City: Stockholm
Region: Stockholms
Country: Sweden
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.82.137.35 | attackbotsspam | $f2bV_matches |
2020-09-16 03:22:54 |
| 45.82.137.35 | attackspam | Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) |
2020-09-15 19:26:31 |
| 45.82.137.35 | attack | Sep 10 01:56:27 * sshd[13755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.137.35 Sep 10 01:56:29 * sshd[13755]: Failed password for invalid user isaac from 45.82.137.35 port 50306 ssh2 |
2020-09-10 14:32:11 |
| 45.82.137.35 | attack | Sep 9 20:57:06 MainVPS sshd[7695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.137.35 user=root Sep 9 20:57:08 MainVPS sshd[7695]: Failed password for root from 45.82.137.35 port 35584 ssh2 Sep 9 21:01:11 MainVPS sshd[472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.137.35 user=root Sep 9 21:01:13 MainVPS sshd[472]: Failed password for root from 45.82.137.35 port 41320 ssh2 Sep 9 21:05:22 MainVPS sshd[30448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.137.35 user=root Sep 9 21:05:24 MainVPS sshd[30448]: Failed password for root from 45.82.137.35 port 47056 ssh2 ... |
2020-09-10 05:12:44 |
| 45.82.137.35 | attack | <6 unauthorized SSH connections |
2020-09-07 23:16:34 |
| 45.82.137.35 | attackspam | Brute%20Force%20SSH |
2020-09-07 14:52:13 |
| 45.82.137.35 | attackspam | $f2bV_matches |
2020-09-07 07:21:41 |
| 45.82.136.246 | attackspambots | Sep 1 15:53:57 uapps sshd[14104]: Connection closed by 45.82.136.246 port 40382 Sep 1 15:54:05 uapps sshd[14105]: Invalid user ansible from 45.82.136.246 port 57724 Sep 1 15:54:07 uapps sshd[14105]: Failed password for invalid user ansible from 45.82.136.246 port 57724 ssh2 Sep 1 15:54:08 uapps sshd[14105]: Received disconnect from 45.82.136.246 port 57724:11: Normal Shutdown, Thank you for playing [preauth] Sep 1 15:54:08 uapps sshd[14105]: Disconnected from invalid user ansible 45.82.136.246 port 57724 [preauth] Sep 1 15:54:19 uapps sshd[14109]: User r.r from 45.82.136.246 not allowed because not listed in AllowUsers Sep 1 15:54:19 uapps sshd[14109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.136.246 user=r.r Sep 1 15:54:21 uapps sshd[14109]: Failed password for invalid user r.r from 45.82.136.246 port 39156 ssh2 Sep 1 15:54:22 uapps sshd[14109]: Received disconnect from 45.82.136.246 port 39156:11: Normal S........ ------------------------------- |
2020-09-06 22:33:15 |
| 45.82.136.246 | attackbots | Fail2Ban |
2020-09-06 14:05:53 |
| 45.82.136.246 | attackspambots | Sep 5 23:58:41 sd-69548 sshd[851729]: Unable to negotiate with 45.82.136.246 port 47826: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Sep 5 23:58:53 sd-69548 sshd[851746]: Unable to negotiate with 45.82.136.246 port 57016: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] ... |
2020-09-06 06:17:24 |
| 45.82.136.236 | attackspam | Sep 1 14:56:06 euve59663 sshd[15993]: Did not receive identification s= tring from 45.82.136.236 Sep 1 14:56:09 euve59663 sshd[15994]: Invalid user ansible from 45.82.= 136.236 Sep 1 14:56:09 euve59663 sshd[15994]: pam_unix(sshd:auth): authenticat= ion failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D45.= 82.136.236=20 Sep 1 14:56:11 euve59663 sshd[15994]: Failed password for invalid user= ansible from 45.82.136.236 port 48408 ssh2 Sep 1 14:56:11 euve59663 sshd[15994]: Received disconnect from 45.82.1= 36.236: 11: Normal Shutdown, Thank you for playing [preauth] Sep 1 14:56:17 euve59663 sshd[15996]: pam_unix(sshd:auth): authenticat= ion failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D45.= 82.136.236 user=3Dr.r Sep 1 14:56:19 euve59663 sshd[15996]: Failed password for r.r from 45= .82.136.236 port 53924 ssh2 Sep 1 14:56:19 euve59663 sshd[15996]: Received disconnect from 45.82.1= 36.236: 11: Normal Shutdown, Thank you for playing [........ ------------------------------- |
