City: unknown
Region: unknown
Country: Italy
Internet Service Provider: Bunea Telecom SRL
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attack | Firewall Dropped Connection |
2020-07-05 08:23:32 |
| attack | 20/4/23@23:58:13: FAIL: Alarm-Telnet address from=45.148.10.64 ... |
2020-04-24 12:20:12 |
| attackspambots | (smtpauth) Failed SMTP AUTH login from 45.148.10.64 (NL/Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2020-03-12 04:27:43 login authenticator failed for (ADMIN) [45.148.10.64]: 535 Incorrect authentication data (set_id=info@msfish-hunter.de) 2020-03-12 04:33:47 login authenticator failed for (ADMIN) [45.148.10.64]: 535 Incorrect authentication data (set_id=info@msfish-hunter.de) 2020-03-12 04:39:58 login authenticator failed for (ADMIN) [45.148.10.64]: 535 Incorrect authentication data (set_id=info@msfish-hunter.de) 2020-03-12 04:46:04 login authenticator failed for (ADMIN) [45.148.10.64]: 535 Incorrect authentication data (set_id=info@msfish-hunter.de) 2020-03-12 04:52:04 login authenticator failed for (ADMIN) [45.148.10.64]: 535 Incorrect authentication data (set_id=info@msfish-hunter.de) |
2020-03-12 15:37:29 |
| attackspambots | Automatic report - Port Scan |
2020-02-12 03:55:41 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.148.10.247 | botsattack | 45.148.10.247/Trojan Linux |
2025-11-19 14:09:00 |
| 45.148.10.241 | attack | DDoS Inbound |
2023-11-15 18:54:04 |
| 45.148.10.28 | attackspam | Oct 13 20:18:40 sshgateway sshd\[2360\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.28 user=root Oct 13 20:18:43 sshgateway sshd\[2360\]: Failed password for root from 45.148.10.28 port 40178 ssh2 Oct 13 20:19:07 sshgateway sshd\[2364\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.28 user=root |
2020-10-14 02:28:44 |
| 45.148.10.15 | attackspambots | Bruteforce detected by fail2ban |
2020-10-13 21:25:53 |
| 45.148.10.186 | attackspam | Unable to negotiate with 45.148.10.186 port 47964: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] |
2020-10-13 21:24:21 |
| 45.148.10.28 | attackbotsspam | SSH Server Abuse (45.148.10.28 as |
2020-10-13 17:43:00 |
| 45.148.10.15 | attackbotsspam | Oct 13 05:18:03 server2 sshd\[31409\]: Invalid user user from 45.148.10.15 Oct 13 05:18:48 server2 sshd\[31424\]: Invalid user server from 45.148.10.15 Oct 13 05:19:33 server2 sshd\[31465\]: Invalid user steam from 45.148.10.15 Oct 13 05:20:17 server2 sshd\[31678\]: Invalid user vmware from 45.148.10.15 Oct 13 05:21:00 server2 sshd\[31685\]: Invalid user microsoft from 45.148.10.15 Oct 13 05:21:44 server2 sshd\[31730\]: Invalid user cloud from 45.148.10.15 |
2020-10-13 12:52:46 |
| 45.148.10.186 | attackspam | Oct 13 05:33:03 ns308116 sshd[11001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.186 user=root Oct 13 05:33:05 ns308116 sshd[11001]: Failed password for root from 45.148.10.186 port 41866 ssh2 Oct 13 05:33:38 ns308116 sshd[11016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.186 user=root Oct 13 05:33:40 ns308116 sshd[11016]: Failed password for root from 45.148.10.186 port 39380 ssh2 Oct 13 05:34:15 ns308116 sshd[11027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.186 user=root ... |
2020-10-13 12:50:57 |
| 45.148.10.15 | attack | Oct 12 23:36:06 srv-ubuntu-dev3 sshd[31523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.15 Oct 12 23:36:06 srv-ubuntu-dev3 sshd[31523]: Invalid user user from 45.148.10.15 Oct 12 23:36:08 srv-ubuntu-dev3 sshd[31523]: Failed password for invalid user user from 45.148.10.15 port 40704 ssh2 Oct 12 23:36:38 srv-ubuntu-dev3 sshd[31590]: Invalid user 123Diego from 45.148.10.15 Oct 12 23:36:38 srv-ubuntu-dev3 sshd[31590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.15 Oct 12 23:36:38 srv-ubuntu-dev3 sshd[31590]: Invalid user 123Diego from 45.148.10.15 Oct 12 23:36:40 srv-ubuntu-dev3 sshd[31590]: Failed password for invalid user 123Diego from 45.148.10.15 port 59760 ssh2 Oct 12 23:37:17 srv-ubuntu-dev3 sshd[31656]: Invalid user Alphanetworks from 45.148.10.15 Oct 12 23:37:17 srv-ubuntu-dev3 sshd[31656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rh ... |
2020-10-13 05:40:39 |
| 45.148.10.186 | attack | Fail2Ban |
2020-10-13 05:39:02 |
| 45.148.10.15 | attackbotsspam | Fail2Ban |
2020-10-12 05:52:51 |
| 45.148.10.65 | attackbots | Invalid user ubuntu from 45.148.10.65 port 43138 |
2020-10-12 05:36:52 |
| 45.148.10.15 | attack | Brute force attempt |
2020-10-11 21:59:38 |
