City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.138.168.35 | attackbotsspam | Auto Detect Rule! proto TCP (SYN), 45.138.168.35:34397->gjan.info:23, len 40 |
2020-10-01 02:57:33 |
| 45.138.168.35 | attackspam | [N3.H3.VM3] Port Scanner Detected Blocked by UFW |
2020-09-30 19:09:24 |
| 45.138.100.138 | attackbotsspam | Chat Spam |
2020-09-21 02:35:20 |
| 45.138.100.138 | attackspam | Chat Spam |
2020-09-20 18:36:13 |
| 45.138.172.125 | attackbotsspam | (pop3d) Failed POP3 login from 45.138.172.125 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug 2 16:38:29 ir1 dovecot[3110802]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user= |
2020-08-03 00:47:50 |
| 45.138.100.189 | attack | [TueJul2805:56:21.9668962020][:error][pid25791:tid47647209649920][client45.138.100.189:63459][client45.138.100.189]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\|WormlyBot\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"402"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSIE6.0detected\(DisableifyouwanttoallowMSIE6\)"][severity"WARNING"][hostname"aquattrozampe.com"][uri"/"][unique_id"Xx@h5VSLNaAiDHoMIEPJhgAAABc"][TueJul2805:56:23.4414652020][:error][pid25921:tid47647176029952][client45.138.100.189:24279][client45.138.100.189]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\|WormlyBot\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"402"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSIE6.0detected\(Disableifyouwantt |
2020-07-28 13:34:26 |
| 45.138.157.60 | attackbotsspam | 2020-07-12 23:14:15 | |
| 45.138.147.108 | attackspam | DDOS - one of 48 separate Russian addresses (plus one Lithuanian) IP addresses used to attack our website by repeatedly attempting to download the same, large file. All requests had the same signature, RestSharp/106.11.4.0 |
2020-07-10 20:53:30 |
| 45.138.157.37 | attackbotsspam | Jun 18 06:31:03 www sshd[21141]: reveeclipse mapping checking getaddrinfo for nice.try.kid [45.138.157.37] failed - POSSIBLE BREAK-IN ATTEMPT! Jun 18 06:31:03 www sshd[21141]: Invalid user rob from 45.138.157.37 Jun 18 06:31:03 www sshd[21141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.157.37 Jun 18 06:31:04 www sshd[21141]: Failed password for invalid user rob from 45.138.157.37 port 33136 ssh2 Jun 18 06:31:04 www sshd[21141]: Received disconnect from 45.138.157.37: 11: Bye Bye [preauth] Jun 18 07:16:54 www sshd[22290]: reveeclipse mapping checking getaddrinfo for nice.try.kid [45.138.157.37] failed - POSSIBLE BREAK-IN ATTEMPT! Jun 18 07:16:54 www sshd[22290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.138.157.37 user=r.r Jun 18 07:16:56 www sshd[22290]: Failed password for r.r from 45.138.157.37 port 44444 ssh2 Jun 18 07:16:56 www sshd[22290]: Received disconnect fro........ ------------------------------- |
2020-06-18 20:58:17 |
| 45.138.101.207 | attackspambots | pinterest spam |
2020-06-14 02:07:31 |
| 45.138.100.247 | attackspambots | Chat Spam |
2020-06-13 17:38:30 |
| 45.138.100.129 | attackbots | Chat Spam |
2020-06-05 12:07:40 |
| 45.138.100.90 | attackbotsspam | Chat Spam |
2020-06-05 04:06:07 |
| 45.138.100.217 | attackspam | Chat Spam |
2020-06-04 23:23:27 |
| 45.138.100.47 | attack | Chat Spam |
2020-06-04 15:21:16 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.138.1.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56586
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.138.1.142. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013000 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 18:47:23 CST 2025
