City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 117.94.21.34 | attackspambots | srvr2: (mod_security) mod_security (id:920350) triggered by 117.94.21.34 (CN/-/-): 1 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/22 14:13:27 [error] 861202#0: *905407 [client 117.94.21.34] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host' [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/phpmyadmin/"] [unique_id "159809840790.964652"] [ref "o0,11v155,11"], client: 117.94.21.34, [redacted] request: "GET /phpmyadmin/ HTTP/1.1" [redacted] |
2020-08-22 23:22:18 |
| 117.94.217.40 | attackspambots | Honeypot attack, port: 5555, PTR: PTR record not found |
2020-03-31 00:10:38 |
| 117.94.213.87 | attackbots | Unauthorized connection attempt detected from IP address 117.94.213.87 to port 6656 [T] |
2020-01-30 18:29:04 |
| 117.94.215.171 | attackbotsspam | Unauthorized connection attempt detected from IP address 117.94.215.171 to port 6656 [T] |
2020-01-30 17:27:02 |
| 117.94.213.93 | attack | Unauthorized connection attempt detected from IP address 117.94.213.93 to port 6656 [T] |
2020-01-30 16:59:00 |
| 117.94.215.167 | attack | Unauthorized connection attempt detected from IP address 117.94.215.167 to port 6656 [T] |
2020-01-30 14:44:07 |
| 117.94.215.170 | attackspam | Unauthorized connection attempt detected from IP address 117.94.215.170 to port 6656 [T] |
2020-01-30 14:16:03 |
| 117.94.214.121 | attack | Unauthorized connection attempt detected from IP address 117.94.214.121 to port 6656 [T] |
2020-01-29 19:26:59 |
| 117.94.215.164 | attack | Unauthorized connection attempt detected from IP address 117.94.215.164 to port 6656 [T] |
2020-01-29 19:03:36 |
| 117.94.214.235 | attack | Unauthorized connection attempt detected from IP address 117.94.214.235 to port 6656 [T] |
2020-01-29 17:02:22 |
| 117.94.214.64 | attackbots | Unauthorized connection attempt detected from IP address 117.94.214.64 to port 6656 [T] |
2020-01-27 06:16:18 |
| 117.94.214.152 | attackbotsspam | Unauthorized connection attempt detected from IP address 117.94.214.152 to port 6656 [T] |
2020-01-27 05:55:39 |
| 117.94.218.211 | attackspam | Lines containing failures of 117.94.218.211 Nov 2 04:13:54 *** sshd[74751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.94.218.211 user=r.r Nov 2 04:13:55 *** sshd[74751]: Failed password for r.r from 117.94.218.211 port 1486 ssh2 Nov 2 04:14:01 *** sshd[74751]: message repeated 3 serveres: [ Failed password for r.r from 117.94.218.211 port 1486 ssh2] Nov 2 04:14:03 *** sshd[74751]: Failed password for r.r from 117.94.218.211 port 1486 ssh2 Nov 2 04:14:03 *** sshd[74751]: Connection reset by authenticating user r.r 117.94.218.211 port 1486 [preauth] Nov 2 04:14:03 *** sshd[74751]: PAM 4 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.94.218.211 user=r.r Nov 2 04:14:05 *** sshd[74760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.94.218.211 user=r.r Nov 2 04:14:06 *** sshd[74760]: Failed password for r.r from 117.94.218.211 port 2305 ssh2 ........ ------------------------------ |
2019-11-02 13:58:36 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.94.21.132
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47469
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;117.94.21.132. IN A
;; AUTHORITY SECTION:
. 322 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400
;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 23:22:32 CST 2022
;; MSG SIZE rcvd: 106Host 132.21.94.117.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 132.21.94.117.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 60.183.39.2 | attackbots | SSH login attempts with user root at 2020-01-02. |
2020-01-03 00:26:40 |
| 112.85.42.181 | attackbotsspam | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.181 user=root Failed password for root from 112.85.42.181 port 4517 ssh2 Failed password for root from 112.85.42.181 port 4517 ssh2 Failed password for root from 112.85.42.181 port 4517 ssh2 Failed password for root from 112.85.42.181 port 4517 ssh2 |
2020-01-03 00:22:01 |
| 46.209.20.2 | attackspam | SSH login attempts with user root at 2020-01-02. |
2020-01-03 00:49:59 |
| 45.178.128.4 | attack | SSH login attempts with user root at 2020-01-02. |
2020-01-03 00:54:07 |
| 46.105.244.1 | attack | Jan 2 22:13:41 lcl-usvr-02 sshd[5121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.105.244.1 user=root Jan 2 22:13:43 lcl-usvr-02 sshd[5121]: Failed password for root from 46.105.244.1 port 34159 ssh2 Jan 2 22:19:13 lcl-usvr-02 sshd[6254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.105.244.1 user=root Jan 2 22:19:15 lcl-usvr-02 sshd[6254]: Failed password for root from 46.105.244.1 port 48498 ssh2 Jan 2 22:22:30 lcl-usvr-02 sshd[6990]: Invalid user dongchon from 46.105.244.1 port 55996 ... |
2020-01-03 00:50:28 |
| 54.37.66.5 | attackbots | SSH login attempts with user root at 2020-01-02. |
2020-01-03 00:30:46 |
| 52.178.134.1 | attackbots | SSH login attempts with user root at 2020-01-02. |
2020-01-03 00:36:01 |
| 51.68.192.1 | attackbots | SSH login attempts with user root at 2020-01-02. |
2020-01-03 00:39:53 |
| 103.207.11.7 | attackbotsspam | Jan 2 14:48:00 ws26vmsma01 sshd[191172]: Failed password for root from 103.207.11.7 port 54984 ssh2 ... |
2020-01-03 00:20:09 |
| 54.38.81.1 | attack | SSH login attempts with user root at 2020-01-02. |
2020-01-03 00:29:07 |
| 201.20.88.10 | attackspambots | Jan 2 12:57:03 vps46666688 sshd[6350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.20.88.10 Jan 2 12:57:05 vps46666688 sshd[6350]: Failed password for invalid user user1 from 201.20.88.10 port 48288 ssh2 ... |
2020-01-03 00:31:13 |
| 46.239.139.1 | attack | SSH login attempts with user root at 2020-01-02. |
2020-01-03 00:49:30 |
| 5.236.193.1 | attackspambots | web Attack on Website at 2020-01-02. |
2020-01-03 00:42:12 |
| 5.0.3.139 | attack | Jan 2 15:56:33 [munged] sshd[15710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.0.3.139 |
2020-01-03 00:51:51 |
| 5.196.75.4 | attackbotsspam | SSH login attempts with user root at 2020-01-02. |
2020-01-03 00:42:34 |