City: unknown
Region: unknown
Country: Germany
Internet Service Provider: ComTrade LLC
Hostname: unknown
Organization: unknown
Usage Type: Commercial
| Type | Details | Datetime |
|---|---|---|
| attackbots | Multiport scan : 10 ports scanned 3364 3371 3372 3375 3377 3384 3388 3391 3395 3396 |
2019-12-11 06:54:51 |
| attackspam | 12/04/2019-23:57:38.623806 45.136.109.95 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-12-05 13:06:22 |
| attack | 12/01/2019-13:38:35.985165 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 40 |
2019-12-02 03:43:56 |
| attack | Portscan or hack attempt detected by psad/fwsnort |
2019-11-30 23:11:49 |
| attackbots | 11/28/2019-12:49:46.863890 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 40 |
2019-11-29 01:59:42 |
| attackspambots | 11/27/2019-19:36:02.048773 45.136.109.95 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-11-28 08:59:30 |
| attack | Unauthorized connection attempt from IP address 45.136.109.95 on Port 3389(RDP) |
2019-11-27 17:58:49 |
| attackspam | 11/26/2019-12:41:45.668476 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 42 |
2019-11-26 20:33:10 |
| attack | ET CINS Active Threat Intelligence Poor Reputation IP group 33 - port: 3371 proto: TCP cat: Misc Attack |
2019-11-26 02:24:51 |
| attackspambots | 11/24/2019-13:53:23.379988 45.136.109.95 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-11-25 02:55:02 |
| attackbots | Portscan or hack attempt detected by psad/fwsnort |
2019-11-24 15:00:40 |
| attack | 45.136.109.95 was recorded 109 times by 32 hosts attempting to connect to the following ports: 3383,3381,3382,3388,3379,3368,3361,3399,3396,3378,3363,3395,3375,3385,3384,3398,3360,3373,3387,3374,3367,3386,3365,3393,3369,3376,3391,3389,3371,3377,3380,3370,3392,3394. Incident counter (4h, 24h, all-time): 109, 697, 10238 |
2019-11-22 03:18:36 |
| attackspam | 11/19/2019-18:20:55.746839 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 40 |
2019-11-20 07:25:46 |
| attack | 11/19/2019-09:46:20.550512 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 40 |
2019-11-19 23:18:18 |
| attack | 11/18/2019-22:55:09.883916 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 42 |
2019-11-19 06:22:27 |
| attackbotsspam | 11/17/2019-15:23:11.769395 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 40 |
2019-11-18 04:37:08 |
| attackspambots | Portscan or hack attempt detected by psad/fwsnort |
2019-11-14 15:32:55 |
| attack | 11/12/2019-07:53:33.257933 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 42 |
2019-11-12 15:07:59 |
| attack | 11/11/2019-23:44:08.042992 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 42 |
2019-11-12 06:57:11 |
| attackspam | TCP 3389 (RDP) |
2019-11-11 01:02:56 |
| attack | 11/10/2019-07:33:20.049605 45.136.109.95 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-11-10 20:41:42 |
| attackbots | 11/08/2019-08:52:08.150154 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 42 |
2019-11-08 16:05:46 |
| attackbotsspam | 11/07/2019-19:06:04.110759 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 40 |
2019-11-08 08:25:18 |
| attackspambots | 11/06/2019-11:39:42.032804 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 40 |
2019-11-07 01:19:49 |
| attackspambots | Nov 6 06:50:09 h2177944 kernel: \[5895047.672265\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.95 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=46554 PROTO=TCP SPT=48022 DPT=3399 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 07:17:47 h2177944 kernel: \[5896705.266391\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.95 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=42578 PROTO=TCP SPT=48022 DPT=3374 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 07:17:53 h2177944 kernel: \[5896711.325657\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.95 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=18354 PROTO=TCP SPT=48022 DPT=3354 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 07:21:27 h2177944 kernel: \[5896925.825704\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.95 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=48139 PROTO=TCP SPT=48022 DPT=3352 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 07:29:54 h2177944 kernel: \[5897432.417203\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.95 DST=85.214.117.9 |
