City: unknown
Region: unknown
Country: Brazil
Internet Service Provider: Explorer Telecom Barretos Informatica Ltda ME
Hostname: unknown
Organization: unknown
Usage Type: Fixed Line ISP
| Type | Details | Datetime |
|---|---|---|
| attackbotsspam | Unauthorized connection attempt detected from IP address 45.70.0.73 to port 80 |
2020-07-22 21:15:58 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.70.0.17 | attackbotsspam | Sending SPAM email |
2019-12-12 08:53:33 |
| 45.70.0.158 | attack | Automatic report - Port Scan Attack |
2019-10-30 19:04:33 |
| 45.70.0.17 | attackspambots | proto=tcp . spt=45806 . dpt=25 . (listed on Dark List de Aug 23) (131) |
2019-08-24 16:33:49 |
| 45.70.0.17 | attackbots | Jun 18 07:19:37 our-server-hostname postfix/smtpd[29541]: connect from unknown[45.70.0.17] Jun x@x Jun 18 07:19:40 our-server-hostname postfix/smtpd[29541]: lost connection after RCPT from unknown[45.70.0.17] Jun 18 07:19:40 our-server-hostname postfix/smtpd[29541]: disconnect from unknown[45.70.0.17] Jun 18 07:25:26 our-server-hostname postfix/smtpd[30227]: connect from unknown[45.70.0.17] Jun 18 07:25:33 our-server-hostname postfix/smtpd[30227]: NOQUEUE: reject: RCPT from unknown[45.70.0.17]: 554 5.7.1 Service un .... truncated .... ble; x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun 19 02:30:48 our-server-hostname postfix/smtpd[3522]: too many errors after RCPT from unknown[45.70.0.17] Jun 19 02:30:48 our-server-hostname postfix/smtpd[3522]: disconnect from unknown[45.70.0.17] Jun 19 02:31:50 our-server-hostname postfix/smtpd[5324]: connect from unknown[45.70.0.17] Jun x........ ------------------------------- |
2019-06-22 22:32:11 |
| 45.70.0.17 | attackbots | Jun 18 07:19:37 our-server-hostname postfix/smtpd[29541]: connect from unknown[45.70.0.17] Jun x@x Jun 18 07:19:40 our-server-hostname postfix/smtpd[29541]: lost connection after RCPT from unknown[45.70.0.17] Jun 18 07:19:40 our-server-hostname postfix/smtpd[29541]: disconnect from unknown[45.70.0.17] Jun 18 07:25:26 our-server-hostname postfix/smtpd[30227]: connect from unknown[45.70.0.17] Jun 18 07:25:33 our-server-hostname postfix/smtpd[30227]: NOQUEUE: reject: RCPT from unknown[45.70.0.17]: 554 5.7.1 Service un .... truncated .... ble; x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun 19 02:30:48 our-server-hostname postfix/smtpd[3522]: too many errors after RCPT from unknown[45.70.0.17] Jun 19 02:30:48 our-server-hostname postfix/smtpd[3522]: disconnect from unknown[45.70.0.17] Jun 19 02:31:50 our-server-hostname postfix/smtpd[5324]: connect from unknown[45.70.0.17] Jun x........ ------------------------------- |
2019-06-21 22:34:09 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.70.0.73
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45211
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.70.0.73. IN A
;; AUTHORITY SECTION:
. 413 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020072200 1800 900 604800 86400
;; Query time: 26 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jul 22 21:15:54 CST 2020
;; MSG SIZE rcvd: 114Host 73.0.70.45.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 73.0.70.45.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 122.225.100.82 | attackspam | Oct 17 22:53:00 hosting sshd[17944]: Invalid user administrator from 122.225.100.82 port 36774 ... |
2019-10-18 04:45:16 |
