City: unknown
Region: unknown
Country: Tanzania, United Republic of
Internet Service Provider: Tanzania Education and Research Network
Hostname: unknown
Organization: unknown
Usage Type: University/College/School
| Type | Details | Datetime |
|---|---|---|
| attack | 41.93.48.72 - - [25/Aug/2020:14:40:28 +0100] "POST /wp-login.php HTTP/1.1" 200 2254 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 41.93.48.72 - - [25/Aug/2020:14:40:31 +0100] "POST /wp-login.php HTTP/1.1" 200 2229 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 41.93.48.72 - - [25/Aug/2020:14:40:32 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-25 23:29:15 |
| attackspambots | 41.93.48.72 - - [19/Aug/2020:06:03:10 +0100] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 41.93.48.72 - - [19/Aug/2020:06:03:12 +0100] "POST /wp-login.php HTTP/1.1" 200 1685 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 41.93.48.72 - - [19/Aug/2020:06:03:13 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-19 18:11:42 |
| attackbots | www.ft-1848-basketball.de 41.93.48.72 [12/Aug/2020:14:39:28 +0200] "POST /wp-login.php HTTP/1.1" 200 3145 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" www.ft-1848-basketball.de 41.93.48.72 [12/Aug/2020:14:39:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-08-13 01:01:59 |
| attack | Brute forcing Wordpress login |
2020-08-06 03:16:47 |
| attackbotsspam | 41.93.48.72 - - [01/Aug/2020:22:43:26 +0200] "POST /xmlrpc.php HTTP/1.1" 403 613 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 41.93.48.72 - - [01/Aug/2020:22:46:07 +0200] "POST /xmlrpc.php HTTP/1.1" 403 616 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-02 08:00:27 |
| attackbots | 41.93.48.72 - - [27/Jul/2020:01:18:34 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 41.93.48.72 - - [27/Jul/2020:01:18:36 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 41.93.48.72 - - [27/Jul/2020:01:18:37 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-07-27 07:27:50 |
| attack | 41.93.48.72 - - [26/Jul/2020:13:07:40 +0100] "POST /wp-login.php HTTP/1.1" 200 1875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 41.93.48.72 - - [26/Jul/2020:13:07:42 +0100] "POST /wp-login.php HTTP/1.1" 200 1860 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 41.93.48.72 - - [26/Jul/2020:13:07:43 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-07-26 20:31:43 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 41.93.48.73 | attackbots | Nov 21 11:26:59 gw1 sshd[580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.93.48.73 Nov 21 11:27:01 gw1 sshd[580]: Failed password for invalid user tarant from 41.93.48.73 port 47258 ssh2 ... |
2019-11-21 17:11:31 |
| 41.93.48.73 | attackbots | Nov 21 10:05:33 gw1 sshd[31637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.93.48.73 Nov 21 10:05:35 gw1 sshd[31637]: Failed password for invalid user hersch from 41.93.48.73 port 55094 ssh2 ... |
2019-11-21 13:06:53 |
| 41.93.48.73 | attackbotsspam | Nov 12 19:10:34 tuotantolaitos sshd[2471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.93.48.73 Nov 12 19:10:36 tuotantolaitos sshd[2471]: Failed password for invalid user admin from 41.93.48.73 port 32854 ssh2 ... |
2019-11-13 02:08:10 |
| 41.93.48.73 | attackbotsspam | Nov 12 05:09:55 TORMINT sshd\[8385\]: Invalid user admin from 41.93.48.73 Nov 12 05:09:55 TORMINT sshd\[8385\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.93.48.73 Nov 12 05:09:57 TORMINT sshd\[8385\]: Failed password for invalid user admin from 41.93.48.73 port 48118 ssh2 ... |
2019-11-12 18:32:49 |
| 41.93.48.73 | attackbotsspam | 2019-11-12T00:20:39.800813abusebot-7.cloudsearch.cf sshd\[20331\]: Invalid user apache from 41.93.48.73 port 43788 2019-11-12T00:20:39.804263abusebot-7.cloudsearch.cf sshd\[20331\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.93.48.73 |
2019-11-12 08:49:59 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.93.48.72
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34890
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;41.93.48.72. IN A
;; AUTHORITY SECTION:
. 175 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020072600 1800 900 604800 86400
;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jul 26 20:31:37 CST 2020
