City: unknown
Region: unknown
Country: Russian Federation
Internet Service Provider: OJSC Ufanet
Hostname: unknown
Organization: unknown
Usage Type: Fixed Line ISP
| Type | Details | Datetime |
|---|---|---|
| attackspambots | Chat Spam |
2019-11-01 15:46:23 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 145.255.27.194 | attackspambots | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): user=root |
2020-09-25 06:06:55 |
| 145.255.21.69 | attackspambots | Unauthorized connection attempt detected from IP address 145.255.21.69 to port 445 [T] |
2020-08-29 22:43:03 |
| 145.255.28.2 | attackbotsspam | Dovecot Invalid User Login Attempt. |
2020-08-22 13:08:36 |
| 145.255.28.2 | attackspam | spam |
2020-08-17 16:59:48 |
| 145.255.254.241 | attackspambots | Unauthorized connection attempt detected from IP address 145.255.254.241 to port 23 [T] |
2020-08-16 03:08:07 |
| 145.255.21.213 | attackspam | honeypot forum registration (user=Philliprisee; email=intercreditl@yandex.ru) |
2020-06-12 17:49:55 |
| 145.255.21.151 | attackbots | Port probing on unauthorized port 445 |
2020-06-04 03:38:39 |
| 145.255.25.247 | attackbots | " " |
2020-04-30 07:08:28 |
| 145.255.28.2 | attackbots | Brute force attack stopped by firewall |
2020-04-05 10:17:05 |
| 145.255.2.212 | attackbots | Unauthorized connection attempt detected from IP address 145.255.2.212 to port 23 [T] |
2020-03-24 20:43:47 |
| 145.255.2.243 | attackbotsspam | Jan 15 17:10:22 pi sshd[30514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.255.2.243 Jan 15 17:10:24 pi sshd[30514]: Failed password for invalid user system from 145.255.2.243 port 61823 ssh2 |
2020-03-14 01:19:45 |
| 145.255.26.115 | attackbotsspam | Honeypot attack, port: 81, PTR: 145.255.26.115.static.ufanet.ru. |
2020-03-11 21:48:14 |
| 145.255.239.178 | attackspam | [portscan] Port scan |
2020-03-04 14:10:11 |
| 145.255.28.122 | attackspambots | spam |
2020-03-01 19:45:44 |
| 145.255.28.2 | attackbots | spam |
2020-01-24 16:17:58 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 145.255.2.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28165
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;145.255.2.107. IN A
;; AUTHORITY SECTION:
. 544 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019110100 1800 900 604800 86400
;; Query time: 97 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 01 15:46:18 CST 2019
;; MSG SIZE rcvd: 117107.2.255.145.in-addr.arpa domain name pointer 145.255.2.107.static.ufanet.ru.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
107.2.255.145.in-addr.arpa name = 145.255.2.107.static.ufanet.ru.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 93.138.26.184 | attackspam | Honeypot attack, port: 445, PTR: 93-138-26-184.adsl.net.t-com.hr. |
2020-06-30 06:37:40 |
| 218.92.0.185 | attack | Jun 30 00:15:08 vm0 sshd[26591]: Failed password for root from 218.92.0.185 port 61094 ssh2 Jun 30 00:15:22 vm0 sshd[26591]: error: maximum authentication attempts exceeded for root from 218.92.0.185 port 61094 ssh2 [preauth] ... |
2020-06-30 06:31:17 |
| 186.215.44.32 | attackspam | Jun 29 17:01:37 : SSH login attempts with invalid user |
2020-06-30 06:43:59 |
| 49.234.122.94 | attackbots | " " |
2020-06-30 06:41:43 |
| 124.42.83.34 | attackspambots | 2020-06-29T04:26:53.4902741495-001 sshd[41992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.83.34 user=root 2020-06-29T04:26:55.0440511495-001 sshd[41992]: Failed password for root from 124.42.83.34 port 50262 ssh2 2020-06-29T04:30:25.4398851495-001 sshd[42171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.83.34 user=root 2020-06-29T04:30:26.7630541495-001 sshd[42171]: Failed password for root from 124.42.83.34 port 44140 ssh2 2020-06-29T17:57:06.6960131495-001 sshd[9593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.42.83.34 user=root 2020-06-29T17:57:08.9667191495-001 sshd[9593]: Failed password for root from 124.42.83.34 port 50648 ssh2 ... |
2020-06-30 07:03:35 |
| 13.82.219.14 | attack | Multiple SSH login attempts. |
2020-06-30 06:32:23 |
| 192.162.68.124 | attackspambots | Lines containing failures of 192.162.68.124 Jun 29 19:53:03 shared04 sshd[4734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.162.68.124 user=r.r Jun 29 19:53:05 shared04 sshd[4734]: Failed password for r.r from 192.162.68.124 port 56580 ssh2 Jun 29 19:53:05 shared04 sshd[4734]: Received disconnect from 192.162.68.124 port 56580:11: Bye Bye [preauth] Jun 29 19:53:05 shared04 sshd[4734]: Disconnected from authenticating user r.r 192.162.68.124 port 56580 [preauth] Jun 29 20:03:34 shared04 sshd[9068]: Invalid user ubuntu from 192.162.68.124 port 53088 Jun 29 20:03:34 shared04 sshd[9068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.162.68.124 Jun 29 20:03:36 shared04 sshd[9068]: Failed password for invalid user ubuntu from 192.162.68.124 port 53088 ssh2 Jun 29 20:03:37 shared04 sshd[9068]: Received disconnect from 192.162.68.124 port 53088:11: Bye Bye [preauth] Jun 29 20:03:37 sh........ ------------------------------ |
2020-06-30 07:00:08 |
| 45.143.220.65 | attackbots | s |
2020-06-30 06:35:47 |
| 95.167.225.81 | attack | 5x Failed Password |
2020-06-30 06:38:17 |
| 112.85.42.178 | attackspambots | Jun 29 23:46:27 gestao sshd[9329]: Failed password for root from 112.85.42.178 port 33611 ssh2 Jun 29 23:46:31 gestao sshd[9329]: Failed password for root from 112.85.42.178 port 33611 ssh2 Jun 29 23:46:35 gestao sshd[9329]: Failed password for root from 112.85.42.178 port 33611 ssh2 Jun 29 23:46:39 gestao sshd[9329]: Failed password for root from 112.85.42.178 port 33611 ssh2 ... |
2020-06-30 06:52:31 |
| 188.165.24.200 | attack | $f2bV_matches |
2020-06-30 06:55:53 |
| 85.159.44.66 | attack | Jun 29 23:52:03 journals sshd\[52605\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.159.44.66 user=root Jun 29 23:52:05 journals sshd\[52605\]: Failed password for root from 85.159.44.66 port 50421 ssh2 Jun 29 23:56:23 journals sshd\[53111\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.159.44.66 user=root Jun 29 23:56:25 journals sshd\[53111\]: Failed password for root from 85.159.44.66 port 48808 ssh2 Jun 30 00:00:51 journals sshd\[53793\]: Invalid user deployer from 85.159.44.66 ... |
2020-06-30 06:42:43 |
| 190.12.62.252 | attack | Brute forcing RDP port 3389 |
2020-06-30 06:47:43 |
| 54.37.71.204 | attack | Jun 29 23:09:04 srv sshd[26827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.71.204 |
2020-06-30 07:02:49 |
| 122.160.233.137 | attackspambots | B: Abusive ssh attack |
2020-06-30 07:06:03 |