;; MSG SIZE rcvd: 105
Host 142.1.138.45.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 142.1.138.45.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 167.71.221.236 | attackbots | Aug 30 00:20:44 dev0-dcde-rnet sshd[22232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.221.236 Aug 30 00:20:46 dev0-dcde-rnet sshd[22232]: Failed password for invalid user eslab from 167.71.221.236 port 60346 ssh2 Aug 30 00:25:13 dev0-dcde-rnet sshd[22257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.221.236 |
2019-08-30 12:18:06 |
| 45.177.200.253 | attackbots | Automatic report - Port Scan Attack |
2019-08-30 11:39:20 |
| 206.81.27.182 | attackbotsspam | 22/tcp [2019-08-30]1pkt |
2019-08-30 12:03:31 |
| 36.156.24.79 | attackspam | Aug 29 17:52:44 auw2 sshd\[1999\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.156.24.79 user=root Aug 29 17:52:46 auw2 sshd\[1999\]: Failed password for root from 36.156.24.79 port 59854 ssh2 Aug 29 17:52:48 auw2 sshd\[1999\]: Failed password for root from 36.156.24.79 port 59854 ssh2 Aug 29 17:52:50 auw2 sshd\[1999\]: Failed password for root from 36.156.24.79 port 59854 ssh2 Aug 29 17:52:56 auw2 sshd\[2020\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.156.24.79 user=root |
2019-08-30 12:11:23 |
| 104.236.175.127 | attack | SSH Brute Force, server-1 sshd[12993]: Failed password for invalid user flink from 104.236.175.127 port 42458 ssh2 |
2019-08-30 11:49:05 |
| 207.93.25.10 | attackspam | Hits on port : 8080 |
2019-08-30 11:59:31 |
| 138.68.218.43 | attackspambots | Hits on port : 5672 |
2019-08-30 12:10:53 |
| 217.30.75.78 | attackbotsspam | Aug 30 06:00:11 ubuntu-2gb-nbg1-dc3-1 sshd[16870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.30.75.78 Aug 30 06:00:14 ubuntu-2gb-nbg1-dc3-1 sshd[16870]: Failed password for invalid user sfsu from 217.30.75.78 port 44265 ssh2 ... |
2019-08-30 12:15:39 |
| 190.204.157.90 | attackbots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-29 18:54:04,644 INFO [amun_request_handler] PortScan Detected on Port: 445 (190.204.157.90) |
2019-08-30 12:05:51 |
| 42.176.49.166 | attackbotsspam | Unauthorised access (Aug 29) SRC=42.176.49.166 LEN=40 TTL=49 ID=55458 TCP DPT=8080 WINDOW=19201 SYN Unauthorised access (Aug 29) SRC=42.176.49.166 LEN=40 TTL=49 ID=15516 TCP DPT=8080 WINDOW=9279 SYN Unauthorised access (Aug 28) SRC=42.176.49.166 LEN=40 TTL=49 ID=38178 TCP DPT=8080 WINDOW=8954 SYN |
2019-08-30 12:14:08 |
| 174.138.6.123 | attackbotsspam | Aug 30 06:44:21 hosting sshd[27434]: Invalid user teacher1 from 174.138.6.123 port 34102 Aug 30 06:44:21 hosting sshd[27434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.6.123 Aug 30 06:44:21 hosting sshd[27434]: Invalid user teacher1 from 174.138.6.123 port 34102 Aug 30 06:44:23 hosting sshd[27434]: Failed password for invalid user teacher1 from 174.138.6.123 port 34102 ssh2 Aug 30 06:49:58 hosting sshd[27908]: Invalid user radio from 174.138.6.123 port 49404 ... |
2019-08-30 12:17:05 |
| 191.241.166.23 | attackspambots | Excessive failed login attempts on port 587 |
2019-08-30 11:54:54 |
| 111.231.82.143 | attackspam | $f2bV_matches_ltvn |
2019-08-30 11:45:04 |
| 23.129.64.166 | attackspambots | Aug 30 04:25:56 ubuntu-2gb-nbg1-dc3-1 sshd[9228]: Failed password for root from 23.129.64.166 port 63756 ssh2 Aug 30 04:26:04 ubuntu-2gb-nbg1-dc3-1 sshd[9228]: error: maximum authentication attempts exceeded for root from 23.129.64.166 port 63756 ssh2 [preauth] ... |
2019-08-30 11:51:08 |
| 84.201.154.126 | attack | $f2bV_matches |
2019-08-30 12:15:17 |