City: unknown
Region: unknown
Country: Germany
Internet Service Provider: ComTrade LLC
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attack | firewall-block, port(s): 1618/tcp, 1657/tcp, 1819/tcp, 2538/tcp, 2590/tcp, 2759/tcp |
2020-01-08 07:41:09 |
| attack | Fail2Ban Ban Triggered |
2020-01-06 06:04:39 |
| attack | Fail2Ban Ban Triggered |
2020-01-03 03:42:51 |
| attackspambots | Jan 2 08:25:26 h2177944 kernel: \[1148549.972773\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.120 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=14807 PROTO=TCP SPT=44777 DPT=1648 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 2 08:25:26 h2177944 kernel: \[1148549.972785\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.120 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=14807 PROTO=TCP SPT=44777 DPT=1648 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 2 08:41:57 h2177944 kernel: \[1149540.202319\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.120 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=20565 PROTO=TCP SPT=44777 DPT=2197 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 2 08:41:57 h2177944 kernel: \[1149540.202334\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.120 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=20565 PROTO=TCP SPT=44777 DPT=2197 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 2 08:58:59 h2177944 kernel: \[1150562.641288\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.120 DST=85.214. |
2020-01-02 16:42:25 |
| attack | Jan 1 21:43:26 h2177944 kernel: \[1110036.889895\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.120 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=40603 PROTO=TCP SPT=44777 DPT=1537 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 1 21:43:26 h2177944 kernel: \[1110036.889906\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.120 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=40603 PROTO=TCP SPT=44777 DPT=1537 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 1 22:01:17 h2177944 kernel: \[1111107.584825\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.120 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=19495 PROTO=TCP SPT=44777 DPT=1715 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 1 22:01:17 h2177944 kernel: \[1111107.584838\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.120 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=19495 PROTO=TCP SPT=44777 DPT=1715 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 1 22:41:21 h2177944 kernel: \[1113511.002021\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.120 DST=85.214. |
2020-01-02 05:41:35 |
| attack | Jan 1 01:23:54 debian-2gb-nbg1-2 kernel: \[97568.094870\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.136.108.120 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=61892 PROTO=TCP SPT=48131 DPT=1998 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-01-01 08:27:35 |
| attack | Dec 31 22:17:47 debian-2gb-nbg1-2 kernel: \[86401.341557\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.136.108.120 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=25719 PROTO=TCP SPT=48131 DPT=2212 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-01-01 05:44:43 |
| attackbotsspam | Dec 29 08:06:47 h2177944 kernel: \[801892.493341\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.120 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=43280 PROTO=TCP SPT=44872 DPT=2774 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 29 08:06:47 h2177944 kernel: \[801892.493356\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.120 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=43280 PROTO=TCP SPT=44872 DPT=2774 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 29 08:14:16 h2177944 kernel: \[802340.966796\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.120 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=10911 PROTO=TCP SPT=44872 DPT=1442 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 29 08:14:16 h2177944 kernel: \[802340.966811\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.120 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=10911 PROTO=TCP SPT=44872 DPT=1442 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 29 08:29:34 h2177944 kernel: \[803258.634285\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.120 DST=85.214.117.9 |
2019-12-29 15:38:53 |
| attackspam | Dec 28 21:03:21 debian-2gb-nbg1-2 kernel: \[1216117.351156\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.136.108.120 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=34639 PROTO=TCP SPT=44872 DPT=2093 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-12-29 04:22:49 |
