City: unknown
Region: unknown
Country: Hong Kong
Internet Service Provider: unknown
Hostname: unknown
Organization: Guochao Group limited
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.122.138.67 | attackbots | Unauthorized connection attempt detected from IP address 45.122.138.67 to port 1433 [J] |
2020-01-29 10:12:16 |
| 45.122.138.7 | attackbotsspam | Unauthorized connection attempt detected from IP address 45.122.138.7 to port 1433 [J] |
2020-01-29 05:23:52 |
| 45.122.138.7 | attackbots | SIP/5060 Probe, BF, Hack - |
2019-12-30 21:25:00 |
| 45.122.138.22 | attack | Dec 29 18:12:37 ws22vmsma01 sshd[222802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.138.22 Dec 29 18:12:39 ws22vmsma01 sshd[222802]: Failed password for invalid user ubnt from 45.122.138.22 port 48709 ssh2 ... |
2019-12-30 06:28:14 |
| 45.122.138.22 | attack | 2019-12-27T23:51:12.745531shield sshd\[5830\]: Invalid user ervin from 45.122.138.22 port 59069 2019-12-27T23:51:12.748817shield sshd\[5830\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.138.22 2019-12-27T23:51:15.045338shield sshd\[5830\]: Failed password for invalid user ervin from 45.122.138.22 port 59069 ssh2 2019-12-27T23:54:04.214561shield sshd\[6635\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.138.22 user=root 2019-12-27T23:54:06.791896shield sshd\[6635\]: Failed password for root from 45.122.138.22 port 41868 ssh2 |
2019-12-28 07:58:59 |
| 45.122.138.22 | attackbotsspam | Dec 10 14:03:43 vibhu-HP-Z238-Microtower-Workstation sshd\[28411\]: Invalid user 1qaz@WSX from 45.122.138.22 Dec 10 14:03:43 vibhu-HP-Z238-Microtower-Workstation sshd\[28411\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.138.22 Dec 10 14:03:45 vibhu-HP-Z238-Microtower-Workstation sshd\[28411\]: Failed password for invalid user 1qaz@WSX from 45.122.138.22 port 55968 ssh2 Dec 10 14:10:11 vibhu-HP-Z238-Microtower-Workstation sshd\[29473\]: Invalid user pluto from 45.122.138.22 Dec 10 14:10:11 vibhu-HP-Z238-Microtower-Workstation sshd\[29473\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.138.22 ... |
2019-12-10 18:47:08 |
| 45.122.138.22 | attackspambots | Dec 4 16:58:18 plusreed sshd[11157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.122.138.22 user=root Dec 4 16:58:20 plusreed sshd[11157]: Failed password for root from 45.122.138.22 port 57114 ssh2 ... |
2019-12-05 06:05:19 |
| 45.122.138.22 | attackbotsspam | $f2bV_matches |
2019-12-02 19:57:29 |
| 45.122.138.22 | attack | Nov 23 18:47:07 hosting sshd[16063]: Invalid user dorotea from 45.122.138.22 port 47184 ... |
2019-11-24 00:43:46 |
| 45.122.138.22 | attackspambots | Automatic report - SSH Brute-Force Attack |
2019-11-19 06:42:29 |
| 45.122.138.81 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/45.122.138.81/ HK - 1H : (18) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : HK NAME ASN : ASN132742 IP : 45.122.138.81 CIDR : 45.122.138.0/24 PREFIX COUNT : 79 UNIQUE IP COUNT : 37888 WYKRYTE ATAKI Z ASN132742 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-10-17 20:52:50 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN - data recovery |
2019-10-18 04:30:42 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.122.138.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7537
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.122.138.99. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019062900 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jun 30 00:37:39 CST 2019
;; MSG SIZE rcvd: 117Host 99.138.122.45.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 67.207.67.3, trying next server
Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 99.138.122.45.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 208.102.113.11 | attack | Aug 20 09:28:01 [host] sshd[32710]: Invalid user applmgr from 208.102.113.11 Aug 20 09:28:01 [host] sshd[32710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.102.113.11 Aug 20 09:28:03 [host] sshd[32710]: Failed password for invalid user applmgr from 208.102.113.11 port 39940 ssh2 |
