AbuseIPDB » 109.120.152.50

109.120.152.50 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 49%: ?

49%

ISP	AEZA GROUP Ltd
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	flashy-division.aeza.network
Domain Name	aeza.ru
Country	Russian Federation
City	Moscow, Moscow

Report 109.120.152.50

Whois 109.120.152.50

IP Abuse Reports for 109.120.152.50:

This IP address has been reported a total of 23 times from 18 distinct sources. 109.120.152.50 was first reported on November 8th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2024-11-12 20:53:21 (4 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2024-11-11 20:53:22 (4 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rh24	2024-11-11 01:56:31 (4 weeks ago)	(wordpress) Failed wordpress login from 109.120.152.50 (RU/Russia/spotted-beds-n3.aeza.network)	Brute-Force
Cloudkul Cloudkul	2024-11-10 22:18:05 (1 month ago)	Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ... show moreAttempted Not Found (404 status code) requests on our application, more than 30% of their total requests. show less	Brute-Force Web App Attack
Reinhard	2024-11-10 22:04:00 (1 month ago)	Msg from error-handling: Error:/widwsisw/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php. Body:Su ... show moreMsg from error-handling: Error:/widwsisw/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php. Body:Sun, 10 Nov 2024 23:04:58 +0100, IP-Addr:109.120.152.50, Host:spotted-beds-n3.aeza.network show less	Hacking Brute-Force Web App Attack
TPI-Abuse	2024-11-10 21:59:29 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 109.120.152.50 (spotted-beds-n3.aeza.network): ... show more(mod_security) mod_security (id:225170) triggered by 109.120.152.50 (spotted-beds-n3.aeza.network): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 10 16:59:26.038267 2024] [security2:error] [pid 17272:tid 17272] [client 109.120.152.50:48736] [client 109.120.152.50] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|capriexpress.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "capriexpress.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZzEsvvRB2mUP81PGWlYCywAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
stinpriza	2024-11-10 21:56:00 (1 month ago)	Drupal Authentication failure	Brute-Force Web App Attack
rtbh.com.tr	2024-11-10 20:53:25 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2024-11-09 20:53:27 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Ssmidge	2024-11-09 15:55:02 (1 month ago)	Nov 9 16:55:00 ifog sshd[1525735]: Invalid user user from 109.120.152.50 port 43730 Nov 9 16 ... show moreNov 9 16:55:00 ifog sshd[1525735]: Invalid user user from 109.120.152.50 port 43730 Nov 9 16:55:00 ifog sshd[1525738]: Invalid user user from 109.120.152.50 port 43740 Nov 9 16:55:01 ifog sshd[1525742]: Invalid user user from 109.120.152.50 port 43750 ... show less	Brute-Force SSH
4d62	2024-11-09 15:48:16 (1 month ago)	2024-11-09T10:47:57.525050-05:00 prod-1 sshd[1480115]: Invalid user default from 109.120.152.50 port ... show more2024-11-09T10:47:57.525050-05:00 prod-1 sshd[1480115]: Invalid user default from 109.120.152.50 port 44766 2024-11-09T10:47:57.664247-05:00 prod-1 sshd[1480115]: Connection closed by invalid user default 109.120.152.50 port 44766 [preauth] 2024-11-09T10:48:06.566226-05:00 prod-1 sshd[1480141]: Invalid user tomcat from 109.120.152.50 port 51018 2024-11-09T10:48:06.694332-05:00 prod-1 sshd[1480141]: Connection closed by invalid user tomcat 109.120.152.50 port 51018 [preauth] 2024-11-09T10:48:15.672588-05:00 prod-1 sshd[1480196]: Invalid user gitlab from 109.120.152.50 port 34758 ... show less	Brute-Force SSH
FynnCraft	2024-11-09 15:44:54 (1 month ago)	2024-11-09T15:44:51.565683+00:00 DE-FFM-07 sshd[3305161]: pam_unix(sshd:auth): authentication failur ... show more2024-11-09T15:44:51.565683+00:00 DE-FFM-07 sshd[3305161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.120.152.50 user=root 2024-11-09T15:44:53.324504+00:00 DE-FFM-07 sshd[3305161]: Failed password for root from 109.120.152.50 port 52014 ssh2 ... show less	Brute-Force SSH
4d62	2024-11-09 15:27:29 (1 month ago)	2024-11-09T10:27:11.212497-05:00 prod-1 sshd[1475995]: Connection closed by authenticating user root ... show more2024-11-09T10:27:11.212497-05:00 prod-1 sshd[1475995]: Connection closed by authenticating user root 109.120.152.50 port 48050 [preauth] 2024-11-09T10:27:20.306069-05:00 prod-1 sshd[1476016]: Invalid user pi from 109.120.152.50 port 48062 2024-11-09T10:27:20.430568-05:00 prod-1 sshd[1476016]: Connection closed by invalid user pi 109.120.152.50 port 48062 [preauth] 2024-11-09T10:27:29.094005-05:00 prod-1 sshd[1476025]: Invalid user hive from 109.120.152.50 port 48992 2024-11-09T10:27:29.247216-05:00 prod-1 sshd[1476025]: Connection closed by invalid user hive 109.120.152.50 port 48992 [preauth] ... show less	Brute-Force SSH
Click-Networks	2024-11-09 15:06:09 (1 month ago)	Nov 9 15:56:25 wh01 sshd[2830707]: Connection closed by authenticating user root 109.120.152.50 por ... show moreNov 9 15:56:25 wh01 sshd[2830707]: Connection closed by authenticating user root 109.120.152.50 port 44474 [preauth] Nov 9 15:56:25 wh01 sshd[2830709]: Connection closed by authenticating user root 109.120.152.50 port 44484 [preauth] Nov 9 15:56:25 wh01 sshd[2830711]: Connection closed by authenticating user root 109.120.152.50 port 44486 [preauth] Nov 9 15:56:26 wh01 sshd[2830719]: Connection closed by authenticating user root 109.120.152.50 port 44488 [preauth] Nov 9 15:56:26 wh01 sshd[2830721]: Connection closed by authenticating user root 109.120.152.50 port 44498 [preauth] Nov 9 15:56:26 wh01 sshd[2830723]: Connection closed by authenticating user root 109.120.152.50 port 44514 [preauth] Nov 9 15:56:27 wh01 sshd[2830725]: Connection closed by authenticating user root 109.120.152.50 port 44528 [preauth] Nov 9 15:56:27 wh01 sshd[2830727]: Connection closed by authenticating user root 109.120.152.50 port 44542 [preauth] Nov 9 15:56:27 wh01 sshd[2830729]: Connection closed by show less	Brute-Force Exploited Host SSH
guldkage	2024-11-09 15:05:51 (1 month ago)	Unauthorized connection attempt detected from IP address 109.120.152.50 to port 22 (gs1) [T]	Brute-Force Exploited Host