City: unknown
Region: unknown
Country: Romania
Internet Service Provider: Nav Communications SRL
Hostname: unknown
Organization: unknown
Usage Type: Fixed Line ISP
| Type | Details | Datetime |
|---|---|---|
| attackspam | Brute-force attempt banned |
2020-09-16 23:23:25 |
| attackspam | port scan and connect, tcp 22 (ssh) |
2020-09-16 15:39:54 |
| attackspambots | Connection to SSH Honeypot - Detected by HoneypotDB |
2020-09-16 07:38:52 |
| attackbots | $f2bV_matches |
2020-09-05 12:46:09 |
| attack | Failed password for invalid user from 91.250.242.12 port 38450 ssh2 |
2020-09-05 05:34:38 |
| attackbotsspam | Sep 1 09:53:25 prod4 sshd\[23889\]: Failed password for root from 91.250.242.12 port 34472 ssh2 Sep 1 09:53:27 prod4 sshd\[23889\]: Failed password for root from 91.250.242.12 port 34472 ssh2 Sep 1 09:53:30 prod4 sshd\[23889\]: Failed password for root from 91.250.242.12 port 34472 ssh2 ... |
2020-09-01 16:24:22 |
| attackspam | Aug 31 22:10:14 scw-tender-jepsen sshd[10990]: Failed password for root from 91.250.242.12 port 39724 ssh2 Aug 31 22:10:16 scw-tender-jepsen sshd[10990]: Failed password for root from 91.250.242.12 port 39724 ssh2 |
2020-09-01 08:11:07 |
| attackbotsspam | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-27T16:43:27Z and 2020-08-27T16:43:30Z |
2020-08-28 02:25:50 |
| attackspam | 2020-08-23T17:48:15.772283vps-d63064a2 sshd[196907]: User root from 91.250.242.12 not allowed because not listed in AllowUsers 2020-08-23T17:48:17.471033vps-d63064a2 sshd[196907]: Failed password for invalid user root from 91.250.242.12 port 38477 ssh2 2020-08-23T17:48:21.314001vps-d63064a2 sshd[196907]: Failed password for invalid user root from 91.250.242.12 port 38477 ssh2 2020-08-23T17:48:24.320986vps-d63064a2 sshd[196907]: Failed password for invalid user root from 91.250.242.12 port 38477 ssh2 2020-08-23T17:48:28.770847vps-d63064a2 sshd[196907]: error: maximum authentication attempts exceeded for invalid user root from 91.250.242.12 port 38477 ssh2 [preauth] 2020-08-23T17:57:49.386200vps-d63064a2 sshd[197547]: User root from 91.250.242.12 not allowed because not listed in AllowUsers ... |
2020-08-24 02:19:16 |
| attack | Aug 20 23:51:37 minden010 sshd[25817]: Failed password for root from 91.250.242.12 port 32933 ssh2 Aug 20 23:51:40 minden010 sshd[25817]: Failed password for root from 91.250.242.12 port 32933 ssh2 Aug 20 23:51:43 minden010 sshd[25817]: Failed password for root from 91.250.242.12 port 32933 ssh2 Aug 20 23:51:45 minden010 sshd[25817]: Failed password for root from 91.250.242.12 port 32933 ssh2 ... |
2020-08-21 06:03:35 |
| attackspambots | Aug 15 15:53:52 gw1 sshd[3099]: Failed password for root from 91.250.242.12 port 38204 ssh2 Aug 15 15:54:04 gw1 sshd[3099]: error: maximum authentication attempts exceeded for root from 91.250.242.12 port 38204 ssh2 [preauth] ... |
2020-08-15 20:02:37 |
| attack | CMS (WordPress or Joomla) login attempt. |
2020-08-15 08:53:05 |
| attack | GET /wp-config.php.bak HTTP/1.1 |
2020-08-07 03:46:06 |
| attack | Aug 4 01:37:55 gw1 sshd[22914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.250.242.12 Aug 4 01:37:58 gw1 sshd[22914]: Failed password for invalid user admin from 91.250.242.12 port 38802 ssh2 ... |
2020-08-04 04:46:36 |
| attackspambots | (mod_security) mod_security (id:949110) triggered by 91.250.242.12 (RO/Romania/-): 10 in the last 3600 secs; ID: luc |
2020-07-19 03:06:11 |
| attackbots | php injection |
2020-07-18 01:35:33 |
| attack | 2020/07/14 13:33:43 [error] 1528#1528: *147 open() "/home/FTP/www/cgi-bin/php-cgi" failed (2: No such file or directory), client: 91.250.242.12, server: netpixeldesign.net, request: "POST /cgi-bin/php-cgi?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1", host: "netpixeldesign.net" 2020/07/14 13:33:43 [error] 1528#1528: *147 open() "/home/FTP/www/cgi-bin/php.cgi" failed (2: No such file or directory), client: 91.250.242.12, server: netpixeldesign.net, request: "POST /cg ... |
