City: unknown
Region: unknown
Country: Russian Federation
Internet Service Provider: Intercom LLC
Hostname: unknown
Organization: unknown
Usage Type: Fixed Line ISP
| Type | Details | Datetime |
|---|---|---|
| attack | Jul 27 14:34:08 debian-2gb-nbg1-2 kernel: \[18111754.191856\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.145.66.64 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=59470 PROTO=TCP SPT=53672 DPT=10006 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-07-27 20:42:18 |
| attack | Jul 26 22:49:40 debian-2gb-nbg1-2 kernel: \[18055089.141838\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.145.66.64 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=25316 PROTO=TCP SPT=53672 DPT=10011 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-07-27 04:59:15 |
| attackspambots | Jul 17 08:09:08 TCP Attack: SRC=45.145.66.64 DST=[Masked] LEN=40 TOS=0x08 PREC=0x20 TTL=240 PROTO=TCP SPT=52077 DPT=5109 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-07-17 18:58:22 |
| attack | unauthorized connection attempt |
2020-06-28 17:52:22 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.145.66.104 | attackbots | Excessive Port-Scanning |
2020-10-04 02:34:03 |
| 45.145.66.104 | attackbotsspam | [HOST2] Port Scan detected |
2020-10-03 18:21:49 |
| 45.145.66.159 | attackbotsspam | RDPBruteGam24 |
2020-09-29 02:25:57 |
| 45.145.66.159 | attack | RDPBruteGam24 |
2020-09-28 18:33:33 |
| 45.145.66.67 | attack | scans once in preceeding hours on the ports (in chronological order) 20425 resulting in total of 13 scans from 45.145.66.0/23 block. |
2020-09-13 22:45:10 |
| 45.145.66.67 | attackspambots | Fail2Ban Ban Triggered |
2020-09-13 14:40:51 |
| 45.145.66.67 | attackbots | Fail2Ban Ban Triggered |
2020-09-13 06:23:54 |
| 45.145.66.104 | attackbots | Unauthorized connection attempt from IP address 45.145.66.104 on Port 3389(RDP) |
2020-09-09 17:11:10 |
| 45.145.66.96 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 23 - port: 13947 proto: tcp cat: Misc Attackbytes: 60 |
2020-09-08 04:18:28 |
| 45.145.66.96 | attackbots | SmallBizIT.US 20 packets to tcp(13911,13959,13990,14001,14015,14016,14022,14028,14036,14052,14068,14069,14075,14076,14120,14132,14146,14170,14186,14194) |
2020-09-07 19:54:56 |
| 45.145.66.96 | attackspambots | Port scan: Attack repeated for 24 hours |
2020-09-06 04:08:16 |
| 45.145.66.96 | attackspam | ET CINS Active Threat Intelligence Poor Reputation IP group 23 - port: 14029 proto: tcp cat: Misc Attackbytes: 60 |
2020-09-05 19:53:35 |
| 45.145.66.90 | attackbots | 9922/tcp 4899/tcp 1022/tcp... [2020-06-27/08-27]230pkt,86pt.(tcp) |
2020-08-29 15:27:53 |
| 45.145.66.120 | attackbots | [H1.VM8] Blocked by UFW |
2020-08-27 07:37:28 |
| 45.145.66.21 | attackbots | ET CINS Active Threat Intelligence Poor Reputation IP group 23 - port: 29939 proto: tcp cat: Misc Attackbytes: 60 |
2020-08-27 02:41:52 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.145.66.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26376
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.145.66.64. IN A
;; AUTHORITY SECTION:
. 241 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020062800 1800 900 604800 86400
;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 28 17:52:14 CST 2020
;; MSG SIZE rcvd: 116Host 64.66.145.45.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 64.66.145.45.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 186.224.8.5 | attackbots | Unauthorized connection attempt detected from IP address 186.224.8.5 to port 23 |
2020-06-22 05:39:36 |
| 180.117.100.34 | attackspam | Unauthorized connection attempt detected from IP address 180.117.100.34 to port 23 |
2020-06-22 05:41:05 |
| 182.107.201.184 | attackbots | Unauthorized connection attempt detected from IP address 182.107.201.184 to port 5555 |
2020-06-22 05:55:50 |
| 24.52.149.144 | attackspam | Unauthorized connection attempt detected from IP address 24.52.149.144 to port 81 |
2020-06-22 05:47:33 |
| 191.232.195.223 | attackbotsspam | Jun 21 22:26:42 backup sshd[17283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.232.195.223 Jun 21 22:26:44 backup sshd[17283]: Failed password for invalid user kafka from 191.232.195.223 port 41720 ssh2 ... |
2020-06-22 05:25:48 |
| 117.36.198.199 | attackbots | Unauthorized connection attempt detected from IP address 117.36.198.199 to port 1433 |
2020-06-22 05:42:54 |
| 171.81.80.12 | attackspam | Unauthorized connection attempt detected from IP address 171.81.80.12 to port 23 |
2020-06-22 05:56:16 |
| 175.24.103.72 | attackspam | Jun 21 22:52:43 h2779839 sshd[1895]: Invalid user gituser from 175.24.103.72 port 51026 Jun 21 22:52:43 h2779839 sshd[1895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.103.72 Jun 21 22:52:43 h2779839 sshd[1895]: Invalid user gituser from 175.24.103.72 port 51026 Jun 21 22:52:45 h2779839 sshd[1895]: Failed password for invalid user gituser from 175.24.103.72 port 51026 ssh2 Jun 21 22:57:06 h2779839 sshd[2133]: Invalid user amir from 175.24.103.72 port 45748 Jun 21 22:57:07 h2779839 sshd[2133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.103.72 Jun 21 22:57:06 h2779839 sshd[2133]: Invalid user amir from 175.24.103.72 port 45748 Jun 21 22:57:08 h2779839 sshd[2133]: Failed password for invalid user amir from 175.24.103.72 port 45748 ssh2 Jun 21 23:01:33 h2779839 sshd[2230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.103.72 user=root Jun ... |
2020-06-22 05:23:36 |
| 151.243.11.148 | attackbots | Unauthorized connection attempt detected from IP address 151.243.11.148 to port 23 |
2020-06-22 05:41:54 |
| 78.110.75.80 | attack | Unauthorized connection attempt detected from IP address 78.110.75.80 to port 23 |
2020-06-22 06:01:23 |
| 5.202.144.37 | attackbotsspam | Unauthorized connection attempt detected from IP address 5.202.144.37 to port 8080 |
2020-06-22 05:47:52 |
| 139.170.150.254 | attackspambots | Jun 21 23:20:03 pornomens sshd\[32514\]: Invalid user wwAdmin from 139.170.150.254 port 1643 Jun 21 23:20:03 pornomens sshd\[32514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.170.150.254 Jun 21 23:20:05 pornomens sshd\[32514\]: Failed password for invalid user wwAdmin from 139.170.150.254 port 1643 ssh2 ... |
2020-06-22 05:33:36 |
| 77.27.168.117 | attackspambots | Invalid user joaquim from 77.27.168.117 port 48408 |
2020-06-22 05:20:30 |
| 195.82.188.167 | attackbotsspam | Unauthorized connection attempt detected from IP address 195.82.188.167 to port 8080 |
2020-06-22 05:51:50 |
| 101.83.199.75 | attackspam | Unauthorized connection attempt detected from IP address 101.83.199.75 to port 23 |
2020-06-22 05:58:40 |