City: unknown
Region: unknown
Country: Hong Kong
Internet Service Provider: Hong Kong Telecommunications (HKT) Limited
Hostname: unknown
Organization: unknown
Usage Type: unknown
| Type | Details | Datetime |
|---|---|---|
| attackbotsspam | Unauthorized connection attempt detected from IP address 42.2.71.199 to port 5555 [J] |
2020-01-27 00:53:51 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 42.2.71.83 | attack | Honeypot attack, port: 5555, PTR: 42-2-71-083.static.netvigator.com. |
2020-05-07 12:45:34 |
| 42.2.71.94 | attackbotsspam | Connection by 42.2.71.94 on port: 23 got caught by honeypot at 11/24/2019 5:24:41 AM |
2019-11-24 18:05:09 |
| 42.2.71.102 | attackbots | port scan and connect, tcp 23 (telnet) |
2019-11-18 23:20:53 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.2.71.199
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19200
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.2.71.199. IN A
;; AUTHORITY SECTION:
. 530 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020012600 1800 900 604800 86400
;; Query time: 109 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 27 00:53:47 CST 2020
;; MSG SIZE rcvd: 115
199.71.2.42.in-addr.arpa domain name pointer 42-2-71-199.static.netvigator.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
199.71.2.42.in-addr.arpa name = 42-2-71-199.static.netvigator.com.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 59.50.0.219 | attackbotsspam | Jan 7 02:56:11 XXX sshd[23422]: Invalid user admin from 59.50.0.219 port 2058 |
2020-01-08 08:09:16 |
| 106.13.65.211 | attackbotsspam | Jan 8 00:53:18 meumeu sshd[14315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.65.211 Jan 8 00:53:19 meumeu sshd[14315]: Failed password for invalid user samba from 106.13.65.211 port 40542 ssh2 Jan 8 00:56:54 meumeu sshd[14877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.65.211 ... |
2020-01-08 08:10:39 |
| 45.136.108.120 | attack | firewall-block, port(s): 1618/tcp, 1657/tcp, 1819/tcp, 2538/tcp, 2590/tcp, 2759/tcp |
2020-01-08 07:41:09 |
| 78.153.49.38 | attackspambots | SASL PLAIN auth failed: ruser=... |
2020-01-08 07:48:14 |
| 49.88.66.72 | attackspambots | Jan 7 22:17:45 grey postfix/smtpd\[18253\]: NOQUEUE: reject: RCPT from unknown\[49.88.66.72\]: 554 5.7.1 Service unavailable\; Client host \[49.88.66.72\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=49.88.66.72\; from=\ |
2020-01-08 07:46:42 |
| 137.74.166.77 | attackbots | Jan 7 20:22:28 vps46666688 sshd[20192]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.166.77 Jan 7 20:22:30 vps46666688 sshd[20192]: Failed password for invalid user org from 137.74.166.77 port 48282 ssh2 ... |
2020-01-08 07:47:54 |
| 222.186.30.57 | attackbotsspam | Unauthorized connection attempt detected from IP address 222.186.30.57 to port 22 [J] |
2020-01-08 08:13:51 |
| 203.195.243.146 | attack | Unauthorized connection attempt detected from IP address 203.195.243.146 to port 2220 [J] |
2020-01-08 07:55:12 |
| 106.12.61.64 | attackbots | Unauthorized connection attempt detected from IP address 106.12.61.64 to port 2220 [J] |
2020-01-08 07:57:15 |
| 31.132.134.15 | attack | Automatic report - Port Scan Attack |
2020-01-08 08:04:36 |
| 88.214.26.39 | attack | 200107 16:04:18 [Warning] Access denied for user 'magento'@'88.214.26.39' (using password: YES) 200107 16:04:21 [Warning] Access denied for user 'magento'@'88.214.26.39' (using password: YES) 200107 16:04:24 [Warning] Access denied for user 'magento'@'88.214.26.39' (using password: YES) ... |
2020-01-08 07:46:10 |
| 27.66.242.99 | attackbotsspam | Attempts against SMTP/SSMTP |
2020-01-08 08:01:38 |
| 128.199.199.217 | attack | Unauthorized connection attempt detected from IP address 128.199.199.217 to port 2220 [J] |
2020-01-08 07:40:40 |
| 124.227.7.16 | attackbots | Unauthorized connection attempt detected from IP address 124.227.7.16 to port 1433 [J] |
2020-01-08 07:59:15 |
| 115.248.198.106 | attackbotsspam | Unauthorized connection attempt detected from IP address 115.248.198.106 to port 2220 [J] |
2020-01-08 07:50:06 |