City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.148.234.125 | attackspambots | (mod_security) mod_security (id:210730) triggered by 45.148.234.125 (RU/Russia/-): 5 in the last 300 secs |
2020-10-04 02:31:09 |
| 45.148.234.125 | attack | (mod_security) mod_security (id:210730) triggered by 45.148.234.125 (RU/Russia/-): 5 in the last 300 secs |
2020-10-03 18:18:43 |
| 45.148.234.161 | attack | Chat Spam |
2020-08-19 13:51:18 |
| 45.148.235.131 | attack | Chat Spam |
2020-08-18 12:40:04 |
| 45.148.233.109 | attack | Chat Spam |
2020-08-18 03:34:10 |
| 45.148.232.106 | attackbotsspam | Forbidden access |
2020-07-17 18:45:29 |
| 45.148.232.249 | attackspam | Forbidden access |
2020-07-17 04:28:40 |
| 45.148.234.164 | attack | Forbidden access |
2020-07-16 20:12:01 |
| 45.148.242.47 | attackbotsspam | DDOS - one of 48 separate Russian addresses (plus one Lithuanian) IP addresses used to attack our website by repeatedly attempting to download the same, large file. All requests had the same signature, RestSharp/106.11.4.0 |
2020-07-10 20:51:58 |
| 45.148.232.27 | attackbotsspam | fell into ViewStateTrap:Durban01 |
2020-02-09 03:20:15 |
| 45.148.235.179 | attackspambots | Ein möglicherweise gefährlicher Request.Form-Wert wurde vom Client (mp$ContentZone$TxtMessage=" |
2020-01-18 21:25:20 |
| 45.148.235.210 | attackspam | Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM - |
2020-01-17 23:05:54 |
| 45.148.232.38 | attack | Registration form abuse |
2019-12-12 20:22:49 |
| 45.148.234.173 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/45.148.234.173/ EU - 1H : (4) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : EU NAME ASN : ASN0 IP : 45.148.234.173 CIDR : 45.148.0.0/14 PREFIX COUNT : 50242 UNIQUE IP COUNT : 856039856 ATTACKS DETECTED ASN0 : 1H - 3 3H - 6 6H - 7 12H - 8 24H - 16 DateTime : 2019-11-24 07:19:23 INFO : Server 301 - Looking for resource vulnerabilities Detected and Blocked by ADMIN - data recovery |
2019-11-24 20:59:17 |
| 45.148.235.169 | attackspambots | 9.311.211,50-04/03 [bc18/m78] PostRequest-Spammer scoring: Durban02 |
2019-11-21 03:13:38 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.148.2.17
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11344
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.148.2.17. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020600 1800 900 604800 86400
;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 15:51:59 CST 2025
;; MSG SIZE rcvd: 104
Host 17.2.148.45.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 17.2.148.45.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 14.253.147.15 | attackbotsspam | TCP Port: 25 invalid blocked abuseat-org also zen-spamhaus and manitu-net (324) |
2020-03-02 03:35:09 |
| 192.99.232.147 | attack | Mar 1 09:41:08 eddieflores sshd\[24494\]: Invalid user testftp from 192.99.232.147 Mar 1 09:41:08 eddieflores sshd\[24494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ovh02.odysseusinc.com Mar 1 09:41:10 eddieflores sshd\[24494\]: Failed password for invalid user testftp from 192.99.232.147 port 32880 ssh2 Mar 1 09:47:32 eddieflores sshd\[25002\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ovh02.odysseusinc.com user=root Mar 1 09:47:34 eddieflores sshd\[25002\]: Failed password for root from 192.99.232.147 port 58276 ssh2 |
2020-03-02 04:06:50 |
| 94.255.247.4 | attack | Unauthorized connection attempt detected from IP address 94.255.247.4 to port 23 [J] |
2020-03-02 03:43:47 |