2019-11-06 15:10:05 |
| attackspambots | Nov 6 06:14:24 mc1 kernel: \[4303564.823461\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.95 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=5863 PROTO=TCP SPT=48022 DPT=3385 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 06:23:08 mc1 kernel: \[4304088.770931\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.95 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=26683 PROTO=TCP SPT=48022 DPT=3382 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 06:23:22 mc1 kernel: \[4304103.105272\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.95 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=31332 PROTO=TCP SPT=48022 DPT=3398 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-11-06 13:28:57 |
| attackbots | 11/03/2019-15:57:55.828970 45.136.109.95 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-11-04 06:00:48 |
| attackbotsspam | 11/03/2019-11:55:51.453575 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 42 |
2019-11-03 18:59:57 |
| attackspambots | 11/03/2019-01:29:38.840420 45.136.109.95 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 40 |
2019-11-03 13:47:13 |
| attackbots | ET CINS Active Threat Intelligence Poor Reputation IP group 31 - port: 3399 proto: TCP cat: Misc Attack |
2019-11-03 13:01:05 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.136.109.219 | attackspambots | ET CINS Active Threat Intelligence Poor Reputation IP group 26 - port: 6000 proto: tcp cat: Misc Attackbytes: 60 |
2020-08-19 23:39:13 |
| 45.136.109.219 | attackspam | slow and persistent scanner |
2020-08-17 20:34:11 |
| 45.136.109.251 | attackbotsspam | Port scanning [3 denied] |
2020-08-14 14:18:15 |
| 45.136.109.219 | attackbots |
|
2020-08-07 08:11:38 |
| 45.136.109.219 | attackbotsspam | [Tue Aug 04 17:47:28 2020] - DDoS Attack From IP: 45.136.109.219 Port: 41096 |
2020-08-06 18:31:50 |
| 45.136.109.219 | attack |
|
2020-08-05 23:34:34 |
| 45.136.109.158 | attack | Unauthorized connection attempt detected from IP address 45.136.109.158 to port 3389 |
2020-07-22 15:39:59 |
| 45.136.109.87 | attack | BruteForce RDP attempts from 45.136.109.175 |
2020-07-17 14:21:12 |
| 45.136.109.158 | attack | SmallBizIT.US 2 packets to tcp(3389,3391) |
2020-07-07 12:28:14 |
| 45.136.109.158 | attackbots | Unauthorized connection attempt detected from IP address 45.136.109.158 to port 4489 [T] |
2020-07-05 22:47:55 |
| 45.136.109.175 | attackspambots | Icarus honeypot on github |
2020-07-02 08:25:18 |
| 45.136.109.251 | attackbots | Multiport scan : 15 ports scanned 2888 3381 3382 3402 3420 3501 3502 4003 4018 5909 7926 8093 9000 9261 9833 |
2020-06-21 07:47:48 |
| 45.136.109.219 | attackbots | ET CINS Active Threat Intelligence Poor Reputation IP group 27 - port: 6389 proto: TCP cat: Misc Attack |
2020-06-06 08:47:05 |
| 45.136.109.222 | attackspam | Mar 22 03:57:09 src: 45.136.109.222 signature match: "BACKDOOR NetSphere Connection attempt" (sid: 100044) tcp port: 30100 |
2020-03-22 12:01:46 |
| 45.136.109.222 | attackbotsspam | Mar 18 22:14:16 src: 45.136.109.222 signature match: "BACKDOOR Subseven connection attempt" (sid: 100207) tcp port: 27374 |
2020-03-19 06:22:33 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.136.109.95
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32254
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.136.109.95. IN A
;; AUTHORITY SECTION:
. 547 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019091802 1800 900 604800 86400
;; Query time: 129 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 19 18:57:36 CST 2019
;; MSG SIZE rcvd: 117Host 95.109.136.45.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 95.109.136.45.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 196.52.43.60 | attackbots | Automatic report - Port Scan Attack |
2019-10-23 07:02:44 |
| 106.12.156.160 | attackbots | Oct 22 22:55:22 OPSO sshd\[4395\]: Invalid user konic from 106.12.156.160 port 55526 Oct 22 22:55:22 OPSO sshd\[4395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.156.160 Oct 22 22:55:23 OPSO sshd\[4395\]: Failed password for invalid user konic from 106.12.156.160 port 55526 ssh2 Oct 22 22:59:21 OPSO sshd\[4921\]: Invalid user test7 from 106.12.156.160 port 36132 Oct 22 22:59:21 OPSO sshd\[4921\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.156.160 |
2019-10-23 06:54:38 |
