城市(city): Bad Segeberg
省份(region): Schleswig-Holstein
国家(country): Germany
运营商(isp): Deutsche Telekom AG
主机名(hostname): unknown
机构(organization): Deutsche Telekom AG
使用类型(Usage Type): unknown
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attack | [Sat Jul 06 01:10:28.268300 2019] [:error] [pid 23183:tid 139845326296832] [client 93.225.196.16:2781] [client 93.225.196.16] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_http_versions}" against "REQUEST_PROTOCOL" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.1.1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1075"] [id "920430"] [msg "HTTP protocol version is not allowed by policy"] [data "HTTP/1.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.1.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/PROTOCOL_NOT_ALLOWED"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/"] [unique_id "XR@SlNrevyWqBtxWkW3iFAAAABE"]
... |
2019-07-06 03:03:34 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 93.225.196.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62945
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;93.225.196.16. IN A
;; AUTHORITY SECTION:
. 2513 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019070501 1800 900 604800 86400
;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jul 06 03:03:27 CST 2019
;; MSG SIZE rcvd: 11716.196.225.93.in-addr.arpa domain name pointer p5DE1C410.dip0.t-ipconnect.de.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
*** Can't find 16.196.225.93.in-addr.arpa.: No answer
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 106.12.179.236 | attack | 5x Failed Password |
2020-03-22 02:41:54 |
| 106.13.39.160 | attackbotsspam | 2020-03-21T18:09:34.962312v22018076590370373 sshd[1334]: Invalid user violeta from 106.13.39.160 port 44996 2020-03-21T18:09:34.968479v22018076590370373 sshd[1334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.39.160 2020-03-21T18:09:34.962312v22018076590370373 sshd[1334]: Invalid user violeta from 106.13.39.160 port 44996 2020-03-21T18:09:37.321931v22018076590370373 sshd[1334]: Failed password for invalid user violeta from 106.13.39.160 port 44996 ssh2 2020-03-21T18:17:26.411371v22018076590370373 sshd[7370]: Invalid user user from 106.13.39.160 port 57396 ... |
2020-03-22 02:41:25 |
| 118.40.248.20 | attack | Invalid user laravel from 118.40.248.20 port 48863 |
2020-03-22 02:36:03 |
| 104.131.55.236 | attack | Mar 21 14:23:54 ny01 sshd[24300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.55.236 Mar 21 14:23:56 ny01 sshd[24300]: Failed password for invalid user imai from 104.131.55.236 port 45425 ssh2 Mar 21 14:28:44 ny01 sshd[26735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.55.236 |
2020-03-22 02:43:22 |
| 49.234.131.75 | attackspambots | SSH login attempts @ 2020-03-16 17:39:09 |
2020-03-22 02:07:35 |
| 220.133.95.68 | attackbotsspam | SSH login attempts @ 2020-03-18 06:38:05 |
2020-03-22 02:14:16 |
| 157.245.113.44 | attack | $f2bV_matches |
2020-03-22 02:28:16 |
| 106.13.44.20 | attackbotsspam | Mar 21 18:41:42 Ubuntu-1404-trusty-64-minimal sshd\[436\]: Invalid user tenisha from 106.13.44.20 Mar 21 18:41:42 Ubuntu-1404-trusty-64-minimal sshd\[436\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.20 Mar 21 18:41:44 Ubuntu-1404-trusty-64-minimal sshd\[436\]: Failed password for invalid user tenisha from 106.13.44.20 port 57180 ssh2 Mar 21 18:47:23 Ubuntu-1404-trusty-64-minimal sshd\[2443\]: Invalid user nh from 106.13.44.20 Mar 21 18:47:23 Ubuntu-1404-trusty-64-minimal sshd\[2443\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.20 |
2020-03-22 01:58:36 |
| 210.74.13.5 | attack | 5x Failed Password |
2020-03-22 02:16:06 |
| 62.210.205.155 | attackbots | $f2bV_matches |
2020-03-22 02:04:42 |
| 202.138.233.92 | attack | 5x Failed Password |
2020-03-22 02:17:06 |
| 188.12.156.177 | attackspam | Mar 21 17:56:01 SilenceServices sshd[1292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.12.156.177 Mar 21 17:56:02 SilenceServices sshd[1292]: Failed password for invalid user sabera from 188.12.156.177 port 56526 ssh2 Mar 21 17:58:56 SilenceServices sshd[11342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.12.156.177 |
2020-03-22 02:21:38 |
| 202.117.111.133 | attackbots | SSH Brute Force |
2020-03-22 02:17:20 |
| 51.75.248.57 | attack | SSH login attempts @ 2020-03-19 05:49:48 |
2020-03-22 02:06:45 |
| 154.160.69.170 | attack | ssh brute force |
2020-03-22 02:28:38 |