City: unknown
Region: unknown
Country: Germany
Internet Service Provider: ComTrade LLC
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attack | firewall-block, port(s): 3005/tcp, 3030/tcp, 3083/tcp, 3318/tcp, 3972/tcp, 4094/tcp, 4186/tcp, 4200/tcp |
2019-12-21 20:04:40 |
| attack | Dec 19 19:53:45 debian-2gb-vpn-nbg1-1 kernel: [1152786.185097] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=45.136.108.157 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=16693 PROTO=TCP SPT=50345 DPT=3682 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-12-20 01:14:09 |
| attackspam | Dec 19 12:51:26 h2177944 kernel: \[9631253.432339\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.157 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=39471 PROTO=TCP SPT=50345 DPT=4014 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 19 12:52:08 h2177944 kernel: \[9631295.148798\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.157 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=38102 PROTO=TCP SPT=50345 DPT=4043 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 19 13:00:23 h2177944 kernel: \[9631790.424045\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.157 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=60711 PROTO=TCP SPT=50345 DPT=3500 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 19 13:09:12 h2177944 kernel: \[9632319.242183\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.157 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=14339 PROTO=TCP SPT=50345 DPT=4123 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 19 13:19:52 h2177944 kernel: \[9632959.195885\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.157 DST=85.214. |
2019-12-19 20:27:26 |
| attackspambots | firewall-block, port(s): 2924/tcp, 3073/tcp, 3123/tcp, 3445/tcp, 3448/tcp, 3539/tcp, 3678/tcp, 3701/tcp, 3824/tcp, 3873/tcp, 3874/tcp, 3994/tcp, 4040/tcp |
2019-12-19 07:36:51 |
| attackspambots | Dec 18 20:25:59 debian-2gb-nbg1-2 kernel: \[349931.452416\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.136.108.157 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=41429 PROTO=TCP SPT=46658 DPT=3627 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-12-19 03:28:46 |
| attackspam | Dec 18 09:46:24 debian-2gb-vpn-nbg1-1 kernel: [1029949.565159] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=45.136.108.157 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=23133 PROTO=TCP SPT=46658 DPT=3518 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-12-18 15:22:44 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.136.108.22 | attackspambots | 45.136.108.22 - - [31/Aug/2020:07:28:26 -0500] "- / HTTP/1.0" 400 219 000 0 0 0 15 282 0 0 0 NONE FIN FIN ERR_INVALID_REQ |
2020-09-01 04:38:43 |
| 45.136.108.22 | attack | Unauthorized connection attempt from IP address 45.136.108.22 on port 993 |
2020-08-29 02:06:36 |
| 45.136.108.24 | attackspambots | SSH login attempts. |
2020-08-22 23:35:58 |
| 45.136.108.22 | attackspambots | Fail2Ban Ban Triggered |
2020-08-19 09:11:16 |
| 45.136.108.65 | attack | [14/Aug/2020:05:14:56 -0400] "\x03" Blank UA |
2020-08-16 04:36:35 |
| 45.136.108.67 | attack | Unauthorized connection attempt detected from IP address 45.136.108.67 to port 2261 [T] |
2020-08-16 04:36:18 |
| 45.136.108.24 | attackspam | Unauthorized connection attempt detected from IP address 45.136.108.24 to port 4453 [T] |
2020-08-14 02:36:09 |
| 45.136.108.65 | attackbotsspam | Unauthorized connection attempt detected from IP address 45.136.108.65 to port 968 [T] |
2020-08-14 02:12:50 |
| 45.136.108.66 | attackbotsspam | Unauthorized connection attempt detected from IP address 45.136.108.66 to port 1723 [T] |
2020-08-14 02:12:33 |
| 45.136.108.68 | attack | Unauthorized connection attempt detected from IP address 45.136.108.68 to port 3424 [T] |
2020-08-14 02:12:09 |
| 45.136.108.22 | attackbotsspam | Port scan detected |
2020-08-14 01:49:56 |
| 45.136.108.67 | attackspambots | Unauthorized connection attempt detected from IP address 45.136.108.67 to port 2925 [T] |
2020-08-14 01:49:28 |
| 45.136.108.62 | attack | Unauthorized connection attempt detected from IP address 45.136.108.62 to port 9055 [T] |
2020-08-14 01:07:35 |
| 45.136.108.80 | attackspambots | 2020-08-12T12:42:42Z - RDP login failed multiple times. (45.136.108.80) |
2020-08-12 22:09:08 |
| 45.136.108.18 | attack | RDP brute forcing (r) |
2020-08-04 21:39:59 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.136.108.157
