City: unknown
Region: unknown
Country: Romania
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.148.10.241 | attack | DDoS Inbound |
2023-11-15 18:54:04 |
| 45.148.10.28 | attackspam | Oct 13 20:18:40 sshgateway sshd\[2360\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.28 user=root Oct 13 20:18:43 sshgateway sshd\[2360\]: Failed password for root from 45.148.10.28 port 40178 ssh2 Oct 13 20:19:07 sshgateway sshd\[2364\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.28 user=root |
2020-10-14 02:28:44 |
| 45.148.10.15 | attackspambots | Bruteforce detected by fail2ban |
2020-10-13 21:25:53 |
| 45.148.10.186 | attackspam | Unable to negotiate with 45.148.10.186 port 47964: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] |
2020-10-13 21:24:21 |
| 45.148.10.28 | attackbotsspam | SSH Server Abuse (45.148.10.28 as |
2020-10-13 17:43:00 |
| 45.148.10.15 | attackbotsspam | Oct 13 05:18:03 server2 sshd\[31409\]: Invalid user user from 45.148.10.15 Oct 13 05:18:48 server2 sshd\[31424\]: Invalid user server from 45.148.10.15 Oct 13 05:19:33 server2 sshd\[31465\]: Invalid user steam from 45.148.10.15 Oct 13 05:20:17 server2 sshd\[31678\]: Invalid user vmware from 45.148.10.15 Oct 13 05:21:00 server2 sshd\[31685\]: Invalid user microsoft from 45.148.10.15 Oct 13 05:21:44 server2 sshd\[31730\]: Invalid user cloud from 45.148.10.15 |
2020-10-13 12:52:46 |
| 45.148.10.186 | attackspam | Oct 13 05:33:03 ns308116 sshd[11001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.186 user=root Oct 13 05:33:05 ns308116 sshd[11001]: Failed password for root from 45.148.10.186 port 41866 ssh2 Oct 13 05:33:38 ns308116 sshd[11016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.186 user=root Oct 13 05:33:40 ns308116 sshd[11016]: Failed password for root from 45.148.10.186 port 39380 ssh2 Oct 13 05:34:15 ns308116 sshd[11027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.186 user=root ... |
2020-10-13 12:50:57 |
| 45.148.10.15 | attack | Oct 12 23:36:06 srv-ubuntu-dev3 sshd[31523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.15 Oct 12 23:36:06 srv-ubuntu-dev3 sshd[31523]: Invalid user user from 45.148.10.15 Oct 12 23:36:08 srv-ubuntu-dev3 sshd[31523]: Failed password for invalid user user from 45.148.10.15 port 40704 ssh2 Oct 12 23:36:38 srv-ubuntu-dev3 sshd[31590]: Invalid user 123Diego from 45.148.10.15 Oct 12 23:36:38 srv-ubuntu-dev3 sshd[31590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.15 Oct 12 23:36:38 srv-ubuntu-dev3 sshd[31590]: Invalid user 123Diego from 45.148.10.15 Oct 12 23:36:40 srv-ubuntu-dev3 sshd[31590]: Failed password for invalid user 123Diego from 45.148.10.15 port 59760 ssh2 Oct 12 23:37:17 srv-ubuntu-dev3 sshd[31656]: Invalid user Alphanetworks from 45.148.10.15 Oct 12 23:37:17 srv-ubuntu-dev3 sshd[31656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rh ... |
2020-10-13 05:40:39 |
| 45.148.10.186 | attack | Fail2Ban |
2020-10-13 05:39:02 |
| 45.148.10.15 | attackbotsspam | Fail2Ban |
2020-10-12 05:52:51 |
| 45.148.10.65 | attackbots | Invalid user ubuntu from 45.148.10.65 port 43138 |
2020-10-12 05:36:52 |
| 45.148.10.15 | attack | Brute force attempt |
2020-10-11 21:59:38 |
| 45.148.10.65 | attackspam | Oct 01 10:49:15 host sshd[12378]: Invalid user ubuntu from 45.148.10.65 port 41060 |
2020-10-11 21:43:21 |
| 45.148.10.28 | attack | Fail2Ban automatic report: SSH brute-force: |
2020-10-11 21:05:28 |
| 45.148.10.15 | attackspam | Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-10-11T05:41:40Z and 2020-10-11T05:47:54Z |
2020-10-11 13:57:38 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.148.10.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51278
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.148.10.242. IN A
;; AUTHORITY SECTION:
. 166 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022101101 1800 900 604800 86400
;; Query time: 78 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 12 02:08:13 CST 2022
;; MSG SIZE rcvd: 106Host 242.10.148.45.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 242.10.148.45.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 94.181.33.149 | attackspam | Oct 9 13:45:28 mail postfix/postscreen[36772]: PREGREET 26 after 0.41 from [94.181.33.149]:44788: EHLO ns.ural.keramir.com ... |
2019-10-10 05:08:38 |
| 60.166.73.225 | attack | Automatic report - FTP Brute Force |
2019-10-10 04:51:36 |
| 118.46.113.89 | attackbots | Honeypot attack, port: 23, PTR: PTR record not found |
2019-10-10 05:02:44 |
