City: unknown
Region: unknown
Country: United States of America
Internet Service Provider: DigitalOcean LLC
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspam | odoo8 ... |
2020-06-07 15:12:12 |
| attackspam | May 16 04:29:27 server sshd[54925]: Failed password for invalid user jesse from 45.55.6.42 port 51750 ssh2 May 16 04:42:00 server sshd[64738]: Failed password for invalid user oracle from 45.55.6.42 port 46856 ssh2 May 16 04:47:12 server sshd[3482]: Failed password for invalid user oraprod from 45.55.6.42 port 50416 ssh2 |
2020-05-16 12:59:02 |
| attackbotsspam | <6 unauthorized SSH connections |
2020-05-14 17:37:57 |
| attackbotsspam | *Port Scan* detected from 45.55.6.42 (US/United States/California/San Francisco/-). 4 hits in the last 15 seconds |
2020-05-07 02:25:10 |
| attackbotsspam | May 4 09:26:05 inter-technics sshd[24622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.6.42 user=root May 4 09:26:07 inter-technics sshd[24622]: Failed password for root from 45.55.6.42 port 37166 ssh2 May 4 09:30:49 inter-technics sshd[25888]: Invalid user julie from 45.55.6.42 port 42719 May 4 09:30:49 inter-technics sshd[25888]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.6.42 May 4 09:30:49 inter-technics sshd[25888]: Invalid user julie from 45.55.6.42 port 42719 May 4 09:30:51 inter-technics sshd[25888]: Failed password for invalid user julie from 45.55.6.42 port 42719 ssh2 ... |
2020-05-04 18:24:50 |
| attack | Apr 29 17:18:15 host sshd[30908]: Invalid user acs from 45.55.6.42 port 43198 ... |
2020-04-29 23:24:36 |
| attackspam | 2020-04-28T14:32:17.817169shield sshd\[4536\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.6.42 user=root 2020-04-28T14:32:19.813664shield sshd\[4536\]: Failed password for root from 45.55.6.42 port 56783 ssh2 2020-04-28T14:36:57.062630shield sshd\[5177\]: Invalid user sanga from 45.55.6.42 port 35096 2020-04-28T14:36:57.066359shield sshd\[5177\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.6.42 2020-04-28T14:36:59.168197shield sshd\[5177\]: Failed password for invalid user sanga from 45.55.6.42 port 35096 ssh2 |
2020-04-29 03:27:16 |
| attackbotsspam | Invalid user test from 45.55.6.42 port 46551 |
2020-04-25 13:25:22 |
| attack | *Port Scan* detected from 45.55.6.42 (US/United States/California/San Francisco/-). 4 hits in the last 85 seconds |
2020-04-21 21:22:26 |
| attackbotsspam | Apr 15 14:13:08 server sshd[50029]: Failed password for invalid user vnc from 45.55.6.42 port 55382 ssh2 Apr 15 14:18:52 server sshd[51745]: Failed password for invalid user oracle from 45.55.6.42 port 36643 ssh2 Apr 15 14:23:30 server sshd[53186]: Failed password for invalid user test from 45.55.6.42 port 40132 ssh2 |
2020-04-15 21:03:48 |
| attackbots | $f2bV_matches |
2020-04-10 03:18:37 |
| attack | Invalid user cailin from 45.55.6.42 port 55990 |
2020-04-03 15:28:54 |
| attack | $f2bV_matches |
2020-03-29 01:23:31 |
| attack | SSH Brute-Force attacks |
2020-03-25 09:28:16 |
| attack | (sshd) Failed SSH login from 45.55.6.42 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 24 04:47:59 amsweb01 sshd[30204]: Invalid user test from 45.55.6.42 port 46577 Mar 24 04:48:01 amsweb01 sshd[30204]: Failed password for invalid user test from 45.55.6.42 port 46577 ssh2 Mar 24 04:56:12 amsweb01 sshd[31101]: Invalid user long from 45.55.6.42 port 58906 Mar 24 04:56:15 amsweb01 sshd[31101]: Failed password for invalid user long from 45.55.6.42 port 58906 ssh2 Mar 24 05:00:59 amsweb01 sshd[31709]: Invalid user wangcs from 45.55.6.42 port 34420 |
2020-03-24 13:18:23 |
| attack | Mar 19 03:02:40 itv-usvr-02 sshd[31190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.6.42 user=root Mar 19 03:08:19 itv-usvr-02 sshd[31352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.6.42 user=root Mar 19 03:10:30 itv-usvr-02 sshd[31542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.6.42 user=root |
2020-03-19 05:40:36 |
| attack | 2020-03-08T21:29:57.528912abusebot-8.cloudsearch.cf sshd[30170]: Invalid user cisco from 45.55.6.42 port 39645 2020-03-08T21:29:57.536265abusebot-8.cloudsearch.cf sshd[30170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.6.42 2020-03-08T21:29:57.528912abusebot-8.cloudsearch.cf sshd[30170]: Invalid user cisco from 45.55.6.42 port 39645 2020-03-08T21:29:59.859120abusebot-8.cloudsearch.cf sshd[30170]: Failed password for invalid user cisco from 45.55.6.42 port 39645 ssh2 2020-03-08T21:35:20.395070abusebot-8.cloudsearch.cf sshd[30439]: Invalid user zhup from 45.55.6.42 port 48872 2020-03-08T21:35:20.403749abusebot-8.cloudsearch.cf sshd[30439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.6.42 2020-03-08T21:35:20.395070abusebot-8.cloudsearch.cf sshd[30439]: Invalid user zhup from 45.55.6.42 port 48872 2020-03-08T21:35:22.400524abusebot-8.cloudsearch.cf sshd[30439]: Failed password for invalid u ... |
2020-03-09 05:43:46 |
| attackspambots | Mar 7 14:31:57 mail sshd[15989]: Invalid user fct from 45.55.6.42 Mar 7 14:31:57 mail sshd[15989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.6.42 Mar 7 14:31:57 mail sshd[15989]: Invalid user fct from 45.55.6.42 Mar 7 14:31:59 mail sshd[15989]: Failed password for invalid user fct from 45.55.6.42 port 40511 ssh2 ... |
2020-03-08 00:40:50 |
| attack | suspicious action Mon, 24 Feb 2020 01:42:35 -0300 |
2020-02-24 21:17:55 |
| attackbots | Feb 19 16:48:42 vps sshd[15832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.6.42 Feb 19 16:48:45 vps sshd[15832]: Failed password for invalid user Michelle from 45.55.6.42 port 50413 ssh2 Feb 19 17:12:54 vps sshd[17084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.6.42 ... |
2020-02-20 04:37:19 |
| attackspambots | Feb 17 06:21:33 srv01 sshd[28378]: Invalid user teste from 45.55.6.42 port 51865 Feb 17 06:21:33 srv01 sshd[28378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.6.42 Feb 17 06:21:33 srv01 sshd[28378]: Invalid user teste from 45.55.6.42 port 51865 Feb 17 06:21:35 srv01 sshd[28378]: Failed password for invalid user teste from 45.55.6.42 port 51865 ssh2 Feb 17 06:23:41 srv01 sshd[28484]: Invalid user admin from 45.55.6.42 port 33866 ... |
2020-02-17 15:03:48 |
| attack | Feb 16 19:59:09 MK-Soft-VM6 sshd[19051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.6.42 Feb 16 19:59:11 MK-Soft-VM6 sshd[19051]: Failed password for invalid user sanjeev from 45.55.6.42 port 53281 ssh2 ... |
2020-02-17 03:38:43 |
| attack | $f2bV_matches |
2020-02-12 06:20:43 |
| attackbots | Feb 9 14:42:44 silence02 sshd[31932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.6.42 Feb 9 14:42:45 silence02 sshd[31932]: Failed password for invalid user vwe from 45.55.6.42 port 52681 ssh2 Feb 9 14:45:53 silence02 sshd[32134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.6.42 |
2020-02-10 04:12:02 |
| attackspambots | SSH-BruteForce |
2020-02-02 08:09:20 |
| attackspambots | Unauthorized connection attempt detected from IP address 45.55.6.42 to port 2220 [J] |
2020-01-29 15:31:02 |
| attackbots | Invalid user svt from 45.55.6.42 port 47023 |
2020-01-18 23:21:23 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.55.67.249 | attack | Fraud connect |
2024-05-11 01:52:46 |
| 45.55.63.118 | attackbots | Invalid user vandusen from 45.55.63.118 port 41584 |
