City: unknown
Region: unknown
Country: Italy
Internet Service Provider: Vodafone Italia S.p.A.
Hostname: unknown
Organization: unknown
Usage Type: unknown
| Type | Details | Datetime |
|---|---|---|
| attack | $f2bV_matches |
2020-09-23 21:18:43 |
| attackbotsspam | $f2bV_matches |
2020-09-23 13:37:46 |
| attack | web-1 [ssh] SSH Attack |
2020-09-23 05:27:00 |
| attackspam | Aug 30 19:38:09 ns381471 sshd[19814]: Failed password for mysql from 93.149.12.2 port 50052 ssh2 |
2020-08-31 01:48:37 |
| attackbotsspam | Aug 19 13:38:50 localhost sshd[124754]: Invalid user mc from 93.149.12.2 port 40958 Aug 19 13:38:50 localhost sshd[124754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=net-93-149-12-2.cust.vodafonedsl.it Aug 19 13:38:50 localhost sshd[124754]: Invalid user mc from 93.149.12.2 port 40958 Aug 19 13:38:52 localhost sshd[124754]: Failed password for invalid user mc from 93.149.12.2 port 40958 ssh2 Aug 19 13:47:20 localhost sshd[125835]: Invalid user rise from 93.149.12.2 port 50294 ... |
2020-08-19 22:42:41 |
| attack | $f2bV_matches |
2020-08-17 16:37:25 |
| attackbotsspam | Jul 28 13:07:03 prod4 sshd\[4418\]: Invalid user aikou from 93.149.12.2 Jul 28 13:07:05 prod4 sshd\[4418\]: Failed password for invalid user aikou from 93.149.12.2 port 33806 ssh2 Jul 28 13:14:33 prod4 sshd\[8013\]: Invalid user tony from 93.149.12.2 ... |
2020-07-28 19:56:45 |
| attackspam | Jun 11 18:58:53 ip-172-31-61-156 sshd[5848]: Failed password for root from 93.149.12.2 port 45182 ssh2 Jun 11 18:58:51 ip-172-31-61-156 sshd[5848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.149.12.2 user=root Jun 11 18:58:53 ip-172-31-61-156 sshd[5848]: Failed password for root from 93.149.12.2 port 45182 ssh2 Jun 11 19:01:51 ip-172-31-61-156 sshd[6024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.149.12.2 user=root Jun 11 19:01:53 ip-172-31-61-156 sshd[6024]: Failed password for root from 93.149.12.2 port 41228 ssh2 ... |
2020-06-12 03:07:30 |
| attack | ... |
2020-05-30 12:37:10 |
| attackbots | May 26 19:40:32 legacy sshd[802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.149.12.2 May 26 19:40:33 legacy sshd[802]: Failed password for invalid user bob from 93.149.12.2 port 42186 ssh2 May 26 19:48:26 legacy sshd[1050]: Failed password for root from 93.149.12.2 port 48092 ssh2 ... |
2020-05-27 02:07:37 |
| attack | $f2bV_matches |
2020-05-26 04:19:01 |
| attack | Apr 18 18:19:23 v22019038103785759 sshd\[3138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.149.12.2 user=root Apr 18 18:19:25 v22019038103785759 sshd\[3138\]: Failed password for root from 93.149.12.2 port 58278 ssh2 Apr 18 18:29:20 v22019038103785759 sshd\[3730\]: Invalid user kg from 93.149.12.2 port 48982 Apr 18 18:29:20 v22019038103785759 sshd\[3730\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.149.12.2 Apr 18 18:29:22 v22019038103785759 sshd\[3730\]: Failed password for invalid user kg from 93.149.12.2 port 48982 ssh2 ... |
2020-04-19 02:46:44 |
| attackspam | Apr 5 08:38:02 * sshd[11662]: Failed password for root from 93.149.12.2 port 37080 ssh2 |
2020-04-05 15:26:57 |
| attackbots | fail2ban -- 93.149.12.2 ... |
2020-03-30 16:55:03 |
| attackspambots | SSH Invalid Login |
2020-03-26 06:59:38 |
| attackspam | SSH Brute Force |
2020-03-01 15:56:55 |
| attackspam | Feb 10 17:21:07 ourumov-web sshd\[5974\]: Invalid user qug from 93.149.12.2 port 53594 Feb 10 17:21:07 ourumov-web sshd\[5974\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.149.12.2 Feb 10 17:21:09 ourumov-web sshd\[5974\]: Failed password for invalid user qug from 93.149.12.2 port 53594 ssh2 ... |
2020-02-11 00:44:45 |
| attackbotsspam | Unauthorized connection attempt detected from IP address 93.149.12.2 to port 2220 [J] |
2020-01-31 07:57:44 |
| attackbots | Invalid user osman from 93.149.12.2 port 42812 |
2020-01-21 22:31:43 |
| attackbots | Unauthorized connection attempt detected from IP address 93.149.12.2 to port 22 |
2020-01-04 04:17:50 |
| attackspam | Jan 1 07:46:14 www_kotimaassa_fi sshd[28688]: Failed password for root from 93.149.12.2 port 37544 ssh2 ... |
2020-01-01 18:31:27 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 93.149.120.249 | attackbots | Dec 29 07:48:20 ns41 sshd[24018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.149.120.249 Dec 29 07:48:20 ns41 sshd[24018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.149.120.249 |
2019-12-29 21:31:39 |
