City: unknown
Region: unknown
Country: Lithuania
Internet Service Provider: Tele Asia Limited
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attack | Rude login attack (5 tries in 1d) |
2020-02-15 07:18:17 |
| attackbotsspam | Rude login attack (5 tries in 1d) |
2020-02-13 07:43:13 |
| attackbots | Dec 25 17:54:29 web1 postfix/smtpd[26296]: warning: unknown[45.125.66.181]: SASL LOGIN authentication failed: authentication failure ... |
2019-12-26 07:18:57 |
| attackbotsspam | Dec 6 10:07:38 web1 postfix/smtpd[19415]: warning: unknown[45.125.66.181]: SASL LOGIN authentication failed: authentication failure ... |
2019-12-07 01:47:38 |
| attack | 2019-12-05 dovecot_login authenticator failed for \(User\) \[45.125.66.181\]: 535 Incorrect authentication data \(set_id=username12@**REMOVED**.**REMOVED**\) 2019-12-05 dovecot_login authenticator failed for \(User\) \[45.125.66.181\]: 535 Incorrect authentication data \(set_id=username12@**REMOVED**.**REMOVED**\) 2019-12-05 dovecot_login authenticator failed for \(User\) \[45.125.66.181\]: 535 Incorrect authentication data \(set_id=username12@**REMOVED**.**REMOVED**\) |
2019-12-05 23:12:21 |
| attackbotsspam | Rude login attack (3 tries in 1d) |
2019-12-04 17:08:32 |
| attack | Rude login attack (5 tries in 1d) |
2019-10-08 02:49:05 |
| attackspam | Rude login attack (8 tries in 1d) |
2019-09-27 08:18:18 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.125.66.22 | attackbots | (ftpd) Failed FTP login from 45.125.66.22 (LT/Republic of Lithuania/-): 5 in the last 3600 secs; Ports: 20,21; Direction: in; Trigger: LF_FTPD; Logs: Oct 14 01:10:24 hostingremote proftpd[702140]: 0.0.0.0 (45.125.66.22[45.125.66.22]) - USER akttrading (Login failed): Incorrect password Oct 14 01:10:25 hostingremote proftpd[702141]: 0.0.0.0 (45.125.66.22[45.125.66.22]) - USER akttrading.com: no such user found from 45.125.66.22 [45.125.66.22] to 88.99.147.18:21 Oct 14 01:10:25 hostingremote proftpd[702142]: 0.0.0.0 (45.125.66.22[45.125.66.22]) - USER admin@akttrading.com: no such user found from 45.125.66.22 [45.125.66.22] to 88.99.147.18:21 Oct 14 01:10:25 hostingremote proftpd[702144]: 0.0.0.0 (45.125.66.22[45.125.66.22]) - USER akttrading@akttrading.com: no such user found from 45.125.66.22 [45.125.66.22] to 88.99.147.18:21 Oct 14 01:10:25 hostingremote proftpd[702145]: 0.0.0.0 (45.125.66.22[45.125.66.22]) - USER akttradi: no such user found from 45.125.66.22 [45.125.66.22] to 88.99.147.18:21 |
2020-10-14 03:56:58 |
| 45.125.66.22 | attackspambots | proto=tcp . spt=61669 . dpt=110 . src=45.125.66.22 . dst=xx.xx.4.1 . Found on Github Combined on 3 lists (58) |
2020-10-13 19:17:53 |
| 45.125.66.21 | attackspambots | Tried our host z. |
2020-09-28 02:06:03 |
| 45.125.66.21 | attackbots | Tried our host z. |
2020-09-27 18:10:29 |
| 45.125.66.137 | attackspambots | lfd: (smtpauth) Failed SMTP AUTH login from 45.125.66.137 (mex.creativityconsultation.com): 5 in the last 3600 secs - Wed Aug 29 11:51:07 2018 |
2020-09-26 08:00:09 |
| 45.125.66.137 | attackbots | lfd: (smtpauth) Failed SMTP AUTH login from 45.125.66.137 (mex.creativityconsultation.com): 5 in the last 3600 secs - Wed Aug 29 11:51:07 2018 |
2020-09-26 01:15:10 |
| 45.125.66.137 | attackspambots | lfd: (smtpauth) Failed SMTP AUTH login from 45.125.66.137 (mex.creativityconsultation.com): 5 in the last 3600 secs - Wed Aug 29 11:51:07 2018 |
2020-09-25 16:52:35 |
| 45.125.66.26 | attackbotsspam | Firewall Dropped Connection |
2020-08-26 02:29:25 |
| 45.125.66.22 | attackbots | (ftpd) Failed FTP login from 45.125.66.22 (LT/Republic of Lithuania/-): 10 in the last 3600 secs |
2020-08-13 19:49:57 |
| 45.125.66.205 | attackspam | [2020-06-17 08:05:13] NOTICE[1273][C-00001dce] chan_sip.c: Call from '' (45.125.66.205:5070) to extension '442037697412' rejected because extension not found in context 'public'. [2020-06-17 08:05:13] SECURITY[1288] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-06-17T08:05:13.562-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="442037697412",SessionID="0x7f31c02f97a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.125.66.205/5070",ACLName="no_extension_match" [2020-06-17 08:05:13] NOTICE[1273][C-00001dcf] chan_sip.c: Call from '' (45.125.66.205:5070) to extension '00442037697412' rejected because extension not found in context 'public'. [2020-06-17 08:05:13] SECURITY[1288] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-06-17T08:05:13.905-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00442037697412",SessionID="0x7f31c02f97a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.125.66.2 ... |