;; MSG SIZE rcvd: 115Host 72.48.93.41.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 72.48.93.41.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 119.31.123.143 | attackspam | Mar 25 06:12:40 webhost01 sshd[28046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.31.123.143 Mar 25 06:12:42 webhost01 sshd[28046]: Failed password for invalid user valid from 119.31.123.143 port 57900 ssh2 ... |
2020-03-25 07:35:55 |
| 167.99.48.123 | attack | Invalid user work from 167.99.48.123 port 34574 |
2020-03-25 07:23:48 |
| 112.21.191.244 | attack | Mar 12 17:47:55 [snip] sshd[12825]: Invalid user 140.224.96.42 from 112.21.191.244 port 48792 Mar 12 17:47:55 [snip] sshd[12825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.21.191.244 Mar 12 17:47:57 [snip] sshd[12825]: Failed password for invalid user 140.224.96.42 from 112.21.191.244 port 48792 ssh2[...] |
2020-03-25 07:40:36 |
| 138.68.106.62 | attack | 2020-03-24T23:05:02.822464abusebot-7.cloudsearch.cf sshd[30181]: Invalid user wilgosh from 138.68.106.62 port 58378 2020-03-24T23:05:02.828001abusebot-7.cloudsearch.cf sshd[30181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.106.62 2020-03-24T23:05:02.822464abusebot-7.cloudsearch.cf sshd[30181]: Invalid user wilgosh from 138.68.106.62 port 58378 2020-03-24T23:05:04.122698abusebot-7.cloudsearch.cf sshd[30181]: Failed password for invalid user wilgosh from 138.68.106.62 port 58378 ssh2 2020-03-24T23:12:21.295775abusebot-7.cloudsearch.cf sshd[30607]: Invalid user jimmy from 138.68.106.62 port 39750 2020-03-24T23:12:21.300025abusebot-7.cloudsearch.cf sshd[30607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.106.62 2020-03-24T23:12:21.295775abusebot-7.cloudsearch.cf sshd[30607]: Invalid user jimmy from 138.68.106.62 port 39750 2020-03-24T23:12:23.196616abusebot-7.cloudsearch.cf sshd[30607]: ... |
2020-03-25 07:49:24 |
| 148.72.209.44 | attack | Mar 24 19:25:40 debian-2gb-nbg1-2 kernel: \[7333423.822048\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=148.72.209.44 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=44 ID=0 DF PROTO=TCP SPT=22 DPT=10339 WINDOW=29200 RES=0x00 ACK SYN URGP=0 |
2020-03-25 08:02:15 |
| 92.63.194.25 | attackbotsspam | Mar 25 00:28:00 vmd17057 sshd[16881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.25 Mar 25 00:28:02 vmd17057 sshd[16881]: Failed password for invalid user Administrator from 92.63.194.25 port 39829 ssh2 ... |
2020-03-25 07:44:21 |
| 222.128.5.42 | attack | Mar 25 00:23:08 v22018086721571380 sshd[24671]: Failed password for invalid user postgres from 222.128.5.42 port 45030 ssh2 |
2020-03-25 07:53:42 |
| 5.135.190.67 | attackbotsspam | Mar 24 22:40:09 gitlab-tf sshd\[27552\]: Invalid user support from 5.135.190.67Mar 24 22:42:16 gitlab-tf sshd\[27872\]: Invalid user oracle from 5.135.190.67 ... |
2020-03-25 07:32:51 |
| 92.63.194.59 | attack | Mar 25 00:28:26 vmd17057 sshd[16942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.59 Mar 25 00:28:29 vmd17057 sshd[16942]: Failed password for invalid user admin from 92.63.194.59 port 42549 ssh2 ... |
2020-03-25 07:42:07 |
| 64.251.21.59 | attack | Unauthorized access detected from black listed ip! |
2020-03-25 07:23:16 |
| 68.183.147.162 | attackspambots | Invalid user ghost from 68.183.147.162 port 34136 |
2020-03-25 07:54:47 |
| 101.251.193.10 | attack | Invalid user eric from 101.251.193.10 port 54478 |
2020-03-25 07:41:02 |
| 223.93.185.204 | attack | Mar 24 14:39:32 pixelmemory sshd[7726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.93.185.204 Mar 24 14:39:34 pixelmemory sshd[7726]: Failed password for invalid user rl from 223.93.185.204 port 53200 ssh2 Mar 24 14:56:24 pixelmemory sshd[10880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.93.185.204 ... |
2020-03-25 08:01:44 |
| 61.72.255.26 | attackbots | Mar 10 14:09:51 [snip] sshd[7769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.72.255.26 user=root Mar 10 14:09:54 [snip] sshd[7769]: Failed password for root from 61.72.255.26 port 52406 ssh2 Mar 10 14:18:38 [snip] sshd[8769]: Invalid user hadoop from 61.72.255.26 port 40986[...] |
2020-03-25 07:51:23 |
| 92.63.194.32 | attackbotsspam | Invalid user admin from 92.63.194.32 port 35071 |
2020-03-25 07:42:27 |