AbuseIPDB » 152.70.45.42

152.70.45.42 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 36%: ?

36%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 152.70.45.42

Whois 152.70.45.42

IP Abuse Reports for 152.70.45.42:

This IP address has been reported a total of 28 times from 17 distinct sources. 152.70.45.42 was first reported on December 6th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2024-12-07 08:52:51 (1 month ago)	list.rtbh.com.tr report: tcp/22	Brute-Force
gu-alvareza	2024-12-07 07:06:16 (1 month ago)	Apache.HTTP.Server.cgi-bin.Path.Traversal	Hacking Web App Attack
diego	2024-12-07 06:29:35 (1 month ago)	Events: TCP SYN Discovery or Flooding, Seen 5 times in the last 10800 seconds	DDoS Attack
Study Bitcoin 🤗	2024-12-07 05:56:38 (1 month ago)	Port probe to tcp/443 (https) [srv125]	Port Scan Brute-Force Bad Web Bot Web App Attack
Lazarus	2024-12-07 04:50:09 (1 month ago)	HTTP probe.	Web App Attack
MPL	2024-12-07 01:41:37 (1 month ago)	tcp/443 (2 or more attempts)	Port Scan
TPI-Abuse	2024-12-07 01:27:26 (1 month ago)	(mod_security) mod_security (id:218420) triggered by 152.70.45.42 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:218420) triggered by 152.70.45.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 06 20:27:22.548301 2024] [security2:error] [pid 3470581:tid 3470581] [client 152.70.45.42:47138] [client 152.70.45.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.72:443\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.72"] [uri "/hello.world"] [unique_id "Z1OkeqWR7W3dqb0jTvyAdQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
bigscoots.com	2024-12-07 01:07:57 (1 month ago)	(sshd) Failed SSH login from 152.70.45.42 (DE/Germany/-): 5 in the last 3600 secs; Ports: ; Directi ... show more(sshd) Failed SSH login from 152.70.45.42 (DE/Germany/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Dec 6 19:07:11 15373 sshd[313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.70.45.42 user=root Dec 6 19:07:13 15373 sshd[313]: Failed password for root from 152.70.45.42 port 45024 ssh2 Dec 6 19:07:29 15373 sshd[317]: Invalid user web from 152.70.45.42 port 60402 Dec 6 19:07:31 15373 sshd[317]: Failed password for invalid user web from 152.70.45.42 port 60402 ssh2 Dec 6 19:07:49 15373 sshd[322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.70.45.42 user=root show less	Brute-Force SSH
MWA SOC	2024-12-07 00:42:44 (1 month ago)		Hacking
urnilxfgbez	2024-12-06 23:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
bigscoots.com	2024-12-06 23:40:09 (1 month ago)	(sshd) Failed SSH login from 152.70.45.42 (DE/Germany/-): 5 in the last 3600 secs; Ports: ; Directi ... show more(sshd) Failed SSH login from 152.70.45.42 (DE/Germany/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Dec 6 17:39:20 15593 sshd[3288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.70.45.42 user=root Dec 6 17:39:22 15593 sshd[3288]: Failed password for root from 152.70.45.42 port 49372 ssh2 Dec 6 17:39:39 15593 sshd[3290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.70.45.42 user=root Dec 6 17:39:41 15593 sshd[3290]: Failed password for root from 152.70.45.42 port 36026 ssh2 Dec 6 17:39:57 15593 sshd[3294]: Invalid user simple from 152.70.45.42 port 50476 show less	Brute-Force SSH
ezscale	2024-12-06 23:31:34 (1 month ago)	Dec 6 18:30:08 scp sshd[354407]: Invalid user bbb from 152.70.45.42 port 37592 Dec 6 18:30:5 ... show moreDec 6 18:30:08 scp sshd[354407]: Invalid user bbb from 152.70.45.42 port 37592 Dec 6 18:30:57 scp sshd[355584]: Invalid user groupb from 152.70.45.42 port 46372 Dec 6 18:31:33 scp sshd[356448]: Invalid user elasticsearch from 152.70.45.42 port 43682 ... show less	Brute-Force SSH
bigscoots.com	2024-12-06 22:54:13 (1 month ago)	(sshd) Failed SSH login from 152.70.45.42 (DE/Germany/-): 5 in the last 3600 secs; Ports: ; Directi ... show more(sshd) Failed SSH login from 152.70.45.42 (DE/Germany/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Dec 6 16:53:15 15493 sshd[27193]: Invalid user xguest from 152.70.45.42 port 58912 Dec 6 16:53:17 15493 sshd[27193]: Failed password for invalid user xguest from 152.70.45.42 port 58912 ssh2 Dec 6 16:53:34 15493 sshd[27197]: Invalid user debian from 152.70.45.42 port 44650 Dec 6 16:53:36 15493 sshd[27197]: Failed password for invalid user debian from 152.70.45.42 port 44650 ssh2 Dec 6 16:53:52 15493 sshd[27201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.70.45.42 user=root show less	Brute-Force SSH
Admins@FBN	2024-12-06 22:07:34 (1 month ago)	FW-PortScan: Traffic Blocked srcport=56712 dstport=22	Port Scan Hacking SSH
bigscoots.com	2024-12-06 21:57:21 (1 month ago)	(sshd) Failed SSH login from 152.70.45.42 (DE/Germany/-): 5 in the last 3600 secs; Ports: ; Directi ... show more(sshd) Failed SSH login from 152.70.45.42 (DE/Germany/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Dec 6 15:56:34 16470 sshd[1261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.70.45.42 user=root Dec 6 15:56:35 16470 sshd[1261]: Failed password for root from 152.70.45.42 port 52502 ssh2 Dec 6 15:56:53 16470 sshd[1267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.70.45.42 user=root Dec 6 15:56:55 16470 sshd[1267]: Failed password for root from 152.70.45.42 port 38604 ssh2 Dec 6 15:57:13 16470 sshd[1394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.70.45.42 user=root show less	Brute-Force SSH