2020-10-13 23:10:09 |
| 45.55.63.118 | attack | $f2bV_matches |
2020-10-13 14:28:20 |
| 45.55.63.118 | attackbots | Oct 13 00:54:53 eventyay sshd[2588]: Failed password for root from 45.55.63.118 port 35190 ssh2 Oct 13 00:58:25 eventyay sshd[2703]: Failed password for root from 45.55.63.118 port 40376 ssh2 ... |
2020-10-13 07:09:49 |
| 45.55.61.114 | attack | C1,WP GET /suche/wp-login.php |
2020-10-11 02:56:06 |
| 45.55.61.114 | attackbots | 45.55.61.114 - - [10/Oct/2020:12:32:10 +0200] "GET /wp-login.php HTTP/1.1" 200 9061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.55.61.114 - - [10/Oct/2020:12:32:11 +0200] "POST /wp-login.php HTTP/1.1" 200 9312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.55.61.114 - - [10/Oct/2020:12:32:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-10-10 18:44:37 |
| 45.55.65.92 | attack | firewall-block, port(s): 23786/tcp |
2020-10-05 06:04:49 |
| 45.55.65.92 | attackbots | [N10.H2.VM2] Port Scanner Detected Blocked by UFW |
2020-10-04 22:03:38 |
| 45.55.65.92 | attackspambots | firewall-block, port(s): 6864/tcp |
2020-10-04 13:49:33 |
| 45.55.65.92 | attack |
|
2020-10-04 02:11:02 |
| 45.55.65.92 | attackspambots |
|
2020-10-03 17:56:13 |
| 45.55.61.114 | attackspambots | 45.55.61.114 - - [30/Sep/2020:03:32:27 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.55.61.114 - - [30/Sep/2020:03:32:28 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.55.61.114 - - [30/Sep/2020:03:32:30 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-09-30 09:51:12 |
| 45.55.61.114 | attackbots | 45.55.61.114 - - [29/Sep/2020:18:49:41 +0200] "GET /wp-login.php HTTP/1.1" 200 8712 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.55.61.114 - - [29/Sep/2020:18:49:43 +0200] "POST /wp-login.php HTTP/1.1" 200 8942 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.55.61.114 - - [29/Sep/2020:18:49:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-09-30 02:42:42 |
| 45.55.61.114 | attackspambots | 45.55.61.114 - - [29/Sep/2020:11:41:07 +0100] "POST /wp-login.php HTTP/1.1" 200 2141 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.55.61.114 - - [29/Sep/2020:11:41:08 +0100] "POST /wp-login.php HTTP/1.1" 200 2125 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 45.55.61.114 - - [29/Sep/2020:11:41:08 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-29 18:45:44 |
| 45.55.65.92 | attack |
|
2020-09-27 01:17:38 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.55.6.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61594
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.55.6.42. IN A
;; AUTHORITY SECTION:
. 465 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020011800 1800 900 604800 86400
;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 18 23:21:15 CST 2020
;; MSG SIZE rcvd: 114
Host 42.6.55.45.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 42.6.55.45.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 64.94.179.88 | attackspambots | TCP Port Scanning |
2019-11-26 16:29:06 |
| 218.92.0.157 | attackbots | Nov 26 09:46:17 jane sshd[19427]: Failed password for root from 218.92.0.157 port 11570 ssh2 Nov 26 09:46:23 jane sshd[19427]: Failed password for root from 218.92.0.157 port 11570 ssh2 ... |
2019-11-26 16:47:44 |
| 175.211.112.254 | attackbotsspam | 2019-11-26T06:27:49.370247abusebot-5.cloudsearch.cf sshd\[1725\]: Invalid user robert from 175.211.112.254 port 39628 |
2019-11-26 16:34:51 |
| 113.21.116.29 | attack | (imapd) Failed IMAP login from 113.21.116.29 (NC/New Caledonia/host-113-21-116-29.canl.nc): 1 in the last 3600 secs |
