[17468\]: Failed password for root from 222.186.30.165 port 45950 ssh2 Sep 25 02:15:02 auw2 sshd\[17468\]: Failed password for root from 222.186.30.165 port 45950 ssh2 Sep 25 02:15:05 auw2 sshd\[17468\]: Failed password for root from 222.186.30.165 port 45950 ssh2 Sep 25 02:23:58 auw2 sshd\[18250\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.165 user=root |
2019-09-25 20:28:51 |
| 222.186.52.89 | attackspam | Sep 25 14:34:54 vmanager6029 sshd\[27315\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.89 user=root Sep 25 14:34:56 vmanager6029 sshd\[27315\]: Failed password for root from 222.186.52.89 port 18092 ssh2 Sep 25 14:34:58 vmanager6029 sshd\[27315\]: Failed password for root from 222.186.52.89 port 18092 ssh2 |
2019-09-25 20:37:24 |
| 157.157.145.123 | attackspam | Sep 25 11:09:00 XXX sshd[46270]: Invalid user ofsaa from 157.157.145.123 port 37996 |
2019-09-25 20:23:38 |
| 182.38.92.162 | attackspambots | 2019-09-25 x@x 2019-09-25 x@x 2019-09-25 x@x 2019-09-25 x@x 2019-09-25 x@x 2019-09-25 x@x 2019-09-25 x@x 2019-09-25 x@x 2019-09-25 x@x 2019-09-25 x@x 2019-09-25 x@x 2019-09-25 x@x 2019-09-25 x@x 2019-09-25 x@x 2019-09-25 x@x 2019-09-25 x@x 2019-09-25 x@x 2019-09-25 x@x 2019-09-25 x@x 2019-09-25 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=182.38.92.162 |
2019-09-25 20:47:20 |
| 85.192.35.167 | attackbotsspam | Sep 25 14:14:11 DAAP sshd[4668]: Invalid user redhat from 85.192.35.167 port 59798 Sep 25 14:14:11 DAAP sshd[4668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.192.35.167 Sep 25 14:14:11 DAAP sshd[4668]: Invalid user redhat from 85.192.35.167 port 59798 Sep 25 14:14:12 DAAP sshd[4668]: Failed password for invalid user redhat from 85.192.35.167 port 59798 ssh2 Sep 25 14:24:00 DAAP sshd[4770]: Invalid user ud from 85.192.35.167 port 48302 ... |
2019-09-25 20:28:32 |
| 185.42.170.203 | attackspam | Sep 25 05:45:18 vpn01 sshd[23619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.42.170.203 Sep 25 05:45:21 vpn01 sshd[23619]: Failed password for invalid user abuse from 185.42.170.203 port 52286 ssh2 |
2019-09-25 20:22:21 |
| 42.159.95.109 | attackspam | Sep 25 02:37:13 php1 sshd\[20188\]: Invalid user shaheen@123 from 42.159.95.109 Sep 25 02:37:13 php1 sshd\[20188\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.95.109 Sep 25 02:37:15 php1 sshd\[20188\]: Failed password for invalid user shaheen@123 from 42.159.95.109 port 43700 ssh2 Sep 25 02:41:38 php1 sshd\[20677\]: Invalid user 121212 from 42.159.95.109 Sep 25 02:41:38 php1 sshd\[20677\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.95.109 |
2019-09-25 20:42:26 |
| 58.47.177.160 | attackbotsspam | Sep 25 02:26:04 eddieflores sshd\[25435\]: Invalid user gorges from 58.47.177.160 Sep 25 02:26:04 eddieflores sshd\[25435\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.47.177.160 Sep 25 02:26:07 eddieflores sshd\[25435\]: Failed password for invalid user gorges from 58.47.177.160 port 60716 ssh2 Sep 25 02:31:54 eddieflores sshd\[25910\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.47.177.160 user=root Sep 25 02:31:55 eddieflores sshd\[25910\]: Failed password for root from 58.47.177.160 port 52509 ssh2 |
2019-09-25 20:34:37 |
| 113.28.150.75 | attackbots | Sep 25 12:25:25 DAAP sshd[3463]: Invalid user password from 113.28.150.75 port 59457 Sep 25 12:25:25 DAAP sshd[3463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.28.150.75 Sep 25 12:25:25 DAAP sshd[3463]: Invalid user password from 113.28.150.75 port 59457 Sep 25 12:25:27 DAAP sshd[3463]: Failed password for invalid user password from 113.28.150.75 port 59457 ssh2 ... |
2019-09-25 20:07:34 |
| 51.77.137.211 | attackbots | 2019-09-25T13:53:30.938252lon01.zurich-datacenter.net sshd\[17187\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.ip-51-77-137.eu user=root 2019-09-25T13:53:32.231025lon01.zurich-datacenter.net sshd\[17187\]: Failed password for root from 51.77.137.211 port 39066 ssh2 2019-09-25T13:57:47.634199lon01.zurich-datacenter.net sshd\[17290\]: Invalid user stascorp from 51.77.137.211 port 50378 2019-09-25T13:57:47.642360lon01.zurich-datacenter.net sshd\[17290\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.ip-51-77-137.eu 2019-09-25T13:57:49.550682lon01.zurich-datacenter.net sshd\[17290\]: Failed password for invalid user stascorp from 51.77.137.211 port 50378 ssh2 ... |
2019-09-25 20:22:06 |
| 78.128.113.114 | attack | Sep 25 14:04:07 relay postfix/smtpd\[26544\]: warning: unknown\[78.128.113.114\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 25 14:13:03 relay postfix/smtpd\[12704\]: warning: unknown\[78.128.113.114\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 25 14:13:12 relay postfix/smtpd\[13729\]: warning: unknown\[78.128.113.114\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 25 14:23:47 relay postfix/smtpd\[14110\]: warning: unknown\[78.128.113.114\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 25 14:23:56 relay postfix/smtpd\[13729\]: warning: unknown\[78.128.113.114\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-09-25 20:29:48 |
| 116.196.94.108 | attack | $f2bV_matches |
2019-09-25 20:07:14 |
| 156.202.82.145 | attackbots | Chat Spam |
2019-09-25 20:31:05 |