| 45.148.10.65 | attackspam | Oct 01 10:49:15 host sshd[12378]: Invalid user ubuntu from 45.148.10.65 port 41060 |
2020-10-11 21:43:21 |
| 45.148.10.28 | attack | Fail2Ban automatic report: SSH brute-force: |
2020-10-11 21:05:28 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.148.10.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23024
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.148.10.64. IN A
;; AUTHORITY SECTION:
. 255 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020012300 1800 900 604800 86400
;; Query time: 125 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 18:17:43 CST 2020
;; MSG SIZE rcvd: 116Host 64.10.148.45.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 64.10.148.45.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 94.102.53.112 | attackspambots | [H1.VM10] Blocked by UFW |
2020-08-08 02:27:23 |
| 178.62.214.85 | attackbots | Brute-force attempt banned |
2020-08-08 02:07:18 |
| 122.152.248.27 | attackbots | 2020-08-07T13:37:38.918743hostname sshd[52233]: Failed password for root from 122.152.248.27 port 48251 ssh2 ... |
2020-08-08 02:03:44 |
| 129.204.147.84 | attackbots | 2020-08-07T13:53:47.409972amanda2.illicoweb.com sshd\[41808\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.147.84 user=root 2020-08-07T13:53:48.915388amanda2.illicoweb.com sshd\[41808\]: Failed password for root from 129.204.147.84 port 45634 ssh2 2020-08-07T13:59:38.133544amanda2.illicoweb.com sshd\[42803\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.147.84 user=root 2020-08-07T13:59:39.824767amanda2.illicoweb.com sshd\[42803\]: Failed password for root from 129.204.147.84 port 42146 ssh2 2020-08-07T14:02:31.147412amanda2.illicoweb.com sshd\[43353\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.147.84 user=root ... |
2020-08-08 02:03:26 |
| 103.140.105.62 | attack | Unauthorized connection attempt from IP address 103.140.105.62 on Port 445(SMB) |
2020-08-08 02:23:40 |
| 176.222.157.113 | attackspambots | 20/8/7@10:06:21: FAIL: Alarm-Network address from=176.222.157.113 20/8/7@10:06:21: FAIL: Alarm-Network address from=176.222.157.113 ... |
2020-08-08 02:15:24 |
| 51.77.215.18 | attack | "$f2bV_matches" |
2020-08-08 02:37:12 |
| 51.91.158.178 | attackspam | ET CINS Active Threat Intelligence Poor Reputation IP group 41 - port: 26092 proto: tcp cat: Misc Attackbytes: 60 |
2020-08-08 02:31:59 |
| 37.139.1.197 | attackspambots | Banned for a week because repeated abuses, for example SSH, but not only |
2020-08-08 02:04:14 |
| 112.30.136.31 | attackspambots | Lines containing failures of 112.30.136.31 Aug 4 13:37:50 new sshd[27101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.30.136.31 user=r.r Aug 4 13:37:52 new sshd[27101]: Failed password for r.r from 112.30.136.31 port 36992 ssh2 Aug 4 13:37:53 new sshd[27101]: Received disconnect from 112.30.136.31 port 36992:11: Bye Bye [preauth] Aug 4 13:37:53 new sshd[27101]: Disconnected from authenticating user r.r 112.30.136.31 port 36992 [preauth] Aug 4 13:59:00 new sshd[1229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.30.136.31 user=r.r Aug 4 13:59:01 new sshd[1229]: Failed password for r.r from 112.30.136.31 port 39270 ssh2 Aug 4 13:59:02 new sshd[1229]: Received disconnect from 112.30.136.31 port 39270:11: Bye Bye [preauth] Aug 4 13:59:02 new sshd[1229]: Disconnected from authenticating user r.r 112.30.136.31 port 39270 [preauth] Aug 4 14:03:59 new sshd[2813]: pam_unix(s........ ------------------------------ |
2020-08-08 02:39:36 |
| 51.103.141.17 | attackbots | Tried our host z. |
2020-08-08 02:05:35 |
| 116.74.120.122 | attackbotsspam | Brute forcing RDP port 3389 |
2020-08-08 02:35:38 |
| 112.85.42.200 | attackspam | Aug 7 20:19:43 OPSO sshd\[15800\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.200 user=root Aug 7 20:19:45 OPSO sshd\[15800\]: Failed password for root from 112.85.42.200 port 63067 ssh2 Aug 7 20:19:49 OPSO sshd\[15800\]: Failed password for root from 112.85.42.200 port 63067 ssh2 Aug 7 20:19:52 OPSO sshd\[15800\]: Failed password for root from 112.85.42.200 port 63067 ssh2 Aug 7 20:19:55 OPSO sshd\[15800\]: Failed password for root from 112.85.42.200 port 63067 ssh2 |
2020-08-08 02:33:44 |
| 95.85.38.127 | attackspam | SSH brutforce |
2020-08-08 02:30:27 |
| 51.77.144.50 | attack | *Port Scan* detected from 51.77.144.50 (FR/France/Grand Est/Strasbourg/50.ip-51-77-144.eu). 4 hits in the last 140 seconds |
2020-08-08 02:06:12 |