2020-07-15 07:49:15 |
| attackspambots | Jun 29 22:12:52 IngegnereFirenze sshd[14096]: User sshd from 91.250.242.12 not allowed because not listed in AllowUsers ... |
2020-06-30 07:27:46 |
| attack | 2020-06-02T22:58:38.425759morrigan.ad5gb.com sshd[2604]: Failed password for sshd from 91.250.242.12 port 33430 ssh2 2020-06-02T22:58:41.907777morrigan.ad5gb.com sshd[2604]: Failed password for sshd from 91.250.242.12 port 33430 ssh2 2020-06-02T22:58:44.577804morrigan.ad5gb.com sshd[2604]: Failed password for sshd from 91.250.242.12 port 33430 ssh2 |
2020-06-03 12:37:14 |
| attackbotsspam | prod6 ... |
2020-06-02 21:54:14 |
| attackspam | Automatic report - Banned IP Access |
2020-06-02 06:58:46 |
| attack | Website hacking attempt: Admin access [/admin] |
2020-05-29 19:24:33 |
| attackbots | Invalid user monitor from 91.250.242.12 port 45094 |
2020-04-04 15:13:02 |
| attackspam | Mar 22 23:04:53 vpn01 sshd[7056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.250.242.12 Mar 22 23:04:55 vpn01 sshd[7056]: Failed password for invalid user fake from 91.250.242.12 port 42792 ssh2 ... |
2020-03-23 07:38:29 |
| attack | Time: Wed Mar 4 01:59:43 2020 -0300 IP: 91.250.242.12 (RO/Romania/-) Failures: 5 (mod_security) Interval: 3600 seconds Blocked: Permanent Block |
2020-03-04 13:35:20 |
| attack | 02/25/2020-19:28:05.773062 91.250.242.12 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 87 |
2020-02-26 04:30:05 |
| attackbotsspam | 0,80-01/03 [bc01/m21] PostRequest-Spammer scoring: brussels |
2019-12-03 02:18:55 |
| attack | Nov 23 18:53:32 kapalua sshd\[24227\]: Invalid user usuario from 91.250.242.12 Nov 23 18:53:32 kapalua sshd\[24227\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.250.242.12 Nov 23 18:53:34 kapalua sshd\[24227\]: Failed password for invalid user usuario from 91.250.242.12 port 36170 ssh2 Nov 23 18:53:37 kapalua sshd\[24227\]: Failed password for invalid user usuario from 91.250.242.12 port 36170 ssh2 Nov 23 18:53:39 kapalua sshd\[24227\]: Failed password for invalid user usuario from 91.250.242.12 port 36170 ssh2 |
2019-11-24 14:14:21 |
| attackspambots | 11/15/2019-21:13:44.338361 91.250.242.12 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 87 |
2019-11-16 04:38:59 |
| attackbots | geburtshaus-fulda.de:80 91.250.242.12 - - \[08/Nov/2019:07:29:45 +0100\] "POST /xmlrpc.php HTTP/1.0" 301 515 "-" "Mozilla/5.0 \(X11\; Linux x86_64\; rv:60.0\) Gecko/20100101 Firefox/60.0" www.geburtshaus-fulda.de 91.250.242.12 \[08/Nov/2019:07:29:48 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 3777 "-" "Mozilla/5.0 \(X11\; Linux x86_64\; rv:60.0\) Gecko/20100101 Firefox/60.0" |
2019-11-08 15:45:47 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 91.250.242.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4509
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;91.250.242.12. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019070900 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jul 09 20:45:49 CST 2019
;; MSG SIZE rcvd: 117Host 12.242.250.91.in-addr.arpa. not found: 3(NXDOMAIN)Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 12.242.250.91.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 191.240.230.36 | attackbotsspam | Port Scan |
2019-10-21 20:27:22 |
| 79.137.72.121 | attackspambots | Oct 21 14:16:18 SilenceServices sshd[3926]: Failed password for root from 79.137.72.121 port 38646 ssh2 Oct 21 14:19:55 SilenceServices sshd[5161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.72.121 Oct 21 14:19:57 SilenceServices sshd[5161]: Failed password for invalid user powerapp from 79.137.72.121 port 49798 ssh2 |
2019-10-21 20:32:45 |
