City: Electra
Region: Texas
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.219.233.115 | attackbots | srvr2: (mod_security) mod_security (id:920350) triggered by 104.219.233.115 (PK/-/ip-104-219-233-115.host.datawagon.net): 1 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/10/09 22:46:16 [error] 3679#0: *39299 [client 104.219.233.115] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host' [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/owa"] [unique_id "160227637622.402546"] [ref "o0,18v24,18"], client: 104.219.233.115, [redacted] request: "GET /owa HTTP/1.1" [redacted] |
2020-10-11 02:08:25 |
| 104.219.233.3 | attackspam | June 25 2020, 00:48:03 [sshd] - Banned from the Mad Pony WordPress hosting platform by Fail2ban. |
2020-06-25 16:53:26 |
| 104.219.234.134 | attackbotsspam | Brute force blocker - service: proftpd1 - aantal: 120 - Wed Jun 6 17:00:19 2018 |
2020-04-30 18:10:06 |
| 104.219.234.134 | attack | Brute force blocker - service: proftpd1 - aantal: 120 - Wed Jun 6 17:00:19 2018 |
2020-02-24 05:18:14 |
| 104.219.234.53 | attackspam | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-19 22:28:21 |
| 104.219.232.114 | attackbots | Feb1114:47:42server4pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser[tonymotorcycle]Feb1114:47:45server4pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser[tonymotorcycle]Feb1114:47:50server4pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser[tonymotorcycle]Feb1114:47:56server4pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser[tonymotorcycle]Feb1114:48:00server4pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser[tonymotorcycle]Feb1114:48:06server4pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser[tonymotorcycle]Feb1114:48:12server4pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser[tonymotorcycle]Feb1114:48:16server4pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser[tonymotorcycle]Feb1114:48:22server4pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser[tonymotorcycle]Feb1114:48:28server4pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser |
2020-02-11 22:26:56 |
| 104.219.234.53 | attack | [httpReq only by ip - not DomainName] [bad UserAgent] |
2020-02-06 20:53:56 |
| 104.219.232.118 | attackbots | Bruteforce on ftp |
2019-12-14 18:15:25 |
| 104.219.234.53 | attackbotsspam | MultiHost/MultiPort Probe, Scan, Hack - |
2019-12-10 03:31:45 |
| 104.219.232.118 | attackbots | FTP: login Brute Force attempt, PTR: PTR record not found |
2019-12-07 17:46:19 |
| 104.219.232.118 | attackspambots | 3 failed ftp login attempts in 3600s |
2019-11-04 05:50:19 |
| 104.219.232.118 | attackbotsspam | 24.10.2019 22:11:40 - FTP-Server Bruteforce - Detected by FTP-Monster (https://www.elinox.de/FTP-Monster) |
2019-10-25 08:10:09 |
| 104.219.232.114 | attack | Sep810:08:04server2pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser[morgenstern-swiss]Sep810:08:09server2pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser[morgenstern-swiss]Sep810:08:15server2pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser[morgenstern-swiss]Sep810:08:19server2pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser[morgenstern-swiss]Sep810:08:25server2pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser[morgenstern-swiss] |
2019-09-09 02:06:37 |
| 104.219.234.62 | attack | 445/tcp 445/tcp 445/tcp... [2019-08-18/09-02]5pkt,1pt.(tcp) |
2019-09-02 13:09:57 |
| 104.219.232.114 | attack | Aug2116:32:04server4pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser[ekolessenergy]Aug2116:32:09server4pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser[ekolessenergy]Aug2116:32:13server4pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser[ekolessenergy]Aug2116:32:18server4pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser[ekolessenergy]Aug2116:32:24server4pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser[ekolessenergy]Aug2116:32:30server4pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser[ekolessenergy]Aug2116:32:34server4pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser[ekolessenergy]Aug2116:32:39server4pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser[ekolessenergy]Aug2116:32:44server4pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser[ekolessenergy]Aug2116:32:48server4pure-ftpd:\(\?@104.219.232.114\)[WARNING]Authenticationfailedforuser[ekolesse |
