City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.105.54.76 | attackspam | srvr1: (mod_security) mod_security (id:942100) triggered by 103.105.54.76 (ID/-/103-105-54-76.megadata.net.id): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/21 12:05:20 [error] 482759#0: *840549 [client 103.105.54.76] ModSecurity: Access denied with code 406 (phase 2). [file "/etc/modsecurity.d/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "45"] [id "942100"] [rev ""] [msg ""] [redacted] [severity "0"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [redacted] [uri "/forum/viewthread.php"] [unique_id "159801152043.928417"] [ref ""], client: 103.105.54.76, [redacted] request: "GET /forum/viewthread.php?thread_id=1122%27%29+OR+++%288559%3D0 HTTP/1.1" [redacted] |
2020-08-21 23:06:22 |
| 103.105.54.137 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-19 02:37:27 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.105.54.109
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44607
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;103.105.54.109. IN A
;; AUTHORITY SECTION:
. 599 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022051801 1800 900 604800 86400
;; Query time: 70 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu May 19 02:29:23 CST 2022
;; MSG SIZE rcvd: 107109.54.105.103.in-addr.arpa domain name pointer 103-105-54-109.megadata.net.id.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
109.54.105.103.in-addr.arpa name = 103-105-54-109.megadata.net.id.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 101.64.176.20 | attackbotsspam | ET CINS Active Threat Intelligence Poor Reputation IP group 97 - port: 1433 proto: TCP cat: Misc Attack |
2019-11-11 02:01:11 |
| 89.248.169.12 | attack | Portscan or hack attempt detected by psad/fwsnort |
2019-11-11 01:50:59 |
| 159.203.201.126 | attack | 159.203.201.126 was recorded 5 times by 5 hosts attempting to connect to the following ports: 118. Incident counter (4h, 24h, all-time): 5, 5, 49 |
2019-11-11 02:18:35 |
| 50.76.95.188 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 39 - port: 23 proto: TCP cat: Misc Attack |
2019-11-11 02:06:32 |
| 111.160.205.58 | attackbots | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2019-11-11 02:20:55 |
| 95.79.34.52 | attackbotsspam | ET CINS Active Threat Intelligence Poor Reputation IP group 94 - port: 1433 proto: TCP cat: Misc Attack |
2019-11-11 02:22:20 |
| 115.236.61.163 | attack | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2019-11-11 02:19:58 |
| 94.191.20.179 | attackspambots | Nov 10 17:08:22 zooi sshd[29977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.20.179 Nov 10 17:08:24 zooi sshd[29977]: Failed password for invalid user ftpuser from 94.191.20.179 port 37332 ssh2 ... |
2019-11-11 01:50:09 |
| 185.175.93.3 | attackspam | Multiport scan : 4 ports scanned 3400 3402 3409 3411 |
2019-11-11 01:57:15 |
| 185.175.93.101 | attackspambots | Multiport scan : 19 ports scanned 5900 5901 5902 5903(x2) 5904 5905 5906(x2) 5907(x2) 5909 5911 5912 5913 5914(x2) 5915 5916 5917 5918 5919 5920 |
2019-11-11 01:56:57 |
| 199.74.248.13 | attack | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2019-11-11 02:11:52 |
| 185.209.0.18 | attack | Multiport scan : 32 ports scanned 4300 4301 4312 4313 4315 4317 4330 4336 4337 4339 4340 4342 4344 4345 4348 4349 4351 4352 4354 4359 4370 4372 4374 4377 4380 4383 4386 4390 4393 4396 4398 4399 |
2019-11-11 02:14:43 |
| 185.209.0.89 | attackspambots | Multiport scan : 27 ports scanned 8900 8902 8904 8906 8908 8909 8912 8913 8918 8919 8920 8921 8925 8926 8931 8932 8933 8935 8936 9903 9904 9917 9918 9934 9968 9995 9998 |
2019-11-11 02:13:52 |
| 81.22.45.203 | attackspambots | Nov 9 09:20:38 SRC=81.22.45.203 PROTO=TCP SPT=55932 DPT=11016 Nov 9 10:04:43 SRC=81.22.45.203 PROTO=TCP SPT=55932 DPT=11014 Nov 9 13:46:39 SRC=81.22.45.203 PROTO=TCP SPT=55932 DPT=11011 Nov 9 14:59:36 SRC=81.22.45.203 PROTO=TCP SPT=55932 DPT=11012 Nov 9 15:14:37 SRC=81.22.45.203 PROTO=TCP SPT=55932 DPT=11020 |
2019-11-11 02:26:03 |
| 103.206.129.101 | attackspam | Fail2Ban Ban Triggered |
2019-11-11 02:00:53 |