City: unknown
Region: Henan
Country: China
Internet Service Provider: Henan Telcom Union Technology Co. Ltd
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspam | Nov 12 09:05:45 ns382633 sshd\[28794\]: Invalid user blocker from 42.51.42.109 port 52293 Nov 12 09:05:45 ns382633 sshd\[28794\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.42.109 Nov 12 09:05:47 ns382633 sshd\[28794\]: Failed password for invalid user blocker from 42.51.42.109 port 52293 ssh2 Nov 12 09:22:34 ns382633 sshd\[31868\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.42.109 user=root Nov 12 09:22:36 ns382633 sshd\[31868\]: Failed password for root from 42.51.42.109 port 39216 ssh2 |
2019-11-12 18:40:37 |
| attack | SSH/22 MH Probe, BF, Hack - |
2019-11-07 03:27:11 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 42.51.42.99 | attack | Automatic report - Banned IP Access |
2020-09-01 20:43:36 |
| 42.51.42.99 | attackbotsspam | Web-based SQL injection attempt |
2020-04-26 17:41:20 |
| 42.51.42.47 | attackspam | 2020-03-03T05:08:50.574498shield sshd\[9555\]: Invalid user mcserver from 42.51.42.47 port 42213 2020-03-03T05:08:50.580021shield sshd\[9555\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.42.47 2020-03-03T05:08:52.411255shield sshd\[9555\]: Failed password for invalid user mcserver from 42.51.42.47 port 42213 ssh2 2020-03-03T05:09:29.353193shield sshd\[9638\]: Invalid user fmnet from 42.51.42.47 port 44055 2020-03-03T05:09:29.358086shield sshd\[9638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.42.47 |
2020-03-03 14:00:08 |
| 42.51.42.47 | attack | 2020-01-25T04:46:18.026030abusebot-3.cloudsearch.cf sshd[20525]: Invalid user helle from 42.51.42.47 port 57552 2020-01-25T04:46:18.032039abusebot-3.cloudsearch.cf sshd[20525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.42.47 2020-01-25T04:46:18.026030abusebot-3.cloudsearch.cf sshd[20525]: Invalid user helle from 42.51.42.47 port 57552 2020-01-25T04:46:20.415903abusebot-3.cloudsearch.cf sshd[20525]: Failed password for invalid user helle from 42.51.42.47 port 57552 ssh2 2020-01-25T04:53:38.026999abusebot-3.cloudsearch.cf sshd[20986]: Invalid user user1 from 42.51.42.47 port 49285 2020-01-25T04:53:38.033776abusebot-3.cloudsearch.cf sshd[20986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.42.47 2020-01-25T04:53:38.026999abusebot-3.cloudsearch.cf sshd[20986]: Invalid user user1 from 42.51.42.47 port 49285 2020-01-25T04:53:39.820530abusebot-3.cloudsearch.cf sshd[20986]: Failed password for ... |
2020-01-25 15:36:36 |
| 42.51.42.99 | attackspam | SS5,WP GET /wp-login.php |
2019-07-12 08:48:00 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.51.42.109
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52827
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.51.42.109. IN A
;; AUTHORITY SECTION:
. 365 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019110601 1800 900 604800 86400
;; Query time: 116 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 07 03:27:07 CST 2019
;; MSG SIZE rcvd: 116109.42.51.42.in-addr.arpa domain name pointer idc.ly.ha.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
109.42.51.42.in-addr.arpa name = idc.ly.ha.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 172.81.204.249 | attackspam | Aug 15 23:12:28 electroncash sshd[363]: Failed password for root from 172.81.204.249 port 51267 ssh2 Aug 15 23:14:45 electroncash sshd[1026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.204.249 user=root Aug 15 23:14:47 electroncash sshd[1026]: Failed password for root from 172.81.204.249 port 53146 ssh2 Aug 15 23:17:09 electroncash sshd[1834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.204.249 user=root Aug 15 23:17:10 electroncash sshd[1834]: Failed password for root from 172.81.204.249 port 28439 ssh2 ... |