2020-09-06 00:36:49 |
| 45.82.136.246 | attackbots | Sep 5 17:35:35 deb10 sshd[22117]: Invalid user ansible from 45.82.136.246 port 51024 Sep 5 17:35:48 deb10 sshd[22124]: User root from 45.82.136.246 not allowed because not listed in AllowUsers |
2020-09-06 00:23:03 |
| 45.82.136.236 | attack | >10 unauthorized SSH connections |
2020-09-05 16:06:29 |
| 45.82.136.246 | attackbots | Sep 1 15:53:57 uapps sshd[14104]: Connection closed by 45.82.136.246 port 40382 Sep 1 15:54:05 uapps sshd[14105]: Invalid user ansible from 45.82.136.246 port 57724 Sep 1 15:54:07 uapps sshd[14105]: Failed password for invalid user ansible from 45.82.136.246 port 57724 ssh2 Sep 1 15:54:08 uapps sshd[14105]: Received disconnect from 45.82.136.246 port 57724:11: Normal Shutdown, Thank you for playing [preauth] Sep 1 15:54:08 uapps sshd[14105]: Disconnected from invalid user ansible 45.82.136.246 port 57724 [preauth] Sep 1 15:54:19 uapps sshd[14109]: User r.r from 45.82.136.246 not allowed because not listed in AllowUsers Sep 1 15:54:19 uapps sshd[14109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.136.246 user=r.r Sep 1 15:54:21 uapps sshd[14109]: Failed password for invalid user r.r from 45.82.136.246 port 39156 ssh2 Sep 1 15:54:22 uapps sshd[14109]: Received disconnect from 45.82.136.246 port 39156:11: Normal S........ ------------------------------- |
2020-09-05 15:53:49 |
| 45.82.136.236 | attackspambots | Time: Fri Sep 4 23:53:35 2020 +0000 IP: 45.82.136.236 (IR/Iran/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 4 23:53:15 ca-47-ede1 sshd[28948]: Did not receive identification string from 45.82.136.236 port 54942 Sep 4 23:53:21 ca-47-ede1 sshd[28950]: Invalid user ansible from 45.82.136.236 port 33888 Sep 4 23:53:24 ca-47-ede1 sshd[28950]: Failed password for invalid user ansible from 45.82.136.236 port 33888 ssh2 Sep 4 23:53:30 ca-47-ede1 sshd[28955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.136.236 user=root Sep 4 23:53:32 ca-47-ede1 sshd[28955]: Failed password for root from 45.82.136.236 port 43312 ssh2 |
2020-09-05 08:41:46 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.82.13.200
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6057
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.82.13.200. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026012700 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 27 20:31:03 CST 2026
;; MSG SIZE rcvd: 105200.13.82.45.in-addr.arpa domain name pointer 152164.ip-ptr.tech.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
200.13.82.45.in-addr.arpa name = 152164.ip-ptr.tech.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 122.176.27.149 | attack | Sep 30 17:17:53 plusreed sshd[25498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.176.27.149 user=root Sep 30 17:17:54 plusreed sshd[25498]: Failed password for root from 122.176.27.149 port 36754 ssh2 ... |
2019-10-01 05:35:38 |
| 222.186.15.101 | attack | 2019-09-30T21:21:53.824607abusebot-2.cloudsearch.cf sshd\[19292\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.101 user=root |
2019-10-01 05:23:34 |
