🇺🇸
鬼影233
2026-10-01 16:25:15
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Bad Web Bot
2026-08-12 19:09:01
UTC ·
(3 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp
Exploited Host
Bad Web Bot
🇺🇸
kosada.com
2026-07-26 03:55:48
UTC ·
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇮🇩
sockominfo
2026-06-27 08:00:59
UTC ·
(4 months ago)
User login to application from malicious IP 118.99.80.45.. Threat Score: 3.7/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network ...
show more
User login to application from malicious IP 118.99.80.45.. Threat Score: 3.7/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-06-27 06:00:09
UTC ·
(4 months ago)
User login to application from malicious IP 118.99.80.45.. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT
Hacking
Web App Attack
🇹🇷
rtbh.com.tr
2025-09-14 20:08:48
UTC ·
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2025-09-14 00:08:46
UTC ·
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇨🇳
ThreatBook.io
2025-09-13 22:12:36
UTC ·
(1 year ago)
ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/118.99.80.45
SSH
🇹🇷
rtbh.com.tr
2025-09-13 20:08:47
UTC ·
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇩🇪
ghostwarriors
2025-09-13 05:50:16
UTC ·
(1 year ago)
Unauthorized connection attempt detected, SSH Brute-Force
Port Scan
Brute-Force
SSH
🇫🇷
Hippoline
2025-09-13 05:25:46
UTC ·
(1 year ago)
Sep 13 07:20:12 local sshd[25414]: Failed password for root from 118.99.80.45 port 17689 ssh2
Sep 13 07:24:25 local sshd[27213]: Failed password for root from 118.99.80.45 port 10240 ssh2
...
Brute-Force
SSH
🇺🇸
bigscoots.com
2025-09-13 05:25:26
UTC ·
(1 year ago)
118.99.80.45 (ID/Indonesia/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 13 00:22:11 14514 sshd[23331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show more
118.99.80.45 (ID/Indonesia/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 13 00:22:11 14514 sshd[23331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.99.80.45 user=root
Sep 13 00:22:13 14514 sshd[23331]: Failed password for root from 118.99.80.45 port 6424 ssh2
Sep 13 00:25:05 14514 sshd[23689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.99.80.45 user=root
Sep 13 00:22:32 14514 sshd[23478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.175.51 user=root
Sep 13 00:22:34 14514 sshd[23478]: Failed password for root from 104.131.175.51 port 53616 ssh2
IP Addresses Blocked:
show less
Brute-Force
SSH
🇳🇿
Splatage_MC
2025-09-13 05:13:39
UTC ·
(1 year ago)
2025-09-13T17:00:45.367861+12:00 NAS sshd[439833]: Invalid user vmail from 118.99.80.45 port 19084
2025-09-13T17:05:04.162697+12:00 NAS sshd[443911]: Invalid user pamela from 118.99.80.45 port 20932
2025-09-13T17:07:53.534982+12:00 NAS sshd[446697]: ...
show more
2025-09-13T17:00:45.367861+12:00 NAS sshd[439833]: Invalid user vmail from 118.99.80.45 port 19084
2025-09-13T17:05:04.162697+12:00 NAS sshd[443911]: Invalid user pamela from 118.99.80.45 port 20932
2025-09-13T17:07:53.534982+12:00 NAS sshd[446697]: Invalid user ton from 118.99.80.45 port 20292
2025-09-13T17:12:09.126880+12:00 NAS sshd[450705]: Invalid user user12 from 118.99.80.45 port 22477
2025-09-13T17:13:39.086593+12:00 NAS sshd[452129]: Invalid user admin from 118.99.80.45 port 16421
show less
Brute-Force
SSH
🇨🇦
hpg
2025-09-13 05:00:15
UTC ·
(1 year ago)
Sep 13 17:00:13 syd1 sshd-session[1103930]: Invalid user vmail from 118.99.80.45 port 21880
Brute-Force
SSH
🇫🇷
Hessfr
2025-09-13 05:00:05
UTC ·
(1 year ago)
Sep 13 04:56:59 hms97855 sshd[3821737]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.99.80.45 user=root
Sep 13 04:57:01 hms97855 sshd[3821737]: Failed password for root from 118.99.80.45 port 20384 ssh2 ...
show more
Sep 13 04:56:59 hms97855 sshd[3821737]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.99.80.45 user=root
Sep 13 04:57:01 hms97855 sshd[3821737]: Failed password for root from 118.99.80.45 port 20384 ssh2
Sep 13 04:58:32 hms97855 sshd[3821819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.99.80.45 user=root
Sep 13 04:58:35 hms97855 sshd[3821819]: Failed password for root from 118.99.80.45 port 18735 ssh2
Sep 13 05:00:03 hms97855 sshd[3821879]: Invalid user vmail from 118.99.80.45 port 22447
...
show less
Brute-Force
SSH
