City: unknown
Region: unknown
Country: United States of America
Internet Service Provider: DigitalOcean LLC
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspam | [N10.H2.VM2] Port Scanner Detected Blocked by UFW |
2020-10-05 06:13:54 |
| attackbotsspam | Port scan: Attack repeated for 24 hours |
2020-10-04 22:13:54 |
| attackbots |
|
2020-10-04 14:00:08 |
| attack | Port scan denied |
2020-08-29 22:03:53 |
| attackbotsspam | Fail2Ban Ban Triggered |
2020-08-27 01:03:35 |
| attackbotsspam | TCP port : 31996 |
2020-08-16 18:32:20 |
| attackspambots | firewall-block, port(s): 4802/tcp |
2020-08-01 08:12:23 |
| attackspambots | ET CINS Active Threat Intelligence Poor Reputation IP group 24 - port: 20335 proto: tcp cat: Misc Attackbytes: 60 |
2020-07-21 03:27:38 |
| attackbots | firewall-block, port(s): 21974/tcp |
2020-07-07 00:49:50 |
| attackbotsspam | 05/13/2020-23:52:49.430855 45.55.32.34 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-05-14 13:51:01 |
| attack | Port scan(s) denied |
2020-05-10 02:43:27 |
| attackspambots | ET CINS Active Threat Intelligence Poor Reputation IP group 27 - port: 15793 proto: TCP cat: Misc Attack |
2020-05-08 04:45:31 |
| attackbotsspam | Port scan(s) denied |
2020-05-05 16:53:14 |
| attackbotsspam | Invalid user upload from 45.55.32.34 port 55281 |
2020-05-03 07:31:23 |
| attackspambots | Apr 27 08:15:45 debian-2gb-nbg1-2 kernel: \[10227077.600183\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.55.32.34 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=3830 PROTO=TCP SPT=49801 DPT=30331 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-04-27 16:32:25 |
| attackspam | Port scan: Attack repeated for 24 hours |
2020-04-23 19:35:51 |
| attack | ET CINS Active Threat Intelligence Poor Reputation IP group 26 - port: 24404 proto: TCP cat: Misc Attack |
2020-04-17 06:10:56 |
| attackspam | Fail2Ban Ban Triggered |
2020-03-25 19:11:24 |
| attack | Mar 21 11:04:03 debian-2gb-nbg1-2 kernel: \[7044141.837598\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.55.32.34 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=43844 PROTO=TCP SPT=53657 DPT=31006 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-03-21 20:18:50 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.55.32.168 | attack | [FriOct0414:13:56.1734872019][:error][pid31940:tid140663882589952][client45.55.32.168:55478][client45.55.32.168]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\$mozilla\^\|mozilla/[45]\\\\\\\\.[1-9]\|\^mozilla/4\\\\\\\\.0\$\)"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"419"][id"330131"][rev"3"][msg"Atomicorp.comWAFRules:MaliciousBotBlocked\(FakeMozillaUserAgentStringDetected\)"][severity"CRITICAL"][hostname"studioaurabiasca.ch"][uri"/js/ajax.js"][unique_id"XZc3hH3BQoJ7x3ESGf6UiQAAAMQ"]\,referer:studioaurabiasca.ch[FriOct0414:13:57.3865652019][:error][pid32009:tid140663890982656][client45.55.32.168:48980][client45.55.32.168]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\$mozilla\^\|mozilla/[45]\\\\\\\\.[1-9]\|\^mozilla/4\\\\\\\\.0\$\)"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"419"][id"330131"][rev"3"][msg"Atomicorp.comWAFRu |
2019-10-04 23:56:38 |
| 45.55.32.168 | attackbots | SS5,WP GET /wp-includes/widgets/widgets.php?name=htp://example.com&file=test.txt |
2019-08-06 18:51:22 |
| 45.55.32.162 | attackbotsspam | Invalid user lenovo from 45.55.32.162 port 44116 |
2019-07-28 05:10:28 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.55.32.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38817
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.55.32.34. IN A
;; AUTHORITY SECTION:
. 407 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020032001 1800 900 604800 86400
;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 21 20:18:44 CST 2020
;; MSG SIZE rcvd: 115Host 34.32.55.45.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 34.32.55.45.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 51.38.186.47 | attackspambots | Dec 8 18:14:18 linuxvps sshd\[29041\]: Invalid user wwwadmin from 51.38.186.47 Dec 8 18:14:18 linuxvps sshd\[29041\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.186.47 Dec 8 18:14:20 linuxvps sshd\[29041\]: Failed password for invalid user wwwadmin from 51.38.186.47 port 42718 ssh2 Dec 8 18:19:16 linuxvps sshd\[32454\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.186.47 user=root Dec 8 18:19:19 linuxvps sshd\[32454\]: Failed password for root from 51.38.186.47 port 51332 ssh2 |
2019-12-09 07:30:58 |
| 51.75.30.199 | attackspam | Dec 8 23:54:47 tux-35-217 sshd\[12625\]: Invalid user ottmar from 51.75.30.199 port 56719 Dec 8 23:54:47 tux-35-217 sshd\[12625\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.30.199 Dec 8 23:54:49 tux-35-217 sshd\[12625\]: Failed password for invalid user ottmar from 51.75.30.199 port 56719 ssh2 Dec 8 23:59:37 tux-35-217 sshd\[12707\]: Invalid user carling from 51.75.30.199 port 60590 Dec 8 23:59:37 tux-35-217 sshd\[12707\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.30.199 ... |
