City: unknown
Region: unknown
Country: Russian Federation
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.80.104.195 | attackbots | Chat Spam |
2020-08-18 08:30:32 |
| 45.80.104.119 | attackbots | 9.260.741,85-03/02 [bc18/m74] PostRequest-Spammer scoring: Lusaka01 |
2019-11-20 07:30:46 |
| 45.80.104.152 | attack | Name: 'gekllokjwer' Street: 'DXJXKCusGwzJU' City: 'chOjdNXZYEVOMtMwe' Zip: 'DeRgRoRKaO' Message: 'Ñåìåé Ïÿòèãîðñê Àòûðàó, Êàçàõñòàí êóïèòü Ýêñòàçè (Mdma) Äçåðæèíñê Äåðáåíò Àõàíãàìà, Øðè-Ëàíêà êóïèòü Ñêîðîñòü ÑÊ êðèñòàëëû (ñîëü-Àëüôà-ÏÂÏ) Îáíèíñê Ìàãíèòîãîðñê |
2019-10-22 05:11:19 |
| 45.80.104.101 | attackbots | 45.80.104.101 - - [20/Oct/2019:07:59:55 -0400] "GET /?page=..%2f..%2f..%2fetc%2fpasswd&action=view&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 16395 "https://newportbrassfaucets.com/?page=..%2f..%2f..%2fetc%2fpasswd&action=view&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" ... |
2019-10-21 01:15:22 |
| 45.80.104.109 | attackspambots | 45.80.104.109 - - [20/Oct/2019:08:03:33 -0400] "GET /?page=products&action=..%2f..%2fetc%2fpasswd%00&manufacturerID=12&productID=973&linkID=15902 HTTP/1.1" 200 17152 "https://newportbrassfaucets.com/?page=products&action=..%2f..%2fetc%2fpasswd%00&manufacturerID=12&productID=973&linkID=15902" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" ... |
2019-10-20 21:57:02 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.80.104.22
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52568
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.80.104.22. IN A
;; AUTHORITY SECTION:
. 103 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022091402 1800 900 604800 86400
;; Query time: 83 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 15 13:29:36 CST 2022
;; MSG SIZE rcvd: 105Host 22.104.80.45.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 22.104.80.45.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 200.122.224.200 | attackbotsspam | Scanning random ports - tries to find possible vulnerable services |
2020-01-16 19:53:45 |
| 14.181.249.235 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 16-01-2020 04:45:09. |
2020-01-16 19:55:47 |
| 179.228.74.3 | attack | Jan 16 03:13:50 scivo sshd[4293]: reveeclipse mapping checking getaddrinfo for 179-228-74-3.user.vivozap.com.br [179.228.74.3] failed - POSSIBLE BREAK-IN ATTEMPT! Jan 16 03:13:50 scivo sshd[4293]: Invalid user sou from 179.228.74.3 Jan 16 03:13:50 scivo sshd[4293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.228.74.3 Jan 16 03:13:51 scivo sshd[4293]: Failed password for invalid user sou from 179.228.74.3 port 49194 ssh2 Jan 16 03:13:51 scivo sshd[4293]: Received disconnect from 179.228.74.3: 11: Bye Bye [preauth] Jan 16 03:20:47 scivo sshd[4671]: reveeclipse mapping checking getaddrinfo for 179-228-74-3.user.vivozap.com.br [179.228.74.3] failed - POSSIBLE BREAK-IN ATTEMPT! Jan 16 03:20:47 scivo sshd[4671]: Invalid user jehu from 179.228.74.3 Jan 16 03:20:47 scivo sshd[4671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.228.74.3 Jan 16 03:20:49 scivo sshd[4671]: Failed passwo........ ------------------------------- |
2020-01-16 19:52:42 |
| 188.240.208.26 | attack | Auto reported by IDS |
2020-01-16 20:03:24 |
| 5.88.155.130 | attack | $f2bV_matches |
2020-01-16 19:43:32 |
| 201.71.229.130 | attackspambots | Unauthorized connection attempt from IP address 201.71.229.130 on Port 445(SMB) |
2020-01-16 19:36:52 |
| 125.160.60.167 | attack | Unauthorized connection attempt from IP address 125.160.60.167 on Port 445(SMB) |
2020-01-16 19:47:32 |
| 103.100.209.228 | attackbotsspam | Jan 15 22:37:26 cumulus sshd[25882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.100.209.228 user=r.r Jan 15 22:37:28 cumulus sshd[25882]: Failed password for r.r from 103.100.209.228 port 55003 ssh2 Jan 15 22:37:29 cumulus sshd[25882]: Received disconnect from 103.100.209.228 port 55003:11: Bye Bye [preauth] Jan 15 22:37:29 cumulus sshd[25882]: Disconnected from 103.100.209.228 port 55003 [preauth] Jan 15 22:41:48 cumulus sshd[26201]: Invalid user rf from 103.100.209.228 port 44721 Jan 15 22:41:48 cumulus sshd[26201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.100.209.228 Jan 15 22:41:49 cumulus sshd[26201]: Failed password for invalid user rf from 103.100.209.228 port 44721 ssh2 Jan 15 22:41:50 cumulus sshd[26201]: Received disconnect from 103.100.209.228 port 44721:11: Bye Bye [preauth] Jan 15 22:41:50 cumulus sshd[26201]: Disconnected from 103.100.209.228 port 44721 [pr........ ------------------------------- |
2020-01-16 19:59:40 |
| 59.95.211.203 | attack | Unauthorized connection attempt from IP address 59.95.211.203 on Port 445(SMB) |
2020-01-16 19:48:46 |
| 74.82.47.47 | attack | Port 3389 Scan |
2020-01-16 20:03:51 |
| 114.99.29.162 | attack | Brute force attempt |
2020-01-16 19:38:15 |
| 167.172.158.200 | attackbots | CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found |
2020-01-16 19:44:20 |
| 14.231.210.104 | attack | IP: 14.231.210.104
Ports affected
Simple Mail Transfer (25)
Found in DNSBL('s)
ASN Details
AS45899 VNPT Corp
Vietnam (VN)
CIDR 14.228.0.0/14
Log Date: 16/01/2020 4:06:39 AM UTC |
2020-01-16 20:06:12 |
| 196.188.240.13 | attack | 1579149913 - 01/16/2020 05:45:13 Host: 196.188.240.13/196.188.240.13 Port: 445 TCP Blocked |
2020-01-16 19:51:05 |
| 72.94.181.219 | attack | Unauthorized connection attempt detected from IP address 72.94.181.219 to port 2220 [J] |
2020-01-16 19:49:41 |