City: unknown
Region: unknown
Country: United States
Internet Service Provider: DigitalOcean LLC
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
Type | Details | Datetime |
---|---|---|
attackbotsspam | Mar 9 07:31:21 vps691689 sshd[2600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.50.52 Mar 9 07:31:24 vps691689 sshd[2600]: Failed password for invalid user git from 45.55.50.52 port 43992 ssh2 ... |
2020-03-09 14:45:07 |
attackbotsspam | ... |
2020-03-03 16:52:57 |
attack | Feb 8 09:05:25 vps691689 sshd[15439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.50.52 Feb 8 09:05:27 vps691689 sshd[15439]: Failed password for invalid user nagios from 45.55.50.52 port 42292 ssh2 ... |
2020-02-08 16:09:44 |
attackspambots | Jan 29 08:02:42 silence02 sshd[21390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.50.52 Jan 29 08:02:44 silence02 sshd[21390]: Failed password for invalid user choopa from 45.55.50.52 port 46118 ssh2 Jan 29 08:04:43 silence02 sshd[21474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.50.52 |
2020-01-29 15:25:44 |
IP | Type | Details | Datetime |
---|---|---|---|
45.55.50.222 | attackspam | WordPress login Brute force / Web App Attack on client site. |
2019-11-01 00:54:29 |
45.55.50.222 | attackspambots | fail2ban honeypot |
2019-10-18 21:30:42 |
45.55.50.222 | attackspam | WordPress (CMS) attack attempts. Date: 2019 Oct 14. 02:58:12 Source IP: 45.55.50.222 Portion of the log(s): 45.55.50.222 - [14/Oct/2019:02:58:12 +0200] "POST /wp-login.php HTTP/1.1" 200 2393 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.55.50.222 - [14/Oct/2019:02:58:10 +0200] "POST /wp-login.php HTTP/1.1" 200 2392 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.55.50.222 - [14/Oct/2019:02:58:09 +0200] "POST /wp-login.php HTTP/1.1" 200 2389 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.55.50.222 - [14/Oct/2019:02:58:07 +0200] "POST /wp-login.php HTTP/1.1" 200 2399 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.55.50.222 - [14/Oct/2019:02:58:05 +0200] "POST /wp-login.php HTTP/1.1" 200 2389 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.55.50.222 - [14/Oct/2019:02:58:04 +0200] "POST /wp-login.php HTTP/1.1" |
2019-10-14 19:11:38 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.55.50.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16741
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.55.50.52. IN A
;; AUTHORITY SECTION:
. 316 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020012200 1800 900 604800 86400
;; Query time: 120 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 14:33:23 CST 2020
;; MSG SIZE rcvd: 115
52.50.55.45.in-addr.arpa domain name pointer terminus.arkangroupco.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
52.50.55.45.in-addr.arpa name = terminus.arkangroupco.com.
Authoritative answers can be found from:
IP | Type | Details | Datetime |
---|---|---|---|
180.101.248.148 | attackspam | firewall-block, port(s): 29650/tcp |
2020-10-06 04:33:51 |
106.75.148.111 | attackbots | Oct 5 05:09:07 onepixel sshd[684707]: Failed password for root from 106.75.148.111 port 47396 ssh2 Oct 5 05:11:02 onepixel sshd[685165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.148.111 user=root Oct 5 05:11:04 onepixel sshd[685165]: Failed password for root from 106.75.148.111 port 43614 ssh2 Oct 5 05:13:03 onepixel sshd[685487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.148.111 user=root Oct 5 05:13:05 onepixel sshd[685487]: Failed password for root from 106.75.148.111 port 39826 ssh2 |
2020-10-06 04:27:48 |
192.241.220.224 | attackspambots |
|
2020-10-06 04:26:35 |
149.72.1.74 | attackbotsspam | 2020-10-04 15:23:25.990872-0500 localhost smtpd[1892]: NOQUEUE: reject: RCPT from unknown[149.72.1.74]: 450 4.7.25 Client host rejected: cannot find your hostname, [149.72.1.74]; from= |
2020-10-06 04:08:09 |
137.119.55.25 | attackbotsspam | 2020-10-05T13:23:57.149844sorsha.thespaminator.com sshd[22923]: Invalid user pi from 137.119.55.25 port 45068 2020-10-05T13:23:57.219381sorsha.thespaminator.com sshd[22921]: Invalid user pi from 137.119.55.25 port 45160 ... |
2020-10-06 04:27:07 |
119.57.117.246 | attack | 1433/tcp 1433/tcp 1433/tcp... [2020-08-27/10-04]8pkt,1pt.(tcp) |
2020-10-06 04:25:36 |
2.57.122.186 | attack | ET COMPROMISED Known Compromised or Hostile Host Traffic group 26 - port: 22 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-06 04:22:02 |
119.45.252.106 | attackspam | Oct 4 23:28:38 xeon sshd[50181]: Failed password for root from 119.45.252.106 port 54912 ssh2 |
2020-10-06 03:59:16 |
187.170.30.72 | attack | SSH/22 MH Probe, BF, Hack - |
2020-10-06 04:33:37 |
200.91.160.238 | attack | Banned for a week because repeated abuses, for example SSH, but not only |
2020-10-06 03:56:41 |
61.110.143.248 | attack |
|
2020-10-06 04:21:36 |
186.2.185.208 | attack | Oct 4 22:33:06 db sshd[29837]: Invalid user ubnt from 186.2.185.208 port 60623 ... |
2020-10-06 04:05:24 |
186.229.64.128 | attack | 20/10/5@15:52:58: FAIL: Alarm-Network address from=186.229.64.128 20/10/5@15:52:58: FAIL: Alarm-Network address from=186.229.64.128 ... |
2020-10-06 04:13:02 |
159.65.119.25 | attack | Oct 5 21:05:24 santamaria sshd\[31291\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.119.25 user=root Oct 5 21:05:26 santamaria sshd\[31291\]: Failed password for root from 159.65.119.25 port 35438 ssh2 Oct 5 21:10:29 santamaria sshd\[31458\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.119.25 user=root ... |
2020-10-06 04:04:52 |
161.8.18.218 | attackspam | srvr3: (mod_security) mod_security (id:920350) triggered by 161.8.18.218 (US/-/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/10/05 13:26:14 [error] 253312#0: *1012 [client 161.8.18.218] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host' [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/"] [unique_id "160189717425.582943"] [ref "o0,11v21,11"], client: 161.8.18.218, [redacted] request: "GET / HTTP/1.1" [redacted] |
2020-10-06 04:03:54 |