| 61.93.201.198 | attackbotsspam | Oct 1 00:40:55 pkdns2 sshd\[64892\]: Invalid user mary from 61.93.201.198Oct 1 00:40:57 pkdns2 sshd\[64892\]: Failed password for invalid user mary from 61.93.201.198 port 57902 ssh2Oct 1 00:45:06 pkdns2 sshd\[65130\]: Invalid user eureka from 61.93.201.198Oct 1 00:45:08 pkdns2 sshd\[65130\]: Failed password for invalid user eureka from 61.93.201.198 port 49898 ssh2Oct 1 00:49:23 pkdns2 sshd\[65327\]: Invalid user shoutcast from 61.93.201.198Oct 1 00:49:25 pkdns2 sshd\[65327\]: Failed password for invalid user shoutcast from 61.93.201.198 port 41889 ssh2 ... |
2019-10-01 05:55:53 |
| 222.186.175.167 | attack | Sep 30 23:38:03 h2177944 sshd\[10804\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.167 user=root Sep 30 23:38:05 h2177944 sshd\[10804\]: Failed password for root from 222.186.175.167 port 15744 ssh2 Sep 30 23:38:09 h2177944 sshd\[10804\]: Failed password for root from 222.186.175.167 port 15744 ssh2 Sep 30 23:38:14 h2177944 sshd\[10804\]: Failed password for root from 222.186.175.167 port 15744 ssh2 ... |
2019-10-01 05:42:54 |
| 118.71.5.248 | attack | Unauthorised access (Sep 30) SRC=118.71.5.248 LEN=40 TTL=43 ID=39007 TCP DPT=23 WINDOW=7499 SYN |
2019-10-01 05:14:32 |
| 159.65.189.115 | attackbotsspam | Sep 30 22:59:07 icinga sshd[31698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.189.115 Sep 30 22:59:08 icinga sshd[31698]: Failed password for invalid user musicbot from 159.65.189.115 port 55196 ssh2 ... |
2019-10-01 05:41:41 |
| 185.234.217.45 | attackbots | (smtpauth) Failed SMTP AUTH login from 185.234.217.45 (IE/Ireland/-): 5 in the last 3600 secs |
2019-10-01 05:41:13 |
| 139.59.56.121 | attackbots | 2019-09-30T21:22:52.478427abusebot-2.cloudsearch.cf sshd\[19299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.56.121 user=root |
2019-10-01 05:58:22 |
| 191.242.246.150 | attackspam | Automatic report - Port Scan Attack |
2019-10-01 05:21:48 |
| 49.247.132.79 | attackbots | Sep 30 21:26:45 hcbbdb sshd\[25468\]: Invalid user sn from 49.247.132.79 Sep 30 21:26:45 hcbbdb sshd\[25468\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.247.132.79 Sep 30 21:26:47 hcbbdb sshd\[25468\]: Failed password for invalid user sn from 49.247.132.79 port 45492 ssh2 Sep 30 21:31:03 hcbbdb sshd\[25955\]: Invalid user ubnt from 49.247.132.79 Sep 30 21:31:03 hcbbdb sshd\[25955\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.247.132.79 |
2019-10-01 05:36:30 |
| 222.186.180.20 | attackspambots | 2019-09-28 06:33:07 -> 2019-09-30 21:50:03 : 72 login attempts (222.186.180.20) |
2019-10-01 05:15:12 |
| 109.70.100.28 | attack | Automatic report - Banned IP Access |
2019-10-01 05:42:10 |
| 222.186.175.215 | attackbots | 2019-09-28 09:24:35 -> 2019-09-30 22:14:29 : 119 login attempts (222.186.175.215) |
2019-10-01 05:18:12 |
| 106.13.115.197 | attack | 2019-09-30T17:03:45.1633851495-001 sshd\[9435\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.115.197 user=mysql 2019-09-30T17:03:46.9127391495-001 sshd\[9435\]: Failed password for mysql from 106.13.115.197 port 55363 ssh2 2019-09-30T17:06:59.3473841495-001 sshd\[9685\]: Invalid user support from 106.13.115.197 port 41402 2019-09-30T17:06:59.3504061495-001 sshd\[9685\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.115.197 2019-09-30T17:07:01.4005011495-001 sshd\[9685\]: Failed password for invalid user support from 106.13.115.197 port 41402 ssh2 2019-09-30T17:10:11.2771721495-001 sshd\[9915\]: Invalid user sports from 106.13.115.197 port 55674 2019-09-30T17:10:11.2802091495-001 sshd\[9915\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.115.197 ... |
2019-10-01 05:23:12 |
| 52.36.53.169 | attackspambots | 09/30/2019-23:35:02.245903 52.36.53.169 Protocol: 6 SURICATA TLS invalid record/traffic |
2019-10-01 05:49:21 |