City: Surabaya
Region: East Java
Country: Indonesia
Internet Service Provider: unknown
Hostname: unknown
Organization: PT Excelcomindo Pratama (Network Access Provider)
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 112.215.242.89 | attackspambots | [Mon Feb 24 04:49:17.959638 2020] [:error] [pid 25513:tid 140455679293184] [client 112.215.242.89:51656] [client 112.215.242.89] ModSecurity: Access denied with code 403 (phase 4). Pattern match "^5\\\\d{2}$" at RESPONSE_STATUS. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/RESPONSE-950-DATA-LEAKAGES.conf"] [line "118"] [id "950100"] [msg "The Application Returned a 500-Level Status Code"] [data "Matched Data: 500 found within RESPONSE_STATUS: 500"] [severity "ERROR"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-disclosure"] [tag "WASCTC/WASC-13"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.6"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir/555557871-prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-bulan-maret-dasarian-i-tanggal-1-10-tahun-2020-update-20-februari-2020"] [unique_id "XlL
... |
2020-02-24 06:11:03 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.215.242.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31388
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;112.215.242.16. IN A
;; AUTHORITY SECTION:
. 215 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019062704 1800 900 604800 86400
;; Query time: 109 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jun 28 09:41:52 CST 2019
;; MSG SIZE rcvd: 118Host 16.242.215.112.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
*** Can't find 16.242.215.112.in-addr.arpa.: No answer
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 144.76.173.246 | attack | Invalid user root1 from 144.76.173.246 port 51118 |
2020-03-23 02:10:31 |
| 13.68.139.224 | attackbotsspam | Invalid user mateo from 13.68.139.224 port 41292 |
2020-03-23 01:31:09 |
| 222.186.30.57 | attack | SSH bruteforce (Triggered fail2ban) |
2020-03-23 01:37:00 |
| 41.135.122.130 | attackbotsspam | Honeypot attack, port: 5555, PTR: 41-135-122-130.dsl.mweb.co.za. |
2020-03-23 01:39:16 |
| 185.36.81.23 | attackspam | 2020-03-22T18:02:59.214818www postfix/smtpd[22118]: warning: unknown[185.36.81.23]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2020-03-22T18:21:20.453233www postfix/smtpd[22929]: warning: unknown[185.36.81.23]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2020-03-22T18:42:50.224165www postfix/smtpd[23505]: warning: unknown[185.36.81.23]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-03-23 01:47:13 |
| 117.66.243.77 | attackspam | Invalid user vermont from 117.66.243.77 port 42724 |
2020-03-23 02:13:19 |
| 179.218.140.155 | attack | Honeypot attack, port: 5555, PTR: b3da8c9b.virtua.com.br. |
2020-03-23 01:34:39 |
| 139.59.190.69 | attack | Mar 22 14:22:37 vps46666688 sshd[23450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.190.69 Mar 22 14:22:39 vps46666688 sshd[23450]: Failed password for invalid user yy from 139.59.190.69 port 57698 ssh2 ... |
2020-03-23 01:45:09 |
| 137.74.172.1 | attack | Mar 22 14:33:09 game-panel sshd[17023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.172.1 Mar 22 14:33:10 game-panel sshd[17023]: Failed password for invalid user marnina from 137.74.172.1 port 55018 ssh2 Mar 22 14:39:55 game-panel sshd[17256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.172.1 |
2020-03-23 01:33:45 |
| 41.46.85.249 | attack | Honeypot attack, port: 445, PTR: host-41.46.85.249.tedata.net. |
2020-03-23 01:51:36 |
| 123.194.129.94 | attack | Honeypot attack, port: 445, PTR: 123-194-129-94.dynamic.kbronet.com.tw. |
2020-03-23 01:36:08 |
| 196.27.127.61 | attackspambots | SSH Brute-Force Attack |
2020-03-23 01:49:03 |
| 51.77.41.246 | attackspambots | 2020-03-20 16:34:45 server sshd[73338]: Failed password for invalid user vmail from 51.77.41.246 port 36074 ssh2 |
2020-03-23 01:33:00 |
| 156.196.53.237 | attack | Invalid user admin from 156.196.53.237 port 40910 |
2020-03-23 02:09:58 |
| 190.66.3.92 | attack | Invalid user po from 190.66.3.92 port 55292 |
2020-03-23 02:02:20 |