City: unknown
Region: unknown
Country: China
Internet Service Provider: Shanghai Blue Cloud Technology Co. Ltd
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackbots | 2020-02-04T08:49:07.242555vostok sshd\[18476\]: Invalid user vagrant from 42.159.5.98 port 54072 | Triggered by Fail2Ban at Vostok web server |
2020-02-05 02:32:31 |
| attackbots | Sep 23 15:37:28 linuxrulz sshd[22551]: Did not receive identification string from 42.159.5.98 port 42868 Sep 23 15:38:12 linuxrulz sshd[22564]: Did not receive identification string from 42.159.5.98 port 47694 Sep 23 15:38:12 linuxrulz sshd[22565]: Did not receive identification string from 42.159.5.98 port 50898 Sep 23 15:40:07 linuxrulz sshd[23044]: Invalid user miner from 42.159.5.98 port 51740 Sep 23 15:40:07 linuxrulz sshd[23044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.5.98 Sep 23 15:40:10 linuxrulz sshd[23044]: Failed password for invalid user miner from 42.159.5.98 port 51740 ssh2 Sep 23 15:40:10 linuxrulz sshd[23044]: Received disconnect from 42.159.5.98 port 51740:11: Bye Bye [preauth] Sep 23 15:40:10 linuxrulz sshd[23044]: Disconnected from 42.159.5.98 port 51740 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=42.159.5.98 |
2019-09-24 07:49:41 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 42.159.5.174 | attackspam | Aug 20 06:05:36 OPSO sshd\[29936\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.5.174 user=root Aug 20 06:05:38 OPSO sshd\[29936\]: Failed password for root from 42.159.5.174 port 39026 ssh2 Aug 20 06:05:39 OPSO sshd\[29936\]: error: Received disconnect from 42.159.5.174 port 39026:3: com.jcraft.jsch.JSchException: Auth fail \[preauth\] Aug 20 06:05:41 OPSO sshd\[29938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.159.5.174 user=root Aug 20 06:05:43 OPSO sshd\[29938\]: Failed password for root from 42.159.5.174 port 39382 ssh2 Aug 20 06:05:43 OPSO sshd\[29938\]: error: Received disconnect from 42.159.5.174 port 39382:3: com.jcraft.jsch.JSchException: Auth fail \[preauth\] |
2019-08-20 18:45:40 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.159.5.98
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49524
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.159.5.98. IN A
;; AUTHORITY SECTION:
. 582 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019092301 1800 900 604800 86400
;; Query time: 79 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Sep 24 07:49:38 CST 2019
;; MSG SIZE rcvd: 115Host 98.5.159.42.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 98.5.159.42.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 88.243.135.38 | attack | Unauthorized connection attempt detected from IP address 88.243.135.38 to port 23 |
2019-12-29 17:42:07 |
| 77.228.64.0 | attackbotsspam | Unauthorized connection attempt detected from IP address 77.228.64.0 to port 88 |
2019-12-29 17:16:11 |
| 208.180.71.202 | attack | Unauthorized connection attempt detected from IP address 208.180.71.202 to port 88 |
2019-12-29 17:25:28 |
| 35.193.129.95 | attack | Unauthorized connection attempt detected from IP address 35.193.129.95 to port 6379 |
2019-12-29 17:48:40 |
| 5.53.40.125 | attackbotsspam | Unauthorized connection attempt detected from IP address 5.53.40.125 to port 9000 |
2019-12-29 17:23:13 |
| 128.199.103.239 | attack | Unauthorized connection attempt detected from IP address 128.199.103.239 to port 22 |
2019-12-29 17:34:51 |
| 167.99.202.143 | attackbotsspam | Unauthorized connection attempt detected from IP address 167.99.202.143 to port 22 |
2019-12-29 17:33:56 |
| 189.237.131.249 | attackbotsspam | Unauthorized connection attempt detected from IP address 189.237.131.249 to port 8080 |
2019-12-29 17:29:02 |
| 93.65.67.194 | attackbotsspam | Unauthorized connection attempt detected from IP address 93.65.67.194 to port 8081 |
2019-12-29 17:39:27 |
| 119.206.8.87 | attackbotsspam | Unauthorized connection attempt detected from IP address 119.206.8.87 to port 5555 |
2019-12-29 17:35:34 |
| 190.175.4.59 | attackbots | Unauthorized connection attempt detected from IP address 190.175.4.59 to port 23 |
2019-12-29 17:27:33 |
| 73.245.127.219 | attackbots | Unauthorized connection attempt detected from IP address 73.245.127.219 to port 23 |
2019-12-29 17:16:26 |
| 96.72.242.158 | attack | Unauthorized connection attempt detected from IP address 96.72.242.158 to port 88 |
2019-12-29 17:38:23 |
| 18.237.4.251 | attackbotsspam | Unauthorized connection attempt detected from IP address 18.237.4.251 to port 5000 |
2019-12-29 17:22:49 |
| 190.94.140.55 | attackbots | Unauthorized connection attempt detected from IP address 190.94.140.55 to port 7001 |
2019-12-29 17:28:27 |