2020-06-17 20:44:21 |
| 45.125.66.204 | attackbotsspam | [portscan] tcp/81 [alter-web/web-proxy] *(RWIN=1024)(04301449) |
2020-05-01 01:46:02 |
| 45.125.66.168 | attack | Rude login attack (7 tries in 1d) |
2020-02-16 08:11:35 |
| 45.125.66.212 | attack | Rude login attack (6 tries in 1d) |
2020-02-16 08:07:45 |
| 45.125.66.68 | attack | Rude login attack (4 tries in 1d) |
2020-02-16 08:01:43 |
| 45.125.66.231 | attackbots | Rude login attack (4 tries in 1d) |
2020-02-16 07:59:20 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.125.66.181
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4958
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.125.66.181. IN A
;; AUTHORITY SECTION:
. 535 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019092603 1800 900 604800 86400
;; Query time: 236 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 27 08:18:14 CST 2019
;; MSG SIZE rcvd: 117Host 181.66.125.45.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 181.66.125.45.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 85.185.18.70 | attack | Nov 11 18:13:42 pkdns2 sshd\[9355\]: Invalid user logon from 85.185.18.70Nov 11 18:13:44 pkdns2 sshd\[9355\]: Failed password for invalid user logon from 85.185.18.70 port 57514 ssh2Nov 11 18:17:28 pkdns2 sshd\[9536\]: Invalid user pabon from 85.185.18.70Nov 11 18:17:30 pkdns2 sshd\[9536\]: Failed password for invalid user pabon from 85.185.18.70 port 58512 ssh2Nov 11 18:21:09 pkdns2 sshd\[9710\]: Invalid user cernada from 85.185.18.70Nov 11 18:21:12 pkdns2 sshd\[9710\]: Failed password for invalid user cernada from 85.185.18.70 port 59482 ssh2 ... |
2019-11-12 02:31:12 |
| 18.206.195.87 | attack | 3389BruteforceFW21 |
2019-11-12 02:45:59 |
| 62.4.17.32 | attackspambots | Invalid user lappenkueper from 62.4.17.32 port 57244 |
2019-11-12 02:19:35 |
| 182.254.154.89 | attackspambots | Nov 11 17:02:44 ns382633 sshd\[13580\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.254.154.89 user=root Nov 11 17:02:47 ns382633 sshd\[13580\]: Failed password for root from 182.254.154.89 port 33436 ssh2 Nov 11 17:16:30 ns382633 sshd\[16250\]: Invalid user muce from 182.254.154.89 port 54930 Nov 11 17:16:30 ns382633 sshd\[16250\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.254.154.89 Nov 11 17:16:32 ns382633 sshd\[16250\]: Failed password for invalid user muce from 182.254.154.89 port 54930 ssh2 |
2019-11-12 02:26:42 |
| 218.92.0.133 | attack | $f2bV_matches |
2019-11-12 02:47:07 |
| 112.170.97.127 | attackbots | " " |
2019-11-12 02:36:21 |
| 201.148.31.113 | attackbots | Unauthorised access (Nov 11) SRC=201.148.31.113 LEN=52 TTL=113 ID=28958 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-12 02:20:05 |
| 185.220.101.6 | attackspambots | abcdata-sys.de:80 185.220.101.6 - - \[11/Nov/2019:16:06:02 +0100\] "POST /xmlrpc.php HTTP/1.0" 301 497 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/69.0.3497.81 Safari/537.36" www.goldgier.de 185.220.101.6 \[11/Nov/2019:16:06:03 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 4081 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/69.0.3497.81 Safari/537.36" |
2019-11-12 02:29:12 |
| 103.192.76.205 | attackbots | Brute force attempt |
2019-11-12 02:46:18 |
| 129.211.131.152 | attackbots | 2019-11-11T16:17:34.974538abusebot-8.cloudsearch.cf sshd\[26473\]: Invalid user imi from 129.211.131.152 port 41371 |
2019-11-12 02:20:30 |
| 24.212.252.104 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/24.212.252.104/ CA - 1H : (24) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CA NAME ASN : ASN5645 IP : 24.212.252.104 CIDR : 24.212.252.0/23 PREFIX COUNT : 152 UNIQUE IP COUNT : 729344 ATTACKS DETECTED ASN5645 : 1H - 1 3H - 1 6H - 2 12H - 4 24H - 4 DateTime : 2019-11-11 15:41:34 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-12 02:33:51 |
| 167.71.220.148 | attackspam | miraniessen.de 167.71.220.148 \[11/Nov/2019:15:41:51 +0100\] "POST /wp-login.php HTTP/1.1" 200 5974 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" miraniessen.de 167.71.220.148 \[11/Nov/2019:15:41:57 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4042 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-11-12 02:25:34 |
| 146.185.183.65 | attackbots | k+ssh-bruteforce |
2019-11-12 02:15:25 |
| 118.24.99.163 | attackbotsspam | 2019-11-11T14:41:35.402109abusebot-5.cloudsearch.cf sshd\[4083\]: Invalid user robert from 118.24.99.163 port 14131 |
2019-11-12 02:34:20 |
| 212.76.101.46 | attack | Automatic report - Port Scan Attack |
2019-11-12 02:44:09 |