City: unknown
Region: unknown
Country: Vietnam
Internet Service Provider: FPT Telecom Company
Hostname: unknown
Organization: The Corporation for Financing & Promoting Technology
Usage Type: Fixed Line ISP
| Type | Details | Datetime |
|---|---|---|
| attack | Invalid user www from 42.116.255.216 port 40699 |
2019-12-10 21:01:46 |
| attack | Dec 5 01:01:19 mail sshd\[36000\]: Invalid user ftpuser from 42.116.255.216 Dec 5 01:01:19 mail sshd\[36000\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.255.216 ... |
2019-12-05 14:03:06 |
| attackspambots | SSH Bruteforce attempt |
2019-11-25 00:50:32 |
| attack | 2019-11-24T07:29:03.995982stark.klein-stark.info sshd\[21875\]: Invalid user webmaster from 42.116.255.216 port 53692 2019-11-24T07:29:04.004976stark.klein-stark.info sshd\[21875\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.255.216 2019-11-24T07:29:05.860968stark.klein-stark.info sshd\[21875\]: Failed password for invalid user webmaster from 42.116.255.216 port 53692 ssh2 ... |
2019-11-24 15:12:15 |
| attackspam | Nov 23 12:09:09 server sshd\[20659\]: Failed password for invalid user martin from 42.116.255.216 port 43038 ssh2 Nov 23 18:30:32 server sshd\[22278\]: Invalid user setup from 42.116.255.216 Nov 23 18:30:32 server sshd\[22278\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.255.216 Nov 23 18:30:34 server sshd\[22278\]: Failed password for invalid user setup from 42.116.255.216 port 38914 ssh2 Nov 24 04:27:32 server sshd\[18420\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.255.216 user=root ... |
2019-11-24 09:30:42 |
| attackspambots | SSH Bruteforce |
2019-11-07 14:56:02 |
| attack | 2019-11-06T16:03:35.139846abusebot-7.cloudsearch.cf sshd\[21615\]: Invalid user qhsupport from 42.116.255.216 port 53744 |
2019-11-07 00:07:12 |
| attackspam | $f2bV_matches |
2019-11-06 19:49:08 |
| attackbotsspam | SSH Brute Force, server-1 sshd[23681]: Failed password for invalid user ubuntu from 42.116.255.216 port 58867 ssh2 |
2019-11-06 07:12:24 |
| attackspam | Oct 29 02:02:25 server sshd\[17435\]: Invalid user applmgr from 42.116.255.216 Oct 29 02:02:25 server sshd\[17435\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.255.216 Oct 29 02:02:27 server sshd\[17435\]: Failed password for invalid user applmgr from 42.116.255.216 port 40942 ssh2 Oct 29 02:17:53 server sshd\[20871\]: Invalid user ftpuser from 42.116.255.216 Oct 29 02:17:53 server sshd\[20871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.255.216 ... |
2019-10-29 07:24:34 |
| attackbotsspam | Oct 27 21:26:56 xeon sshd[4772]: Failed password for invalid user smtpuser from 42.116.255.216 port 41416 ssh2 |
2019-10-28 05:57:51 |
| attackspambots | Invalid user admin from 42.116.255.216 port 33751 |
2019-10-27 14:21:44 |
| attackspam | Oct 26 07:00:58 mail sshd[7445]: Invalid user ubuntu from 42.116.255.216 ... |
2019-10-26 13:49:21 |
| attackspambots | Oct 24 15:36:16 vmd17057 sshd\[27634\]: Invalid user ubuntu from 42.116.255.216 port 45429 Oct 24 15:36:16 vmd17057 sshd\[27634\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.255.216 Oct 24 15:36:18 vmd17057 sshd\[27634\]: Failed password for invalid user ubuntu from 42.116.255.216 port 45429 ssh2 ... |
2019-10-24 21:58:16 |
| attackbots | Oct 24 10:15:18 gw1 sshd[9271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.255.216 Oct 24 10:15:21 gw1 sshd[9271]: Failed password for invalid user support from 42.116.255.216 port 46434 ssh2 ... |
2019-10-24 13:18:12 |
