City: unknown
Region: unknown
Country: Greece
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 94.64.74.185 | attackspam | Hits on port : 26 |
2020-03-24 00:33:15 |
| 94.64.78.3 | attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/94.64.78.3/ GR - 1H : (53) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : GR NAME ASN : ASN6799 IP : 94.64.78.3 CIDR : 94.64.0.0/16 PREFIX COUNT : 159 UNIQUE IP COUNT : 1819904 ATTACKS DETECTED ASN6799 : 1H - 2 3H - 2 6H - 3 12H - 4 24H - 7 DateTime : 2019-10-21 13:39:38 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery |
2019-10-22 01:22:15 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.64.7.248
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52011
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;94.64.7.248. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 17:29:38 CST 2025
;; MSG SIZE rcvd: 104248.7.64.94.in-addr.arpa domain name pointer ppp-94-64-7-248.home.otenet.gr.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
248.7.64.94.in-addr.arpa name = ppp-94-64-7-248.home.otenet.gr.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 23.99.81.127 | attackbots | Oct 28 03:23:04 rb06 sshd[30247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.99.81.127 user=r.r Oct 28 03:23:06 rb06 sshd[30247]: Failed password for r.r from 23.99.81.127 port 13248 ssh2 Oct 28 03:23:06 rb06 sshd[30247]: Received disconnect from 23.99.81.127: 11: Bye Bye [preauth] Oct 28 03:31:05 rb06 sshd[30650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.99.81.127 user=r.r Oct 28 03:31:07 rb06 sshd[30650]: Failed password for r.r from 23.99.81.127 port 13248 ssh2 Oct 28 03:31:07 rb06 sshd[30650]: Received disconnect from 23.99.81.127: 11: Bye Bye [preauth] Oct 28 03:34:55 rb06 sshd[7704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.99.81.127 user=r.r Oct 28 03:34:57 rb06 sshd[7704]: Failed password for r.r from 23.99.81.127 port 13248 ssh2 Oct 28 03:34:58 rb06 sshd[7704]: Received disconnect from 23.99.81.127: 11: Bye Bye [........ ------------------------------- |
2019-10-29 08:12:44 |
| 132.145.170.174 | attackbots | Oct 29 09:07:28 gw1 sshd[12107]: Failed password for root from 132.145.170.174 port 43649 ssh2 ... |
2019-10-29 12:15:55 |
| 45.182.159.201 | attack | Automatic report - Port Scan Attack |
2019-10-29 12:10:49 |
| 85.93.20.147 | attack | 191028 23:09:27 \[Warning\] Access denied for user 'mysql'@'85.93.20.147' \(using password: YES\) 191028 23:26:27 \[Warning\] Access denied for user 'mysql'@'85.93.20.147' \(using password: YES\) 191028 23:49:05 \[Warning\] Access denied for user 'mysql'@'85.93.20.147' \(using password: YES\) ... |
2019-10-29 12:03:36 |
| 5.195.233.41 | attackspambots | $f2bV_matches_ltvn |
2019-10-29 12:00:44 |
| 111.231.113.236 | attackspam | Oct 29 03:59:12 venus sshd\[21694\]: Invalid user yeadminidc from 111.231.113.236 port 36866 Oct 29 03:59:12 venus sshd\[21694\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.113.236 Oct 29 03:59:14 venus sshd\[21694\]: Failed password for invalid user yeadminidc from 111.231.113.236 port 36866 ssh2 ... |
2019-10-29 12:01:58 |
| 49.247.132.79 | attackbots | Invalid user vf from 49.247.132.79 port 36774 |
2019-10-29 08:10:14 |
| 177.136.34.161 | attack | Brute force attempt |
2019-10-29 12:24:05 |
| 139.59.5.179 | attack | 139.59.5.179 - - \[29/Oct/2019:03:58:45 +0000\] "POST /wp-login.php HTTP/1.1" 200 4358 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 139.59.5.179 - - \[29/Oct/2019:03:58:46 +0000\] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ... |
2019-10-29 12:15:38 |
| 178.62.239.205 | attackbotsspam | fail2ban |
2019-10-29 12:07:42 |
| 142.4.209.40 | attackspam | 142.4.209.40 has been banned for [WebApp Attack] ... |
2019-10-29 12:09:57 |
| 51.77.156.223 | attack | Oct 29 02:11:29 server sshd\[19588\]: Invalid user test from 51.77.156.223 Oct 29 02:11:29 server sshd\[19588\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.ip-51-77-156.eu Oct 29 02:11:31 server sshd\[19588\]: Failed password for invalid user test from 51.77.156.223 port 48906 ssh2 Oct 29 02:20:26 server sshd\[21656\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.ip-51-77-156.eu user=root Oct 29 02:20:28 server sshd\[21656\]: Failed password for root from 51.77.156.223 port 33498 ssh2 ... |
2019-10-29 08:09:55 |
| 164.132.44.25 | attack | Oct 29 05:13:45 SilenceServices sshd[28014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.44.25 Oct 29 05:13:46 SilenceServices sshd[28014]: Failed password for invalid user gabri from 164.132.44.25 port 53770 ssh2 Oct 29 05:17:31 SilenceServices sshd[30442]: Failed password for root from 164.132.44.25 port 36310 ssh2 |
2019-10-29 12:20:03 |
| 45.55.176.173 | attackbots | Oct 29 05:56:02 sauna sshd[65238]: Failed password for root from 45.55.176.173 port 56728 ssh2 ... |
2019-10-29 12:06:55 |
| 222.186.169.194 | attack | SSH bruteforce |
2019-10-29 12:11:43 |