| 103.91.54.100 | attackbotsspam | Mar 1 20:05:32 * sshd[9612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.91.54.100 Mar 1 20:05:34 * sshd[9612]: Failed password for invalid user ubuntu from 103.91.54.100 port 46492 ssh2 |
2020-03-02 03:52:00 |
| 168.121.100.208 | attackbotsspam | 1583068764 - 03/01/2020 14:19:24 Host: 168.121.100.208/168.121.100.208 Port: 445 TCP Blocked |
2020-03-02 03:58:04 |
| 222.186.30.248 | attackbots | 2020-03-01T20:51:19.024292scmdmz1 sshd[13411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.248 user=root 2020-03-01T20:51:20.734507scmdmz1 sshd[13411]: Failed password for root from 222.186.30.248 port 40918 ssh2 2020-03-01T20:51:22.133834scmdmz1 sshd[13411]: Failed password for root from 222.186.30.248 port 40918 ssh2 2020-03-01T20:51:19.024292scmdmz1 sshd[13411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.248 user=root 2020-03-01T20:51:20.734507scmdmz1 sshd[13411]: Failed password for root from 222.186.30.248 port 40918 ssh2 2020-03-01T20:51:22.133834scmdmz1 sshd[13411]: Failed password for root from 222.186.30.248 port 40918 ssh2 2020-03-01T20:51:19.024292scmdmz1 sshd[13411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.248 user=root 2020-03-01T20:51:20.734507scmdmz1 sshd[13411]: Failed password for root from 222.186.30.248 port 40918 ssh2 2 |
2020-03-02 03:52:36 |
| 188.166.211.194 | attackbots | suspicious action Sun, 01 Mar 2020 14:50:00 -0300 |
2020-03-02 03:41:58 |
| 104.152.52.26 | attack | Port probing on unauthorized port 9332 |
2020-03-02 04:03:53 |
| 192.241.210.175 | attack | firewall-block, port(s): 18245/tcp |
2020-03-02 03:33:08 |
| 170.239.108.74 | attackbotsspam | DATE:2020-03-01 16:28:09, IP:170.239.108.74, PORT:ssh SSH brute force auth (docker-dc) |
2020-03-02 04:06:08 |
| 114.67.82.150 | attackspam | Mar 1 16:19:59 server sshd\[29460\]: Failed password for invalid user test3 from 114.67.82.150 port 58166 ssh2 Mar 1 22:23:51 server sshd\[28338\]: Invalid user wangxq from 114.67.82.150 Mar 1 22:23:51 server sshd\[28338\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.82.150 Mar 1 22:23:52 server sshd\[28338\]: Failed password for invalid user wangxq from 114.67.82.150 port 43394 ssh2 Mar 1 22:25:45 server sshd\[28940\]: Invalid user wangxq from 114.67.82.150 Mar 1 22:25:45 server sshd\[28940\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.82.150 ... |
2020-03-02 03:43:26 |
| 185.209.0.91 | attackbotsspam | 03/01/2020-14:58:39.328310 185.209.0.91 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2020-03-02 04:04:14 |
| 119.29.2.157 | attackspambots | Mar 1 09:55:35 web1 sshd\[21585\]: Invalid user mapred from 119.29.2.157 Mar 1 09:55:35 web1 sshd\[21585\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.2.157 Mar 1 09:55:37 web1 sshd\[21585\]: Failed password for invalid user mapred from 119.29.2.157 port 54946 ssh2 Mar 1 10:01:13 web1 sshd\[22122\]: Invalid user demo from 119.29.2.157 Mar 1 10:01:13 web1 sshd\[22122\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.2.157 |
2020-03-02 04:07:25 |
| 200.196.249.170 | attack | Mar 1 20:19:32 server sshd\[7359\]: Invalid user admin1 from 200.196.249.170 Mar 1 20:19:32 server sshd\[7359\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.249.170 Mar 1 20:19:33 server sshd\[7359\]: Failed password for invalid user admin1 from 200.196.249.170 port 38080 ssh2 Mar 1 20:38:14 server sshd\[10590\]: Invalid user export from 200.196.249.170 Mar 1 20:38:14 server sshd\[10590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.249.170 ... |
2020-03-02 03:54:42 |
| 178.204.11.223 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 01-03-2020 13:20:10. |
2020-03-02 03:33:35 |