| attackspam | Dec 28 01:29:43 debian-2gb-nbg1-2 kernel: \[1145704.073490\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.136.108.120 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=40562 PROTO=TCP SPT=40229 DPT=2117 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-12-28 09:01:44 |
| attackspam | Dec 26 15:45:56 mc1 kernel: \[1530353.173779\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.108.120 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=29788 PROTO=TCP SPT=52547 DPT=1995 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 26 15:48:05 mc1 kernel: \[1530482.528143\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.108.120 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=63163 PROTO=TCP SPT=52547 DPT=2602 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 26 15:54:21 mc1 kernel: \[1530858.438331\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.108.120 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=16772 PROTO=TCP SPT=52547 DPT=1492 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-12-26 23:18:32 |
| attack | Dec 26 11:23:55 debian-2gb-nbg1-2 kernel: \[1008564.667742\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.136.108.120 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=15551 PROTO=TCP SPT=52547 DPT=2009 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-12-26 18:36:21 |
| attackbotsspam | Dec 25 17:43:33 debian-2gb-nbg1-2 kernel: \[944947.355984\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.136.108.120 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=4263 PROTO=TCP SPT=47808 DPT=2180 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-12-26 01:14:14 |
| attackbotsspam | Dec 25 12:14:13 debian-2gb-nbg1-2 kernel: \[925188.585487\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.136.108.120 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=45466 PROTO=TCP SPT=47808 DPT=2583 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-12-25 19:28:58 |
| attackspambots | Dec 24 11:58:56 debian-2gb-nbg1-2 kernel: \[837876.892606\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.136.108.120 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=33888 PROTO=TCP SPT=44118 DPT=1615 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-12-24 19:22:48 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.136.108.22 | attackspambots | 45.136.108.22 - - [31/Aug/2020:07:28:26 -0500] "- / HTTP/1.0" 400 219 000 0 0 0 15 282 0 0 0 NONE FIN FIN ERR_INVALID_REQ |
2020-09-01 04:38:43 |
| 45.136.108.22 | attack | Unauthorized connection attempt from IP address 45.136.108.22 on port 993 |
2020-08-29 02:06:36 |
| 45.136.108.24 | attackspambots | SSH login attempts. |
2020-08-22 23:35:58 |
| 45.136.108.22 | attackspambots | Fail2Ban Ban Triggered |
2020-08-19 09:11:16 |
| 45.136.108.65 | attack | [14/Aug/2020:05:14:56 -0400] "\x03" Blank UA |
2020-08-16 04:36:35 |
| 45.136.108.67 | attack | Unauthorized connection attempt detected from IP address 45.136.108.67 to port 2261 [T] |
2020-08-16 04:36:18 |
| 45.136.108.24 | attackspam | Unauthorized connection attempt detected from IP address 45.136.108.24 to port 4453 [T] |
2020-08-14 02:36:09 |
| 45.136.108.65 | attackbotsspam | Unauthorized connection attempt detected from IP address 45.136.108.65 to port 968 [T] |
2020-08-14 02:12:50 |
| 45.136.108.66 | attackbotsspam | Unauthorized connection attempt detected from IP address 45.136.108.66 to port 1723 [T] |
2020-08-14 02:12:33 |
| 45.136.108.68 | attack | Unauthorized connection attempt detected from IP address 45.136.108.68 to port 3424 [T] |
2020-08-14 02:12:09 |
| 45.136.108.22 | attackbotsspam | Port scan detected |
2020-08-14 01:49:56 |
| 45.136.108.67 | attackspambots | Unauthorized connection attempt detected from IP address 45.136.108.67 to port 2925 [T] |
2020-08-14 01:49:28 |
| 45.136.108.62 | attack | Unauthorized connection attempt detected from IP address 45.136.108.62 to port 9055 [T] |
2020-08-14 01:07:35 |
| 45.136.108.80 | attackspambots | 2020-08-12T12:42:42Z - RDP login failed multiple times. (45.136.108.80) |
2020-08-12 22:09:08 |
| 45.136.108.18 | attack | RDP brute forcing (r) |
2020-08-04 21:39:59 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.136.108.120
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51649
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.136.108.120. IN A
;; AUTHORITY SECTION:
. 324 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019122400 1800 900 604800 86400
;; Query time: 92 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 24 19:22:43 CST 2019
