City: Amsterdam
Region: North Holland
Country: Netherlands
Internet Service Provider: unknown
Hostname: unknown
Organization: Microsoft Corporation
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 13.80.25.251 | attackspam | Rude login attack (5 tries in 1d) |
2019-09-24 03:09:58 |
| 13.80.242.163 | attackbots | Fail2Ban Ban Triggered |
2019-08-21 07:08:29 |
| 13.80.242.163 | attackbots | DATE:2019-07-26 01:09:10, IP:13.80.242.163, PORT:ssh brute force auth on SSH service (patata) |
2019-07-26 08:19:47 |
| 13.80.249.12 | attackspambots | Jul 25 20:18:24 meumeu sshd[15901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.80.249.12 Jul 25 20:18:26 meumeu sshd[15901]: Failed password for invalid user jakarta from 13.80.249.12 port 34891 ssh2 Jul 25 20:23:26 meumeu sshd[14663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.80.249.12 ... |
2019-07-26 02:25:32 |
| 13.80.242.163 | attackbots | Jul 25 12:45:22 MK-Soft-VM3 sshd\[11614\]: Invalid user postgres from 13.80.242.163 port 53986 Jul 25 12:45:22 MK-Soft-VM3 sshd\[11614\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.80.242.163 Jul 25 12:45:24 MK-Soft-VM3 sshd\[11614\]: Failed password for invalid user postgres from 13.80.242.163 port 53986 ssh2 ... |
2019-07-25 20:45:49 |
| 13.80.242.163 | attackspam | Jul 25 17:34:14 vibhu-HP-Z238-Microtower-Workstation sshd\[12308\]: Invalid user hadoop from 13.80.242.163 Jul 25 17:34:14 vibhu-HP-Z238-Microtower-Workstation sshd\[12308\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.80.242.163 Jul 25 17:34:16 vibhu-HP-Z238-Microtower-Workstation sshd\[12308\]: Failed password for invalid user hadoop from 13.80.242.163 port 41476 ssh2 Jul 25 17:39:34 vibhu-HP-Z238-Microtower-Workstation sshd\[12695\]: Invalid user udin from 13.80.242.163 Jul 25 17:39:34 vibhu-HP-Z238-Microtower-Workstation sshd\[12695\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.80.242.163 ... |
2019-07-25 20:18:26 |
| 13.80.249.12 | attack | Jul 25 04:44:28 meumeu sshd[13063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.80.249.12 Jul 25 04:44:30 meumeu sshd[13063]: Failed password for invalid user op from 13.80.249.12 port 33947 ssh2 Jul 25 04:49:27 meumeu sshd[16912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.80.249.12 ... |
2019-07-25 10:53:29 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.80.2.37
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12957
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;13.80.2.37. IN A
;; AUTHORITY SECTION:
. 3208 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019051800 1800 900 604800 86400
;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat May 18 21:20:57 CST 2019
;; MSG SIZE rcvd: 114
Host 37.2.80.13.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 37.2.80.13.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 178.128.90.40 | attackspambots | SSH Brute Force, server-1 sshd[14113]: Failed password for uucp from 178.128.90.40 port 40910 ssh2 |
2019-11-21 03:40:47 |
| 50.79.140.161 | attack | 2019-11-20T16:18:31.865263scmdmz1 sshd\[2442\]: Invalid user com from 50.79.140.161 port 40559 2019-11-20T16:18:31.868652scmdmz1 sshd\[2442\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=50-79-140-161-static.hfc.comcastbusiness.net 2019-11-20T16:18:33.940304scmdmz1 sshd\[2442\]: Failed password for invalid user com from 50.79.140.161 port 40559 ssh2 ... |
2019-11-21 03:51:45 |
| 187.16.39.96 | attackspambots | Brute force attempt |
2019-11-21 03:49:41 |
| 159.203.197.5 | attackspambots | 29660/tcp 63428/tcp 17840/tcp... [2019-09-20/11-20]58pkt,47pt.(tcp),4pt.(udp) |
2019-11-21 04:05:14 |
| 50.247.57.253 | attack | firewall-block, port(s): 23/tcp |
2019-11-21 03:47:27 |
| 59.152.237.118 | attackspam | $f2bV_matches |
2019-11-21 03:54:20 |
| 106.75.103.35 | attackbots | Nov 20 06:22:47 php1 sshd\[15821\]: Invalid user boon from 106.75.103.35 Nov 20 06:22:47 php1 sshd\[15821\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.103.35 Nov 20 06:22:49 php1 sshd\[15821\]: Failed password for invalid user boon from 106.75.103.35 port 38076 ssh2 Nov 20 06:27:10 php1 sshd\[16427\]: Invalid user bitrix from 106.75.103.35 Nov 20 06:27:10 php1 sshd\[16427\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.103.35 |
2019-11-21 03:45:04 |
| 106.251.67.78 | attack | detected by Fail2Ban |
2019-11-21 03:45:42 |
| 37.49.230.18 | attackspambots | ET CINS Active Threat Intelligence Poor Reputation IP group 22 - port: 80 proto: TCP cat: Misc Attack |
2019-11-21 04:06:09 |
| 219.250.188.133 | attack | Invalid user double from 219.250.188.133 port 50035 |
2019-11-21 03:56:55 |
| 103.48.193.7 | attackbotsspam | $f2bV_matches |
2019-11-21 03:36:02 |
| 207.154.209.159 | attack | Nov 20 20:26:05 vps sshd[17711]: Failed password for root from 207.154.209.159 port 59660 ssh2 Nov 20 20:36:49 vps sshd[18147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.209.159 Nov 20 20:36:51 vps sshd[18147]: Failed password for invalid user skater from 207.154.209.159 port 52312 ssh2 ... |
2019-11-21 04:00:31 |
| 138.204.143.122 | attackbotsspam | MultiHost/MultiPort Probe, Scan, Hack - |
2019-11-21 03:43:33 |
| 124.40.244.199 | attack | 2019-11-20T15:11:56.522840abusebot-6.cloudsearch.cf sshd\[28429\]: Invalid user db from 124.40.244.199 port 50702 |
2019-11-21 03:52:04 |
| 177.1.214.207 | attack | Nov 20 15:34:19 OPSO sshd\[30260\]: Invalid user usuario from 177.1.214.207 port 44304 Nov 20 15:34:19 OPSO sshd\[30260\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.1.214.207 Nov 20 15:34:21 OPSO sshd\[30260\]: Failed password for invalid user usuario from 177.1.214.207 port 44304 ssh2 Nov 20 15:39:25 OPSO sshd\[31011\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.1.214.207 user=named Nov 20 15:39:27 OPSO sshd\[31011\]: Failed password for named from 177.1.214.207 port 16570 ssh2 |
2019-11-21 04:09:45 |