City: unknown
Region: unknown
Country: Netherlands
Internet Service Provider: Bunea Telecom SRL
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackbotsspam |
|
2020-06-23 06:55:13 |
| attackbotsspam | ET CINS Active Threat Intelligence Poor Reputation IP group 27 - port: 10000 proto: UDP cat: Misc Attack |
2020-06-21 07:10:22 |
| attackbots | 2020-03-11T00:40:12.795781vps773228.ovh.net sshd[11936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.92 user=root 2020-03-11T00:40:15.410340vps773228.ovh.net sshd[11936]: Failed password for root from 45.148.10.92 port 47736 ssh2 2020-03-11T00:40:19.505576vps773228.ovh.net sshd[11938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.92 user=root 2020-03-11T00:40:21.751384vps773228.ovh.net sshd[11938]: Failed password for root from 45.148.10.92 port 40174 ssh2 2020-03-11T00:40:26.425294vps773228.ovh.net sshd[11940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.92 user=root 2020-03-11T00:40:28.295060vps773228.ovh.net sshd[11940]: Failed password for root from 45.148.10.92 port 60832 ssh2 2020-03-11T00:40:33.038385vps773228.ovh.net sshd[11942]: Invalid user oracle from 45.148.10.92 port 53298 2020-03-11T00:40:33.053511vps773228.ovh ... |
2020-03-11 07:41:01 |
| attackbots | Mar 10 16:43:13 SilenceServices sshd[19365]: Failed password for root from 45.148.10.92 port 48240 ssh2 Mar 10 16:43:18 SilenceServices sshd[19388]: Failed password for root from 45.148.10.92 port 38866 ssh2 |
2020-03-11 00:13:30 |
| attackbotsspam | Mar 9 19:08:08 tor-proxy-06 sshd\[1673\]: User root from 45.148.10.92 not allowed because not listed in AllowUsers Mar 9 19:08:15 tor-proxy-06 sshd\[1675\]: User root from 45.148.10.92 not allowed because not listed in AllowUsers Mar 9 19:08:22 tor-proxy-06 sshd\[1677\]: User root from 45.148.10.92 not allowed because not listed in AllowUsers ... |
2020-03-10 02:13:54 |
| attackspambots | Mar 8 08:41:11 *host* sshd\[10181\]: Unable to negotiate with 45.148.10.92 port 58460: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 \[preauth\] |
2020-03-08 16:12:28 |
| attackspam | Hacking |
2020-03-06 20:38:53 |
| attackspam | Mar 4 23:53:27 bilbo sshd[11260]: User root from 45.148.10.92 not allowed because not listed in AllowUsers Mar 4 23:53:34 bilbo sshd[11262]: User root from 45.148.10.92 not allowed because not listed in AllowUsers Mar 4 23:53:34 bilbo sshd[11262]: User root from 45.148.10.92 not allowed because not listed in AllowUsers ... |
2020-03-05 14:17:55 |
| attackspambots | Brute force attempt |
2020-03-04 01:15:18 |
| attackbots | $f2bV_matches |
2020-02-29 14:32:45 |
| attackbots | Feb 28 18:41:13 *host* sshd\[1268\]: Unable to negotiate with 45.148.10.92 port 46568: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 \[preauth\] |
2020-02-29 02:38:57 |
| attack | firewall-block, port(s): 23/tcp |
2020-02-28 07:44:07 |
| attackspam | 22/tcp 22/tcp 22/tcp... [2020-02-15/21]6pkt,1pt.(tcp) |
2020-02-22 22:32:09 |
| attackspambots | SSH-BruteForce |
2020-02-22 08:55:31 |
| attackspambots | Feb 21 19:54:16 h2779839 sshd[1628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.92 user=root Feb 21 19:54:17 h2779839 sshd[1628]: Failed password for root from 45.148.10.92 port 58580 ssh2 Feb 21 19:54:39 h2779839 sshd[1656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.92 user=root Feb 21 19:54:40 h2779839 sshd[1656]: Failed password for root from 45.148.10.92 port 59054 ssh2 Feb 21 19:55:01 h2779839 sshd[1659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.92 user=root Feb 21 19:55:03 h2779839 sshd[1659]: Failed password for root from 45.148.10.92 port 59476 ssh2 Feb 21 19:55:23 h2779839 sshd[1669]: Invalid user admin from 45.148.10.92 port 59930 Feb 21 19:55:23 h2779839 sshd[1669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.92 Feb 21 19:55:23 h2779839 sshd[1669]: Inval ... |
2020-02-22 02:59:53 |
| attackspam | Feb 20 18:43:14 vps647732 sshd[19038]: Failed password for root from 45.148.10.92 port 58750 ssh2 ... |
2020-02-21 02:11:53 |