| attack | Oct 22 00:52:22 server sshd\[6353\]: Failed password for invalid user oracle from 42.116.255.216 port 45138 ssh2 Oct 22 10:35:32 server sshd\[10617\]: Invalid user usuario from 42.116.255.216 Oct 22 10:35:32 server sshd\[10617\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.255.216 Oct 22 10:35:34 server sshd\[10617\]: Failed password for invalid user usuario from 42.116.255.216 port 58013 ssh2 Oct 22 21:00:22 server sshd\[2667\]: Invalid user www from 42.116.255.216 Oct 22 21:00:22 server sshd\[2667\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.255.216 ... |
2019-10-23 02:01:53 |
| attack | Oct 21 15:39:42 localhost sshd\[31635\]: Invalid user applmgr from 42.116.255.216 port 40978 Oct 21 15:39:42 localhost sshd\[31635\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.255.216 Oct 21 15:39:44 localhost sshd\[31635\]: Failed password for invalid user applmgr from 42.116.255.216 port 40978 ssh2 |
2019-10-21 21:42:06 |
| attackspam | $f2bV_matches |
2019-10-16 16:09:56 |
| attackbotsspam | Oct 9 08:15:35 *** sshd[11692]: User root from 42.116.255.216 not allowed because not listed in AllowUsers |
2019-10-09 16:31:47 |
| attack | Oct 6 13:59:49 arianus sshd\[31497\]: Unable to negotiate with 42.116.255.216 port 34933: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 \[preauth\] ... |
2019-10-06 21:00:20 |
| attackbots | Tried sshing with brute force. |
2019-10-06 17:26:13 |
| attackbotsspam | IP attempted unauthorised action |
2019-10-03 07:59:37 |
| attackbots | Sep 30 15:39:34 work-partkepr sshd\[6889\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.255.216 user=root Sep 30 15:39:36 work-partkepr sshd\[6889\]: Failed password for root from 42.116.255.216 port 33528 ssh2 ... |
2019-10-01 00:02:16 |
| attackspam | Invalid user teston from 42.116.255.216 port 58572 |
2019-08-28 08:31:24 |
| attack | Aug 26 14:56:44 eddieflores sshd\[7900\]: Invalid user school from 42.116.255.216 Aug 26 14:56:44 eddieflores sshd\[7900\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.255.216 Aug 26 14:56:46 eddieflores sshd\[7900\]: Failed password for invalid user school from 42.116.255.216 port 49191 ssh2 Aug 26 15:05:59 eddieflores sshd\[8803\]: Invalid user guitar from 42.116.255.216 Aug 26 15:05:59 eddieflores sshd\[8803\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.255.216 |
2019-08-27 09:48:55 |
| attack | Reported by AbuseIPDB proxy server. |
2019-08-26 07:39:36 |
| attackspam | Aug 23 03:43:01 cvbmail sshd\[5606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.255.216 user=root Aug 23 03:43:03 cvbmail sshd\[5606\]: Failed password for root from 42.116.255.216 port 48991 ssh2 Aug 23 03:50:13 cvbmail sshd\[5625\]: Invalid user rrrr from 42.116.255.216 |
2019-08-23 10:32:50 |
| attackspambots | Aug 21 20:02:08 vps sshd\[29257\]: Invalid user fs5 from 42.116.255.216 Aug 21 20:03:26 vps sshd\[29268\]: Invalid user franck from 42.116.255.216 ... |
2019-08-22 03:05:57 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.116.255.216
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63643
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.116.255.216. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019061200 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jun 12 23:00:29 CST 2019
;; MSG SIZE rcvd: 118
216.255.116.42.in-addr.arpa has no PTR record
;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server: 67.207.67.3
Address: 67.207.67.3#53
** server can't find 216.255.116.42.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.59.57.64 | attackspambots | 139.59.57.64 - - [15/Sep/2020:18:01:15 +0100] "POST /wp-login.php HTTP/1.1" 200 1996 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.57.64 - - [15/Sep/2020:18:01:21 +0100] "POST /wp-login.php HTTP/1.1" 200 1929 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.57.64 - - [15/Sep/2020:18:01:22 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-16 04:44:36 |
| 62.234.193.119 | attack | Sep 15 21:16:35 [host] sshd[12861]: Invalid user b Sep 15 21:16:35 [host] sshd[12861]: pam_unix(sshd: Sep 15 21:16:36 [host] sshd[12861]: Failed passwor |