2019-08-22 05:43:00 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.219.23.246
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64516
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.219.23.246. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019091001 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Sep 11 01:31:39 CST 2019
;; MSG SIZE rcvd: 118246.23.219.104.in-addr.arpa domain name pointer tgm-104-219-23-246-pinnaclenetworksolutions.com.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
246.23.219.104.in-addr.arpa name = tgm-104-219-23-246-pinnaclenetworksolutions.com.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 192.241.229.52 | attackspam | attempted connection to port 8091 |
2020-03-05 20:26:00 |
| 188.170.219.221 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-03-05 20:29:40 |
| 46.101.19.133 | attack | Mar 5 02:26:03 tdfoods sshd\[28093\]: Invalid user telnet from 46.101.19.133 Mar 5 02:26:03 tdfoods sshd\[28093\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.19.133 Mar 5 02:26:04 tdfoods sshd\[28093\]: Failed password for invalid user telnet from 46.101.19.133 port 52360 ssh2 Mar 5 02:35:01 tdfoods sshd\[28946\]: Invalid user laraht from 46.101.19.133 Mar 5 02:35:01 tdfoods sshd\[28946\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.19.133 |
2020-03-05 20:59:35 |
| 148.70.136.94 | attack | Mar 5 18:25:15 areeb-Workstation sshd[14615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.136.94 Mar 5 18:25:16 areeb-Workstation sshd[14615]: Failed password for invalid user pi from 148.70.136.94 port 58053 ssh2 ... |
2020-03-05 20:56:01 |
| 123.16.32.186 | attackspam | 1583390210 - 03/05/2020 07:36:50 Host: 123.16.32.186/123.16.32.186 Port: 445 TCP Blocked |
2020-03-05 20:57:12 |
| 103.20.212.240 | attackspambots | Honeypot attack, port: 445, PTR: geoadrs.securehostdns.com. |
2020-03-05 20:45:13 |
| 193.232.163.2 | attackbots | Unauthorized connection attempt from IP address 193.232.163.2 on Port 445(SMB) |
2020-03-05 20:22:42 |
| 110.29.237.171 | attackbots | Port Scan |
2020-03-05 20:44:43 |
| 27.79.244.247 | attack | Unauthorized connection attempt from IP address 27.79.244.247 on Port 445(SMB) |
2020-03-05 20:27:51 |
| 31.5.167.12 | attack | 9530/tcp 9530/tcp [2020-02-25/03-05]2pkt |
2020-03-05 21:02:40 |
| 37.187.145.20 | attack | Mar 5 17:43:10 gw1 sshd[10910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.145.20 Mar 5 17:43:12 gw1 sshd[10910]: Failed password for invalid user admin from 37.187.145.20 port 59536 ssh2 ... |
2020-03-05 20:49:53 |
| 137.74.167.228 | attackbots | Mar 3 03:06:25 host sshd[25015]: Invalid user first from 137.74.167.228 port 40066 Mar 3 03:06:25 host sshd[25015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.167.228 Mar 3 03:06:27 host sshd[25015]: Failed password for invalid user first from 137.74.167.228 port 40066 ssh2 Mar 3 03:06:27 host sshd[25015]: Received disconnect from 137.74.167.228 port 40066:11: Bye Bye [preauth] Mar 3 03:06:27 host sshd[25015]: Disconnected from invalid user first 137.74.167.228 port 40066 [preauth] Mar 3 03:23:47 host sshd[25315]: User r.r from 137.74.167.228 not allowed because none of user's groups are listed in AllowGroups Mar 3 03:23:47 host sshd[25315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.167.228 user=r.r Mar 3 03:23:48 host sshd[25315]: Failed password for invalid user r.r from 137.74.167.228 port 47548 ssh2 Mar 3 03:23:48 host sshd[25315]: Received disconnect f........ ------------------------------- |
2020-03-05 20:53:38 |
| 106.75.34.41 | attackbotsspam | Jan 22 16:35:35 odroid64 sshd\[14432\]: User root from 106.75.34.41 not allowed because not listed in AllowUsers Jan 22 16:35:35 odroid64 sshd\[14432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.34.41 user=root ... |
2020-03-05 20:57:44 |
| 77.42.125.253 | attackspam | Automatic report - Port Scan Attack |
2020-03-05 20:21:55 |
| 103.10.230.171 | attackbots | 445/tcp 445/tcp 445/tcp... [2020-01-09/03-05]5pkt,1pt.(tcp) |
2020-03-05 20:56:19 |