City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.219.233.115 | attackbots | srvr2: (mod_security) mod_security (id:920350) triggered by 104.219.233.115 (PK/-/ip-104-219-233-115.host.datawagon.net): 1 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/10/09 22:46:16 [error] 3679#0: *39299 [client 104.219.233.115] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host' [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/owa"] [unique_id "160227637622.402546"] [ref "o0,18v24,18"], client: 104.219.233.115, [redacted] request: "GET /owa HTTP/1.1" [redacted] |
2020-10-11 02:08:25 |
| 104.219.233.3 | attackspam | June 25 2020, 00:48:03 [sshd] - Banned from the Mad Pony WordPress hosting platform by Fail2ban. |
2020-06-25 16:53:26 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 104.219.232.0 - 104.219.239.255
CIDR: 104.219.232.0/21
NetName: NET-104-219-232-0-1
NetHandle: NET-104-219-232-0-1
Parent: NET104 (NET-104-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: DataWagon LLC (DL-167)
RegDate: 2014-10-31
Updated: 2017-11-28
Ref: https://rdap.arin.net/registry/ip/104.219.232.0
OrgName: DataWagon LLC
OrgId: DL-167
Address: 3 Mead Pond Lane
City: Rye
StateProv: NY
PostalCode: 10580
Country: US
RegDate: 2014-03-04
Updated: 2024-11-25
Comment: https://datawagon.net
Ref: https://rdap.arin.net/registry/entity/DL-167
OrgNOCHandle: NOC31754-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-914-495-1661
OrgNOCEmail: noc@datawagon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC31754-ARIN
OrgTechHandle: NOC31754-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-914-495-1661
OrgTechEmail: noc@datawagon.com
OrgTechRef: https://rdap.arin.net/registry/entity/NOC31754-ARIN
OrgAbuseHandle: ABUSE4637-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-914-495-1661
OrgAbuseEmail: abuse@datawagon.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE4637-ARIN
# end
# start
NetRange: 104.219.233.0 - 104.219.233.255
CIDR: 104.219.233.0/24
NetName: NAVICOSOFT
NetHandle: NET-104-219-233-0-1
Parent: NET-104-219-232-0-1 (NET-104-219-232-0-1)
NetType: Reallocated
OriginAS:
Organization: Navicosoft Inc. (NAVIC-4)
RegDate: 2019-05-29
Updated: 2019-05-29
Ref: https://rdap.arin.net/registry/ip/104.219.233.0
OrgName: Navicosoft Inc.
OrgId: NAVIC-4
Address: Level 23, Collins Square Tower Five, 727 Collins Street
City: Melbourne
StateProv: Victoria
PostalCode: 3008
Country: AU
RegDate: 2019-05-29
Updated: 2022-08-04
Ref: https://rdap.arin.net/registry/entity/NAVIC-4
OrgTechHandle: MUNIR4-ARIN
OrgTechName: Munir, Asif
OrgTechPhone: +61493077412
OrgTechEmail: vender@navicosoft.com
OrgTechRef: https://rdap.arin.net/registry/entity/MUNIR4-ARIN
OrgAbuseHandle: MUNIR4-ARIN
OrgAbuseName: Munir, Asif
OrgAbusePhone: +61493077412
OrgAbuseEmail: vender@navicosoft.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/MUNIR4-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.219.233.176
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58612
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.219.233.176. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025120101 1800 900 604800 86400
;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 02 08:51:55 CST 2025
;; MSG SIZE rcvd: 108176.233.219.104.in-addr.arpa domain name pointer cybershieldsafe.click.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
176.233.219.104.in-addr.arpa name = cybershieldsafe.click.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 115.110.123.118 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-03 22:29:36,165 INFO [shellcode_manager] (115.110.123.118) no match, writing hexdump (1a3ad0581f51efbadf00133124225d0c :2492543) - MS17010 (EternalBlue) |
2019-07-06 10:26:50 |
| 187.86.200.34 | attackbots | TCP port 445 (SMB) attempt blocked by firewall. [2019-07-06 03:07:16] |
2019-07-06 10:23:35 |
| 117.131.215.170 | attackspam | CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found |
2019-07-06 10:06:11 |
| 34.214.111.177 | attackspam | Go-http-client/1.1 |
2019-07-06 10:40:52 |
| 182.75.132.182 | attackbotsspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-05 22:55:35,618 INFO [amun_request_handler] PortScan Detected on Port: 445 (182.75.132.182) |
2019-07-06 10:11:45 |
| 171.105.47.101 | attack | RDP Bruteforce |
2019-07-06 10:46:37 |
| 183.83.135.121 | attackbots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-05 15:58:48,727 INFO [shellcode_manager] (183.83.135.121) no match, writing hexdump (666c839490f463e67c45cee65a1993fa :2177599) - MS17010 (EternalBlue) |
2019-07-06 10:39:25 |
| 114.95.169.208 | attack | SMB Server BruteForce Attack |
2019-07-06 10:48:03 |
| 166.88.18.98 | attackspambots | CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found |
2019-07-06 10:26:16 |
| 200.228.25.70 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-05 16:04:00,858 INFO [amun_request_handler] PortScan Detected on Port: 445 (200.228.25.70) |
2019-07-06 10:46:13 |
| 45.248.133.36 | attackspambots | Jul 5 22:04:49 MK-Soft-VM3 sshd\[20479\]: Invalid user alfreda from 45.248.133.36 port 55657 Jul 5 22:04:49 MK-Soft-VM3 sshd\[20479\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.248.133.36 Jul 5 22:04:51 MK-Soft-VM3 sshd\[20479\]: Failed password for invalid user alfreda from 45.248.133.36 port 55657 ssh2 ... |
2019-07-06 10:31:01 |
| 36.74.190.238 | attackspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-05 16:06:16,703 INFO [amun_request_handler] PortScan Detected on Port: 445 (36.74.190.238) |
2019-07-06 10:31:31 |
| 188.162.40.95 | attackspambots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-05 16:04:46,486 INFO [amun_request_handler] PortScan Detected on Port: 445 (188.162.40.95) |
2019-07-06 10:38:55 |
| 61.133.218.19 | attackbotsspam | 'IP reached maximum auth failures for a one day block' |
2019-07-06 10:20:42 |
| 218.92.0.195 | attackbots | 2019-07-06T01:40:10.674598abusebot-3.cloudsearch.cf sshd\[9475\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.195 user=root |
2019-07-06 10:01:55 |