| 159.69.109.50 |
attack |
[SunAug0423:13:51.1838782019][:error][pid17337:tid47942490371840][client159.69.109.50:41052][client159.69.109.50]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"207"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CRITICAL"][hostname"ilgiornaledelticino.ch"][uri"/feed/"][unique_id"XUdKj65cwxQoOr-BwCIYKAAAAE8"][SunAug0423:13:51.8086492019][:error][pid28528:tid47942465156864][client159.69.109.50:41122][client159.69.109.50]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"207"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CRITICAL"][hostname |
2019-08-05 14:25:41 |
| 89.152.228.249 |
attackspambots |
Autoban 89.152.228.249 AUTH/CONNECT |
2019-08-05 14:17:53 |
| 185.238.44.210 |
attackbots |
proto=tcp . spt=44425 . dpt=25 . (listed on Blocklist de Aug 04) (706) |
2019-08-05 13:56:49 |
| 89.211.137.53 |
attack |
Autoban 89.211.137.53 AUTH/CONNECT |
2019-08-05 14:03:22 |
| 89.23.163.183 |
attackspambots |
Autoban 89.23.163.183 AUTH/CONNECT |
2019-08-05 13:55:49 |
| 89.248.174.193 |
attackbots |
Autoban 89.248.174.193 AUTH/CONNECT |
2019-08-05 13:53:06 |
| 89.134.10.55 |
attackspam |
Autoban 89.134.10.55 AUTH/CONNECT |
2019-08-05 14:22:02 |
| 89.137.98.214 |
attackbots |
Autoban 89.137.98.214 AUTH/CONNECT |
2019-08-05 14:19:54 |
| 89.255.92.206 |
attackspambots |
Autoban 89.255.92.206 AUTH/CONNECT |
2019-08-05 13:50:59 |
| 165.22.141.139 |
attack |
Aug 5 01:50:14 TORMINT sshd\[2994\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.141.139 user=root
Aug 5 01:50:16 TORMINT sshd\[2994\]: Failed password for root from 165.22.141.139 port 44764 ssh2
Aug 5 01:56:36 TORMINT sshd\[3423\]: Invalid user agsadmin from 165.22.141.139
Aug 5 01:56:36 TORMINT sshd\[3423\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.141.139
... |
2019-08-05 13:57:46 |
| 177.182.245.204 |
attack |
email spam |
2019-08-05 13:53:36 |
| 210.245.8.110 |
attack |
WordPress XMLRPC scan :: 210.245.8.110 0.116 BYPASS [05/Aug/2019:10:08:55 1000] [censored_1] "POST /xmlrpc.php HTTP/1.1" 403 5 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-08-05 14:16:13 |
| 89.163.142.102 |
attackspambots |
Autoban 89.163.142.102 AUTH/CONNECT |
2019-08-05 14:09:31 |
| 81.22.45.80 |
attackspambots |
Aug 5 02:47:09 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.80 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=57794 PROTO=TCP SPT=48217 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0
... |
2019-08-05 13:47:06 |
| 89.163.141.16 |
attackspam |
SMTP PORT:25, HELO:mail.bingers.eu, FROM:Married wives" \n Subject:Married wives want sex" |
2019-08-05 14:09:51 |