| 129.211.56.92 | attack | Oct 17 01:28:30 h2034429 sshd[31014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.56.92 user=r.r Oct 17 01:28:32 h2034429 sshd[31014]: Failed password for r.r from 129.211.56.92 port 59714 ssh2 Oct 17 01:28:33 h2034429 sshd[31014]: Received disconnect from 129.211.56.92 port 59714:11: Bye Bye [preauth] Oct 17 01:28:33 h2034429 sshd[31014]: Disconnected from 129.211.56.92 port 59714 [preauth] Oct 17 01:36:41 h2034429 sshd[31079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.56.92 user=r.r Oct 17 01:36:44 h2034429 sshd[31079]: Failed password for r.r from 129.211.56.92 port 36738 ssh2 Oct 17 01:36:44 h2034429 sshd[31079]: Received disconnect from 129.211.56.92 port 36738:11: Bye Bye [preauth] Oct 17 01:36:44 h2034429 sshd[31079]: Disconnected from 129.211.56.92 port 36738 [preauth] Oct 17 01:41:07 h2034429 sshd[31130]: pam_unix(sshd:auth): authentication failure; logna........ ------------------------------- |
2019-10-18 05:04:57 |
| 46.29.167.135 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/46.29.167.135/ RU - 1H : (189) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : RU NAME ASN : ASN51659 IP : 46.29.167.135 CIDR : 46.29.167.0/24 PREFIX COUNT : 30 UNIQUE IP COUNT : 15360 WYKRYTE ATAKI Z ASN51659 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-10-17 21:52:30 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-18 05:08:26 |
| 201.239.58.79 | attackbots | Mar 10 21:11:58 odroid64 sshd\[13699\]: Invalid user user100 from 201.239.58.79 Mar 10 21:11:58 odroid64 sshd\[13699\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.239.58.79 Mar 10 21:12:01 odroid64 sshd\[13699\]: Failed password for invalid user user100 from 201.239.58.79 port 43232 ssh2 ... |
2019-10-18 05:15:21 |
| 201.245.1.107 | attack | Nov 20 14:36:27 odroid64 sshd\[8211\]: Invalid user denise from 201.245.1.107 Nov 20 14:36:27 odroid64 sshd\[8211\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.245.1.107 Nov 20 14:36:29 odroid64 sshd\[8211\]: Failed password for invalid user denise from 201.245.1.107 port 52122 ssh2 Nov 27 22:59:43 odroid64 sshd\[8351\]: Invalid user demo from 201.245.1.107 Nov 27 22:59:43 odroid64 sshd\[8351\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.245.1.107 Nov 27 22:59:45 odroid64 sshd\[8351\]: Failed password for invalid user demo from 201.245.1.107 port 35806 ssh2 Dec 3 12:44:14 odroid64 sshd\[30604\]: Invalid user user2 from 201.245.1.107 Dec 3 12:44:14 odroid64 sshd\[30604\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.245.1.107 Dec 3 12:44:16 odroid64 sshd\[30604\]: Failed password for invalid user user2 from 201.245.1.107 port 34554 ... |
2019-10-18 05:08:45 |
| 14.190.13.195 | attack | Oct 17 21:44:32 server378 sshd[31472]: Address 14.190.13.195 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 17 21:44:32 server378 sshd[31472]: Invalid user admin from 14.190.13.195 Oct 17 21:44:32 server378 sshd[31472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.190.13.195 Oct 17 21:44:34 server378 sshd[31472]: Failed password for invalid user admin from 14.190.13.195 port 59373 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.190.13.195 |
2019-10-18 04:44:31 |
| 201.254.38.70 | attackspam | Dec 21 06:02:20 odroid64 sshd\[28890\]: User root from 201.254.38.70 not allowed because not listed in AllowUsers Dec 21 06:02:20 odroid64 sshd\[28890\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.254.38.70 user=root Dec 21 06:02:22 odroid64 sshd\[28890\]: Failed password for invalid user root from 201.254.38.70 port 43893 ssh2 ... |
2019-10-18 04:54:42 |