2020-08-16 05:25:32 |
| 219.128.88.186 | attackbotsspam | Port Scan ... |
2020-08-16 05:14:51 |
| 78.95.59.137 | attack | [11/Aug/2020 x@x [11/Aug/2020 x@x [11/Aug/2020 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=78.95.59.137 |
2020-08-16 04:50:52 |
| 188.165.230.118 | attackspam | 188.165.230.118 - - [15/Aug/2020:21:59:07 +0100] "POST /wp-login.php HTTP/1.1" 200 6354 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 188.165.230.118 - - [15/Aug/2020:22:00:44 +0100] "POST /wp-login.php HTTP/1.1" 200 6354 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 188.165.230.118 - - [15/Aug/2020:22:02:17 +0100] "POST /wp-login.php HTTP/1.1" 200 6354 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" ... |
2020-08-16 05:07:21 |
| 34.87.171.184 | attackbots | Aug 15 20:39:21 rush sshd[12985]: Failed password for root from 34.87.171.184 port 52854 ssh2 Aug 15 20:43:04 rush sshd[13125]: Failed password for root from 34.87.171.184 port 54882 ssh2 ... |
2020-08-16 05:03:46 |
| 62.112.11.81 | attackbots | Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-08-15T20:18:48Z and 2020-08-15T20:46:59Z |
2020-08-16 04:56:20 |
| 60.221.240.167 | attackspam | 1,46-10/02 [bc00/m01] PostRequest-Spammer scoring: maputo01_x2b |
2020-08-16 05:00:19 |
| 54.37.68.191 | attackbotsspam | Aug 15 22:42:43 ip106 sshd[6846]: Failed password for root from 54.37.68.191 port 54844 ssh2 ... |
2020-08-16 05:16:21 |
| 195.54.160.183 | attackspam | Aug 15 22:53:35 ip40 sshd[2291]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.54.160.183 Aug 15 22:53:37 ip40 sshd[2291]: Failed password for invalid user 2 from 195.54.160.183 port 8692 ssh2 ... |
2020-08-16 04:53:57 |
| 43.254.59.246 | attack | Aug 15 21:14:45 *** sshd[27112]: User root from 43.254.59.246 not allowed because not listed in AllowUsers |
2020-08-16 05:20:48 |
| 182.61.2.67 | attackspambots | Aug 16 03:38:18 itv-usvr-02 sshd[29180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.2.67 user=root Aug 16 03:42:19 itv-usvr-02 sshd[29401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.2.67 user=root Aug 16 03:46:27 itv-usvr-02 sshd[29536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.2.67 user=root |
2020-08-16 05:15:17 |
| 123.207.211.71 | attackbots | Aug 15 16:39:27 NPSTNNYC01T sshd[14771]: Failed password for root from 123.207.211.71 port 51314 ssh2 Aug 15 16:43:17 NPSTNNYC01T sshd[15064]: Failed password for root from 123.207.211.71 port 57490 ssh2 ... |
2020-08-16 04:47:44 |
| 123.207.121.169 | attackbots | Aug 15 22:42:30 santamaria sshd\[28908\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.121.169 user=root Aug 15 22:42:32 santamaria sshd\[28908\]: Failed password for root from 123.207.121.169 port 45328 ssh2 Aug 15 22:46:33 santamaria sshd\[28963\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.121.169 user=root ... |
2020-08-16 05:09:20 |
| 167.179.116.33 | attackspam | Unauthorized connection attempt detected from IP address 167.179.116.33 to port 80 [T] |
2020-08-16 04:44:38 |
| 49.233.92.166 | attackspam | Aug 16 01:40:43 gw1 sshd[16558]: Failed password for root from 49.233.92.166 port 37520 ssh2 ... |
2020-08-16 05:11:43 |