City: Zurich
Region: Zurich
Country: Switzerland
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 46.19.141.85 | attackspam | 46.19.141.85 - - \[10/Sep/2020:18:57:17 +0200\] "GET /index.php\?id=-1714%25%27%2F%2A\&id=%2A%2FOR%2F%2A\&id=%2A%2F3049%3D%28SELECT%2F%2A\&id=%2A%2F%28CASE%2F%2A\&id=%2A%2FWHEN%2F%2A\&id=%2A%2F%283049%3D6643%29%2F%2A\&id=%2A%2FTHEN%2F%2A\&id=%2A%2F3049%2F%2A\&id=%2A%2FELSE%2F%2A\&id=%2A%2F%28SELECT%2F%2A\&id=%2A%2F6643%2F%2A\&id=%2A%2FUNION%2F%2A\&id=%2A%2FSELECT%2F%2A\&id=%2A%2F5066%29%2F%2A\&id=%2A%2FEND%29%29--%2F%2A\&id=%2A%2FIZCS HTTP/1.1" 200 12305 "http://www.firma-lsf.eu:80/index.php" "Googlebot \(compatible Googlebot/2.1 http://www.google.com/bot.html\)" ... |
2020-09-11 22:00:48 |
| 46.19.141.85 | attackspambots | 46.19.141.85 - - \[10/Sep/2020:18:57:17 +0200\] "GET /index.php\?id=-1714%25%27%2F%2A\&id=%2A%2FOR%2F%2A\&id=%2A%2F3049%3D%28SELECT%2F%2A\&id=%2A%2F%28CASE%2F%2A\&id=%2A%2FWHEN%2F%2A\&id=%2A%2F%283049%3D6643%29%2F%2A\&id=%2A%2FTHEN%2F%2A\&id=%2A%2F3049%2F%2A\&id=%2A%2FELSE%2F%2A\&id=%2A%2F%28SELECT%2F%2A\&id=%2A%2F6643%2F%2A\&id=%2A%2FUNION%2F%2A\&id=%2A%2FSELECT%2F%2A\&id=%2A%2F5066%29%2F%2A\&id=%2A%2FEND%29%29--%2F%2A\&id=%2A%2FIZCS HTTP/1.1" 200 12305 "http://www.firma-lsf.eu:80/index.php" "Googlebot \(compatible Googlebot/2.1 http://www.google.com/bot.html\)" ... |
2020-09-11 14:08:12 |
| 46.19.141.85 | attackspam | 46.19.141.85 - - \[10/Sep/2020:18:57:17 +0200\] "GET /index.php\?id=-1714%25%27%2F%2A\&id=%2A%2FOR%2F%2A\&id=%2A%2F3049%3D%28SELECT%2F%2A\&id=%2A%2F%28CASE%2F%2A\&id=%2A%2FWHEN%2F%2A\&id=%2A%2F%283049%3D6643%29%2F%2A\&id=%2A%2FTHEN%2F%2A\&id=%2A%2F3049%2F%2A\&id=%2A%2FELSE%2F%2A\&id=%2A%2F%28SELECT%2F%2A\&id=%2A%2F6643%2F%2A\&id=%2A%2FUNION%2F%2A\&id=%2A%2FSELECT%2F%2A\&id=%2A%2F5066%29%2F%2A\&id=%2A%2FEND%29%29--%2F%2A\&id=%2A%2FIZCS HTTP/1.1" 200 12305 "http://www.firma-lsf.eu:80/index.php" "Googlebot \(compatible Googlebot/2.1 http://www.google.com/bot.html\)" ... |
2020-09-11 06:19:35 |
| 46.19.141.85 | attack | Automatic report - Banned IP Access |
2020-08-08 14:56:51 |
| 46.19.141.85 | attackbots | Malicious brute force vulnerability hacking attacks |
2020-08-02 05:05:45 |
| 46.19.141.82 | attack | Time: Mon Jul 20 09:25:05 2020 -0300 IP: 46.19.141.82 (CH/Switzerland/-) Failures: 5 (mod_security) Interval: 3600 seconds Blocked: Permanent Block |
2020-07-20 22:50:19 |
| 46.19.141.82 | attackspam | 20 attempts against mh_ha-misbehave-ban on flame |
2020-07-19 07:46:54 |
| 46.19.141.86 | attackbots | Unauthorized connection attempt detected from IP address 46.19.141.86 to port 21 |
2020-07-08 15:10:06 |
| 46.19.141.84 | attackspam | xmlrpc attack |
2020-07-03 20:09:57 |
| 46.19.141.86 | attackbotsspam | (smtpauth) Failed SMTP AUTH login from 46.19.141.86 (CH/Switzerland/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-06-30 18:03:13 plain authenticator failed for (u5jz4pm66vsyrdto9c) [46.19.141.86]: 535 Incorrect authentication data (set_id=admin@arshinmachine.com) |
2020-07-01 09:41:36 |
| 46.19.141.84 | attack | Multiple web server 500 error code (Internal Error). |
2020-06-13 05:37:15 |
