City: Stockholm
Region: Stockholms
Country: Sweden
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.82.137.35 | attackbotsspam | $f2bV_matches |
2020-09-16 03:22:54 |
| 45.82.137.35 | attackspam | Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) |
2020-09-15 19:26:31 |
| 45.82.137.35 | attack | Sep 10 01:56:27 * sshd[13755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.137.35 Sep 10 01:56:29 * sshd[13755]: Failed password for invalid user isaac from 45.82.137.35 port 50306 ssh2 |
2020-09-10 14:32:11 |
| 45.82.137.35 | attack | Sep 9 20:57:06 MainVPS sshd[7695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.137.35 user=root Sep 9 20:57:08 MainVPS sshd[7695]: Failed password for root from 45.82.137.35 port 35584 ssh2 Sep 9 21:01:11 MainVPS sshd[472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.137.35 user=root Sep 9 21:01:13 MainVPS sshd[472]: Failed password for root from 45.82.137.35 port 41320 ssh2 Sep 9 21:05:22 MainVPS sshd[30448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.137.35 user=root Sep 9 21:05:24 MainVPS sshd[30448]: Failed password for root from 45.82.137.35 port 47056 ssh2 ... |
2020-09-10 05:12:44 |
| 45.82.137.35 | attack | <6 unauthorized SSH connections |
2020-09-07 23:16:34 |
| 45.82.137.35 | attackspam | Brute%20Force%20SSH |
2020-09-07 14:52:13 |
| 45.82.137.35 | attackspam | $f2bV_matches |
2020-09-07 07:21:41 |
| 45.82.136.246 | attackspambots | Sep 1 15:53:57 uapps sshd[14104]: Connection closed by 45.82.136.246 port 40382 Sep 1 15:54:05 uapps sshd[14105]: Invalid user ansible from 45.82.136.246 port 57724 Sep 1 15:54:07 uapps sshd[14105]: Failed password for invalid user ansible from 45.82.136.246 port 57724 ssh2 Sep 1 15:54:08 uapps sshd[14105]: Received disconnect from 45.82.136.246 port 57724:11: Normal Shutdown, Thank you for playing [preauth] Sep 1 15:54:08 uapps sshd[14105]: Disconnected from invalid user ansible 45.82.136.246 port 57724 [preauth] Sep 1 15:54:19 uapps sshd[14109]: User r.r from 45.82.136.246 not allowed because not listed in AllowUsers Sep 1 15:54:19 uapps sshd[14109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.136.246 user=r.r Sep 1 15:54:21 uapps sshd[14109]: Failed password for invalid user r.r from 45.82.136.246 port 39156 ssh2 Sep 1 15:54:22 uapps sshd[14109]: Received disconnect from 45.82.136.246 port 39156:11: Normal S........ ------------------------------- |
2020-09-06 22:33:15 |
| 45.82.136.246 | attackbots | Fail2Ban |
2020-09-06 14:05:53 |
| 45.82.136.246 | attackspambots | Sep 5 23:58:41 sd-69548 sshd[851729]: Unable to negotiate with 45.82.136.246 port 47826: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Sep 5 23:58:53 sd-69548 sshd[851746]: Unable to negotiate with 45.82.136.246 port 57016: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] ... |
2020-09-06 06:17:24 |
| 45.82.136.236 | attackspam | Sep 1 14:56:06 euve59663 sshd[15993]: Did not receive identification s= tring from 45.82.136.236 Sep 1 14:56:09 euve59663 sshd[15994]: Invalid user ansible from 45.82.= 136.236 Sep 1 14:56:09 euve59663 sshd[15994]: pam_unix(sshd:auth): authenticat= ion failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D45.