City: unknown
Region: unknown
Country: Czechia
Internet Service Provider: Inflr.com.br
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspam | (mod_security) mod_security (id:211650) triggered by 93.99.104.213 (CZ/Czechia/mmarketing64.tk): 5 in the last 3600 secs |
2020-05-12 17:56:26 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 93.99.104.106 | attackbots | on port 3389 |
2020-08-28 03:09:16 |
| 93.99.104.103 | attackspam | 20 attempts against mh-misbehave-ban on pine |
2020-06-07 13:04:47 |
| 93.99.104.103 | attack | 20 attempts against mh_ha-misbehave-ban on dawn |
2020-06-06 12:27:06 |
| 93.99.104.103 | attackbotsspam | HTTP SQL Injection Attempt, PTR: vps.asciiwolf.com. |
2020-05-31 01:34:06 |
| 93.99.104.101 | attackspambots | 21 attempts against mh-misbehave-ban on float |
2020-05-20 04:52:10 |
| 93.99.104.199 | attack | SQL Injection in QueryString parameter: 2 AND (SELECT 8883 FROM(SELECT COUNT(*),CONCAT(0x7178707671,(SELECT (ELT(8883=8883,1))),0x717a766271,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a) |
2020-05-12 17:45:24 |
| 93.99.104.201 | attackbots | SQL Injection attack |
2020-05-12 15:02:09 |
| 93.99.104.191 | attack | 20 attempts against mh_ha-misbehave-ban on ice |
2020-05-11 22:14:54 |
| 93.99.104.176 | attack | 20 attempts against mh-misbehave-ban on thorn |
2020-05-08 04:41:29 |
| 93.99.104.117 | attackspambots | SQL injection attempt. |
2020-04-20 18:15:20 |
| 93.99.104.103 | attackspambots | 17/Apr/20 02:56:04 #6411981 CRITICAL 114 93.99.104.103 POST /index.php - Cross-site scripting - [SERVER:QUERY_STRING = view=reset&Itemid=101&DJYD%3D4406%20AND%201%3D1%20UNION%20ALL%20SELECT%201%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name%20FROM%20information_schema...] - 17/Apr/20 02:56:10 #7191395 CRITICAL 256 93.99.104.103 POST /index.php - SQL injection - [GET:view = reset) AND (SELECT 5130 FROM(SELECT COUNT(*),CONCAT(0x7178717671,(SELECT (ELT(5130=5130,1))),0x71627a7871,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a) AND (8622=8622] - 17/Apr/20 02:56:13 #3881151 CRITICAL 256 93.99.104.103 POST /index.php - SQL injection - [GET:view = reset) AND 8908=CAST((CHR(113)||CHR(120)||CHR(113)||CHR(118)||CHR(113))||(SELECT (CASE WHEN (8908=8908) THEN 1 ELSE 0 END))::text||(CHR(113)||CHR(98)||CHR(122)||CHR(120)||CHR(113)) AS NUMER...] - 17/Apr/20 02:56:15 #3189325 CRITICAL 256 93.99.104.103 POST |
2020-04-18 17:06:46 |
| 93.99.104.166 | attack | SQL injection attempt. |
2020-04-16 13:03:59 |
| 93.99.104.125 | attack | 20 attempts against mh-misbehave-ban on web2 |
2020-04-11 00:28:57 |
| 93.99.104.137 | attackspam | sql injection via query parameters |
2020-04-10 15:06:28 |
| 93.99.104.103 | attackbots | 200 atempt in 1 min |
2020-04-10 02:36:43 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 93.99.104.213
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55617
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;93.99.104.213. IN A
;; AUTHORITY SECTION:
. 248 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020051200 1800 900 604800 86400
;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue May 12 17:56:22 CST 2020
;; MSG SIZE rcvd: 117213.104.99.93.in-addr.arpa domain name pointer mmarketing64.tk.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
213.104.99.93.in-addr.arpa name = mmarketing64.tk.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 74.199.108.162 | attackspambots | "SSH brute force auth login attempt." |
2020-01-23 18:59:45 |
| 123.20.158.204 | attackbotsspam | "SMTP brute force auth login attempt." |
2020-01-23 18:35:13 |
| 36.26.85.60 | attackspambots | "SSH brute force auth login attempt." |
2020-01-23 18:39:16 |
| 194.9.178.148 | attackbots | "SSH brute force auth login attempt." |
2020-01-23 18:44:38 |
| 80.211.158.23 | attackbots | $f2bV_matches |
2020-01-23 18:55:50 |
| 117.50.17.253 | attack | "SSH brute force auth login attempt." |
2020-01-23 18:32:41 |
| 106.245.255.19 | attackbotsspam | 2020-01-23T03:50:17.2887421495-001 sshd[34379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.255.19 2020-01-23T03:50:17.2822551495-001 sshd[34379]: Invalid user public from 106.245.255.19 port 56035 2020-01-23T03:50:18.9186161495-001 sshd[34379]: Failed password for invalid user public from 106.245.255.19 port 56035 ssh2 2020-01-23T04:52:18.4636721495-001 sshd[59230]: Invalid user jayani from 106.245.255.19 port 40640 2020-01-23T04:52:18.4767791495-001 sshd[59230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.255.19 2020-01-23T04:52:18.4636721495-001 sshd[59230]: Invalid user jayani from 106.245.255.19 port 40640 2020-01-23T04:52:20.2688161495-001 sshd[59230]: Failed password for invalid user jayani from 106.245.255.19 port 40640 ssh2 2020-01-23T04:54:57.0500931495-001 sshd[59297]: Invalid user guest from 106.245.255.19 port 52248 2020-01-23T04:54:57.0578321495-001 sshd[59297]: pam_uni ... |
2020-01-23 18:57:53 |
| 164.52.36.247 | attack | Tryed to connect to our private VPN |
2020-01-23 18:51:04 |
| 80.250.217.50 | attackbots | Unauthorized connection attempt detected from IP address 80.250.217.50 to port 2220 [J] |
2020-01-23 18:29:21 |
| 5.39.29.252 | attackspambots | Unauthorized connection attempt detected from IP address 5.39.29.252 to port 2220 [J] |
2020-01-23 18:23:50 |
| 121.7.182.31 | attack | "SMTP brute force auth login attempt." |
2020-01-23 18:24:34 |
| 139.28.36.16 | attack | "SSH brute force auth login attempt." |
2020-01-23 18:50:14 |
| 49.232.4.101 | attackbots | "SSH brute force auth login attempt." |
2020-01-23 18:19:19 |
| 188.166.34.129 | attack | "SSH brute force auth login attempt." |
2020-01-23 18:21:26 |
| 185.20.186.45 | attack | "SSH brute force auth login attempt." |
2020-01-23 18:41:02 |