| 46.19.141.86 | attack | port scan and connect, tcp 8080 (http-proxy) |
2020-06-09 03:38:11 |
| 46.19.141.122 | attackspam | 20/2/5@23:52:39: FAIL: Alarm-Network address from=46.19.141.122 20/2/5@23:52:39: FAIL: Alarm-Network address from=46.19.141.122 ... |
2020-02-06 18:57:28 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 46.19.141.147
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22093
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;46.19.141.147. IN A
;; AUTHORITY SECTION:
. 425 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022050900 1800 900 604800 86400
;; Query time: 29 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 09 21:29:56 CST 2022
;; MSG SIZE rcvd: 106147.141.19.46.in-addr.arpa domain name pointer ns1.watchsomuch.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
147.141.19.46.in-addr.arpa name = ns1.watchsomuch.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 122.225.78.42 | attackspam | Unauthorised access (Nov 26) SRC=122.225.78.42 LEN=52 TTL=112 ID=8719 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-27 02:13:34 |
| 112.85.42.179 | attackspambots | Nov 26 20:29:14 server sshd\[17947\]: User root from 112.85.42.179 not allowed because listed in DenyUsers Nov 26 20:29:15 server sshd\[17947\]: Failed none for invalid user root from 112.85.42.179 port 60952 ssh2 Nov 26 20:29:15 server sshd\[17947\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.179 user=root Nov 26 20:29:17 server sshd\[17947\]: Failed password for invalid user root from 112.85.42.179 port 60952 ssh2 Nov 26 20:29:21 server sshd\[17947\]: Failed password for invalid user root from 112.85.42.179 port 60952 ssh2 |
2019-11-27 02:30:10 |
| 222.86.159.208 | attackspam | Nov 26 19:15:14 server sshd\[6815\]: Invalid user laurens from 222.86.159.208 Nov 26 19:15:14 server sshd\[6815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.86.159.208 Nov 26 19:15:16 server sshd\[6815\]: Failed password for invalid user laurens from 222.86.159.208 port 57080 ssh2 Nov 26 19:35:46 server sshd\[11641\]: Invalid user poulson from 222.86.159.208 Nov 26 19:35:46 server sshd\[11641\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.86.159.208 ... |
2019-11-27 02:12:20 |
| 58.250.27.18 | attack | port scan and connect, tcp 1433 (ms-sql-s) |
2019-11-27 02:25:16 |
| 114.67.74.139 | attackbotsspam | Nov 26 18:52:45 markkoudstaal sshd[12183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.74.139 Nov 26 18:52:47 markkoudstaal sshd[12183]: Failed password for invalid user hhhhh from 114.67.74.139 port 42624 ssh2 Nov 26 19:00:00 markkoudstaal sshd[12844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.74.139 |
2019-11-27 02:20:25 |
| 179.127.52.245 | attackbotsspam | " " |
2019-11-27 02:26:23 |
| 45.226.81.197 | attack | Nov 26 15:50:48 odroid64 sshd\[8373\]: Invalid user http from 45.226.81.197 Nov 26 15:50:48 odroid64 sshd\[8373\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.226.81.197 ... |
2019-11-27 02:18:10 |