| attack | Feb 20 09:59:16 ns3042688 sshd\[5238\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.92 user=root Feb 20 09:59:18 ns3042688 sshd\[5238\]: Failed password for root from 45.148.10.92 port 40100 ssh2 Feb 20 09:59:43 ns3042688 sshd\[5299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.92 user=root Feb 20 09:59:45 ns3042688 sshd\[5299\]: Failed password for root from 45.148.10.92 port 49196 ssh2 Feb 20 10:00:09 ns3042688 sshd\[5438\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.92 user=root ... |
2020-02-20 17:40:36 |
| attackbotsspam | Feb 19 19:26:06 dedicated sshd[16387]: Failed password for root from 45.148.10.92 port 45492 ssh2 Feb 19 19:26:30 dedicated sshd[16463]: Invalid user admin from 45.148.10.92 port 57666 Feb 19 19:26:30 dedicated sshd[16463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.92 Feb 19 19:26:30 dedicated sshd[16463]: Invalid user admin from 45.148.10.92 port 57666 Feb 19 19:26:32 dedicated sshd[16463]: Failed password for invalid user admin from 45.148.10.92 port 57666 ssh2 |
2020-02-20 02:44:34 |
| attackbots | Fail2Ban - SSH Bruteforce Attempt |
2020-02-19 06:38:06 |
| attack | SSH Brute-Forcing (server1) |
2020-02-19 01:04:54 |
| attack | $f2bV_matches |
2020-02-18 15:00:36 |
| attackspambots | Invalid user admin from 45.148.10.92 port 48784 |
2020-02-17 16:49:25 |
| attackbotsspam | Feb 16 21:21:32 tor-proxy-08 sshd\[1751\]: User root from 45.148.10.92 not allowed because not listed in AllowUsers Feb 16 21:22:03 tor-proxy-08 sshd\[1754\]: User root from 45.148.10.92 not allowed because not listed in AllowUsers Feb 16 21:22:34 tor-proxy-08 sshd\[1756\]: User root from 45.148.10.92 not allowed because not listed in AllowUsers ... |
2020-02-17 04:42:08 |
| attackspam | Lines containing failures of 45.148.10.92 auth.log:Feb 15 04:18:50 omfg sshd[21945]: Connection from 45.148.10.92 port 39658 on 78.46.60.16 port 22 auth.log:Feb 15 04:18:50 omfg sshd[21945]: Did not receive identification string from 45.148.10.92 auth.log:Feb 15 04:18:59 omfg sshd[21946]: Connection from 45.148.10.92 port 51674 on 78.46.60.16 port 22 auth.log:Feb 15 04:18:59 omfg sshd[21946]: Received disconnect from 45.148.10.92 port 51674:11: Normal Shutdown, Thank you for playing [preauth] auth.log:Feb 15 04:18:59 omfg sshd[21946]: Disconnected from 45.148.10.92 port 51674 [preauth] auth.log:Feb 15 04:19:27 omfg sshd[22014]: Connection from 45.148.10.92 port 35522 on 78.46.60.16 port 22 auth.log:Feb 15 04:19:28 omfg sshd[22014]: Received disconnect from 45.148.10.92 port 35522:11: Normal Shutdown, Thank you for playing [preauth] auth.log:Feb 15 04:19:28 omfg sshd[22014]: Disconnected from 45.148.10.92 port 35522 [preauth] auth.log:Feb 15 04:19:56 omfg sshd[22153]: Con........ ------------------------------ |
2020-02-16 19:21:23 |
| attackspam | Lines containing failures of 45.148.10.92 auth.log:Feb 15 04:18:50 omfg sshd[21945]: Connection from 45.148.10.92 port 39658 on 78.46.60.16 port 22 auth.log:Feb 15 04:18:50 omfg sshd[21945]: Did not receive identification string from 45.148.10.92 auth.log:Feb 15 04:18:59 omfg sshd[21946]: Connection from 45.148.10.92 port 51674 on 78.46.60.16 port 22 auth.log:Feb 15 04:18:59 omfg sshd[21946]: Received disconnect from 45.148.10.92 port 51674:11: Normal Shutdown, Thank you for playing [preauth] auth.log:Feb 15 04:18:59 omfg sshd[21946]: Disconnected from 45.148.10.92 port 51674 [preauth] auth.log:Feb 15 04:19:27 omfg sshd[22014]: Connection from 45.148.10.92 port 35522 on 78.46.60.16 port 22 auth.log:Feb 15 04:19:28 omfg sshd[22014]: Received disconnect from 45.148.10.92 port 35522:11: Normal Shutdown, Thank you for playing [preauth] auth.log:Feb 15 04:19:28 omfg sshd[22014]: Disconnected from 45.148.10.92 port 35522 [preauth] auth.log:Feb 15 04:19:56 omfg sshd[22153]: Con........ ------------------------------ |
2020-02-16 03:24:08 |
