City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 129.205.135.171 | attackspam | srvr1: (mod_security) mod_security (id:942100) triggered by 129.205.135.171 (ZA/-/129-205-135-171.dynamic.macrolan.co.za): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/21 12:05:05 [error] 482759#0: *840539 [client 129.205.135.171] ModSecurity: Access denied with code 406 (phase 2). [file "/etc/modsecurity.d/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "45"] [id "942100"] [rev ""] [msg ""] [redacted] [severity "0"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [redacted] [uri "/forum/viewthread.php"] [unique_id "159801150536.056070"] [ref ""], client: 129.205.135.171, [redacted] request: "GET /forum/viewthread.php?thread_id=1122%29%29%29+OR+++%28%28%284032%3D0 HTTP/1.1" [redacted] |
2020-08-21 23:19:46 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 129.205.135.226
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18576
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;129.205.135.226. IN A
;; AUTHORITY SECTION:
. 108 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030802 1800 900 604800 86400
;; Query time: 75 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 04:45:53 CST 2022
;; MSG SIZE rcvd: 108226.135.205.129.in-addr.arpa domain name pointer 129-205-135-226.dynamic.macrolan.co.za.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
226.135.205.129.in-addr.arpa name = 129-205-135-226.dynamic.macrolan.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 191.178.165.211 | attackbotsspam | illegal hacking into Ubisoft with compromised details |
2020-04-09 08:43:20 |
| 159.65.62.216 | attack | 2020-04-08T23:44:58.967603amanda2.illicoweb.com sshd\[21561\]: Invalid user test6 from 159.65.62.216 port 37736 2020-04-08T23:44:58.970305amanda2.illicoweb.com sshd\[21561\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.62.216 2020-04-08T23:45:01.321043amanda2.illicoweb.com sshd\[21561\]: Failed password for invalid user test6 from 159.65.62.216 port 37736 ssh2 2020-04-08T23:48:54.224804amanda2.illicoweb.com sshd\[21958\]: Invalid user postgres from 159.65.62.216 port 53502 2020-04-08T23:48:54.227544amanda2.illicoweb.com sshd\[21958\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.62.216 ... |
2020-04-09 08:19:08 |
| 193.112.16.245 | attackspambots | Apr 08 17:15:42 askasleikir sshd[36362]: Failed password for git from 193.112.16.245 port 55404 ssh2 Apr 08 17:36:51 askasleikir sshd[36514]: Failed password for invalid user testftp from 193.112.16.245 port 60824 ssh2 Apr 08 17:43:36 askasleikir sshd[36571]: Failed password for invalid user postgres from 193.112.16.245 port 58288 ssh2 |
2020-04-09 08:37:59 |
| 157.245.62.87 | attack | 157.245.62.87 - - \[08/Apr/2020:23:48:47 +0200\] "POST /wp-login.php HTTP/1.0" 200 7427 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 157.245.62.87 - - \[08/Apr/2020:23:48:49 +0200\] "POST /wp-login.php HTTP/1.0" 200 7242 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 157.245.62.87 - - \[08/Apr/2020:23:48:52 +0200\] "POST /wp-login.php HTTP/1.0" 200 7239 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2020-04-09 08:20:32 |
| 156.96.155.234 | attack | Port Scanning Detected |
2020-04-09 08:08:42 |
| 111.229.36.119 | attackbots | k+ssh-bruteforce |
2020-04-09 08:35:36 |
| 111.68.98.152 | attack | Apr 9 02:19:45 minden010 sshd[10683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.68.98.152 Apr 9 02:19:47 minden010 sshd[10683]: Failed password for invalid user es from 111.68.98.152 port 60448 ssh2 Apr 9 02:26:13 minden010 sshd[13332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.68.98.152 ... |
2020-04-09 08:27:52 |
| 106.54.40.11 | attack | SSH Brute-Force reported by Fail2Ban |
2020-04-09 08:44:24 |
| 178.62.248.130 | attackbots | Apr 8 22:49:49 ip-172-31-61-156 sshd[1019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.248.130 Apr 8 22:49:49 ip-172-31-61-156 sshd[1019]: Invalid user user from 178.62.248.130 Apr 8 22:49:51 ip-172-31-61-156 sshd[1019]: Failed password for invalid user user from 178.62.248.130 port 43924 ssh2 Apr 8 22:56:20 ip-172-31-61-156 sshd[1554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.248.130 user=root Apr 8 22:56:22 ip-172-31-61-156 sshd[1554]: Failed password for root from 178.62.248.130 port 54668 ssh2 ... |
2020-04-09 08:08:04 |
| 152.136.190.55 | attackbots | Apr 9 04:46:40 itv-usvr-01 sshd[4714]: Invalid user www from 152.136.190.55 Apr 9 04:46:40 itv-usvr-01 sshd[4714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.190.55 Apr 9 04:46:40 itv-usvr-01 sshd[4714]: Invalid user www from 152.136.190.55 Apr 9 04:46:42 itv-usvr-01 sshd[4714]: Failed password for invalid user www from 152.136.190.55 port 49708 ssh2 Apr 9 04:52:26 itv-usvr-01 sshd[4982]: Invalid user licongcong from 152.136.190.55 |
2020-04-09 08:16:05 |
| 183.89.243.167 | attackspam | Brute force attempt |
2020-04-09 08:28:21 |
| 122.51.183.135 | attackbots | (sshd) Failed SSH login from 122.51.183.135 (CN/China/-): 5 in the last 3600 secs |
2020-04-09 08:24:09 |
| 198.181.37.245 | attackspam | (sshd) Failed SSH login from 198.181.37.245 (US/United States/198.181.37.245.16clouds.com): 5 in the last 3600 secs |
2020-04-09 08:42:46 |
| 126.36.29.9 | attackbots | Apr 8 23:48:33 prox sshd[22802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=126.36.29.9 Apr 8 23:48:33 prox sshd[22803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=126.36.29.9 |
2020-04-09 08:35:11 |
| 162.248.52.82 | attack | Apr 9 02:27:02 silence02 sshd[25830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.248.52.82 Apr 9 02:27:03 silence02 sshd[25830]: Failed password for invalid user git from 162.248.52.82 port 33744 ssh2 Apr 9 02:29:15 silence02 sshd[25992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.248.52.82 |
2020-04-09 08:34:29 |