= 82.136.236=20 Sep 1 14:56:11 euve59663 sshd[15994]: Failed password for invalid user= ansible from 45.82.136.236 port 48408 ssh2 Sep 1 14:56:11 euve59663 sshd[15994]: Received disconnect from 45.82.1= 36.236: 11: Normal Shutdown, Thank you for playing [preauth] Sep 1 14:56:17 euve59663 sshd[15996]: pam_unix(sshd:auth): authenticat= ion failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D45.= 82.136.236 user=3Dr.r Sep 1 14:56:19 euve59663 sshd[15996]: Failed password for r.r from 45= .82.136.236 port 53924 ssh2 Sep 1 14:56:19 euve59663 sshd[15996]: Received disconnect from 45.82.1= 36.236: 11: Normal Shutdown, Thank you for playing [........ ------------------------------- |
2020-09-06 00:36:49 |
| 45.82.136.246 | attackbots | Sep 5 17:35:35 deb10 sshd[22117]: Invalid user ansible from 45.82.136.246 port 51024 Sep 5 17:35:48 deb10 sshd[22124]: User root from 45.82.136.246 not allowed because not listed in AllowUsers |
2020-09-06 00:23:03 |
| 45.82.136.236 | attack | >10 unauthorized SSH connections |
2020-09-05 16:06:29 |
| 45.82.136.246 | attackbots | Sep 1 15:53:57 uapps sshd[14104]: Connection closed by 45.82.136.246 port 40382 Sep 1 15:54:05 uapps sshd[14105]: Invalid user ansible from 45.82.136.246 port 57724 Sep 1 15:54:07 uapps sshd[14105]: Failed password for invalid user ansible from 45.82.136.246 port 57724 ssh2 Sep 1 15:54:08 uapps sshd[14105]: Received disconnect from 45.82.136.246 port 57724:11: Normal Shutdown, Thank you for playing [preauth] Sep 1 15:54:08 uapps sshd[14105]: Disconnected from invalid user ansible 45.82.136.246 port 57724 [preauth] Sep 1 15:54:19 uapps sshd[14109]: User r.r from 45.82.136.246 not allowed because not listed in AllowUsers Sep 1 15:54:19 uapps sshd[14109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.136.246 user=r.r Sep 1 15:54:21 uapps sshd[14109]: Failed password for invalid user r.r from 45.82.136.246 port 39156 ssh2 Sep 1 15:54:22 uapps sshd[14109]: Received disconnect from 45.82.136.246 port 39156:11: Normal S........ ------------------------------- |
2020-09-05 15:53:49 |
| 45.82.136.236 | attackspambots | Time: Fri Sep 4 23:53:35 2020 +0000 IP: 45.82.136.236 (IR/Iran/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 4 23:53:15 ca-47-ede1 sshd[28948]: Did not receive identification string from 45.82.136.236 port 54942 Sep 4 23:53:21 ca-47-ede1 sshd[28950]: Invalid user ansible from 45.82.136.236 port 33888 Sep 4 23:53:24 ca-47-ede1 sshd[28950]: Failed password for invalid user ansible from 45.82.136.236 port 33888 ssh2 Sep 4 23:53:30 ca-47-ede1 sshd[28955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.136.236 user=root Sep 4 23:53:32 ca-47-ede1 sshd[28955]: Failed password for root from 45.82.136.236 port 43312 ssh2 |
2020-09-05 08:41:46 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 45.80.0.0 - 45.88.215.255
CIDR: 45.88.0.0/17, 45.80.0.0/13, 45.88.128.0/18, 45.88.192.0/20, 45.88.208.0/21
NetName: RIPE
NetHandle: NET-45-80-0-0-1
Parent: NET45 (NET-45-0-0-0-0)
NetType: Early Registrations, Transferred to RIPE NCC
OriginAS:
Organization: RIPE Network Coordination Centre (RIPE)
RegDate: 2014-09-05
Updated: 2025-02-10
Comment: These addresses have been further assigned to users in the RIPE NCC region. Please note that the organization and point of contact details listed below are those of the RIPE NCC not the current address holder. ** You can find user contact information for the current address holder in the RIPE database at http://www.ripe.net/whois.
