AbuseIPDB » 152.69.174.195

152.69.174.195 was found in our database!

This IP was reported 71 times. Confidence of Abuse is 53%: ?

53%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	oracle.com
Country	Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 152.69.174.195

Whois 152.69.174.195

IP Abuse Reports for 152.69.174.195:

This IP address has been reported a total of 71 times from 40 distinct sources. 152.69.174.195 was first reported on August 2nd 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-08-05 19:04:34 (1 month ago)	2024-08-05T19:03:35.150544+00:00 cust1009-1 sshd[5345]: Invalid user kf from 152.69.174.195 port 336 ... show more2024-08-05T19:03:35.150544+00:00 cust1009-1 sshd[5345]: Invalid user kf from 152.69.174.195 port 33618 2024-08-05T19:03:36.127753+00:00 cust1009-1 sshd[5345]: Connection closed by invalid user kf 152.69.174.195 port 33618 [preauth] 2024-08-05T19:04:34.181687+00:00 cust1009-1 sshd[5348]: Connection closed by authenticating user root 152.69.174.195 port 45298 [preauth] ... show less	Brute-Force SSH
diego	2024-08-05 19:01:36 (1 month ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
MPL	2024-08-05 18:02:53 (1 month ago)	tcp/22 (2 or more attempts)	Port Scan
FEWA	2024-08-05 17:25:49 (1 month ago)	Fail2Ban Ban Triggered	Hacking Bad Web Bot Web App Attack
simpeg-adm.bandung.go.id	2024-08-05 17:14:06 (1 month ago)	152.69.174.195 - - [05/Aug/2024:17:13:55 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.% ... show more152.69.174.195 - - [05/Aug/2024:17:13:55 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 166 "-" "-" 152.69.174.195 - - [05/Aug/2024:17:13:57 +0000] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 166 "-" "-" 152.69.174.195 - - [05/Aug/2024:17:13:58 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 162 "-" "Custom-AsyncHttpClient" 152.69.174.195 - - [05/Aug/2024:17:13:59 +0000] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 162 "-" "Custom-AsyncHttpClient" 152.69.174.195 - - [05/Aug/2024:17:14:00 +0000] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 162 "-" "Custom-AsyncHttpClient" 152.69.174.195 - - [05/Aug/2024:17:14:01 +0000] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 162 "-" "Custom-AsyncHttpClient" 152.69.174.195 - - [05/Aug/2024:17:14:02 +0000] "GET /vendor/phpunit/ ... show less	Web Spam Brute-Force Web App Attack
RAP	2024-08-05 16:37:03 (1 month ago)	Probing web services for vulnerabilities	Port Scan
Cynar & Cinny	2024-08-05 16:21:39 (1 month ago)	ufw_block_log	Port Scan
Hirte	2024-08-05 15:53:48 (1 month ago)	C1-W: TCP-Scanner. Port: 23	Port Scan
MPL	2024-08-05 15:19:33 (1 month ago)	tcp/23 (2 or more attempts)	Port Scan
RAP	2024-08-05 14:51:39 (1 month ago)	2024-08-05 14:51:39 UTC Unauthorized activity to TCP port 22. SSH	SSH
girlbossceo	2024-08-05 14:26:14 (1 month ago)	2024-08-05T14:23:21.883015+00:00 girlboss.ceo sshd-session[237226]: User root from 152.69.174.195 no ... show more2024-08-05T14:23:21.883015+00:00 girlboss.ceo sshd-session[237226]: User root from 152.69.174.195 not allowed because not listed in AllowUsers 2024-08-05T14:24:13.427628+00:00 girlboss.ceo sshd-session[237389]: Connection from 152.69.174.195 port 55060 on 170.205.37.36 port 22 rdomain "" 2024-08-05T14:24:17.213885+00:00 girlboss.ceo sshd-session[237389]: User root from 152.69.174.195 not allowed because not listed in AllowUsers 2024-08-05T14:25:09.115512+00:00 girlboss.ceo sshd-session[237541]: Connection from 152.69.174.195 port 41120 on 170.205.37.36 port 22 rdomain "" 2024-08-05T14:25:13.471437+00:00 girlboss.ceo sshd-session[237541]: User postgres from 152.69.174.195 not allowed because not listed in AllowUsers 2024-08-05T14:26:09.754308+00:00 girlboss.ceo sshd-session[237702]: Connection from 152.69.174.195 port 32942 on 170.205.37.36 port 22 rdomain "" 2024-08-05T14:26:14.034974+00:00 girlboss.ceo sshd-session[237702]: User root from 152.69.174.195 not allowed because not listed ... show less	Brute-Force SSH
MPL	2024-08-05 13:33:28 (1 month ago)	tcp/22 (2 or more attempts)	Port Scan
amit177	2024-08-05 13:01:17 (1 month ago)		Brute-Force SSH
vps01.feasoftware.it	2024-08-05 11:59:34 (1 month ago)	152.69.174.195 - - [05/Aug/2024:13:59:25 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin ... show more152.69.174.195 - - [05/Aug/2024:13:59:25 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 196 "-" "Custom-AsyncHttpClient" 152.69.174.195 - - [05/Aug/2024:13:59:26 +0200] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 196 "-" "Custom-AsyncHttpClient" 152.69.174.195 - - [05/Aug/2024:13:59:28 +0200] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 196 "-" "Custom-AsyncHttpClient" 152.69.174.195 - - [05/Aug/2024:13:59:29 +0200] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 196 "-" "Custom-AsyncHttpClient" 152.69.174.195 - - [05/Aug/2024:13:59:30 +0200] "GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1" 404 196 "-" "Custom-AsyncHttpClient" 152.69.174.195 - - [05/Aug/2024:13:59:31 +0200] "GET /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 196 "-" "Custom-AsyncHttpClient" 152.69.174.195 - - [05/Aug/2024:13:59:32 +0200] "GET /phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 40 ... show less	Bad Web Bot
ghostwarriors	2024-08-05 11:21:46 (1 month ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH