AbuseIPDB » 45.61.59.211

45.61.59.211 was found in our database!

This IP was reported 69 times. Confidence of Abuse is 63%: ?

63%

ISP	Kamatera Inc.
Usage Type	Data Center/Web Hosting/Transit
Domain Name	kamatera.com
Country	United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 45.61.59.211

Whois 45.61.59.211

IP Abuse Reports for 45.61.59.211:

This IP address has been reported a total of 69 times from 28 distinct sources. 45.61.59.211 was first reported on August 2nd 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2024-08-18 20:55:31 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
4server	2024-08-16 20:55:36 (3 weeks ago)	[2024-08-1622:55:31 0200]info[cpaneld]45.61.59.211-formet\"POST/login/HTTP/1.1\"FAILEDLOGINcpaneld:i ... show more[2024-08-1622:55:31 0200]info[cpaneld]45.61.59.211-formet\"POST/login/HTTP/1.1\"FAILEDLOGINcpaneld:invalidcpaneluserformet\(has_cpuser_filefailed\)[2024-08-1622:55:32 0200]info[cpaneld]45.61.59.211-formetch\"POST/login/HTTP/1.1\"FAILEDLOGINcpaneld:accessdeniedforroot\,reseller\,anduserpassword[2024-08-1622:55:32 0200]info[whostmgrd]45.61.59.211-formet\"POST/login/HTTP/1.1\"FAILEDLOGINwhostmgrd:userpasswordincorrect[2024-08-1622:55:33 0200]info[whostmgrd]45.61.59.211-formetch\"POST/login/HTTP/1.1\"FAILEDLOGINwhostmgrd:userpasswordincorrect[2024-08-1622:55:33 0200]info[whostmgrd]45.61.59.211-root\"POST/login/HTTP/1.1\"FAILEDLOGINwhostmgrd:userpasswordincorrect show less	Port Scan Brute-Force Web App Attack
Rizzy	2024-08-16 16:20:27 (3 weeks ago)	Multiple failed cPanel logins	Web App Attack
el-brujo	2024-08-16 09:23:43 (3 weeks ago)	Cloudflare WAF: Request Path: /login/ Request Query: Host: elhacker.net:2087 userAgent: python-requ ... show moreCloudflare WAF: Request Path: /login/ Request Query: Host: elhacker.net:2087 userAgent: python-requests/2.27.1 Action: block Source: firewallManaged ASN Description: KAMATERA Country: US Method: POST Timestamp: 2024-08-16T09:23:43Z ruleId: 8e361ee4328f4a3caf6caf3e664ed6fe. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
dihost	2024-08-16 09:07:54 (3 weeks ago)	(cpanel) Failed cPanel login from 45.61.59.211 (US/United States/-): 5 in the last 3600 secs	Brute-Force
DumaNet	2024-08-16 00:46:00 (3 weeks ago)	Blocked for port scanning. Time: Thu Aug 15. 15:46:51 2024 +0200 IP: 45.61.59.211 (US/ ... show moreBlocked for port scanning. Time: Thu Aug 15. 15:46:51 2024 +0200 IP: 45.61.59.211 (US/United States/-) Sample of block hits: Aug 15 15:45:59 vserv kernel: [35225495.939350] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=45.61.59.211 DST=[removed] LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=44124 DF PROTO=TCP SPT=59878 DPT=2083 WINDOW=42340 RES=0x00 SYN URGP=0 Aug 15 15:46:00 vserv kernel: [35225496.958069] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=45.61.59.211 DST=[removed] LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=44125 DF PROTO=TCP SPT=59878 DPT=2083 WINDOW=42340 RES=0x00 SYN URGP=0 Aug 15 15:46:02 vserv kernel: [35225498.970230] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=45.61.59.211 DST=[removed] LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=44126 DF PROTO=TCP SPT=59878 DPT=2083 WINDOW=42340 RES=0x00 SYN URGP=0 Aug 15 15:46:06 vserv kernel: [35225503.035754] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=45.61.59.211 DST=[removed] LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=44127 DF PROTO=TCP SPT=59878 DPT=2083 show less	Port Scan