Ref: https://rdap.arin.net/registry/ip/45.80.0.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois.ripe.net
OrgName: RIPE Network Coordination Centre
OrgId: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL
RegDate:
Updated: 2013-07-29
Ref: https://rdap.arin.net/registry/entity/RIPE
ReferralServer: whois.ripe.net
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
OrgAbuseHandle: ABUSE3850-ARIN
OrgAbuseName: Abuse Contact
OrgAbusePhone: +31205354444
OrgAbuseEmail: abuse@ripe.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3850-ARIN
OrgTechHandle: RNO29-ARIN
OrgTechName: RIPE NCC Operations
OrgTechPhone: +31 20 535 4444
OrgTechEmail: hostmaster@ripe.net
OrgTechRef: https://rdap.arin.net/registry/entity/RNO29-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.82.13.133
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28791
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.82.13.133. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026051300 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 13 19:01:04 CST 2026
;; MSG SIZE rcvd: 105133.13.82.45.in-addr.arpa domain name pointer 188189.ip-ptr.tech.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
133.13.82.45.in-addr.arpa name = 188189.ip-ptr.tech.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 206.189.92.162 | attackbotsspam | May 24 17:13:11 ns3164893 sshd[28539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.92.162 user=root May 24 17:13:13 ns3164893 sshd[28539]: Failed password for root from 206.189.92.162 port 39640 ssh2 ... |
2020-05-24 23:36:05 |
| 94.228.207.1 | attackbots | WEB SPAM: Добрый день. Меня зовут Наташа. Познакомлюсь с мужчиной для встречи. Приеду к тебе в гости или встримся у меня. Живу совсем близко. Интимные фото |
2020-05-24 23:57:31 |
| 91.134.242.199 | attack | May 25 01:02:11 web1 sshd[12803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.242.199 user=root May 25 01:02:13 web1 sshd[12803]: Failed password for root from 91.134.242.199 port 46872 ssh2 May 25 01:11:05 web1 sshd[13574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.242.199 user=root May 25 01:11:06 web1 sshd[13574]: Failed password for root from 91.134.242.199 port 47888 ssh2 May 25 01:15:17 web1 sshd[14666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.242.199 user=root May 25 01:15:19 web1 sshd[14666]: Failed password for root from 91.134.242.199 port 53948 ssh2 May 25 01:19:10 web1 sshd[15546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.242.199 user=root May 25 01:19:13 web1 sshd[15546]: Failed password for root from 91.134.242.199 port 60008 ssh2 May 25 01:22:49 web1 sshd[16 ... |
2020-05-25 00:01:53 |
| 5.101.0.209 | attack | port |
2020-05-25 00:11:05 |
| 94.191.8.199 | attack | May 24 14:08:21 piServer sshd[15451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.8.199 May 24 14:08:23 piServer sshd[15451]: Failed password for invalid user pfz from 94.191.8.199 port 60576 ssh2 May 24 14:11:55 piServer sshd[15862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.8.199 ... |
2020-05-24 23:59:07 |
| 142.93.223.33 | attackbotsspam | May 24 16:57:44 prox sshd[12498]: Failed password for root from 142.93.223.33 port 34480 ssh2 May 24 17:02:58 prox sshd[19436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.223.33 |
2020-05-24 23:41:18 |
| 1.255.153.167 | attackbotsspam | Brute force SMTP login attempted. ... |
2020-05-24 23:54:01 |
| 14.215.44.9 | attackbotsspam | May 24 14:06:48 melroy-server sshd[14954]: Failed password for root from 14.215.44.9 port 55132 ssh2 May 24 14:11:55 melroy-server sshd[15966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.215.44.9 ... |
