City: Jakarta
Region: Jakarta Raya
Country: Indonesia
Internet Service Provider: XL
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 140.213.57.108 | attackproxy | Ini orang hack akunsaya |
2020-10-19 06:14:13 |
| 140.213.57.108 | attackproxy | Ini orang hack akunsaya |
2020-10-19 06:14:02 |
| 140.213.57.18 | attackspam | 1597290421 - 08/13/2020 05:47:01 Host: 140.213.57.18/140.213.57.18 Port: 445 TCP Blocked |
2020-08-13 19:29:36 |
| 140.213.54.192 | attackspam | xmlrpc attack |
2020-08-02 18:23:09 |
| 140.213.5.123 | attackspam | Automated report (2020-07-17T20:13:04+08:00). Referrer spam originating from this address detected (anti-crisis-seo.com). |
2020-07-17 22:43:40 |
| 140.213.54.29 | attack | 1594987994 - 07/17/2020 14:13:14 Host: 140.213.54.29/140.213.54.29 Port: 445 TCP Blocked |
2020-07-17 22:31:46 |
| 140.213.54.234 | attackbotsspam | 1591502250 - 06/07/2020 05:57:30 Host: 140.213.54.234/140.213.54.234 Port: 445 TCP Blocked |
2020-06-07 13:24:41 |
| 140.213.56.199 | attack | Email rejected due to spam filtering |
2020-03-20 19:24:14 |
| 140.213.57.245 | attackspambots | Honeypot attack, port: 445, PTR: PTR record not found |
2020-03-19 04:27:44 |
| 140.213.59.254 | attackbotsspam | [Mon Feb 17 11:54:56.501374 2020] [:error] [pid 11333:tid 140577555363584] [client 140.213.59.254:42402] [client 140.213.59.254] ModSecurity: Access denied with code 403 (phase 4). Pattern match "^5\\\\d{2}$" at RESPONSE_STATUS. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/RESPONSE-950-DATA-LEAKAGES.conf"] [line "118"] [id "950100"] [msg "The Application Returned a 500-Level Status Code"] [data "Matched Data: 500 found within RESPONSE_STATUS: 500"] [severity "ERROR"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-disclosure"] [tag "WASCTC/WASC-13"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.6"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-hujan-bulanan/prakiraan-curah-hujan-bulanan/555557608-prakiraan-bulanan-curah-hujan-bulan-januari-tahun-2020-update-dari-analisis-bulan-september-2019"] [unique_id "XkocoCKsjobM@NabR@cILAAAAAE"], refe
... |
2020-02-17 19:54:13 |
| 140.213.54.232 | attack | Unauthorized connection attempt from IP address 140.213.54.232 on Port 445(SMB) |
2020-02-16 10:11:12 |
| 140.213.58.77 | attackbots | Honeypot attack, port: 445, PTR: PTR record not found |
2020-02-02 03:06:24 |
| 140.213.51.40 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-01-14 00:37:19 |
| 140.213.56.19 | attack | 1577976858 - 01/02/2020 15:54:18 Host: 140.213.56.19/140.213.56.19 Port: 445 TCP Blocked |
2020-01-03 03:59:19 |
| 140.213.57.6 | attackbotsspam | Unauthorized connection attempt from IP address 140.213.57.6 on Port 445(SMB) |
2019-11-29 08:26:42 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.213.5.0
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59125
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;140.213.5.0. IN A
;; AUTHORITY SECTION:
. 329 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023020301 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 04 07:52:59 CST 2023
;; MSG SIZE rcvd: 104Host 0.5.213.140.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 0.5.213.140.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 62.1.216.128 | attackspambots | Automatic report - XMLRPC Attack |
2020-06-15 05:02:57 |
| 106.54.237.74 | attackspam | Invalid user bienvenue from 106.54.237.74 port 49294 |
2020-06-15 05:12:33 |
| 114.67.64.210 | attack | Invalid user teamspeak3 from 114.67.64.210 port 41130 |
2020-06-15 05:20:36 |
