City: unknown
Region: unknown
Country: unknown
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 119.42.122.239 | attack | srvr1: (mod_security) mod_security (id:942100) triggered by 119.42.122.239 (TH/-/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/21 12:03:52 [error] 482759#0: *840352 [client 119.42.122.239] ModSecurity: Access denied with code 406 (phase 2). [file "/etc/modsecurity.d/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "45"] [id "942100"] [rev ""] [msg ""] [redacted] [severity "0"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [redacted] [uri "/forum/viewthread.php"] [unique_id "159801143266.523321"] [ref ""], client: 119.42.122.239, [redacted] request: "GET /forum/viewthread.php?thread_id=1122%27+AND+++9747+%3D+0 HTTP/1.1" [redacted] |
2020-08-22 00:21:11 |
| 119.42.122.85 | attackspambots | Unauthorized IMAP connection attempt |
2020-06-10 19:09:26 |
| 119.42.122.151 | attack | Unauthorized connection attempt detected from IP address 119.42.122.151 to port 445 |
2019-12-23 15:08:49 |
| 119.42.122.196 | attackbots | 119.42.122.196 has been banned from MailServer for Abuse ... |
2019-10-12 20:16:45 |
| 119.42.122.244 | attackbots | 445/tcp [2019-06-27]1pkt |
2019-06-27 21:22:50 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.42.122.240
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18702
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;119.42.122.240. IN A
;; AUTHORITY SECTION:
. 359 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030900 1800 900 604800 86400
;; Query time: 72 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 14:37:13 CST 2022
;; MSG SIZE rcvd: 107Host 240.122.42.119.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 240.122.42.119.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 189.213.105.233 | attackbotsspam | Automatic report - Port Scan Attack |
2020-08-12 20:23:31 |
| 111.229.157.211 | attackbots | 2020-08-12 05:45:44,398 fail2ban.actions: WARNING [ssh] Ban 111.229.157.211 |
2020-08-12 20:11:08 |
| 217.27.117.136 | attack | SSH authentication failure x 6 reported by Fail2Ban ... |
2020-08-12 19:45:39 |
| 5.54.255.99 | attack | 1597203936 - 08/12/2020 05:45:36 Host: 5.54.255.99/5.54.255.99 Port: 23 TCP Blocked ... |
2020-08-12 20:18:03 |
| 200.109.47.172 | attackbots | Attempted connection to port 1433. |
2020-08-12 20:33:18 |
| 118.116.8.215 | attackspambots | Aug 12 09:36:43 ns382633 sshd\[417\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.116.8.215 user=root Aug 12 09:36:45 ns382633 sshd\[417\]: Failed password for root from 118.116.8.215 port 48075 ssh2 Aug 12 09:47:58 ns382633 sshd\[2332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.116.8.215 user=root Aug 12 09:47:59 ns382633 sshd\[2332\]: Failed password for root from 118.116.8.215 port 36833 ssh2 Aug 12 09:52:56 ns382633 sshd\[3241\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.116.8.215 user=root |
2020-08-12 19:45:59 |
| 180.126.162.118 | attack | Lines containing failures of 180.126.162.118 Aug 12 05:39:13 nbi-636 sshd[23249]: Bad protocol version identification '' from 180.126.162.118 port 57098 Aug 12 05:39:15 nbi-636 sshd[23250]: Invalid user plexuser from 180.126.162.118 port 57175 Aug 12 05:39:15 nbi-636 sshd[23250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.126.162.118 Aug 12 05:39:18 nbi-636 sshd[23250]: Failed password for invalid user plexuser from 180.126.162.118 port 57175 ssh2 Aug 12 05:39:19 nbi-636 sshd[23250]: Connection closed by invalid user plexuser 180.126.162.118 port 57175 [preauth] Aug 12 05:39:20 nbi-636 sshd[23276]: Invalid user admin from 180.126.162.118 port 57781 Aug 12 05:39:21 nbi-636 sshd[23276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.126.162.118 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=180.126.162.118 |
2020-08-12 20:18:29 |
| 78.85.39.152 | attackbotsspam | Unauthorized connection attempt from IP address 78.85.39.152 on Port 445(SMB) |
2020-08-12 20:09:52 |
| 218.29.54.88 | attackbotsspam | fail2ban |
2020-08-12 19:57:16 |
| 201.97.114.101 | attackbotsspam | Attempted connection to port 23. |
2020-08-12 20:31:25 |
| 218.92.0.171 | attackspam | Aug 12 13:46:11 vmanager6029 sshd\[12772\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.171 user=root Aug 12 13:46:14 vmanager6029 sshd\[12770\]: error: PAM: Authentication failure for root from 218.92.0.171 Aug 12 13:46:16 vmanager6029 sshd\[12773\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.171 user=root |
2020-08-12 19:55:36 |
| 118.112.112.250 | attackbots | Attempted connection to port 445. |
2020-08-12 20:06:19 |
| 201.68.224.51 | attackbots | Unauthorized connection attempt from IP address 201.68.224.51 on Port 445(SMB) |
2020-08-12 19:51:52 |
| 171.248.105.177 | attackbots | Attempted connection to port 445. |
2020-08-12 20:05:20 |
| 91.185.251.210 | attackspam | Attempted connection to ports 445, 1433. |
2020-08-12 19:56:50 |