| 182.92.85.121 |
attack |
[SatAug0122:48:18.6322402020][:error][pid7144:tid139903505520384][client182.92.85.121:51602][client182.92.85.121]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"218"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CRITICAL"][hostname"aress2030.ch"][uri"/public/js/image.js"][unique_id"XyXVEuiEyPkpGEPXCyT@2AAAAEI"][SatAug0122:48:21.3442452020][:error][pid12883:tid139903327192832][client182.92.85.121:52017][client182.92.85.121]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"218"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CR |
2020-08-02 05:54:26 |
| 180.166.184.66 |
attackspambots |
SSH Invalid Login |
2020-08-02 05:46:18 |
| 122.51.103.110 |
attack |
fail2ban - Attack against Apache (too many 404s) |
2020-08-02 05:50:05 |
| 45.227.255.4 |
attackspam |
Aug 1 23:11:33 marvibiene sshd[11002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.227.255.4
Aug 1 23:11:34 marvibiene sshd[11002]: Failed password for invalid user user from 45.227.255.4 port 37377 ssh2 |
2020-08-02 05:54:48 |
| 93.186.69.147 |
attackbots |
Brute force attempt |
2020-08-02 06:13:33 |
| 178.123.94.223 |
attackspam |
xmlrpc attack |
2020-08-02 06:18:05 |
| 61.151.130.20 |
attackbots |
Aug 1 17:56:17 george sshd[18034]: Failed password for root from 61.151.130.20 port 31642 ssh2
Aug 1 17:57:23 george sshd[18039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.151.130.20 user=root
Aug 1 17:57:25 george sshd[18039]: Failed password for root from 61.151.130.20 port 39617 ssh2
Aug 1 17:58:30 george sshd[18048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.151.130.20 user=root
Aug 1 17:58:32 george sshd[18048]: Failed password for root from 61.151.130.20 port 47592 ssh2
... |
2020-08-02 05:59:16 |
| 69.94.141.98 |
attackspam |
2020-08-01 15:40:24.132355-0500 localhost smtpd[87819]: NOQUEUE: reject: RCPT from unknown[69.94.141.98]: 554 5.7.1 Service unavailable; Client host [69.94.141.98] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= |
2020-08-02 06:06:01 |
| 154.8.147.238 |
attack |
SSH Invalid Login |
2020-08-02 05:56:30 |
| 211.145.49.253 |
attack |
SSH Invalid Login |
2020-08-02 05:57:41 |
| 170.253.22.179 |
attack |
SSH Brute-Force attacks |
2020-08-02 06:13:07 |
| 45.136.7.12 |
attackbotsspam |
2020-08-01 15:33:39.334698-0500 localhost smtpd[87353]: NOQUEUE: reject: RCPT from unknown[45.136.7.12]: 554 5.7.1 Service unavailable; Client host [45.136.7.12] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= |
2020-08-02 06:06:27 |
| 129.152.141.71 |
attackspambots |
Aug 1 22:57:15 mout sshd[2656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.152.141.71 user=root
Aug 1 22:57:17 mout sshd[2656]: Failed password for root from 129.152.141.71 port 53798 ssh2 |
2020-08-02 05:49:50 |
| 54.38.158.17 |
attackbotsspam |
Aug 1 23:51:38 pve1 sshd[3726]: Failed password for root from 54.38.158.17 port 60878 ssh2
... |
2020-08-02 05:59:40 |
| 37.49.230.118 |
attackbotsspam |
Aug 1 21:31:24 django-0 sshd[8021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.49.230.118 user=root
Aug 1 21:31:26 django-0 sshd[8021]: Failed password for root from 37.49.230.118 port 36756 ssh2
... |
2020-08-02 05:55:35 |