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12523
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.136.108.157. IN A
;; AUTHORITY SECTION:
. 434 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019121800 1800 900 604800 86400
;; Query time: 115 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 18 15:22:40 CST 2019
;; MSG SIZE rcvd: 118Host 157.108.136.45.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 157.108.136.45.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 211.175.49.176 | attackbotsspam | UTC: 2019-11-30 port: 23/tcp |
2019-12-01 20:06:27 |
| 182.61.40.227 | attackbotsspam | Dec 1 09:57:30 yesfletchmain sshd\[24781\]: Invalid user invitado from 182.61.40.227 port 43782 Dec 1 09:57:30 yesfletchmain sshd\[24781\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.40.227 Dec 1 09:57:32 yesfletchmain sshd\[24781\]: Failed password for invalid user invitado from 182.61.40.227 port 43782 ssh2 Dec 1 10:01:00 yesfletchmain sshd\[24850\]: User root from 182.61.40.227 not allowed because not listed in AllowUsers Dec 1 10:01:00 yesfletchmain sshd\[24850\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.40.227 user=root ... |
2019-12-01 20:30:36 |
| 200.44.50.155 | attackbots | Invalid user russia from 200.44.50.155 port 57050 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.44.50.155 Failed password for invalid user russia from 200.44.50.155 port 57050 ssh2 Invalid user dalda from 200.44.50.155 port 35774 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.44.50.155 |
2019-12-01 20:24:03 |
| 104.236.124.45 | attackbots | Dec 1 12:47:07 server sshd\[8822\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.124.45 user=lp Dec 1 12:47:09 server sshd\[8822\]: Failed password for lp from 104.236.124.45 port 55085 ssh2 Dec 1 13:12:47 server sshd\[14791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.124.45 user=root Dec 1 13:12:49 server sshd\[14791\]: Failed password for root from 104.236.124.45 port 38212 ssh2 Dec 1 13:18:14 server sshd\[16052\]: Invalid user alma from 104.236.124.45 Dec 1 13:18:14 server sshd\[16052\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.124.45 ... |
2019-12-01 20:33:40 |
| 5.196.65.85 | attack | WEB Masscan Scanner Activity |
2019-12-01 20:21:21 |
| 106.75.244.62 | attackbotsspam | 2019-12-01T12:31:00.317669abusebot-7.cloudsearch.cf sshd\[15525\]: Invalid user lonzo from 106.75.244.62 port 53512 |
2019-12-01 20:36:33 |
| 115.159.86.75 | attackbots | Dec 1 10:36:05 host sshd[4111]: Invalid user bissig from 115.159.86.75 port 46859 ... |
2019-12-01 20:14:25 |
| 218.92.0.188 | attack | Dec 1 12:16:17 zeus sshd[16153]: Failed password for root from 218.92.0.188 port 16872 ssh2 Dec 1 12:16:22 zeus sshd[16153]: Failed password for root from 218.92.0.188 port 16872 ssh2 Dec 1 12:16:27 zeus sshd[16153]: Failed password for root from 218.92.0.188 port 16872 ssh2 Dec 1 12:16:31 zeus sshd[16153]: Failed password for root from 218.92.0.188 port 16872 ssh2 Dec 1 12:16:37 zeus sshd[16153]: Failed password for root from 218.92.0.188 port 16872 ssh2 |
2019-12-01 20:17:27 |
| 118.24.205.97 | attackspam | UTC: 2019-11-30 port: 23/tcp |
2019-12-01 20:12:16 |
| 125.24.171.63 | attackbotsspam | Dec 1 10:22:11 uapps sshd[11406]: Failed password for invalid user r.r from 125.24.171.63 port 41886 ssh2 Dec 1 10:22:14 uapps sshd[11406]: Failed password for invalid user r.r from 125.24.171.63 port 41886 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=125.24.171.63 |
2019-12-01 20:23:44 |
| 85.209.0.192 | attack | UTC: 2019-11-30 pkts: 3 port: 22/tcp |
2019-12-01 20:36:59 |
| 185.176.27.118 | attack | 12/01/2019-06:09:44.175618 185.176.27.118 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-12-01 20:15:32 |
| 111.252.98.210 | attack | 2019-12-01T08:02:55.898867abusebot-5.cloudsearch.cf sshd\[16220\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111-252-98-210.dynamic-ip.hinet.net user=root |
2019-12-01 20:09:52 |
| 210.227.113.18 | attackspambots | Dec 1 10:14:46 icinga sshd[42274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.227.113.18 Dec 1 10:14:49 icinga sshd[42274]: Failed password for invalid user server from 210.227.113.18 port 55576 ssh2 Dec 1 10:31:24 icinga sshd[58099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.227.113.18 ... |
2019-12-01 20:33:00 |
| 120.77.223.23 | attack | Unauthorised access (Dec 1) SRC=120.77.223.23 LEN=60 TTL=46 ID=17875 DF TCP DPT=8080 WINDOW=29200 SYN |
2019-12-01 20:11:50 |