2019-12-09 07:07:15 |
| 222.186.175.147 | attack | 2019-12-08T23:13:07.200875abusebot-6.cloudsearch.cf sshd\[5282\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.147 user=root |
2019-12-09 07:13:54 |
| 106.12.26.160 | attackbots | Dec 9 00:24:31 localhost sshd\[11285\]: Invalid user mysql from 106.12.26.160 port 41982 Dec 9 00:24:31 localhost sshd\[11285\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.26.160 Dec 9 00:24:33 localhost sshd\[11285\]: Failed password for invalid user mysql from 106.12.26.160 port 41982 ssh2 |
2019-12-09 07:39:10 |
| 82.166.93.77 | attackspambots | Dec 8 23:54:09 v22018086721571380 sshd[1155]: Failed password for invalid user hayashi from 82.166.93.77 port 38980 ssh2 |
2019-12-09 07:23:42 |
| 150.223.11.7 | attack | Dec 8 23:10:37 hcbbdb sshd\[5665\]: Invalid user corine from 150.223.11.7 Dec 8 23:10:37 hcbbdb sshd\[5665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.223.11.7 Dec 8 23:10:39 hcbbdb sshd\[5665\]: Failed password for invalid user corine from 150.223.11.7 port 32899 ssh2 Dec 8 23:16:03 hcbbdb sshd\[6314\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.223.11.7 user=root Dec 8 23:16:05 hcbbdb sshd\[6314\]: Failed password for root from 150.223.11.7 port 58955 ssh2 |
2019-12-09 07:27:47 |
| 40.121.194.179 | attack | Dec 8 23:59:29 sso sshd[8350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.121.194.179 Dec 8 23:59:31 sso sshd[8350]: Failed password for invalid user raisbeck from 40.121.194.179 port 58508 ssh2 ... |
2019-12-09 07:39:39 |
| 104.211.242.189 | attack | Dec 8 12:53:06 auw2 sshd\[14537\]: Invalid user smmsp from 104.211.242.189 Dec 8 12:53:06 auw2 sshd\[14537\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.211.242.189 Dec 8 12:53:08 auw2 sshd\[14537\]: Failed password for invalid user smmsp from 104.211.242.189 port 1984 ssh2 Dec 8 12:59:43 auw2 sshd\[15352\]: Invalid user grimble from 104.211.242.189 Dec 8 12:59:43 auw2 sshd\[15352\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.211.242.189 |
2019-12-09 07:24:58 |
| 137.74.185.204 | attackspambots | Dec 7 22:06:03 lvps92-51-164-246 sshd[9535]: Failed password for invalid user r.r from 137.74.185.204 port 38392 ssh2 Dec 7 22:06:04 lvps92-51-164-246 sshd[9535]: Received disconnect from 137.74.185.204: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=137.74.185.204 |
2019-12-09 07:38:40 |
| 139.59.77.237 | attack | Dec 8 23:53:41 meumeu sshd[12259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.237 Dec 8 23:53:43 meumeu sshd[12259]: Failed password for invalid user cvsuser from 139.59.77.237 port 52959 ssh2 Dec 8 23:59:56 meumeu sshd[13295]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.77.237 ... |
2019-12-09 07:08:16 |
| 54.39.44.47 | attackbotsspam | Dec 8 13:14:32 web1 sshd\[3584\]: Invalid user guest from 54.39.44.47 Dec 8 13:14:32 web1 sshd\[3584\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.44.47 Dec 8 13:14:34 web1 sshd\[3584\]: Failed password for invalid user guest from 54.39.44.47 port 56544 ssh2 Dec 8 13:19:44 web1 sshd\[4241\]: Invalid user newcombe from 54.39.44.47 Dec 8 13:19:44 web1 sshd\[4241\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.44.47 |
2019-12-09 07:28:20 |
| 223.247.194.119 | attackbots | Dec 8 13:12:06 wbs sshd\[14849\]: Invalid user buscarino from 223.247.194.119 Dec 8 13:12:06 wbs sshd\[14849\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.194.119 Dec 8 13:12:08 wbs sshd\[14849\]: Failed password for invalid user buscarino from 223.247.194.119 port 50620 ssh2 Dec 8 13:18:14 wbs sshd\[15519\]: Invalid user centsq from 223.247.194.119 Dec 8 13:18:14 wbs sshd\[15519\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.194.119 |
2019-12-09 07:21:23 |
| 106.54.134.145 | attackspam | Dec 8 18:11:40 ny01 sshd[11698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.134.145 Dec 8 18:11:42 ny01 sshd[11698]: Failed password for invalid user test from 106.54.134.145 port 57296 ssh2 Dec 8 18:17:30 ny01 sshd[12310]: Failed password for root from 106.54.134.145 port 58658 ssh2 |
2019-12-09 07:19:36 |
| 137.74.44.162 | attackbots | Dec 8 22:54:53 web8 sshd\[13916\]: Invalid user test from 137.74.44.162 Dec 8 22:54:53 web8 sshd\[13916\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162 Dec 8 22:54:55 web8 sshd\[13916\]: Failed password for invalid user test from 137.74.44.162 port 42290 ssh2 Dec 8 22:59:56 web8 sshd\[16464\]: Invalid user eowyn from 137.74.44.162 Dec 8 22:59:56 web8 sshd\[16464\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.44.162 |
2019-12-09 07:08:46 |
| 129.204.202.89 | attackspambots | Dec 9 01:59:43 hosting sshd[6353]: Invalid user yikim from 129.204.202.89 port 33639 ... |
2019-12-09 07:25:48 |