2020-09-16 04:40:15 |
| 51.79.53.134 | attackbotsspam | Sep 15 21:46:10 haigwepa sshd[12773]: Failed password for root from 51.79.53.134 port 48612 ssh2 Sep 15 21:46:14 haigwepa sshd[12773]: Failed password for root from 51.79.53.134 port 48612 ssh2 ... |
2020-09-16 05:03:05 |
| 179.209.88.230 | attack | Sep 15 15:08:57 ny01 sshd[3719]: Failed password for root from 179.209.88.230 port 34728 ssh2 Sep 15 15:13:27 ny01 sshd[4318]: Failed password for root from 179.209.88.230 port 36887 ssh2 |
2020-09-16 04:37:51 |
| 200.119.228.204 | attackbots | Sep 15 22:07:28 vps639187 sshd\[3846\]: Invalid user guest from 200.119.228.204 port 55472 Sep 15 22:07:28 vps639187 sshd\[3846\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.119.228.204 Sep 15 22:07:30 vps639187 sshd\[3846\]: Failed password for invalid user guest from 200.119.228.204 port 55472 ssh2 ... |
2020-09-16 04:55:23 |
| 138.197.25.187 | attackspam | Automatic report - Banned IP Access |
2020-09-16 04:51:14 |
| 45.129.122.155 | attack | Sep 15 19:01:11 vpn01 sshd[8409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.129.122.155 Sep 15 19:01:12 vpn01 sshd[8409]: Failed password for invalid user tit0nich from 45.129.122.155 port 55567 ssh2 ... |
2020-09-16 04:55:39 |
| 24.143.242.14 | attackbots | Sep 15 19:01:00 roki-contabo sshd\[21875\]: Invalid user admin from 24.143.242.14 Sep 15 19:01:00 roki-contabo sshd\[21875\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.143.242.14 Sep 15 19:01:03 roki-contabo sshd\[21875\]: Failed password for invalid user admin from 24.143.242.14 port 45578 ssh2 Sep 15 19:01:05 roki-contabo sshd\[21910\]: Invalid user cablecom from 24.143.242.14 Sep 15 19:01:05 roki-contabo sshd\[21910\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.143.242.14 ... |
2020-09-16 05:03:46 |
| 51.79.54.234 | attack | Sep 15 16:23:34 Tower sshd[38004]: Connection from 51.79.54.234 port 52978 on 192.168.10.220 port 22 rdomain "" Sep 15 16:23:37 Tower sshd[38004]: Failed password for root from 51.79.54.234 port 52978 ssh2 Sep 15 16:23:37 Tower sshd[38004]: Received disconnect from 51.79.54.234 port 52978:11: Bye Bye [preauth] Sep 15 16:23:37 Tower sshd[38004]: Disconnected from authenticating user root 51.79.54.234 port 52978 [preauth] |
2020-09-16 05:07:17 |
| 66.249.155.245 | attackbotsspam | Sep 15 20:12:59 vlre-nyc-1 sshd\[26811\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.249.155.245 user=root Sep 15 20:13:01 vlre-nyc-1 sshd\[26811\]: Failed password for root from 66.249.155.245 port 51868 ssh2 Sep 15 20:16:40 vlre-nyc-1 sshd\[26919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.249.155.245 user=root Sep 15 20:16:42 vlre-nyc-1 sshd\[26919\]: Failed password for root from 66.249.155.245 port 53568 ssh2 Sep 15 20:20:33 vlre-nyc-1 sshd\[27043\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.249.155.245 user=root ... |
2020-09-16 05:09:49 |
| 37.105.228.207 | attackspam | Unauthorized connection attempt from IP address 37.105.228.207 on Port 445(SMB) |
2020-09-16 04:59:55 |
| 182.72.29.174 | attackspambots | Unauthorized connection attempt from IP address 182.72.29.174 on Port 445(SMB) |
2020-09-16 04:41:26 |
| 14.189.179.201 | attackbotsspam | Unauthorized connection attempt from IP address 14.189.179.201 on Port 445(SMB) |
2020-09-16 04:46:04 |
| 62.210.151.64 | attack | WordPress login Brute force / Web App Attack on client site. |
2020-09-16 04:38:26 |
| 121.229.6.166 | attack | Sep 15 21:30:55 sigma sshd\[25709\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.6.166 user=rootSep 15 21:37:21 sigma sshd\[25740\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.6.166 user=root ... |
2020-09-16 04:51:39 |