| 222.186.173.180 | attackbotsspam | Oct 21 08:34:33 xtremcommunity sshd\[743969\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.180 user=root Oct 21 08:34:35 xtremcommunity sshd\[743969\]: Failed password for root from 222.186.173.180 port 26696 ssh2 Oct 21 08:34:41 xtremcommunity sshd\[743969\]: Failed password for root from 222.186.173.180 port 26696 ssh2 Oct 21 08:34:45 xtremcommunity sshd\[743969\]: Failed password for root from 222.186.173.180 port 26696 ssh2 Oct 21 08:34:49 xtremcommunity sshd\[743969\]: Failed password for root from 222.186.173.180 port 26696 ssh2 ... |
2019-10-21 20:53:58 |
| 146.185.183.65 | attack | Oct 21 14:45:22 hosting sshd[20900]: Invalid user 123456 from 146.185.183.65 port 53356 ... |
2019-10-21 20:38:01 |
| 104.244.77.219 | attackbotsspam | SSH Bruteforce |
2019-10-21 20:17:37 |
| 119.118.110.252 | attack | Port Scan |
2019-10-21 20:19:00 |
| 89.19.176.235 | attack | Port Scan |
2019-10-21 20:43:40 |
| 198.199.72.42 | attackbotsspam | Port Scan |
2019-10-21 20:38:56 |
| 54.37.69.74 | attack | 2019-10-21T14:28:02.658824scmdmz1 sshd\[9293\]: Invalid user daegu from 54.37.69.74 port 59996 2019-10-21T14:28:02.661490scmdmz1 sshd\[9293\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.extrakhalifa.com 2019-10-21T14:28:04.994952scmdmz1 sshd\[9293\]: Failed password for invalid user daegu from 54.37.69.74 port 59996 ssh2 ... |
2019-10-21 20:30:38 |
| 89.64.28.126 | attackbots | 2019-10-21 x@x 2019-10-21 12:21:11 unexpected disconnection while reading SMTP command from 89-64-28-126.dynamic.chello.pl [89.64.28.126]:53302 I=[10.100.18.25]:25 (error: Connection reset by peer) 2019-10-21 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=89.64.28.126 |
2019-10-21 20:54:50 |
| 123.7.178.136 | attack | Oct 21 13:40:47 vpn01 sshd[6761]: Failed password for root from 123.7.178.136 port 33765 ssh2 ... |
2019-10-21 20:19:55 |
| 45.82.153.76 | attackspam | Oct 21 14:19:35 relay postfix/smtpd\[15071\]: warning: unknown\[45.82.153.76\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 21 14:19:44 relay postfix/smtpd\[18674\]: warning: unknown\[45.82.153.76\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 21 14:21:09 relay postfix/smtpd\[20691\]: warning: unknown\[45.82.153.76\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 21 14:21:19 relay postfix/smtpd\[19072\]: warning: unknown\[45.82.153.76\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 21 14:22:00 relay postfix/smtpd\[19568\]: warning: unknown\[45.82.153.76\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-10-21 20:22:21 |
| 42.200.128.107 | attackspam | Oct 21 11:26:40 netserv300 sshd[17126]: Connection from 42.200.128.107 port 49551 on 188.40.78.228 port 22 Oct 21 11:26:40 netserv300 sshd[17127]: Connection from 42.200.128.107 port 49537 on 188.40.78.229 port 22 Oct 21 11:26:40 netserv300 sshd[17128]: Connection from 42.200.128.107 port 49549 on 188.40.78.230 port 22 Oct 21 11:26:41 netserv300 sshd[17129]: Connection from 42.200.128.107 port 50230 on 188.40.78.197 port 22 Oct 21 11:26:44 netserv300 sshd[17130]: Connection from 42.200.128.107 port 61511 on 188.40.78.230 port 22 Oct 21 11:26:44 netserv300 sshd[17131]: Connection from 42.200.128.107 port 61667 on 188.40.78.229 port 22 Oct 21 11:26:44 netserv300 sshd[17132]: Connection from 42.200.128.107 port 61498 on 188.40.78.228 port 22 Oct 21 11:26:45 netserv300 sshd[17136]: Connection from 42.200.128.107 port 62200 on 188.40.78.197 port 22 Oct 21 11:26:48 netserv300 sshd[17130]: Invalid user dircreate from 42.200.128.107 port 61511 Oct 21 11:26:48 netserv300 sshd[171........ ------------------------------ |
2019-10-21 20:27:41 |
| 59.13.94.184 | attackbotsspam | 2019-10-21 x@x 2019-10-21 12:52:40 unexpected disconnection while reading SMTP command from ([59.13.94.184]) [59.13.94.184]:37752 I=[10.100.18.22]:25 (error: Connection reset by peer) 2019-10-21 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=59.13.94.184 |
2019-10-21 20:45:26 |
| 59.14.26.155 | attackspambots | Fail2Ban Ban Triggered |
2019-10-21 20:53:27 |