2019-08-20 15:32:13 |
| 212.79.108.63 | attackspam | 23/tcp [2019-08-20]1pkt |
2019-08-20 15:47:52 |
| 117.6.130.78 | attackspam | 445/tcp [2019-08-20]1pkt |
2019-08-20 15:25:53 |
| 137.74.25.247 | attackbots | Aug 20 09:43:28 plex sshd[6319]: Invalid user lll from 137.74.25.247 port 52145 |
2019-08-20 15:48:56 |
| 149.28.135.47 | attackspam | Aug 20 09:38:29 legacy sshd[29392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.28.135.47 Aug 20 09:38:30 legacy sshd[29392]: Failed password for invalid user hal from 149.28.135.47 port 40272 ssh2 Aug 20 09:47:07 legacy sshd[29604]: Failed password for daemon from 149.28.135.47 port 49636 ssh2 ... |
2019-08-20 15:53:09 |
| 51.75.169.236 | attack | Aug 20 09:37:00 meumeu sshd[32056]: Failed password for invalid user zl from 51.75.169.236 port 35990 ssh2 Aug 20 09:40:59 meumeu sshd[32480]: Failed password for invalid user ubuntu from 51.75.169.236 port 58591 ssh2 Aug 20 09:45:03 meumeu sshd[428]: Failed password for invalid user joerg from 51.75.169.236 port 52962 ssh2 ... |
2019-08-20 16:03:06 |
| 68.183.148.29 | attackbots | SSH Brute-Force attacks |
2019-08-20 15:59:07 |
| 191.83.233.250 | attackbots | 37215/tcp [2019-08-20]1pkt |
2019-08-20 15:51:17 |
| 124.243.198.187 | attackbots | 2019-08-20T06:58:33.587760abusebot-8.cloudsearch.cf sshd\[18271\]: Invalid user setup from 124.243.198.187 port 35678 |
2019-08-20 15:24:42 |
| 123.206.45.16 | attackspam | Aug 19 21:44:37 hiderm sshd\[23474\]: Invalid user zimbra from 123.206.45.16 Aug 19 21:44:37 hiderm sshd\[23474\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.45.16 Aug 19 21:44:39 hiderm sshd\[23474\]: Failed password for invalid user zimbra from 123.206.45.16 port 49248 ssh2 Aug 19 21:50:12 hiderm sshd\[23915\]: Invalid user ts from 123.206.45.16 Aug 19 21:50:12 hiderm sshd\[23915\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.45.16 |
2019-08-20 15:59:27 |
| 121.122.45.221 | attackspam | 2019-08-20T07:36:14.938156abusebot-6.cloudsearch.cf sshd\[6457\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.122.45.221 user=root |
2019-08-20 15:38:42 |
| 5.88.0.234 | attack | Aug 20 04:08:13 localhost sshd\[59633\]: Invalid user corentin from 5.88.0.234 port 52594 Aug 20 04:08:13 localhost sshd\[59633\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.88.0.234 Aug 20 04:08:15 localhost sshd\[59633\]: Failed password for invalid user corentin from 5.88.0.234 port 52594 ssh2 Aug 20 04:08:30 localhost sshd\[59647\]: Invalid user larissa from 5.88.0.234 port 54024 Aug 20 04:08:30 localhost sshd\[59647\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.88.0.234 ... |
2019-08-20 15:50:07 |
| 27.72.81.176 | attackbots | Port scan |
2019-08-20 15:34:07 |
| 150.107.0.34 | attackbots | Aug 20 06:52:16 b2b-pharm sshd[13468]: Invalid user sinusbot1 from 150.107.0.34 port 38184 Aug 20 06:52:16 b2b-pharm sshd[13468]: error: maximum authentication attempts exceeded for invalid user sinusbot1 from 150.107.0.34 port 38184 ssh2 [preauth] Aug 20 06:52:16 b2b-pharm sshd[13468]: Invalid user sinusbot1 from 150.107.0.34 port 38184 Aug 20 06:52:16 b2b-pharm sshd[13468]: error: maximum authentication attempts exceeded for invalid user sinusbot1 from 150.107.0.34 port 38184 ssh2 [preauth] Aug 20 06:52:16 b2b-pharm sshd[13468]: Invalid user sinusbot1 from 150.107.0.34 port 38184 Aug 20 06:52:16 b2b-pharm sshd[13468]: error: maximum authentication attempts exceeded for invalid user sinusbot1 from 150.107.0.34 port 38184 ssh2 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=150.107.0.34 |
2019-08-20 15:38:11 |
| 77.247.110.92 | attackspambots | SIPVicious Scanner Detection, PTR: PTR record not found |
2019-08-20 15:54:12 |