City: unknown
Region: unknown
Country: Russian Federation
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.80.104.195 | attackbots | Chat Spam |
2020-08-18 08:30:32 |
| 45.80.104.119 | attackbots | 9.260.741,85-03/02 [bc18/m74] PostRequest-Spammer scoring: Lusaka01 |
2019-11-20 07:30:46 |
| 45.80.104.152 | attack | Name: 'gekllokjwer' Street: 'DXJXKCusGwzJU' City: 'chOjdNXZYEVOMtMwe' Zip: 'DeRgRoRKaO' Message: 'Ñåìåé Ïÿòèãîðñê Àòûðàó, Êàçàõñòàí êóïèòü Ýêñòàçè (Mdma) Äçåðæèíñê Äåðáåíò Àõàíãàìà, Øðè-Ëàíêà êóïèòü Ñêîðîñòü ÑÊ êðèñòàëëû (ñîëü-Àëüôà-ÏÂÏ) Îáíèíñê Ìàãíèòîãîðñê |
2019-10-22 05:11:19 |
| 45.80.104.101 | attackbots | 45.80.104.101 - - [20/Oct/2019:07:59:55 -0400] "GET /?page=..%2f..%2f..%2fetc%2fpasswd&action=view&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 16395 "https://newportbrassfaucets.com/?page=..%2f..%2f..%2fetc%2fpasswd&action=view&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" ... |
2019-10-21 01:15:22 |
| 45.80.104.109 | attackspambots | 45.80.104.109 - - [20/Oct/2019:08:03:33 -0400] "GET /?page=products&action=..%2f..%2fetc%2fpasswd%00&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 17152 "https://newportbrassfaucets.com/?page=products&action=..%2f..%2fetc%2fpasswd%00&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" ... |
2019-10-20 21:57:02 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.80.104.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54882
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.80.104.142. IN A
;; AUTHORITY SECTION:
. 469 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400
;; Query time: 152 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 23:14:41 CST 2022
;; MSG SIZE rcvd: 106Host 142.104.80.45.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 142.104.80.45.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 23.133.1.162 | attackspam | Oct 7 14:18:47 ns382633 sshd\[18966\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.133.1.162 user=root Oct 7 14:18:49 ns382633 sshd\[18966\]: Failed password for root from 23.133.1.162 port 55976 ssh2 Oct 7 14:25:22 ns382633 sshd\[20117\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.133.1.162 user=root Oct 7 14:25:24 ns382633 sshd\[20117\]: Failed password for root from 23.133.1.162 port 57510 ssh2 Oct 7 14:27:43 ns382633 sshd\[20298\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.133.1.162 user=root |
2020-10-07 21:09:35 |
| 83.97.20.35 | attackspam | scans 37 times in preceeding hours on the ports (in chronological order) 2121 8099 9042 9042 7001 8086 8060 20000 37777 5222 1027 4000 2323 50000 18081 5006 8087 32400 6001 8069 8554 8333 3333 5007 7779 9418 5269 9944 4022 27017 5984 2480 1883 9595 10243 5678 4040 resulting in total of 48 scans from 83.97.20.0/24 block. |
2020-10-07 20:56:47 |
| 45.129.33.120 | attackspambots | 404 NOT FOUND |
2020-10-07 20:44:22 |
| 2a01:cb0c:c9d:6300:1419:9aec:d676:6ed9 | attackbotsspam | Wordpress attack |
2020-10-07 20:51:09 |
| 52.237.198.242 | attackspambots | 52.237.198.242 - - [07/Oct/2020:12:04:42 +0100] "POST /wp-login.php HTTP/1.1" 200 2221 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 52.237.198.242 - - [07/Oct/2020:12:04:46 +0100] "POST /wp-login.php HTTP/1.1" 200 2147 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 52.237.198.242 - - [07/Oct/2020:12:04:49 +0100] "POST /wp-login.php HTTP/1.1" 200 2197 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-10-07 20:50:43 |
| 159.89.10.220 | attack | [portscan] tcp/22 [SSH] [portscan] tcp/23 [TELNET] [scan/connect: 3 time(s)] in blocklist.de:'listed [*unkn*]' *(RWIN=65535)(10061547) |
2020-10-07 20:55:30 |
| 64.71.32.85 | attackbots | Wordpress attack - GET /v1/wp-includes/wlwmanifest.xml |
2020-10-07 20:50:18 |
| 185.176.27.42 | attackbotsspam | scans 15 times in preceeding hours on the ports (in chronological order) 6411 27036 6141 4488 51213 37954 4147 7000 6320 51447 9273 51371 9759 9878 6407 resulting in total of 59 scans from 185.176.27.0/24 block. |
2020-10-07 21:03:27 |
| 106.13.82.49 | attack | SSH Brute-force |
2020-10-07 21:09:14 |
| 115.58.197.247 | attackbots | SSH/22 MH Probe, BF, Hack - |
2020-10-07 20:49:33 |
| 193.112.118.128 | attack | Oct 7 11:55:13 abendstille sshd\[954\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.118.128 user=root Oct 7 11:55:15 abendstille sshd\[954\]: Failed password for root from 193.112.118.128 port 54106 ssh2 Oct 7 11:56:29 abendstille sshd\[2079\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.118.128 user=root Oct 7 11:56:31 abendstille sshd\[2079\]: Failed password for root from 193.112.118.128 port 36776 ssh2 Oct 7 12:02:46 abendstille sshd\[8174\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.118.128 user=root ... |
2020-10-07 21:08:20 |
| 236.253.88.46 | attack | Hi |
2020-10-07 20:49:38 |
| 24.118.69.61 | attack | Oct 5 15:49:40 estefan sshd[19917]: Invalid user admin from 24.118.69.61 Oct 5 15:49:40 estefan sshd[19917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-24-118-69-61.hsd1.mn.comcast.net Oct 5 15:49:42 estefan sshd[19917]: Failed password for invalid user admin from 24.118.69.61 port 43177 ssh2 Oct 5 15:49:42 estefan sshd[19918]: Received disconnect from 24.118.69.61: 11: Bye Bye Oct 5 15:49:44 estefan sshd[19938]: Invalid user admin from 24.118.69.61 Oct 5 15:49:44 estefan sshd[19938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-24-118-69-61.hsd1.mn.comcast.net ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=24.118.69.61 |
2020-10-07 20:44:59 |
| 106.75.139.131 | attack | Oct 7 11:19:41 dhoomketu sshd[3625984]: Failed password for root from 106.75.139.131 port 40808 ssh2 Oct 7 11:21:25 dhoomketu sshd[3626010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.139.131 user=root Oct 7 11:21:26 dhoomketu sshd[3626010]: Failed password for root from 106.75.139.131 port 57422 ssh2 Oct 7 11:23:06 dhoomketu sshd[3626061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.139.131 user=root Oct 7 11:23:08 dhoomketu sshd[3626061]: Failed password for root from 106.75.139.131 port 45804 ssh2 ... |
2020-10-07 20:38:21 |
| 120.53.108.58 | attackspambots | Oct 7 14:24:16 host1 sshd[1448159]: Failed password for root from 120.53.108.58 port 60070 ssh2 Oct 7 14:30:19 host1 sshd[1448634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.53.108.58 user=root Oct 7 14:30:21 host1 sshd[1448634]: Failed password for root from 120.53.108.58 port 60810 ssh2 Oct 7 14:30:19 host1 sshd[1448634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.53.108.58 user=root Oct 7 14:30:21 host1 sshd[1448634]: Failed password for root from 120.53.108.58 port 60810 ssh2 ... |
2020-10-07 21:00:00 |