City: unknown
Region: unknown
Country: Russian Federation
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.80.104.195 | attackbots | Chat Spam |
2020-08-18 08:30:32 |
| 45.80.104.119 | attackbots | 9.260.741,85-03/02 [bc18/m74] PostRequest-Spammer scoring: Lusaka01 |
2019-11-20 07:30:46 |
| 45.80.104.152 | attack | Name: 'gekllokjwer' Street: 'DXJXKCusGwzJU' City: 'chOjdNXZYEVOMtMwe' Zip: 'DeRgRoRKaO' Message: 'Ñåìåé Ïÿòèãîðñê Àòûðàó, Êàçàõñòàí êóïèòü Ýêñòàçè (Mdma) Äçåðæèíñê Äåðáåíò Àõàíãàìà, Øðè-Ëàíêà êóïèòü Ñêîðîñòü ÑÊ êðèñòàëëû (ñîëü-Àëüôà-ÏÂÏ) Îáíèíñê Ìàãíèòîãîðñê |
2019-10-22 05:11:19 |
| 45.80.104.101 | attackbots | 45.80.104.101 - - [20/Oct/2019:07:59:55 -0400] "GET /?page=..%2f..%2f..%2fetc%2fpasswd&action=view&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 16395 "https://newportbrassfaucets.com/?page=..%2f..%2f..%2fetc%2fpasswd&action=view&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" ... |
2019-10-21 01:15:22 |
| 45.80.104.109 | attackspambots | 45.80.104.109 - - [20/Oct/2019:08:03:33 -0400] "GET /?page=products&action=..%2f..%2fetc%2fpasswd%00&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 17152 "https://newportbrassfaucets.com/?page=products&action=..%2f..%2fetc%2fpasswd%00&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" ... |
2019-10-20 21:57:02 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.80.104.199
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44232
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.80.104.199. IN A
;; AUTHORITY SECTION:
. 83 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022091400 1800 900 604800 86400
;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 14 22:01:50 CST 2022
;; MSG SIZE rcvd: 106Host 199.104.80.45.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 199.104.80.45.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 217.182.75.172 | attackbotsspam | www.fahrschule-mihm.de 217.182.75.172 [15/May/2020:05:53:55 +0200] "POST /wp-login.php HTTP/1.1" 200 5994 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" www.fahrschule-mihm.de 217.182.75.172 [15/May/2020:05:53:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4072 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-05-15 15:30:13 |
| 132.145.191.90 | attackspambots | May 15 07:07:41 server sshd[10787]: Failed password for root from 132.145.191.90 port 13320 ssh2 May 15 07:32:21 server sshd[28885]: Failed password for root from 132.145.191.90 port 13320 ssh2 May 15 07:56:57 server sshd[47120]: Failed password for root from 132.145.191.90 port 13320 ssh2 |
2020-05-15 15:02:08 |
| 134.175.127.136 | attack | May 15 05:21:24 onepixel sshd[3654635]: Failed password for root from 134.175.127.136 port 59472 ssh2 May 15 05:26:04 onepixel sshd[3655122]: Invalid user bob from 134.175.127.136 port 53964 May 15 05:26:04 onepixel sshd[3655122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.127.136 May 15 05:26:04 onepixel sshd[3655122]: Invalid user bob from 134.175.127.136 port 53964 May 15 05:26:05 onepixel sshd[3655122]: Failed password for invalid user bob from 134.175.127.136 port 53964 ssh2 |
2020-05-15 15:33:19 |
| 27.76.153.100 | attack | May 15 05:54:12 vmd17057 sshd[29945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.76.153.100 May 15 05:54:14 vmd17057 sshd[29945]: Failed password for invalid user 666666 from 27.76.153.100 port 46277 ssh2 ... |
2020-05-15 15:11:52 |
| 2a03:b0c0:1:e0::55f:f001 | attack | Automatically reported by fail2ban report script (mx1) |
2020-05-15 14:57:24 |
| 62.210.90.227 | attackbots | Invalid user teamspeak from 62.210.90.227 port 60186 |
2020-05-15 15:21:49 |
| 92.118.234.194 | attackspam | May 15 08:55:11 debian-2gb-nbg1-2 kernel: \[11784561.540639\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=92.118.234.194 DST=195.201.40.59 LEN=433 TOS=0x00 PREC=0x00 TTL=54 ID=6499 DF PROTO=UDP SPT=5068 DPT=5060 LEN=413 |
2020-05-15 15:14:52 |
| 106.12.142.52 | attack | May 15 07:00:48 jane sshd[7047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.142.52 May 15 07:00:49 jane sshd[7047]: Failed password for invalid user anjana from 106.12.142.52 port 41018 ssh2 ... |
2020-05-15 15:16:24 |
| 140.143.183.71 | attackbotsspam | Invalid user je from 140.143.183.71 port 37222 |
2020-05-15 15:17:47 |
| 120.203.29.78 | attackbots | Total attacks: 2 |
2020-05-15 14:55:52 |
| 129.226.133.168 | attack | Invalid user chef from 129.226.133.168 port 45666 |
2020-05-15 15:15:41 |
| 177.138.149.19 | attackspam | Unauthorized connection attempt detected from IP address 177.138.149.19 to port 23 |
2020-05-15 15:25:40 |
| 106.13.55.50 | attack | Invalid user wps from 106.13.55.50 port 39974 |
2020-05-15 15:26:29 |
| 139.59.58.155 | attackspam | 2020-05-15T06:54:13.992417abusebot.cloudsearch.cf sshd[31787]: Invalid user jc2 from 139.59.58.155 port 42918 2020-05-15T06:54:13.999635abusebot.cloudsearch.cf sshd[31787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.58.155 2020-05-15T06:54:13.992417abusebot.cloudsearch.cf sshd[31787]: Invalid user jc2 from 139.59.58.155 port 42918 2020-05-15T06:54:15.910296abusebot.cloudsearch.cf sshd[31787]: Failed password for invalid user jc2 from 139.59.58.155 port 42918 ssh2 2020-05-15T07:00:40.373295abusebot.cloudsearch.cf sshd[32236]: Invalid user ry from 139.59.58.155 port 50034 2020-05-15T07:00:40.378491abusebot.cloudsearch.cf sshd[32236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.58.155 2020-05-15T07:00:40.373295abusebot.cloudsearch.cf sshd[32236]: Invalid user ry from 139.59.58.155 port 50034 2020-05-15T07:00:42.083469abusebot.cloudsearch.cf sshd[32236]: Failed password for invalid user r ... |
2020-05-15 15:37:02 |
| 20.49.2.147 | attackspam | Website: https://bizresource.org/ Page: https://bizresource.org/components/com_hdflvplayer/hdflvplayer/download.php?f=../../../configuration.php Referer: No referer Description: Local file inclusion attempted. Debug information: URI: f=../../../configuration.php Match: ./ Alert level: medium Date of event: 2020-05-15 13:32:21 IP address: 20.49.2.147 User ID: 0 Username: |
2020-05-15 15:38:20 |