2019-11-26 16:59:51 |
| 103.21.125.10 | attackspam | F2B jail: sshd. Time: 2019-11-26 09:58:09, Reported by: VKReport |
2019-11-26 16:59:13 |
| 5.249.131.161 | attackspam | Lines containing failures of 5.249.131.161 Nov 25 21:11:49 dns01 sshd[24974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.249.131.161 user=r.r Nov 25 21:11:52 dns01 sshd[24974]: Failed password for r.r from 5.249.131.161 port 10078 ssh2 Nov 25 21:11:52 dns01 sshd[24974]: Received disconnect from 5.249.131.161 port 10078:11: Bye Bye [preauth] Nov 25 21:11:52 dns01 sshd[24974]: Disconnected from authenticating user r.r 5.249.131.161 port 10078 [preauth] Nov 25 21:45:40 dns01 sshd[30634]: Invalid user rutan from 5.249.131.161 port 54649 Nov 25 21:45:40 dns01 sshd[30634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.249.131.161 Nov 25 21:45:42 dns01 sshd[30634]: Failed password for invalid user rutan from 5.249.131.161 port 54649 ssh2 Nov 25 21:45:42 dns01 sshd[30634]: Received disconnect from 5.249.131.161 port 54649:11: Bye Bye [preauth] Nov 25 21:45:42 dns01 sshd[30634]: Disconnect........ ------------------------------ |
2019-11-26 16:30:50 |
| 49.235.248.81 | attack | 49.235.248.81 was recorded 5 times by 5 hosts attempting to connect to the following ports: 6379. Incident counter (4h, 24h, all-time): 5, 5, 7 |
2019-11-26 16:32:29 |
| 132.232.4.33 | attackbotsspam | Nov 26 09:36:47 * sshd[676]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.4.33 Nov 26 09:36:49 * sshd[676]: Failed password for invalid user user from 132.232.4.33 port 46950 ssh2 |
2019-11-26 16:55:48 |
| 192.169.216.233 | attackspam | Nov 26 09:37:53 localhost sshd\[29615\]: Invalid user mami from 192.169.216.233 port 46428 Nov 26 09:37:53 localhost sshd\[29615\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.169.216.233 Nov 26 09:37:55 localhost sshd\[29615\]: Failed password for invalid user mami from 192.169.216.233 port 46428 ssh2 |
2019-11-26 17:00:09 |
| 79.166.245.145 | attack | Telnet Server BruteForce Attack |
2019-11-26 17:00:48 |
| 5.196.18.169 | attackbots | Nov 26 09:36:19 SilenceServices sshd[3525]: Failed password for root from 5.196.18.169 port 36992 ssh2 Nov 26 09:42:32 SilenceServices sshd[5635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.18.169 Nov 26 09:42:34 SilenceServices sshd[5635]: Failed password for invalid user speech-dispatcher from 5.196.18.169 port 45208 ssh2 |
2019-11-26 16:43:29 |
| 200.133.39.24 | attackbots | Nov 26 09:52:29 OPSO sshd\[10926\]: Invalid user otemoyan from 200.133.39.24 port 47570 Nov 26 09:52:29 OPSO sshd\[10926\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.133.39.24 Nov 26 09:52:31 OPSO sshd\[10926\]: Failed password for invalid user otemoyan from 200.133.39.24 port 47570 ssh2 Nov 26 09:59:50 OPSO sshd\[12225\]: Invalid user git from 200.133.39.24 port 54894 Nov 26 09:59:50 OPSO sshd\[12225\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.133.39.24 |
2019-11-26 17:02:02 |
| 93.33.206.188 | attackspam | Nov 26 09:07:41 lnxded63 sshd[29422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.33.206.188 |
2019-11-26 16:26:02 |
| 176.31.128.45 | attack | Nov 26 09:38:59 vps691689 sshd[29506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.128.45 Nov 26 09:39:00 vps691689 sshd[29506]: Failed password for invalid user sammy from 176.31.128.45 port 38292 ssh2 Nov 26 09:45:07 vps691689 sshd[29590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.128.45 ... |
2019-11-26 16:45:11 |
| 103.214.13.20 | attackbots | Connection by 103.214.13.20 on port: 26 got caught by honeypot at 11/26/2019 5:27:51 AM |
2019-11-26 16:43:15 |