City: unknown
Region: unknown
Country: Russian Federation
Internet Service Provider: Intercom LLC
Hostname: unknown
Organization: unknown
Usage Type: Fixed Line ISP
| Type | Details | Datetime |
|---|---|---|
| attack | [H1.VM7] Blocked by UFW |
2020-07-23 12:48:45 |
| attackspambots | Jul 23 01:41:18 debian-2gb-nbg1-2 kernel: \[17719806.402056\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.145.66.55 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=13582 PROTO=TCP SPT=57028 DPT=53517 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-07-23 07:51:42 |
| attackspam | Jul 22 17:42:34 debian-2gb-nbg1-2 kernel: \[17691084.170479\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.145.66.55 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=57934 PROTO=TCP SPT=62000 DPT=14920 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-07-23 00:21:41 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.145.66.104 | attackbots | Excessive Port-Scanning |
2020-10-04 02:34:03 |
| 45.145.66.104 | attackbotsspam | [HOST2] Port Scan detected |
2020-10-03 18:21:49 |
| 45.145.66.159 | attackbotsspam | RDPBruteGam24 |
2020-09-29 02:25:57 |
| 45.145.66.159 | attack | RDPBruteGam24 |
2020-09-28 18:33:33 |
| 45.145.66.67 | attack | scans once in preceeding hours on the ports (in chronological order) 20425 resulting in total of 13 scans from 45.145.66.0/23 block. |
2020-09-13 22:45:10 |
| 45.145.66.67 | attackspambots | Fail2Ban Ban Triggered |
2020-09-13 14:40:51 |
| 45.145.66.67 | attackbots | Fail2Ban Ban Triggered |
2020-09-13 06:23:54 |
| 45.145.66.104 | attackbots | Unauthorized connection attempt from IP address 45.145.66.104 on Port 3389(RDP) |
2020-09-09 17:11:10 |
| 45.145.66.96 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 23 - port: 13947 proto: tcp cat: Misc Attackbytes: 60 |
2020-09-08 04:18:28 |
| 45.145.66.96 | attackbots | SmallBizIT.US 20 packets to tcp(13911,13959,13990,14001,14015,14016,14022,14028,14036,14052,14068,14069,14075,14076,14120,14132,14146,14170,14186,14194) |
2020-09-07 19:54:56 |
| 45.145.66.96 | attackspambots | Port scan: Attack repeated for 24 hours |
2020-09-06 04:08:16 |
| 45.145.66.96 | attackspam | ET CINS Active Threat Intelligence Poor Reputation IP group 23 - port: 14029 proto: tcp cat: Misc Attackbytes: 60 |
2020-09-05 19:53:35 |
| 45.145.66.90 | attackbots | 9922/tcp 4899/tcp 1022/tcp... [2020-06-27/08-27]230pkt,86pt.(tcp) |
2020-08-29 15:27:53 |
| 45.145.66.120 | attackbots | [H1.VM8] Blocked by UFW |
2020-08-27 07:37:28 |
| 45.145.66.21 | attackbots | ET CINS Active Threat Intelligence Poor Reputation IP group 23 - port: 29939 proto: tcp cat: Misc Attackbytes: 60 |
2020-08-27 02:41:52 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.145.66.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65514
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.145.66.55. IN A
;; AUTHORITY SECTION:
. 549 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020072200 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jul 23 00:21:35 CST 2020
;; MSG SIZE rcvd: 116Host 55.66.145.45.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 55.66.145.45.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 68.183.97.220 | attackbots | $f2bV_matches |
2019-07-11 10:55:01 |
| 201.13.83.142 | attackspam | Multiple failed RDP login attempts |
2019-07-11 11:10:06 |
| 159.65.30.66 | attack | Jul 10 21:39:41 www sshd\[11105\]: Invalid user User from 159.65.30.66 port 50332 ... |
2019-07-11 11:11:03 |
| 113.161.41.96 | attackbots | Unauthorized connection attempt from IP address 113.161.41.96 on Port 445(SMB) |
2019-07-11 11:13:06 |
| 45.243.160.57 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-10 19:06:19,911 INFO [amun_request_handler] PortScan Detected on Port: 445 (45.243.160.57) |
2019-07-11 11:26:08 |
| 58.64.144.109 | attackbots | Jul 10 20:56:19 ovpn sshd\[23878\]: Invalid user ram from 58.64.144.109 Jul 10 20:56:19 ovpn sshd\[23878\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.64.144.109 Jul 10 20:56:20 ovpn sshd\[23878\]: Failed password for invalid user ram from 58.64.144.109 port 14726 ssh2 Jul 10 20:59:47 ovpn sshd\[24524\]: Invalid user info from 58.64.144.109 Jul 10 20:59:47 ovpn sshd\[24524\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.64.144.109 |
2019-07-11 11:27:18 |
| 207.46.13.52 | attackbotsspam | Automatic report - Web App Attack |
2019-07-11 10:55:31 |
| 42.99.180.135 | attackspambots | Jul 10 21:18:25 minden010 sshd[14829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.99.180.135 Jul 10 21:18:27 minden010 sshd[14829]: Failed password for invalid user admin from 42.99.180.135 port 33302 ssh2 Jul 10 21:21:56 minden010 sshd[16090]: Failed password for root from 42.99.180.135 port 38624 ssh2 ... |
2019-07-11 10:53:04 |
| 185.88.196.30 | attack | Jul 10 20:39:22 XXX sshd[1512]: Invalid user vs from 185.88.196.30 port 41856 |
2019-07-11 11:22:58 |
| 165.227.140.120 | attackspambots | Jul 11 04:41:36 ArkNodeAT sshd\[8013\]: Invalid user test2 from 165.227.140.120 Jul 11 04:41:36 ArkNodeAT sshd\[8013\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.140.120 Jul 11 04:41:38 ArkNodeAT sshd\[8013\]: Failed password for invalid user test2 from 165.227.140.120 port 47476 ssh2 |
2019-07-11 11:43:09 |
| 91.33.208.222 | attack | Jul 10 19:54:36 gcems sshd\[15368\]: Invalid user csc from 91.33.208.222 port 51589 Jul 10 19:54:36 gcems sshd\[15368\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.33.208.222 Jul 10 19:54:38 gcems sshd\[15368\]: Failed password for invalid user csc from 91.33.208.222 port 51589 ssh2 Jul 10 19:58:31 gcems sshd\[15483\]: Invalid user edu from 91.33.208.222 port 36250 Jul 10 19:58:31 gcems sshd\[15483\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.33.208.222 ... |
2019-07-11 11:44:16 |
| 176.97.207.212 | attackspambots | Unauthorized connection attempt from IP address 176.97.207.212 on Port 445(SMB) |
2019-07-11 11:23:21 |
| 31.179.224.42 | attackspam | xmlrpc attack |
2019-07-11 11:12:19 |
| 45.117.42.49 | attackspambots | firewall-block, port(s): 135/tcp |
2019-07-11 11:31:27 |
| 46.105.30.20 | attackspambots | Jul 11 03:06:12 MK-Soft-VM5 sshd\[13903\]: Invalid user enzo from 46.105.30.20 port 54238 Jul 11 03:06:12 MK-Soft-VM5 sshd\[13903\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.105.30.20 Jul 11 03:06:13 MK-Soft-VM5 sshd\[13903\]: Failed password for invalid user enzo from 46.105.30.20 port 54238 ssh2 ... |
2019-07-11 11:16:29 |