R.G.	2024-08-16 00:29:19 (3 weeks ago)	Port Scan detected from 45.61.59.211 (US/United States/-). 11 hits in the last 236 seconds; Ports: ... show morePort Scan detected from 45.61.59.211 (US/United States/-). 11 hits in the last 236 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Aug 16 02:28:26 kernel: Firewall: TCP_IN Blocked* IN=enp0s31f6 OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=45.61.59.211 DST=0.X.X.X L show less	Port Scan
el-brujo	2024-08-15 19:50:24 (3 weeks ago)	Cloudflare WAF: Request Path: /login/ Request Query: Host: elhacker.net:2087 userAgent: python-requ ... show moreCloudflare WAF: Request Path: /login/ Request Query: Host: elhacker.net:2087 userAgent: python-requests/2.27.1 Action: block Source: firewallManaged ASN Description: KAMATERA Country: US Method: POST Timestamp: 2024-08-15T19:50:24Z ruleId: 8e361ee4328f4a3caf6caf3e664ed6fe. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
noxtec GmbH	2024-08-15 19:47:47 (3 weeks ago)	Port Scan detected from 45.61.59.211 (US/United States/-).	Port Scan
MKWServer	2024-08-15 03:17:42 (3 weeks ago)	(cpanel) Failed cPanel login from 45.61.59.211 (US/United States/-): 2 in the last 3600 secs; Ports: ... show more(cpanel) Failed cPanel login from 45.61.59.211 (US/United States/-): 2 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_TRIGGER; Logs: [2024-08-14 20:17:39 -0700] info [cpaneld] 45.61.59.211 - mkwserver "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mkwserver (has_cpuser_file failed) [2024-08-14 20:17:39 -0700] info [cpaneld] 45.61.59.211 - mkwservercom "POST /login/ HTTP/1.1" FAILED LOGIN cpaneld: invalid cpanel user mkwservercom (has_cpuser_file failed) show less	Brute-Force SSH
R.G.	2024-08-15 01:41:36 (3 weeks ago)	Port Scan detected from 45.61.59.211 (US/United States/-). 11 hits in the last 55 seconds; Ports: ... show morePort Scan detected from 45.61.59.211 (US/United States/-). 11 hits in the last 55 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Aug 15 03:40:40 kernel: Firewall: TCP_IN Blocked* IN=enp0s31f6 OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=45.61.59.211 DST=0.X.X.X L show less	Port Scan
Rizzy	2024-08-14 22:46:33 (3 weeks ago)	Multiple failed cPanel logins	Web App Attack
NotCool	2024-08-14 18:36:06 (3 weeks ago)	Port Scan detected from 45.61.59.211 (US/United States/-). 11 hits in the last 191 seconds; Ports: ... show morePort Scan detected from 45.61.59.211 (US/United States/-). 11 hits in the last 191 seconds; Ports: *; Direction: in; Trigger: PS_LIMIT show less	Brute-Force
iNetWorker	2024-08-14 17:40:58 (3 weeks ago)	trying to access non-authorized port	Port Scan
4server	2024-08-13 18:29:35 (3 weeks ago)	[2024-08-1320:29:23 0200]info[cpaneld]45.61.59.211-archi-box\"POST/login/HTTP/1.1\"FAILEDLOGINcpanel ... show more[2024-08-1320:29:23 0200]info[cpaneld]45.61.59.211-archi-box\"POST/login/HTTP/1.1\"FAILEDLOGINcpaneld:invalidcpaneluserarchi-box\(has_cpuser_filefailed\)[2024-08-1320:29:26 0200]info[cpaneld]45.61.59.211-archi-boxch\"POST/login/HTTP/1.1\"FAILEDLOGINcpaneld:invalidcpaneluserarchi-boxch\(has_cpuser_filefailed\)[2024-08-1320:29:26 0200]info[cpaneld]45.61.59.211-archi-bo\"POST/login/HTTP/1.1\"FAILEDLOGINcpaneld:invalidcpaneluserarchi-bo\(has_cpuser_filefailed\)[2024-08-1320:29:27 0200]info[whostmgrd]45.61.59.211-archi-box\"POST/login/HTTP/1.1\"FAILEDLOGINwhostmgrd:userpasswordincorrect[2024-08-1320:29:32 0200]info[whostmgrd]45.61.59.211-archi-boxch\"POST/login/HTTP/1.1\"FAILEDLOGINwhostmgrd:userpasswordincorrect show less	Port Scan Brute-Force Web App Attack