City: unknown
Region: unknown
Country: Indonesia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 202.93.217.207 | attack | [MonMar2316:48:29.8026612020][:error][pid11991:tid47054575503104][client202.93.217.207:45402][client202.93.217.207]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/usr/local/apache.ea3/conf/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles\(disablethisruleifyourequireaccesstofilesthatendwith.sql\)"][severity"CRITICAL"][hostname"ristorantedelponte.ch"][uri"/backup.sql"][unique_id"XnjaTapyk@mc506q5f8e1QAAAIc"][MonMar2316:48:32.5593742020][:error][pid12186:tid47054665565952][client202.93.217.207:54804][client202.93.217.207]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/usr/local/apache.ea3/conf/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles\(disablethisruleifyourequireaccesstofilesthatendwith |
2020-03-24 00:55:41 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 202.93.21.208
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12652
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;202.93.21.208. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024120801 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 09 04:31:50 CST 2024
;; MSG SIZE rcvd: 106208.21.93.202.in-addr.arpa domain name pointer ip-21-208.thamrin.net.id.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
208.21.93.202.in-addr.arpa name = ip-21-208.thamrin.net.id.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 67.21.85.189 | attack | spam |
2020-05-28 02:29:38 |
| 77.123.20.173 | attackspam | May 27 20:37:30 debian-2gb-nbg1-2 kernel: \[12863443.872658\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=77.123.20.173 DST=195.201.40.59 LEN=40 TOS=0x08 PREC=0x20 TTL=240 ID=49363 PROTO=TCP SPT=44807 DPT=4093 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-05-28 02:41:29 |
| 51.75.208.177 | attack | May 27 20:18:57 piServer sshd[16205]: Failed password for root from 51.75.208.177 port 56576 ssh2 May 27 20:22:27 piServer sshd[16632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.208.177 May 27 20:22:29 piServer sshd[16632]: Failed password for invalid user lisa from 51.75.208.177 port 40478 ssh2 ... |
2020-05-28 02:26:44 |
| 112.169.152.105 | attack | Auto Fail2Ban report, multiple SSH login attempts. |
2020-05-28 02:25:09 |
| 223.71.167.164 | attackbotsspam | [MK-Root1] Blocked by UFW |
2020-05-28 02:46:30 |
| 54.37.229.128 | attack | May 27 20:34:27 piServer sshd[18045]: Failed password for root from 54.37.229.128 port 39626 ssh2 May 27 20:37:37 piServer sshd[18434]: Failed password for root from 54.37.229.128 port 43874 ssh2 ... |
2020-05-28 02:58:06 |
| 114.67.72.164 | attackspam | $f2bV_matches |
2020-05-28 02:26:29 |
| 171.220.241.115 | attackbots | 2020-05-27T20:22:31.790820 sshd[488]: Invalid user contador from 171.220.241.115 port 51952 2020-05-27T20:22:31.805291 sshd[488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.220.241.115 2020-05-27T20:22:31.790820 sshd[488]: Invalid user contador from 171.220.241.115 port 51952 2020-05-27T20:22:34.130709 sshd[488]: Failed password for invalid user contador from 171.220.241.115 port 51952 ssh2 ... |
2020-05-28 02:28:35 |
| 212.64.71.132 | attackbots | SSH Brute-Force attacks |
2020-05-28 02:53:10 |
| 120.132.101.92 | attack | May 27 20:18:45 dev0-dcde-rnet sshd[16913]: Failed password for root from 120.132.101.92 port 56002 ssh2 May 27 20:23:10 dev0-dcde-rnet sshd[16954]: Failed password for root from 120.132.101.92 port 52880 ssh2 May 27 20:24:31 dev0-dcde-rnet sshd[16961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.132.101.92 |
2020-05-28 02:41:06 |
| 139.226.172.87 | attack | Lines containing failures of 139.226.172.87 May 27 18:29:52 keyhelp sshd[27527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.226.172.87 user=r.r May 27 18:29:53 keyhelp sshd[27527]: Failed password for r.r from 139.226.172.87 port 36496 ssh2 May 27 18:29:54 keyhelp sshd[27527]: Received disconnect from 139.226.172.87 port 36496:11: Bye Bye [preauth] May 27 18:29:54 keyhelp sshd[27527]: Disconnected from authenticating user r.r 139.226.172.87 port 36496 [preauth] May 27 18:49:32 keyhelp sshd[31141]: Invalid user turbeville from 139.226.172.87 port 55368 May 27 18:49:32 keyhelp sshd[31141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.226.172.87 May 27 18:49:34 keyhelp sshd[31141]: Failed password for invalid user turbeville from 139.226.172.87 port 55368 ssh2 May 27 18:49:34 keyhelp sshd[31141]: Received disconnect from 139.226.172.87 port 55368:11: Bye Bye [preauth] May 27 18:........ ------------------------------ |
2020-05-28 02:40:35 |
| 85.209.0.101 | attackspambots | "Unauthorized connection attempt on SSHD detected" |
2020-05-28 02:27:54 |
| 176.113.115.33 | attackspam | May 27 20:22:36 debian-2gb-nbg1-2 kernel: \[12862549.521500\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=176.113.115.33 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=29384 PROTO=TCP SPT=59606 DPT=6338 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-05-28 02:24:10 |
| 187.72.167.124 | attackspambots | Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) |
2020-05-28 02:50:23 |
| 190.85.34.203 | attackspam | May 27 20:34:43 eventyay sshd[1033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.85.34.203 May 27 20:34:45 eventyay sshd[1033]: Failed password for invalid user webmaster from 190.85.34.203 port 37390 ssh2 May 27 20:39:06 eventyay sshd[1218]: Failed password for root from 190.85.34.203 port 34618 ssh2 ... |
2020-05-28 02:40:16 |