| 106.13.57.178 | attackspam | 2019-11-26T17:52:06.225855shield sshd\[3465\]: Invalid user szilard from 106.13.57.178 port 38040 2019-11-26T17:52:06.228942shield sshd\[3465\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.178 2019-11-26T17:52:08.298994shield sshd\[3465\]: Failed password for invalid user szilard from 106.13.57.178 port 38040 ssh2 2019-11-26T17:58:47.854091shield sshd\[5161\]: Invalid user database from 106.13.57.178 port 41674 2019-11-26T17:58:47.858598shield sshd\[5161\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.57.178 |
2019-11-27 02:11:17 |
| 94.253.160.5 | attackspam | Nov 26 15:39:45 mxgate1 postfix/postscreen[7222]: CONNECT from [94.253.160.5]:33134 to [176.31.12.44]:25 Nov 26 15:39:45 mxgate1 postfix/dnsblog[7223]: addr 94.253.160.5 listed by domain zen.spamhaus.org as 127.0.0.10 Nov 26 15:39:45 mxgate1 postfix/dnsblog[7223]: addr 94.253.160.5 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 26 15:39:45 mxgate1 postfix/dnsblog[7226]: addr 94.253.160.5 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Nov 26 15:39:45 mxgate1 postfix/dnsblog[7227]: addr 94.253.160.5 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 26 15:39:46 mxgate1 postfix/dnsblog[7224]: addr 94.253.160.5 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 26 15:39:51 mxgate1 postfix/postscreen[7222]: DNSBL rank 5 for [94.253.160.5]:33134 Nov x@x Nov 26 15:39:52 mxgate1 postfix/postscreen[7222]: HANGUP after 1.7 from [94.253.160.5]:33134 in tests after SMTP handshake Nov 26 15:39:52 mxgate1 postfix/postscreen[7222]: DISCONNECT [94.253.160.5]:33134 ........ -------------------------------------- |
2019-11-27 01:57:01 |
| 31.184.253.128 | attack | Fail2Ban Ban Triggered SMTP Abuse Attempt |
2019-11-27 02:01:08 |
| 218.92.0.178 | attackbotsspam | [ssh] SSH attack |
2019-11-27 01:50:46 |
| 106.13.52.247 | attack | Nov 26 12:27:14 linuxvps sshd\[53688\]: Invalid user kalerasi from 106.13.52.247 Nov 26 12:27:14 linuxvps sshd\[53688\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.52.247 Nov 26 12:27:16 linuxvps sshd\[53688\]: Failed password for invalid user kalerasi from 106.13.52.247 port 54372 ssh2 Nov 26 12:34:57 linuxvps sshd\[58254\]: Invalid user edmundson from 106.13.52.247 Nov 26 12:34:57 linuxvps sshd\[58254\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.52.247 |
2019-11-27 02:20:46 |
| 159.65.8.65 | attack | Nov 26 17:53:33 minden010 sshd[11746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.8.65 Nov 26 17:53:36 minden010 sshd[11746]: Failed password for invalid user rusty from 159.65.8.65 port 46982 ssh2 Nov 26 18:00:48 minden010 sshd[14021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.8.65 ... |
2019-11-27 02:03:02 |
| 35.247.175.82 | attack | 11/26/2019-12:20:56.841708 35.247.175.82 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-11-27 01:54:38 |
| 193.178.190.233 | attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/193.178.190.233/ UA - 1H : (25) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : UA NAME ASN : ASN25155 IP : 193.178.190.233 CIDR : 193.178.190.0/24 PREFIX COUNT : 1 UNIQUE IP COUNT : 256 ATTACKS DETECTED ASN25155 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-11-26 15:43:08 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-27 02:29:40 |