| attackbotsspam | Feb 14 21:34:30 eddieflores sshd\[22541\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.92 user=root Feb 14 21:34:32 eddieflores sshd\[22541\]: Failed password for root from 45.148.10.92 port 38626 ssh2 Feb 14 21:34:58 eddieflores sshd\[22566\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.92 user=root Feb 14 21:35:00 eddieflores sshd\[22566\]: Failed password for root from 45.148.10.92 port 46482 ssh2 Feb 14 21:35:26 eddieflores sshd\[22617\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.92 user=root |
2020-02-15 15:37:22 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.148.10.241 | attack | DDoS Inbound |
2023-11-15 18:54:04 |
| 45.148.10.28 | attackspam | Oct 13 20:18:40 sshgateway sshd\[2360\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.28 user=root Oct 13 20:18:43 sshgateway sshd\[2360\]: Failed password for root from 45.148.10.28 port 40178 ssh2 Oct 13 20:19:07 sshgateway sshd\[2364\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.28 user=root |
2020-10-14 02:28:44 |
| 45.148.10.15 | attackspambots | Bruteforce detected by fail2ban |
2020-10-13 21:25:53 |
| 45.148.10.186 | attackspam | Unable to negotiate with 45.148.10.186 port 47964: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] |
2020-10-13 21:24:21 |
| 45.148.10.28 | attackbotsspam | SSH Server Abuse (45.148.10.28 as |
2020-10-13 17:43:00 |
| 45.148.10.15 | attackbotsspam | Oct 13 05:18:03 server2 sshd\[31409\]: Invalid user user from 45.148.10.15 Oct 13 05:18:48 server2 sshd\[31424\]: Invalid user server from 45.148.10.15 Oct 13 05:19:33 server2 sshd\[31465\]: Invalid user steam from 45.148.10.15 Oct 13 05:20:17 server2 sshd\[31678\]: Invalid user vmware from 45.148.10.15 Oct 13 05:21:00 server2 sshd\[31685\]: Invalid user microsoft from 45.148.10.15 Oct 13 05:21:44 server2 sshd\[31730\]: Invalid user cloud from 45.148.10.15 |
2020-10-13 12:52:46 |
| 45.148.10.186 | attackspam | Oct 13 05:33:03 ns308116 sshd[11001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.186 user=root Oct 13 05:33:05 ns308116 sshd[11001]: Failed password for root from 45.148.10.186 port 41866 ssh2 Oct 13 05:33:38 ns308116 sshd[11016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.186 user=root Oct 13 05:33:40 ns308116 sshd[11016]: Failed password for root from 45.148.10.186 port 39380 ssh2 Oct 13 05:34:15 ns308116 sshd[11027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.186 user=root ... |
2020-10-13 12:50:57 |
| 45.148.10.15 | attack | Oct 12 23:36:06 srv-ubuntu-dev3 sshd[31523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.15 Oct 12 23:36:06 srv-ubuntu-dev3 sshd[31523]: Invalid user user from 45.148.10.15 Oct 12 23:36:08 srv-ubuntu-dev3 sshd[31523]: Failed password for invalid user user from 45.148.10.15 port 40704 ssh2 Oct 12 23:36:38 srv-ubuntu-dev3 sshd[31590]: Invalid user 123Diego from 45.148.10.15 Oct 12 23:36:38 srv-ubuntu-dev3 sshd[31590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.148.10.15 Oct 12 23:36:38 srv-ubuntu-dev3 sshd[31590]: Invalid user 123Diego from 45.148.10.15 Oct 12 23:36:40 srv-ubuntu-dev3 sshd[31590]: Failed password for invalid user 123Diego from 45.148.10.15 port 59760 ssh2 Oct 12 23:37:17 srv-ubuntu-dev3 sshd[31656]: Invalid user Alphanetworks from 45.148.10.15 Oct 12 23:37:17 srv-ubuntu-dev3 sshd[31656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rh ... |
2020-10-13 05:40:39 |
| 45.148.10.186 | attack | Fail2Ban |
2020-10-13 05:39:02 |
| 45.148.10.15 | attackbotsspam | Fail2Ban |
2020-10-12 05:52:51 |
| 45.148.10.65 | attackbots | Invalid user ubuntu from 45.148.10.65 port 43138 |
2020-10-12 05:36:52 |
| 45.148.10.15 | attack | Brute force attempt |
2020-10-11 21:59:38 |
| 45.148.10.65 | attackspam | Oct 01 10:49:15 host sshd[12378]: Invalid user ubuntu from 45.148.10.65 port 41060 |
2020-10-11 21:43:21 |
| 45.148.10.28 | attack | Fail2Ban automatic report: SSH brute-force: |
2020-10-11 21:05:28 |
| 45.148.10.15 | attackspam | Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-10-11T05:41:40Z and 2020-10-11T05:47:54Z |
2020-10-11 13:57:38 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.148.10.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64011