| 51.77.145.97 | attackspambots | Oct 9 20:45:49 localhost sshd\[99437\]: Invalid user 123Lolita from 51.77.145.97 port 57984 Oct 9 20:45:49 localhost sshd\[99437\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.145.97 Oct 9 20:45:51 localhost sshd\[99437\]: Failed password for invalid user 123Lolita from 51.77.145.97 port 57984 ssh2 Oct 9 20:49:17 localhost sshd\[99530\]: Invalid user Asd!@\# from 51.77.145.97 port 41506 Oct 9 20:49:17 localhost sshd\[99530\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.145.97 ... |
2019-10-10 05:00:56 |
| 40.76.40.239 | attackspambots | 2019-10-09T20:49:40.890522shield sshd\[19787\]: Invalid user p4ssw0rd2017 from 40.76.40.239 port 58528 2019-10-09T20:49:40.895291shield sshd\[19787\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.76.40.239 2019-10-09T20:49:42.910459shield sshd\[19787\]: Failed password for invalid user p4ssw0rd2017 from 40.76.40.239 port 58528 ssh2 2019-10-09T20:53:45.826110shield sshd\[20417\]: Invalid user p4ssw0rd2017 from 40.76.40.239 port 42996 2019-10-09T20:53:45.830252shield sshd\[20417\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.76.40.239 |
2019-10-10 05:05:58 |
| 222.186.30.59 | attackspam | Oct 9 20:46:05 ip-172-31-62-245 sshd\[28709\]: Failed password for root from 222.186.30.59 port 14050 ssh2\ Oct 9 20:46:07 ip-172-31-62-245 sshd\[28709\]: Failed password for root from 222.186.30.59 port 14050 ssh2\ Oct 9 20:46:10 ip-172-31-62-245 sshd\[28709\]: Failed password for root from 222.186.30.59 port 14050 ssh2\ Oct 9 20:46:22 ip-172-31-62-245 sshd\[28719\]: Failed password for root from 222.186.30.59 port 59267 ssh2\ Oct 9 20:46:42 ip-172-31-62-245 sshd\[28726\]: Failed password for root from 222.186.30.59 port 56747 ssh2\ |
2019-10-10 05:01:48 |
| 103.80.117.214 | attackspambots | Oct 9 22:56:50 microserver sshd[24087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.117.214 user=root Oct 9 22:56:52 microserver sshd[24087]: Failed password for root from 103.80.117.214 port 52568 ssh2 Oct 9 23:00:59 microserver sshd[24794]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.117.214 user=root Oct 9 23:01:01 microserver sshd[24794]: Failed password for root from 103.80.117.214 port 36100 ssh2 Oct 9 23:05:02 microserver sshd[25018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.117.214 user=root Oct 9 23:17:21 microserver sshd[26820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.80.117.214 user=root Oct 9 23:17:23 microserver sshd[26820]: Failed password for root from 103.80.117.214 port 54938 ssh2 Oct 9 23:21:29 microserver sshd[27410]: pam_unix(sshd:auth): authentication failure; logname= uid |
2019-10-10 04:46:27 |
| 46.172.216.236 | attack | REQUESTED PAGE: /javascript;; |
2019-10-10 04:31:46 |
| 222.186.175.217 | attack | Oct 9 16:47:23 xtremcommunity sshd\[353725\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.217 user=root Oct 9 16:47:25 xtremcommunity sshd\[353725\]: Failed password for root from 222.186.175.217 port 2194 ssh2 Oct 9 16:47:30 xtremcommunity sshd\[353725\]: Failed password for root from 222.186.175.217 port 2194 ssh2 Oct 9 16:47:33 xtremcommunity sshd\[353725\]: Failed password for root from 222.186.175.217 port 2194 ssh2 Oct 9 16:47:38 xtremcommunity sshd\[353725\]: Failed password for root from 222.186.175.217 port 2194 ssh2 ... |
2019-10-10 04:48:16 |
| 46.164.253.40 | attackspambots | Honeypot attack, port: 445, PTR: PTR record not found |
2019-10-10 04:50:24 |
| 131.221.80.209 | attackbotsspam | Oct 9 18:48:19 h1637304 sshd[11223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=131.221.80.209 user=r.r Oct 9 18:48:21 h1637304 sshd[11223]: Failed password for r.r from 131.221.80.209 port 23937 ssh2 Oct 9 18:48:21 h1637304 sshd[11223]: Received disconnect from 131.221.80.209: 11: Bye Bye [preauth] Oct 9 19:04:41 h1637304 sshd[25901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=131.221.80.209 user=r.r Oct 9 19:04:43 h1637304 sshd[25901]: Failed password for r.r from 131.221.80.209 port 6113 ssh2 Oct 9 19:04:43 h1637304 sshd[25901]: Received disconnect from 131.221.80.209: 11: Bye Bye [preauth] Oct 9 19:09:21 h1637304 sshd[30488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=131.221.80.209 user=r.r Oct 9 19:09:22 h1637304 sshd[30488]: Failed password for r.r from 131.221.80.209 port 29377 ssh2 Oct 9 19:09:23 h1637304 sshd[30488]........ ------------------------------- |
2019-10-10 04:46:14 |
| 137.135.121.200 | attack | Oct 9 22:32:53 vps647732 sshd[13912]: Failed password for root from 137.135.121.200 port 45060 ssh2 ... |
2019-10-10 04:37:54 |
| 163.172.160.182 | attackbotsspam | 2019-10-09T19:46:31.028752abusebot.cloudsearch.cf sshd\[28014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.160.182 user=root |
2019-10-10 04:26:03 |
| 41.230.114.172 | attackspam | Honeypot attack, port: 23, PTR: PTR record not found |
2019-10-10 04:42:54 |
| 81.152.54.113 | attackbots | Automatic report - Port Scan Attack |
2019-10-10 04:39:58 |