;; MSG SIZE rcvd: 118Host 120.108.136.45.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 120.108.136.45.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 167.172.163.162 | attackspam | Jul 16 10:00:20 vpn01 sshd[15248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.163.162 Jul 16 10:00:22 vpn01 sshd[15248]: Failed password for invalid user zxz from 167.172.163.162 port 51416 ssh2 ... |
2020-07-16 16:26:29 |
| 116.228.37.90 | attackspambots | Jul 16 15:20:59 webhost01 sshd[2273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.228.37.90 Jul 16 15:21:01 webhost01 sshd[2273]: Failed password for invalid user juan from 116.228.37.90 port 49006 ssh2 ... |
2020-07-16 16:27:01 |
| 198.23.145.206 | attackspam | (From kim@10xsuperstar.com) Hi, I was just on your site giambochiropractic.com and I like it very much. We are looking for a small selected group of VIP partners, to buy email advertising from on a long-term monthly basis. I think giambochiropractic.com will be a good match. This can be a nice income boost for you. Coming in every month... Interested? Click the link below and enter your email. https://10xsuperstar.com/go/m/ I will be in touch... Thank you, Kim |
2020-07-16 16:43:07 |
| 120.92.139.2 | attackbotsspam | Invalid user jyh from 120.92.139.2 port 42116 |
2020-07-16 16:46:05 |
| 162.247.74.7 | attack | srv02 SSH BruteForce Attacks 22 .. |
2020-07-16 16:39:11 |
| 106.13.93.60 | attackbotsspam | Jul 16 10:06:34 vps687878 sshd\[24239\]: Failed password for invalid user qian from 106.13.93.60 port 42566 ssh2 Jul 16 10:10:03 vps687878 sshd\[24866\]: Invalid user jiao from 106.13.93.60 port 55880 Jul 16 10:10:03 vps687878 sshd\[24866\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.93.60 Jul 16 10:10:06 vps687878 sshd\[24866\]: Failed password for invalid user jiao from 106.13.93.60 port 55880 ssh2 Jul 16 10:13:32 vps687878 sshd\[25492\]: Invalid user rajesh from 106.13.93.60 port 40960 Jul 16 10:13:32 vps687878 sshd\[25492\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.93.60 ... |
2020-07-16 16:35:02 |
| 167.114.96.156 | attackbotsspam | 2020-07-16T04:32:59.597103vps2034 sshd[19981]: Invalid user shuang from 167.114.96.156 port 60054 2020-07-16T04:32:59.600699vps2034 sshd[19981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.ip-167-114-96.net 2020-07-16T04:32:59.597103vps2034 sshd[19981]: Invalid user shuang from 167.114.96.156 port 60054 2020-07-16T04:33:01.727444vps2034 sshd[19981]: Failed password for invalid user shuang from 167.114.96.156 port 60054 ssh2 2020-07-16T04:37:19.159381vps2034 sshd[31183]: Invalid user test3 from 167.114.96.156 port 48126 ... |
2020-07-16 16:38:42 |
| 95.130.181.11 | attack | Invalid user ma from 95.130.181.11 port 58154 |
2020-07-16 16:55:27 |
| 218.92.0.165 | attackbotsspam | Jul 16 10:51:12 mellenthin sshd[23501]: Failed none for invalid user root from 218.92.0.165 port 56311 ssh2 Jul 16 10:51:12 mellenthin sshd[23501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.165 user=root |
2020-07-16 16:54:02 |
| 13.71.111.192 | attack | Jul 16 08:52:31 vpn01 sshd[13388]: Failed password for root from 13.71.111.192 port 12117 ssh2 ... |
2020-07-16 16:59:04 |
| 218.92.0.184 | attack | DATE:2020-07-16 10:28:07,IP:218.92.0.184,MATCHES:10,PORT:ssh |
2020-07-16 16:28:32 |
| 222.186.175.150 | attackspambots | Jul 16 08:25:50 ip-172-31-61-156 sshd[7353]: Failed password for root from 222.186.175.150 port 53980 ssh2 Jul 16 08:25:54 ip-172-31-61-156 sshd[7353]: Failed password for root from 222.186.175.150 port 53980 ssh2 Jul 16 08:25:49 ip-172-31-61-156 sshd[7353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.150 user=root Jul 16 08:25:50 ip-172-31-61-156 sshd[7353]: Failed password for root from 222.186.175.150 port 53980 ssh2 Jul 16 08:25:54 ip-172-31-61-156 sshd[7353]: Failed password for root from 222.186.175.150 port 53980 ssh2 ... |
2020-07-16 16:31:33 |
| 195.122.226.164 | attackspambots | [ssh] SSH attack |
2020-07-16 16:57:48 |
| 119.96.230.241 | attackbotsspam | Jul 16 08:11:14 rush sshd[5887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.96.230.241 Jul 16 08:11:17 rush sshd[5887]: Failed password for invalid user postgres from 119.96.230.241 port 45229 ssh2 Jul 16 08:16:51 rush sshd[6162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.96.230.241 ... |
2020-07-16 16:28:18 |
| 80.82.64.213 | attackspam | villaromeo.de 80.82.64.213 [16/Jul/2020:07:07:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 580 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36" villaromeo.de 80.82.64.213 [16/Jul/2020:07:07:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 580 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36" |
2020-07-16 16:55:47 |