2020-05-25 00:00:05 |
| 128.199.197.161 | attack | May 24 19:02:17 itv-usvr-01 sshd[9095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.197.161 user=root May 24 19:02:19 itv-usvr-01 sshd[9095]: Failed password for root from 128.199.197.161 port 48368 ssh2 May 24 19:07:33 itv-usvr-01 sshd[9287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.197.161 user=root May 24 19:07:35 itv-usvr-01 sshd[9287]: Failed password for root from 128.199.197.161 port 38376 ssh2 May 24 19:11:52 itv-usvr-01 sshd[9560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.197.161 user=root May 24 19:11:54 itv-usvr-01 sshd[9560]: Failed password for root from 128.199.197.161 port 44680 ssh2 |
2020-05-24 23:57:13 |
| 180.76.53.208 | attackspambots | May 24 14:11:49 pornomens sshd\[16885\]: Invalid user denisa from 180.76.53.208 port 34048 May 24 14:11:49 pornomens sshd\[16885\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.53.208 May 24 14:11:51 pornomens sshd\[16885\]: Failed password for invalid user denisa from 180.76.53.208 port 34048 ssh2 ... |
2020-05-25 00:02:42 |
| 110.166.82.138 | attackspam | 2020-05-24T07:52:22.9615531495-001 sshd[36993]: Invalid user jot from 110.166.82.138 port 52962 2020-05-24T07:52:24.6674691495-001 sshd[36993]: Failed password for invalid user jot from 110.166.82.138 port 52962 ssh2 2020-05-24T07:53:55.0197731495-001 sshd[37097]: Invalid user pch from 110.166.82.138 port 40432 2020-05-24T07:53:55.0266611495-001 sshd[37097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.166.82.138 2020-05-24T07:53:55.0197731495-001 sshd[37097]: Invalid user pch from 110.166.82.138 port 40432 2020-05-24T07:53:57.1606471495-001 sshd[37097]: Failed password for invalid user pch from 110.166.82.138 port 40432 ssh2 ... |
2020-05-24 23:49:49 |
| 218.29.188.139 | attackbots | May 24 06:19:20 server1 sshd\[9342\]: Invalid user yge from 218.29.188.139 May 24 06:19:20 server1 sshd\[9342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.29.188.139 May 24 06:19:23 server1 sshd\[9342\]: Failed password for invalid user yge from 218.29.188.139 port 36370 ssh2 May 24 06:22:31 server1 sshd\[10154\]: Invalid user nhc from 218.29.188.139 May 24 06:22:31 server1 sshd\[10154\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.29.188.139 ... |
2020-05-25 00:00:25 |
| 95.85.60.251 | attackspam | May 24 16:11:31 vps687878 sshd\[20739\]: Invalid user nay from 95.85.60.251 port 53656 May 24 16:11:31 vps687878 sshd\[20739\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.60.251 May 24 16:11:34 vps687878 sshd\[20739\]: Failed password for invalid user nay from 95.85.60.251 port 53656 ssh2 May 24 16:18:42 vps687878 sshd\[21211\]: Invalid user lixiangfeng from 95.85.60.251 port 59654 May 24 16:18:42 vps687878 sshd\[21211\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.60.251 ... |
2020-05-25 00:14:57 |
| 91.121.177.192 | attack | May 24 17:12:09 sso sshd[6332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.177.192 May 24 17:12:11 sso sshd[6332]: Failed password for invalid user rabbitmq from 91.121.177.192 port 44668 ssh2 ... |
2020-05-25 00:04:32 |
| 106.12.155.162 | attackspambots | May 24 15:08:28 lukav-desktop sshd\[21397\]: Invalid user mwe from 106.12.155.162 May 24 15:08:28 lukav-desktop sshd\[21397\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.155.162 May 24 15:08:30 lukav-desktop sshd\[21397\]: Failed password for invalid user mwe from 106.12.155.162 port 55288 ssh2 May 24 15:12:32 lukav-desktop sshd\[24936\]: Invalid user tca from 106.12.155.162 May 24 15:12:32 lukav-desktop sshd\[24936\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.155.162 |
2020-05-24 23:31:28 |