| 51.91.255.147 | attackspam | (sshd) Failed SSH login from 51.91.255.147 (FR/France/147.ip-51-91-255.eu): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 14 21:20:13 amsweb01 sshd[1543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.255.147 user=root Jun 14 21:20:15 amsweb01 sshd[1543]: Failed password for root from 51.91.255.147 port 33906 ssh2 Jun 14 21:36:49 amsweb01 sshd[3982]: Invalid user enlace from 51.91.255.147 port 34238 Jun 14 21:36:52 amsweb01 sshd[3982]: Failed password for invalid user enlace from 51.91.255.147 port 34238 ssh2 Jun 14 21:40:32 amsweb01 sshd[4673]: Invalid user pluto from 51.91.255.147 port 34898 |
2020-06-15 05:18:58 |
| 94.23.204.130 | attack | Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) |
2020-06-15 05:02:29 |
| 138.197.163.11 | attackspam | Jun 14 23:02:54 server sshd[9374]: Failed password for invalid user prem from 138.197.163.11 port 36626 ssh2 Jun 14 23:05:54 server sshd[12204]: Failed password for root from 138.197.163.11 port 36922 ssh2 Jun 14 23:09:02 server sshd[15585]: Failed password for invalid user dll from 138.197.163.11 port 37218 ssh2 |
2020-06-15 05:19:27 |
| 87.251.74.48 | attack | Failed password for invalid user from 87.251.74.48 port 59772 ssh2 |
2020-06-15 05:29:54 |
| 158.69.197.113 | attackbots | Invalid user vmuser from 158.69.197.113 port 38718 |
2020-06-15 05:06:31 |
| 217.91.144.95 | attackbots | $f2bV_matches |
2020-06-15 05:26:19 |
| 59.108.143.83 | attackbots | 2020-06-14T18:46:09.487696shield sshd\[2032\]: Invalid user password123 from 59.108.143.83 port 59218 2020-06-14T18:46:09.490484shield sshd\[2032\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.108.143.83 2020-06-14T18:46:12.021389shield sshd\[2032\]: Failed password for invalid user password123 from 59.108.143.83 port 59218 ssh2 2020-06-14T18:48:43.439641shield sshd\[2579\]: Invalid user rhodeisland from 59.108.143.83 port 42466 2020-06-14T18:48:43.443484shield sshd\[2579\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.108.143.83 |
2020-06-15 05:06:43 |
| 124.207.221.66 | attack | 2020-06-14T13:00:06.755815ionos.janbro.de sshd[111967]: Failed password for invalid user jyang from 124.207.221.66 port 46376 ssh2 2020-06-14T13:02:40.435261ionos.janbro.de sshd[111985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.207.221.66 user=root 2020-06-14T13:02:42.382396ionos.janbro.de sshd[111985]: Failed password for root from 124.207.221.66 port 58006 ssh2 2020-06-14T13:05:17.520898ionos.janbro.de sshd[112037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.207.221.66 user=root 2020-06-14T13:05:19.347068ionos.janbro.de sshd[112037]: Failed password for root from 124.207.221.66 port 41408 ssh2 2020-06-14T13:08:04.514892ionos.janbro.de sshd[112039]: Invalid user sunc from 124.207.221.66 port 53038 2020-06-14T13:08:04.563926ionos.janbro.de sshd[112039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.207.221.66 2020-06-14T13:08:04.514892ionos ... |
2020-06-15 05:22:57 |
| 156.203.91.159 | attack | Unauthorised access (Jun 15) SRC=156.203.91.159 LEN=40 TTL=53 ID=57006 TCP DPT=23 WINDOW=48959 SYN |
2020-06-15 05:33:22 |
| 62.173.145.14 | attack | TCP ports : 85 / 8089 |
2020-06-15 05:05:34 |
| 46.105.227.206 | attackspam | Jun 14 18:49:05 vps1 sshd[1608331]: Failed password for www-data from 46.105.227.206 port 51932 ssh2 Jun 14 18:52:04 vps1 sshd[1608433]: Invalid user samp from 46.105.227.206 port 54248 ... |
2020-06-15 05:28:56 |
| 180.76.246.38 | attackspam | 2020-06-14T21:26:48.866337shield sshd\[30799\]: Invalid user deploy from 180.76.246.38 port 46628 2020-06-14T21:26:48.870106shield sshd\[30799\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.246.38 2020-06-14T21:26:50.667226shield sshd\[30799\]: Failed password for invalid user deploy from 180.76.246.38 port 46628 ssh2 2020-06-14T21:28:51.083159shield sshd\[31224\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.246.38 user=root 2020-06-14T21:28:52.765034shield sshd\[31224\]: Failed password for root from 180.76.246.38 port 49924 ssh2 |
2020-06-15 05:40:02 |