| 1.58.202.124 | attackspambots | 23/tcp 5500/tcp [2019-10-20/22]2pkt |
2019-10-23 07:01:48 |
| 92.114.119.31 | attack | 9001/tcp 34567/tcp... [2019-10-09/22]4pkt,2pt.(tcp) |
2019-10-23 06:51:02 |
| 210.227.113.18 | attackspambots | Oct 23 00:17:52 sso sshd[15836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.227.113.18 Oct 23 00:17:55 sso sshd[15836]: Failed password for invalid user gen123 from 210.227.113.18 port 39224 ssh2 ... |
2019-10-23 07:10:52 |
| 122.160.88.216 | attackspam | 1433/tcp 445/tcp [2019-10-20/22]2pkt |
2019-10-23 06:59:51 |
| 111.231.72.231 | attack | Feb 15 16:29:59 microserver sshd[29790]: Invalid user scan from 111.231.72.231 port 45404 Feb 15 16:29:59 microserver sshd[29790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.72.231 Feb 15 16:30:00 microserver sshd[29790]: Failed password for invalid user scan from 111.231.72.231 port 45404 ssh2 Feb 15 16:34:38 microserver sshd[30233]: Invalid user isadmin from 111.231.72.231 port 35796 Feb 15 16:34:38 microserver sshd[30233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.72.231 Feb 16 15:04:40 microserver sshd[27513]: Invalid user source from 111.231.72.231 port 57174 Feb 16 15:04:40 microserver sshd[27513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.72.231 Feb 16 15:04:41 microserver sshd[27513]: Failed password for invalid user source from 111.231.72.231 port 57174 ssh2 Feb 16 15:08:37 microserver sshd[27950]: Invalid user redmine from 111.231.72.231 por |
2019-10-23 07:25:10 |
| 27.131.161.100 | attackspam | 1433/tcp 1433/tcp 1433/tcp [2019-10-20/22]3pkt |
2019-10-23 06:56:27 |
| 89.248.168.202 | attackspambots | 10/22/2019-18:47:56.235665 89.248.168.202 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-10-23 07:15:56 |
| 162.247.74.7 | attackspam | Oct 23 00:31:14 rotator sshd\[1894\]: Failed password for root from 162.247.74.7 port 34046 ssh2Oct 23 00:31:17 rotator sshd\[1894\]: Failed password for root from 162.247.74.7 port 34046 ssh2Oct 23 00:31:19 rotator sshd\[1894\]: Failed password for root from 162.247.74.7 port 34046 ssh2Oct 23 00:31:22 rotator sshd\[1894\]: Failed password for root from 162.247.74.7 port 34046 ssh2Oct 23 00:31:25 rotator sshd\[1894\]: Failed password for root from 162.247.74.7 port 34046 ssh2Oct 23 00:31:27 rotator sshd\[1894\]: Failed password for root from 162.247.74.7 port 34046 ssh2 ... |
2019-10-23 07:24:39 |
| 139.0.8.146 | attackspambots | Oct 21 12:24:01 our-server-hostname postfix/smtpd[22841]: connect from unknown[139.0.8.146] Oct 21 12:24:04 our-server-hostname sqlgrey: grey: new: 139.0.8.146(139.0.8.146), x@x -> x@x Oct 21 12:24:04 our-server-hostname postfix/policy-spf[30372]: : Policy action=550 Please see hxxp://www.openspf.org/Why?s=mfrom;id=larouche%40apex.net.au;ip=139.0.8.146;r=mx1.cbr.spam-filtering-appliance Oct x@x Oct 21 12:24:04 our-server-hostname postfix/smtpd[22841]: lost connection after DATA from unknown[139.0.8.1 .... truncated .... Oct 21 12:24:01 our-server-hostname postfix/smtpd[22841]: connect from unknown[139.0.8.146] Oct 21 12:24:04 our-server-hostname sqlgrey: grey: new: 139.0.8.146(139.0.8.146), x@x -> x@x Oct 21 12:24:04 our-server-hostname postfix/policy-spf[30372]: : Policy action=550 Please see hxxp://www.openspf.org/Why?s=mfrom;id=larouche%40apex.net.au;ip=139.0.8.146;r=mx1.cbr.spam-filtering-appliance Oct x@x Oct 21 12:24:04 our-server-hostname postfix/smtpd[22841]........ ------------------------------- |
2019-10-23 07:26:31 |
| 36.66.149.211 | attackspambots | Invalid user postgres from 36.66.149.211 port 44558 |
2019-10-23 07:19:21 |
| 41.222.196.57 | attackbotsspam | Oct 22 13:07:11 wbs sshd\[32213\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.222.196.57 user=root Oct 22 13:07:13 wbs sshd\[32213\]: Failed password for root from 41.222.196.57 port 58628 ssh2 Oct 22 13:12:18 wbs sshd\[32754\]: Invalid user support from 41.222.196.57 Oct 22 13:12:18 wbs sshd\[32754\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.222.196.57 Oct 22 13:12:20 wbs sshd\[32754\]: Failed password for invalid user support from 41.222.196.57 port 41548 ssh2 |
2019-10-23 07:18:06 |
| 121.7.25.55 | attack | 5432/tcp 7001/tcp 7001/tcp [2019-10-16/22]3pkt |
2019-10-23 06:58:32 |
| 185.255.46.100 | attackspambots | proto=tcp . spt=39673 . dpt=25 . (Found on Blocklist de Oct 22) (5) |
2019-10-23 07:22:58 |