User CRSouza
joined AbuseIPDB in July 2023 and has reported 8 IP
addresses.
Standing (weight) is
good.
INACTIVE USER
| IP |
Date |
Comment |
Categories |
|
🇹🇷
89.252.135.141
|
|
Brute force attempt
Message meets Alert condition
date=2024-04-10 time=02:41:37 devname= devid= ...
show more
Brute force attempt
Message meets Alert condition
date=2024-04-10 time=02:41:37 devname= devid= eventtime=1712727697333653900 tz="-0300" logid="0101037124" type="event" subtype="vpn" level="error" vd="root" logdesc="IPsec phase 1 error" msg="IPsec phase 1 error" action="negotiate" remip=89.252.135.141 locip=187.xx.1xx.2xx remport=500 locport=500 outintf="wan1" cookies="dfd86ea51ce96d51/0000000000000000" user="N/A" group="N/A" useralt="N/A" xauthuser="N/A" xauthgroup="N/A" assignip=N/A vpntunnel="N/A" status="negotiate_error" reason="peer SA proposal not match local policy" advpnsc=0
show less
|
Brute-Force
|
|
🇺🇸
44.202.230.48
|
|
Message meets Alert condition
date=2023-12-07 time=00:40:07 devname= devid= eventtime=1701920406721 ...
show more
Message meets Alert condition
date=2023-12-07 time=00:40:07 devname= devid= eventtime=1701920406721107050 tz="-0300" logid="0101037128" type="event" subtype="vpn" level="error" vd="root" logdesc="Progress IPsec phase 1" msg="progress IPsec phase 1" action="negotiate" remip=44.202.230.48 locip=XXX.XXX.XXX.XXX remport=XXX locport=XXX outintf="wan1" cookies="892294cc3435ee86/0000000000000000" user="N/A" group="N/A" useralt="N/A" xauthuser="N/A" xauthgroup="N/A" assignip=N/A vpntunnel="N/A" status="failure" init="remote" mode="main" dir="inbound" stage=1 role="responder" result="ERROR" advpnsc=0
show less
|
VPN IP
Port Scan
Hacking
Brute-Force
SSH
|
|
🇺🇸
152.1.16.190
|
|
Message meets Alert condition
date=2023-12-07 time=00:40:08 devname= devid=eventtime=17019204077791 ...
show more
Message meets Alert condition
date=2023-12-07 time=00:40:08 devname= devid=eventtime=1701920407779185529 tz="-0300" logid="0101037128" type="event" subtype="vpn" level="error" vd="root" logdesc="Progress IPsec phase 1" msg="progress IPsec phase 1" action="negotiate" remip=152.1.16.190 locip=XXX.XXX.XXX.XXX remport=XXX locport=XXX outintf="wan1" cookies="e4d304902cb9b73e/0000000000000000" user="N/A" group="N/A" useralt="N/A" xauthuser="N/A" xauthgroup="N/A" assignip=N/A vpntunnel="N/A" status="failure" init="remote" mode="main" dir="inbound" stage=1 role="responder" result="ERROR" advpnsc=0
show less
|
VPN IP
Port Scan
Hacking
Brute-Force
SSH
|
|
🇺🇸
150.136.172.212
|
|
Message meets Alert condition
date=2023-12-06 time=18:37:48 devname= devid= eventtime=1701898668348 ...
show more
Message meets Alert condition
date=2023-12-06 time=18:37:48 devname= devid= eventtime=1701898668348610610 tz="-0300" logid="0101037128" type="event" subtype="vpn" level="error" vd="root" logdesc="Progress IPsec phase 1" msg="progress IPsec phase 1" action="negotiate" remip=150.136.172.212 locip=XXX.XXX.XXX.XXX remport=500 locport=XXX outintf="wan1" cookies="101a2f25818d8b5b/0000000000000000" user="N/A" group="N/A" useralt="N/A" xauthuser="N/A" xauthgroup="N/A" assignip=N/A vpntunnel="N/A" status="failure" init="remote" exch="SA_INIT" dir="inbound" role="responder" result="ERROR" version="IKEv2" advpnsc=0
show less
|
Hacking
Brute-Force
SSH
|
|
🇳🇱
84.54.51.40
|
|
VPN failure authentication
Message meets Alert condition
date=2023-08-02 time=01:32:01 devname=d ...
show more
VPN failure authentication
Message meets Alert condition
date=2023-08-02 time=01:32:01 devname=devid=eventtime=1690950720840172520 tz="-0300" logid="0101037128" type="event" subtype="vpn" level="error" vd="root" logdesc="Progress IPsec phase 1" msg="progress IPsec phase 1" action="negotiate" remip=84.54.51.40 locip=remport=locport=outintf="" cookies="0011223344556677/0000000000000000" user="N/A" group="N/A" useralt="N/A" xauthuser="N/A" xauthgroup="N/A" assignip=N/A vpntunnel="N/A" status="failure" init="remote" mode="main" dir="inbound" stage=1 role="responder" result="ERROR" advpnsc=0
show less
|
VPN IP
|
|
🇺🇸
192.155.80.45
|
|
Firewall Alerts
Message meets Alert condition
date=2023-07-25 time=07:03:15 devname= devid=event ...
show more
Firewall Alerts
Message meets Alert condition
date=2023-07-25 time=07:03:15 devname= devid=eventtime=1690279395463349640 tz="-0300" logid="0101037128" type="event" subtype="vpn" level="error" vd="root" logdesc="Progress IPsec phase 1" msg="progress IPsec phase 1" action="negotiate" remip=192.155.80.45 locip= remport=500 locport=500 outintf="wan2" cookies="c69a129b35acb4cb/0000000000000000" user="N/A" group="N/A" useralt="N/A" xauthuser="N/A" xauthgroup="N/A" assignip=N/A vpntunnel="N/A" status="failure" init="remote" mode="main" dir="inbound" stage=1 role="responder" result="ERROR" advpnsc=0
show less
|
Port Scan
Brute-Force
Exploited Host
|
|
🇺🇸
162.243.144.26
|
|
Message meets Alert condition
date=2023-07-13 time=18:22:46 devname=devid=eventtime=168928336539020 ...
show more
Message meets Alert condition
date=2023-07-13 time=18:22:46 devname=devid=eventtime=1689283365390201600 tz="-0300" logid="0101037124" type="event" subtype="vpn" level="error" vd="root" logdesc="IPsec phase 1 error" msg="IPsec phase 1 error" action="negotiate" remip=162.243.144.26 locip=remport=locport=outintf="" cookies="8a0833df826d9043/0000000000000000" user="test" group="N/A" useralt="N/A" xauthuser="N/A" xauthgroup="N/A" assignip=N/A vpntunnel="N/A" status="negotiate_error" reason="peer SA proposal not match local policy" peer_notif="NOT-APPLICABLE" advpnsc=0
show less
|
Port Scan
Brute-Force
|