| 93.149.120.249 | attackspam | Dec 24 17:40:53 root sshd[30686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.149.120.249 Dec 24 17:40:55 root sshd[30686]: Failed password for invalid user test from 93.149.120.249 port 41001 ssh2 Dec 24 17:51:46 root sshd[30704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.149.120.249 ... |
2019-12-25 01:23:09 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 93.149.12.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61174
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;93.149.12.2. IN A
;; AUTHORITY SECTION:
. 455 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019123101 1800 900 604800 86400
;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 01 18:31:24 CST 2020
;; MSG SIZE rcvd: 115
2.12.149.93.in-addr.arpa domain name pointer net-93-149-12-2.cust.vodafonedsl.it.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
2.12.149.93.in-addr.arpa name = net-93-149-12-2.cust.vodafonedsl.it.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.193.127.90 | attackbotsspam | firewall-block, port(s): 8000/tcp |
2019-12-27 06:47:53 |
| 64.185.3.117 | attack | Repeated failed SSH attempt |
2019-12-27 07:00:34 |
| 88.202.190.156 | attackbots | Port 22 Scan, PTR: None |
2019-12-27 07:04:11 |
| 101.99.12.183 | attackbotsspam | Unauthorized connection attempt from IP address 101.99.12.183 on Port 445(SMB) |
2019-12-27 06:37:38 |
| 183.83.172.61 | attack | Unauthorized connection attempt from IP address 183.83.172.61 on Port 445(SMB) |
2019-12-27 06:39:27 |
| 190.72.168.150 | attackspam | Unauthorized connection attempt from IP address 190.72.168.150 on Port 445(SMB) |
2019-12-27 06:42:32 |
| 179.185.177.45 | attack | Unauthorized connection attempt detected from IP address 179.185.177.45 to port 445 |
2019-12-27 06:36:00 |
| 185.176.27.42 | attackbots | 12/26/2019-17:46:53.182233 185.176.27.42 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-12-27 06:52:20 |
| 114.119.37.143 | attack | Unauthorised access (Dec 27) SRC=114.119.37.143 LEN=40 TTL=237 ID=58765 TCP DPT=1433 WINDOW=1024 SYN Unauthorised access (Dec 23) SRC=114.119.37.143 LEN=40 TTL=237 ID=31099 TCP DPT=1433 WINDOW=1024 SYN |
2019-12-27 06:57:39 |
| 193.70.0.42 | attackbots | Dec 26 23:46:49 localhost sshd\[30675\]: Invalid user dajour from 193.70.0.42 port 47062 Dec 26 23:46:49 localhost sshd\[30675\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.0.42 Dec 26 23:46:51 localhost sshd\[30675\]: Failed password for invalid user dajour from 193.70.0.42 port 47062 ssh2 |
2019-12-27 06:51:57 |
| 222.186.175.217 | attack | Dec 27 06:46:29 bacztwo sshd[18802]: error: PAM: Authentication failure for root from 222.186.175.217 Dec 27 06:46:33 bacztwo sshd[18802]: error: PAM: Authentication failure for root from 222.186.175.217 Dec 27 06:46:36 bacztwo sshd[18802]: error: PAM: Authentication failure for root from 222.186.175.217 Dec 27 06:46:36 bacztwo sshd[18802]: Failed keyboard-interactive/pam for root from 222.186.175.217 port 41180 ssh2 Dec 27 06:46:26 bacztwo sshd[18802]: error: PAM: Authentication failure for root from 222.186.175.217 Dec 27 06:46:29 bacztwo sshd[18802]: error: PAM: Authentication failure for root from 222.186.175.217 Dec 27 06:46:33 bacztwo sshd[18802]: error: PAM: Authentication failure for root from 222.186.175.217 Dec 27 06:46:36 bacztwo sshd[18802]: error: PAM: Authentication failure for root from 222.186.175.217 Dec 27 06:46:36 bacztwo sshd[18802]: Failed keyboard-interactive/pam for root from 222.186.175.217 port 41180 ssh2 Dec 27 06:46:39 bacztwo sshd[18802]: error: PAM: Authent ... |
2019-12-27 06:50:35 |
| 146.185.25.175 | attackspambots | Port 22 Scan, PTR: None |
2019-12-27 07:03:30 |
| 95.165.160.46 | attack | SpamReport |
2019-12-27 06:31:26 |
| 5.148.3.212 | attackspam | Dec 26 22:46:37 IngegnereFirenze sshd[15536]: Failed password for invalid user kalim from 5.148.3.212 port 49989 ssh2 ... |
2019-12-27 06:59:51 |
| 115.90.219.20 | attackbots | Dec 26 22:17:50 pornomens sshd\[10442\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.90.219.20 user=root Dec 26 22:17:52 pornomens sshd\[10442\]: Failed password for root from 115.90.219.20 port 60512 ssh2 Dec 26 22:36:38 pornomens sshd\[10651\]: Invalid user nushwat from 115.90.219.20 port 57044 Dec 26 22:36:38 pornomens sshd\[10651\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.90.219.20 ... |
2019-12-27 06:43:31 |