City: unknown
Region: unknown
Country: Romania
Internet Service Provider: SC Nextgen Communications SRL
Hostname: unknown
Organization: unknown
Usage Type: Fixed Line ISP
| Type | Details | Datetime |
|---|---|---|
| attack | Unauthorized connection attempt detected from IP address 94.53.196.93 to port 23 [J] |
2020-02-05 17:55:37 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 94.53.196.70 | attack | May 8 05:08:43 artelis kernel: [2470999.979362] [UFW BLOCK] IN=eth0 OUT= MAC=c2:45:3b:cb:6e:17:ec:38:73:0c:18:30:08:00 SRC=94.53.196.70 DST=167.99.196.43 LEN=40 TOS=0x00 PREC=0x20 TTL=54 ID=60676 PROTO=TCP SPT=9600 DPT=4567 WINDOW=11400 RES=0x00 SYN URGP=0 May 8 05:09:21 artelis kernel: [2471038.211454] [UFW BLOCK] IN=eth0 OUT= MAC=c2:45:3b:cb:6e:17:ec:38:73:0c:18:30:08:00 SRC=94.53.196.70 DST=167.99.196.43 LEN=40 TOS=0x00 PREC=0x20 TTL=54 ID=60676 PROTO=TCP SPT=9600 DPT=4567 WINDOW=11400 RES=0x00 SYN URGP=0 May 8 05:09:28 artelis kernel: [2471044.890662] [UFW BLOCK] IN=eth0 OUT= MAC=c2:45:3b:cb:6e:17:ec:38:73:0c:18:30:08:00 SRC=94.53.196.70 DST=167.99.196.43 LEN=40 TOS=0x00 PREC=0x20 TTL=54 ID=60676 PROTO=TCP SPT=9600 DPT=4567 WINDOW=11400 RES=0x00 SYN URGP=0 May 8 05:09:39 artelis kernel: [2471055.540969] [UFW BLOCK] IN=eth0 OUT= MAC=c2:45:3b:cb:6e:17:ec:38:73:0c:18:30:08:00 SRC=94.53.196.70 DST=167.99.196.43 LEN=40 TOS=0x00 PREC=0x20 TTL=54 ID=60676 PROTO=TCP SPT=9600 DPT=456 ... |
2020-05-08 16:58:19 |
| 94.53.196.70 | attack | Honeypot attack, port: 4567, PTR: 94-53-196-70.next-gen.ro. |
2020-04-29 00:20:34 |
| 94.53.196.70 | attack | Honeypot attack, port: 4567, PTR: 94-53-196-70.next-gen.ro. |
2020-03-05 18:07:04 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.53.196.93
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11140
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.53.196.93. IN A
;; AUTHORITY SECTION:
. 352 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020020401 1800 900 604800 86400
;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 17:55:31 CST 2020
;; MSG SIZE rcvd: 11693.196.53.94.in-addr.arpa domain name pointer 94-53-196-93.next-gen.ro.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
93.196.53.94.in-addr.arpa name = 94-53-196-93.next-gen.ro.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.234.27.90 | attackspambots | (sshd) Failed SSH login from 49.234.27.90 (US/United States/-): 5 in the last 3600 secs |
2020-05-08 07:00:42 |
| 49.205.217.245 | attackbotsspam | May 8 04:03:20 gw1 sshd[20217]: Failed password for root from 49.205.217.245 port 57904 ssh2 ... |
2020-05-08 07:10:52 |
| 165.227.42.106 | attackspam | SSH Invalid Login |
2020-05-08 07:06:37 |
| 222.212.84.181 | attack | Attempted to telnet to my router |
2020-05-08 07:26:25 |
| 118.69.238.10 | attack | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-05-08 07:30:47 |
| 34.77.197.251 | attackspam | Unauthorized connection attempt detected from IP address 34.77.197.251 to port 13579 [T] |
2020-05-08 07:20:21 |
| 49.235.133.208 | attackbotsspam | May 8 00:39:30 vpn01 sshd[27365]: Failed password for root from 49.235.133.208 port 33176 ssh2 ... |
2020-05-08 07:19:50 |
| 159.89.83.244 | attackbotsspam | Scan |
2020-05-08 07:09:45 |
| 36.82.181.168 | attackbotsspam | Unauthorized connection attempt from IP address 36.82.181.168 on Port 445(SMB) |
2020-05-08 07:26:06 |
| 94.191.107.90 | attackspambots | ... |
2020-05-08 07:16:44 |
| 188.32.9.74 | attack | Unauthorized connection attempt from IP address 188.32.9.74 on Port 445(SMB) |
2020-05-08 07:16:25 |
| 124.42.83.34 | attackbots | 2020-05-07T20:43:02.757576abusebot-6.cloudsearch.cf sshd[13494]: Invalid user zm from 124.42.83.34 port 37238 2020-05-07T20:43:02.769179abusebot-6.cloudsearch.cf sshd[13494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.83.34 2020-05-07T20:43:02.757576abusebot-6.cloudsearch.cf sshd[13494]: Invalid user zm from 124.42.83.34 port 37238 2020-05-07T20:43:04.552458abusebot-6.cloudsearch.cf sshd[13494]: Failed password for invalid user zm from 124.42.83.34 port 37238 ssh2 2020-05-07T20:47:29.147589abusebot-6.cloudsearch.cf sshd[13715]: Invalid user yg from 124.42.83.34 port 35238 2020-05-07T20:47:29.158252abusebot-6.cloudsearch.cf sshd[13715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.83.34 2020-05-07T20:47:29.147589abusebot-6.cloudsearch.cf sshd[13715]: Invalid user yg from 124.42.83.34 port 35238 2020-05-07T20:47:31.262678abusebot-6.cloudsearch.cf sshd[13715]: Failed password for invalid ... |
2020-05-08 06:58:11 |
| 209.85.210.200 | attack | SPAM EVERY DAY |
2020-05-08 07:17:02 |
| 196.52.43.119 | attackspambots | Automatic report - Banned IP Access |
2020-05-08 07:13:49 |
| 222.186.169.194 | attackspam | [ssh] SSH attack |
2020-05-08 06:56:53 |