City: unknown
Region: unknown
Country: Russian Federation
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.80.104.195 | attackbots | Chat Spam |
2020-08-18 08:30:32 |
| 45.80.104.119 | attackbots | 9.260.741,85-03/02 [bc18/m74] PostRequest-Spammer scoring: Lusaka01 |
2019-11-20 07:30:46 |
| 45.80.104.152 | attack | Name: 'gekllokjwer' Street: 'DXJXKCusGwzJU' City: 'chOjdNXZYEVOMtMwe' Zip: 'DeRgRoRKaO' Message: 'Ñåìåé Ïÿòèãîðñê Àòûðàó, Êàçàõñòàí êóïèòü Ýêñòàçè (Mdma) Äçåðæèíñê Äåðáåíò Àõàíãàìà, Øðè-Ëàíêà êóïèòü Ñêîðîñòü ÑÊ êðèñòàëëû (ñîëü-Àëüôà-ÏÂÏ) Îáíèíñê Ìàãíèòîãîðñê |
2019-10-22 05:11:19 |
| 45.80.104.101 | attackbots | 45.80.104.101 - - [20/Oct/2019:07:59:55 -0400] "GET /?page=..%2f..%2f..%2fetc%2fpasswd&action=view&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 16395 "https://newportbrassfaucets.com/?page=..%2f..%2f..%2fetc%2fpasswd&action=view&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" ... |
2019-10-21 01:15:22 |
| 45.80.104.109 | attackspambots | 45.80.104.109 - - [20/Oct/2019:08:03:33 -0400] "GET /?page=products&action=..%2f..%2fetc%2fpasswd%00&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 17152 "https://newportbrassfaucets.com/?page=products&action=..%2f..%2fetc%2fpasswd%00&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" ... |
2019-10-20 21:57:02 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.80.104.208
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39212
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.80.104.208. IN A
;; AUTHORITY SECTION:
. 179 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400
;; Query time: 22 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 11:03:21 CST 2022
;; MSG SIZE rcvd: 106Host 208.104.80.45.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 208.104.80.45.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 58.213.198.74 | attackspambots | Sep 14 02:10:37 mellenthin sshd[27349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.198.74 user=root Sep 14 02:10:40 mellenthin sshd[27349]: Failed password for invalid user root from 58.213.198.74 port 12770 ssh2 |
2020-09-14 16:11:05 |
| 62.80.163.2 | attackbotsspam | Sep 14 08:58:26 * sshd[4326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.80.163.2 Sep 14 08:58:28 * sshd[4326]: Failed password for invalid user amanda from 62.80.163.2 port 60334 ssh2 |
2020-09-14 16:32:13 |
| 49.88.112.70 | attackbots | $f2bV_matches |
2020-09-14 16:11:30 |
| 89.216.22.188 | attackspam | Sep 14 09:53:11 ns382633 sshd\[12789\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.216.22.188 user=root Sep 14 09:53:13 ns382633 sshd\[12789\]: Failed password for root from 89.216.22.188 port 50396 ssh2 Sep 14 09:57:42 ns382633 sshd\[13621\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.216.22.188 user=root Sep 14 09:57:44 ns382633 sshd\[13621\]: Failed password for root from 89.216.22.188 port 47408 ssh2 Sep 14 10:00:01 ns382633 sshd\[13884\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.216.22.188 user=root |
2020-09-14 16:09:59 |
| 165.22.251.121 | attack | 165.22.251.121 - - [14/Sep/2020:06:54:26 +0200] "GET /wp-login.php HTTP/1.1" 200 9184 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 165.22.251.121 - - [14/Sep/2020:06:54:28 +0200] "POST /wp-login.php HTTP/1.1" 200 9435 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 165.22.251.121 - - [14/Sep/2020:06:54:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-09-14 16:42:43 |
| 50.63.161.42 | attackspam | Automatically reported by fail2ban report script (mx1) |
2020-09-14 16:21:39 |
| 122.51.82.22 | attackbots | Sep 14 07:13:51 vps639187 sshd\[19072\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.82.22 user=root Sep 14 07:13:54 vps639187 sshd\[19072\]: Failed password for root from 122.51.82.22 port 33736 ssh2 Sep 14 07:19:28 vps639187 sshd\[19221\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.82.22 user=root ... |
2020-09-14 16:43:10 |
| 223.240.70.4 | attack | 2020-09-14T01:27:43.7053231495-001 sshd[38556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.240.70.4 user=root 2020-09-14T01:27:45.3736311495-001 sshd[38556]: Failed password for root from 223.240.70.4 port 47498 ssh2 2020-09-14T01:32:59.6761941495-001 sshd[38762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.240.70.4 user=root 2020-09-14T01:33:02.3931481495-001 sshd[38762]: Failed password for root from 223.240.70.4 port 49342 ssh2 2020-09-14T01:38:00.6940441495-001 sshd[39026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.240.70.4 user=root 2020-09-14T01:38:03.0693571495-001 sshd[39026]: Failed password for root from 223.240.70.4 port 51186 ssh2 ... |
2020-09-14 16:28:40 |
| 37.140.192.155 | attackbots | (mod_security) mod_security (id:218500) triggered by 37.140.192.155 (RU/Russia/server133.hosting.reg.ru): 5 in the last 3600 secs |
2020-09-14 16:47:13 |
| 46.191.137.227 | attackbots | 20/9/13@12:54:39: FAIL: Alarm-Network address from=46.191.137.227 20/9/13@12:54:39: FAIL: Alarm-Network address from=46.191.137.227 ... |
2020-09-14 16:20:00 |
| 104.198.157.73 | attackspambots | Scanning unused Default website or suspicious access to valid sites from IP marked as abusive |
2020-09-14 16:15:08 |
| 192.42.116.19 | attackspam | Bruteforce detected by fail2ban |
2020-09-14 16:35:13 |
| 195.224.138.61 | attack | Sep 14 08:19:47 localhost sshd[64822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.224.138.61 user=root Sep 14 08:19:49 localhost sshd[64822]: Failed password for root from 195.224.138.61 port 33820 ssh2 Sep 14 08:23:11 localhost sshd[65067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.224.138.61 user=root Sep 14 08:23:13 localhost sshd[65067]: Failed password for root from 195.224.138.61 port 39344 ssh2 Sep 14 08:26:34 localhost sshd[65327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.224.138.61 user=root Sep 14 08:26:36 localhost sshd[65327]: Failed password for root from 195.224.138.61 port 44870 ssh2 ... |
2020-09-14 16:29:14 |
| 220.85.104.202 | attackbots | Sep 14 09:22:26 sip sshd[14369]: Failed password for root from 220.85.104.202 port 38513 ssh2 Sep 14 09:24:49 sip sshd[14950]: Failed password for root from 220.85.104.202 port 8295 ssh2 |
2020-09-14 16:31:40 |
| 193.112.39.179 | attack | $f2bV_matches |
2020-09-14 16:23:28 |