City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
Type | Details | Datetime |
---|---|---|
attack | Port scan |
2023-01-23 13:54:04 |
attack | Port scan |
2023-01-20 13:38:38 |
IP | Type | Details | Datetime |
---|---|---|---|
45.93.16.154 | attack | Scan port |
2023-09-26 16:42:07 |
45.93.16.154 | attack | Scan port |
2023-09-14 12:36:57 |
45.93.16.154 | attack | Scan port |
2023-09-14 12:35:56 |
45.93.16.214 | attack | Scan port |
2023-08-15 12:42:10 |
45.93.16.240 | attack | Scan port |
2023-08-02 12:48:29 |
45.93.16.48 | attack | Scan port DDoS |
2023-03-23 15:05:07 |
45.93.16.216 | attack | Scan port DDoS |
2023-03-23 15:04:54 |
45.93.16.216 | attack | Scan port DDoS |
2023-03-23 15:04:28 |
45.93.16.81 | attack | Scan port DDoS |
2023-03-23 15:04:05 |
45.93.16.32 | attack | Port scan |
2023-02-08 13:52:26 |
45.93.16.100 | attack | Port scan |
2023-01-23 13:52:29 |
45.93.16.22 | attack | DdoS |
2023-01-23 13:50:44 |
45.93.16.189 | attack | Brute-force |
2023-01-23 13:48:42 |
45.93.16.24 | attack | port scan |
2023-01-20 13:43:49 |
45.93.16.22 | attack | Port scan |
2023-01-20 13:42:14 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.93.16.23
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31640
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.93.16.23. IN A
;; AUTHORITY SECTION:
. 534 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023011901 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 20 13:38:37 CST 2023
;; MSG SIZE rcvd: 104
Host 23.16.93.45.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 23.16.93.45.in-addr.arpa: NXDOMAIN
IP | Type | Details | Datetime |
---|---|---|---|
138.99.206.98 | attack | Automatic report - Banned IP Access |
2020-08-18 18:43:07 |
54.37.162.36 | attack | Automatic Fail2ban report - Trying login SSH |
2020-08-18 18:30:52 |
152.136.149.160 | attackspam | Aug 18 11:05:07 server sshd[7543]: Failed password for invalid user tanya from 152.136.149.160 port 35552 ssh2 Aug 18 11:11:52 server sshd[10210]: Failed password for invalid user alex from 152.136.149.160 port 41790 ssh2 Aug 18 11:16:40 server sshd[12248]: Failed password for root from 152.136.149.160 port 59116 ssh2 |
2020-08-18 18:39:54 |
212.129.31.56 | attack | 212.129.31.56 - - [18/Aug/2020:05:49:56 +0200] "GET /wp-login.php HTTP/1.1" 200 8775 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 212.129.31.56 - - [18/Aug/2020:05:49:57 +0200] "POST /wp-login.php HTTP/1.1" 200 9026 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 212.129.31.56 - - [18/Aug/2020:05:49:58 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-08-18 18:23:37 |
66.68.187.145 | attackspam | Invalid user cmc from 66.68.187.145 port 39850 |
2020-08-18 18:14:08 |
74.82.47.2 | attackspam | srvr1: (mod_security) mod_security (id:920350) triggered by 74.82.47.2 (US/-/scan-09.shadowserver.org): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/18 05:11:18 [error] 267988#0: *417409 [client 74.82.47.2] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host' [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/"] [unique_id "159772747860.669048"] [ref "o0,13v21,13"], client: 74.82.47.2, [redacted] request: "GET / HTTP/1.1" [redacted] |
2020-08-18 18:20:33 |
103.119.30.193 | attackbots | Aug 18 09:40:16 vps647732 sshd[29165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.119.30.193 Aug 18 09:40:18 vps647732 sshd[29165]: Failed password for invalid user admin from 103.119.30.193 port 33196 ssh2 ... |
2020-08-18 18:23:10 |
106.13.44.60 | attackspam | SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found |
2020-08-18 18:11:26 |
193.178.229.186 | attack | Automatic report - Banned IP Access |
2020-08-18 18:25:12 |
150.136.40.22 | attackspambots | Aug 18 12:31:27 vserver sshd\[29396\]: Failed password for root from 150.136.40.22 port 35494 ssh2Aug 18 12:36:29 vserver sshd\[29793\]: Invalid user demo from 150.136.40.22Aug 18 12:36:31 vserver sshd\[29793\]: Failed password for invalid user demo from 150.136.40.22 port 40308 ssh2Aug 18 12:38:29 vserver sshd\[29804\]: Invalid user licheng from 150.136.40.22 ... |
2020-08-18 18:41:19 |
61.152.249.200 | attack | SSH invalid-user multiple login attempts |
2020-08-18 18:19:39 |
212.64.77.173 | attackbotsspam | Invalid user john from 212.64.77.173 port 46860 |
2020-08-18 18:35:00 |
187.35.124.5 | attack | firewall-block, port(s): 445/tcp |
2020-08-18 18:06:30 |
202.51.74.45 | attackbots | $f2bV_matches |
2020-08-18 18:35:12 |
2a02:a03f:6784:e200:a03a:4f6d:d809:5fde | attackspam | Aug 18 06:48:13 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user= |
2020-08-18 18:10:34 |