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.148.10.92. IN A
;; AUTHORITY SECTION:
. 425 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020021500 1800 900 604800 86400
;; Query time: 144 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 15:37:14 CST 2020
;; MSG SIZE rcvd: 116Host 92.10.148.45.in-addr.arpa. not found: 3(NXDOMAIN)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 92.10.148.45.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 191.241.165.213 | attackspam | 26/tcp [2019-11-16]1pkt |
2019-11-17 00:34:30 |
| 103.108.73.57 | attackspambots | Fail2Ban Ban Triggered |
2019-11-16 23:53:07 |
| 212.47.244.235 | attack | Nov 16 16:53:32 vpn01 sshd[19162]: Failed password for root from 212.47.244.235 port 51732 ssh2 ... |
2019-11-17 00:06:28 |
| 62.234.99.172 | attackspam | Nov 16 16:57:56 jane sshd[23134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.99.172 Nov 16 16:57:58 jane sshd[23134]: Failed password for invalid user dvd from 62.234.99.172 port 49951 ssh2 ... |
2019-11-17 00:05:58 |
| 193.70.114.154 | attackbots | Nov 16 16:59:35 v22018086721571380 sshd[7285]: Failed password for invalid user shylan from 193.70.114.154 port 58427 ssh2 |
2019-11-17 00:12:18 |
| 111.93.242.226 | attackbots | 2019-11-16T15:13:05.092420shield sshd\[17409\]: Invalid user ubuntu from 111.93.242.226 port 14833 2019-11-16T15:13:05.098258shield sshd\[17409\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.242.226 2019-11-16T15:13:07.536398shield sshd\[17409\]: Failed password for invalid user ubuntu from 111.93.242.226 port 14833 ssh2 2019-11-16T15:13:15.259193shield sshd\[17450\]: Invalid user ubuntu from 111.93.242.226 port 7641 2019-11-16T15:13:15.264880shield sshd\[17450\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.242.226 |
2019-11-17 00:24:14 |
| 202.51.74.226 | attackspam | Nov 16 16:40:56 OPSO sshd\[30939\]: Invalid user guest from 202.51.74.226 port 45303 Nov 16 16:40:56 OPSO sshd\[30939\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.51.74.226 Nov 16 16:40:58 OPSO sshd\[30939\]: Failed password for invalid user guest from 202.51.74.226 port 45303 ssh2 Nov 16 16:47:02 OPSO sshd\[32001\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.51.74.226 user=backup Nov 16 16:47:04 OPSO sshd\[32001\]: Failed password for backup from 202.51.74.226 port 35147 ssh2 |
2019-11-17 00:13:06 |
| 187.111.160.29 | attackbotsspam | A spam email was sent from this SMTP server. The domain of the URL in the message was best-self.info (103.212.223.59). |
2019-11-16 23:53:48 |
| 115.59.7.202 | attackbots | port scan and connect, tcp 23 (telnet) |
2019-11-17 00:19:44 |
| 1.163.115.251 | attackspam | 23/tcp [2019-11-16]1pkt |
2019-11-17 00:18:09 |
| 222.186.175.161 | attackbotsspam | Nov 16 12:54:36 firewall sshd[23696]: Failed password for root from 222.186.175.161 port 48078 ssh2 Nov 16 12:54:47 firewall sshd[23696]: error: maximum authentication attempts exceeded for root from 222.186.175.161 port 48078 ssh2 [preauth] Nov 16 12:54:47 firewall sshd[23696]: Disconnecting: Too many authentication failures [preauth] ... |
2019-11-16 23:56:03 |
| 159.65.89.92 | attackbotsspam | 159.65.89.92 was recorded 5 times by 1 hosts attempting to connect to the following ports: 23. Incident counter (4h, 24h, all-time): 5, 5, 60 |
2019-11-17 00:14:15 |
| 41.236.117.212 | attackbotsspam | 445/tcp [2019-11-16]1pkt |
2019-11-17 00:28:11 |
| 118.27.19.120 | attackspambots | Nov 16 17:40:26 server sshd\[14989\]: Invalid user drwho from 118.27.19.120 Nov 16 17:40:26 server sshd\[14989\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=v118-27-19-120.cxxt.static.cnode.io Nov 16 17:40:28 server sshd\[14989\]: Failed password for invalid user drwho from 118.27.19.120 port 54926 ssh2 Nov 16 17:52:27 server sshd\[18201\]: Invalid user host from 118.27.19.120 Nov 16 17:52:27 server sshd\[18201\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=v118-27-19-120.cxxt.static.cnode.io ... |
2019-11-17 00:29:24 |
| 222.255.122.61 | attackbotsspam | xmlrpc attack |
2019-11-17 00:33:54 |