Dear Provider,
Im George Egri, the Co-Founder and CEO of BitNinja Server Security. Im writing to inform you that we have detected malicious requests from the IP 65.21.131.165 directed at our clients servers.
As a result of these attacks, we have added your IP to our greylist to prevent it from attacking our clients servers.
Servers are increasingly exposed as the targets of botnet attacks and you might not be aware that your server is being used as a bot to send malicious attacks over the Internet.
I've collected the 3 earliest logs below, and you can find the freshest 100, that may help you disinfect your server, under the link.
http://bitninja.io/incidentReport.php?details=7a0b78d89e0a8106f2?utm_source=incident&utm_content=publicpage. The timezone is UTC +1:00.
[2021-10-24 05:30:10 -0400] info [cpaneld] 65.21.131.165 - izavu "POST /json-api/cpanel HTTP/1.1" FAILED LOGIN cpaneld: user name not provided or invalid user
[2021-10-24 05:32:37 -0400] info [cpaneld] 65.21.131.165 - nuoinick "POST /json-api/cpanel HTTP/1.1" FAILED LOGIN cpaneld: user name not provided or invalid user
[2021-10-24 05:32:57 -0400] info [cpaneld] 65.21.131.165 - koftaco "POST /json-api/cpanel HTTP/1.1" FAILED LOGIN cpaneld: user name not provided or invalid user
[2021-10-24 05:33:13 -0400] info [cpaneld] 65.21.131.165 - codo "POST /json-api/cpanel HTTP/1.1" FAILED LOGIN cpaneld: user name not provided or invalid user
[2021-10-24 05:33:13 -0400] info [cpaneld] 65.21.131.165 - centra "POST /json-api/cpanel HTTP/1.1" FAILED LOGIN cpaneld: user name not provided or invalid user
[2021-10-24 05:33:30 -0400] info [cpaneld] 65.21.131.165 - edustv "POST /json-api/cpanel HTTP/1.1" FAILED LOGIN cpaneld: user name not provided or invalid user
[2021-10-24 05:34:22 -0400] info [cpaneld] 65.21.131.165 - cachkiembit "POST /json-api/cpanel HTTP/1.1" FAILED LOGIN cpaneld: user name not provided or invalid user
[2021-10-24 05:34:24 -0400] info [cpaneld] 65.21.131.165 - magic "POST /json-api/cpanel HTTP/1.1" FAILED LOGIN cpaneld: user name not provided or invalid user
[2021-10-24 05:34:24 -0400] info [cpaneld] 65.21.131.165 - bitconnectx "POST /json-api/cpanel HTTP/1.1" FAILED LOGIN cpaneld: user name not provided or invalid user
[2021-10-24 05:34:31 -0400] info [cpaneld] 65.21.131.165 - airobot "POST /json-api/cpanel HTTP/1.1" FAILED LOGIN cpaneld: user name not provided or invalid user
SenseLog id [80_2_019]
Message [CpanelLogin]]