| 201.38.103.135 | attackbots | Nov 30 02:42:11 odroid64 sshd\[24749\]: Invalid user hadoop from 201.38.103.135 Nov 30 02:42:11 odroid64 sshd\[24749\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.38.103.135 Nov 30 02:42:13 odroid64 sshd\[24749\]: Failed password for invalid user hadoop from 201.38.103.135 port 38417 ssh2 Dec 1 04:47:51 odroid64 sshd\[20849\]: Invalid user agammediacenter from 201.38.103.135 Dec 1 04:47:51 odroid64 sshd\[20849\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.38.103.135 Dec 1 04:47:53 odroid64 sshd\[20849\]: Failed password for invalid user agammediacenter from 201.38.103.135 port 38473 ssh2 Dec 2 16:46:26 odroid64 sshd\[20958\]: Invalid user jukebox from 201.38.103.135 Dec 2 16:46:26 odroid64 sshd\[20958\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.38.103.135 Dec 2 16:46:27 odroid64 sshd\[20958\]: Failed password for invalid use ... |
2019-10-18 04:46:54 |
| 90.201.172.217 | attackspambots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/90.201.172.217/ GB - 1H : (93) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : GB NAME ASN : ASN48210 IP : 90.201.172.217 CIDR : 90.192.0.0/12 PREFIX COUNT : 11 UNIQUE IP COUNT : 2129408 WYKRYTE ATAKI Z ASN48210 : 1H - 1 3H - 1 6H - 1 12H - 2 24H - 3 DateTime : 2019-10-17 21:52:51 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-18 04:51:39 |
| 201.32.178.190 | attack | Mar 20 00:26:23 odroid64 sshd\[29994\]: Invalid user telekom from 201.32.178.190 Mar 20 00:26:23 odroid64 sshd\[29994\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.32.178.190 Mar 20 00:26:25 odroid64 sshd\[29994\]: Failed password for invalid user telekom from 201.32.178.190 port 58970 ssh2 Apr 20 14:14:52 odroid64 sshd\[21092\]: Invalid user prasobsub from 201.32.178.190 Apr 20 14:14:52 odroid64 sshd\[21092\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.32.178.190 Apr 20 14:14:55 odroid64 sshd\[21092\]: Failed password for invalid user prasobsub from 201.32.178.190 port 55711 ssh2 ... |
2019-10-18 04:49:45 |
| 46.101.43.235 | attack | Invalid user azureuser from 46.101.43.235 port 59392 |
2019-10-18 05:00:12 |
| 123.206.39.206 | attack | Oct 17 22:43:22 meumeu sshd[12541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.39.206 Oct 17 22:43:25 meumeu sshd[12541]: Failed password for invalid user zena from 123.206.39.206 port 55544 ssh2 Oct 17 22:47:32 meumeu sshd[13129]: Failed password for root from 123.206.39.206 port 37746 ssh2 ... |
2019-10-18 04:55:42 |
| 178.62.237.38 | attackbots | Oct 17 19:53:02 anodpoucpklekan sshd[80997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.237.38 user=root Oct 17 19:53:04 anodpoucpklekan sshd[80997]: Failed password for root from 178.62.237.38 port 58373 ssh2 ... |
2019-10-18 04:41:42 |
| 141.101.105.230 | attack | 10/17/2019-21:52:42.349561 141.101.105.230 Protocol: 6 ET POLICY Cleartext WordPress Login |
2019-10-18 04:59:35 |
| 67.55.92.88 | attackbots | Oct 17 22:04:10 vtv3 sshd\[5229\]: Invalid user ry from 67.55.92.88 port 33424 Oct 17 22:04:10 vtv3 sshd\[5229\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.55.92.88 Oct 17 22:04:12 vtv3 sshd\[5229\]: Failed password for invalid user ry from 67.55.92.88 port 33424 ssh2 Oct 17 22:07:46 vtv3 sshd\[7460\]: Invalid user roy from 67.55.92.88 port 56304 Oct 17 22:07:46 vtv3 sshd\[7460\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.55.92.88 Oct 17 22:18:38 vtv3 sshd\[12765\]: Invalid user kevin from 67.55.92.88 port 36706 Oct 17 22:18:38 vtv3 sshd\[12765\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.55.92.88 Oct 17 22:18:40 vtv3 sshd\[12765\]: Failed password for invalid user kevin from 67.55.92.88 port 36706 ssh2 Oct 17 22:22:23 vtv3 sshd\[14647\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.55.92.88 user=root Oct 1 |
2019-10-18 05:06:26 |