City: Ufa
Region: Bashkortostan Republic
Country: Russia
Internet Service Provider: OJSC Ufanet
Hostname: unknown
Organization: unknown
Usage Type: Fixed Line ISP
| Type | Details | Datetime |
|---|---|---|
| attackbots | Unauthorized connection attempt detected from IP address 145.255.0.40 to port 445 |
2019-12-28 03:17:05 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 145.255.0.161 | attack | /viewforum.php?f=3 |
2020-03-12 08:10:38 |
| 145.255.0.50 | attackbots | Feb 21 10:15:41 plusreed sshd[31879]: Invalid user telnet from 145.255.0.50 ... |
2020-02-21 23:30:24 |
| 145.255.0.44 | attackbotsspam | Unauthorized connection attempt detected from IP address 145.255.0.44 to port 8080 |
2019-12-31 01:57:49 |
| 145.255.0.125 | attack | 2019-07-09T09:42:57.462840stt-1.[munged] kernel: [6711399.171391] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:aa:c1:08:00 SRC=145.255.0.125 DST=[mungedIP1] LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=10720 DF PROTO=TCP SPT=61603 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 2019-07-09T09:43:00.457687stt-1.[munged] kernel: [6711402.166222] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:aa:c1:08:00 SRC=145.255.0.125 DST=[mungedIP1] LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=14767 DF PROTO=TCP SPT=61603 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 2019-07-09T09:43:06.458777stt-1.[munged] kernel: [6711408.167294] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:aa:c1:08:00 SRC=145.255.0.125 DST=[mungedIP1] LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=20137 DF PROTO=TCP SPT=61603 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 |
2019-07-09 23:06:09 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 145.255.0.40
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51700
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;145.255.0.40. IN A
;; AUTHORITY SECTION:
. 468 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019122700 1800 900 604800 86400
;; Query time: 131 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Dec 28 03:17:02 CST 2019
;; MSG SIZE rcvd: 11640.0.255.145.in-addr.arpa domain name pointer 145.255.0.40.dynamic.ufanet.ru.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
40.0.255.145.in-addr.arpa name = 145.255.0.40.dynamic.ufanet.ru.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 59.30.114.37 | attack | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-03-18 07:04:08 |
| 180.167.118.178 | attackbotsspam | 2020-03-17T22:56:10.410077shield sshd\[9510\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.167.118.178 user=root 2020-03-17T22:56:12.496850shield sshd\[9510\]: Failed password for root from 180.167.118.178 port 57175 ssh2 2020-03-17T23:00:43.510284shield sshd\[10100\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.167.118.178 user=root 2020-03-17T23:00:45.075097shield sshd\[10100\]: Failed password for root from 180.167.118.178 port 37479 ssh2 2020-03-17T23:05:47.665849shield sshd\[10773\]: Invalid user icmsectest from 180.167.118.178 port 46022 |
2020-03-18 07:09:59 |
| 42.5.12.191 | attackspambots | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-03-18 06:59:23 |
| 185.101.231.42 | attack | SSH Invalid Login |
2020-03-18 07:17:43 |
| 139.198.255.62 | attackspambots | Mar 17 21:25:51 vmd48417 sshd[13003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.255.62 |
2020-03-18 07:37:20 |
| 118.25.88.204 | attack | Mar 17 22:55:30 IngegnereFirenze sshd[18617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.88.204 user=root ... |
2020-03-18 07:40:24 |
| 31.20.193.52 | attack | Mar 17 18:30:07 web8 sshd\[24516\]: Invalid user vagrant from 31.20.193.52 Mar 17 18:30:07 web8 sshd\[24516\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.20.193.52 Mar 17 18:30:09 web8 sshd\[24516\]: Failed password for invalid user vagrant from 31.20.193.52 port 41700 ssh2 Mar 17 18:33:07 web8 sshd\[26012\]: Invalid user admin1 from 31.20.193.52 Mar 17 18:33:08 web8 sshd\[26012\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.20.193.52 |
2020-03-18 07:07:50 |
| 183.82.2.22 | attack | 20/3/17@14:17:46: FAIL: Alarm-Network address from=183.82.2.22 ... |
2020-03-18 07:27:25 |
| 61.161.45.25 | attackbotsspam | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-03-18 07:40:38 |
| 83.240.245.242 | attack | Mar 17 22:46:42 eventyay sshd[27926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.240.245.242 Mar 17 22:46:45 eventyay sshd[27926]: Failed password for invalid user zabbix from 83.240.245.242 port 33534 ssh2 Mar 17 22:50:13 eventyay sshd[28077]: Failed password for root from 83.240.245.242 port 37484 ssh2 ... |
2020-03-18 07:36:26 |
| 92.63.194.11 | attackbotsspam | $f2bV_matches |
2020-03-18 07:29:55 |
| 163.172.191.192 | attackbots | Invalid user ll from 163.172.191.192 port 46668 |
2020-03-18 07:35:30 |
| 110.6.192.38 | attackspam | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-03-18 07:10:49 |
| 84.151.195.201 | attack | IP blocked |
2020-03-18 07:38:47 |
| 62.109.26.125 | attackspambots | Mar 17 22:54:26 cloud sshd[23857]: Failed password for root from 62.109.26.125 port 53994 ssh2 |
2020-03-18 07:01:29 |