City: unknown
Region: unknown
Country: Italy
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 93.63.37.169 | attack | Vulnerability scan - cgi-bin/mainfunction.cgi |
2020-05-27 20:54:42 |
| 93.63.37.169 | attackbotsspam | HTTP Unix Shell IFS Remote Code Execution Detection, PTR: 93-63-37-169.ip25.fastwebnet.it. |
2020-04-24 05:30:07 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 93.63.3.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50459
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;93.63.3.14. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021200 1800 900 604800 86400
;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 17:12:43 CST 2025
;; MSG SIZE rcvd: 10314.3.63.93.in-addr.arpa domain name pointer 93-63-3-14.ip25.fastwebnet.it.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
14.3.63.93.in-addr.arpa name = 93-63-3-14.ip25.fastwebnet.it.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 125.111.153.45 | attackbotsspam | Automatic report - Port Scan Attack |
2019-07-14 05:25:42 |
| 190.129.39.114 | attack | Jul 13 23:09:12 srv-4 sshd\[16832\]: Invalid user angelo from 190.129.39.114 Jul 13 23:09:12 srv-4 sshd\[16832\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.129.39.114 Jul 13 23:09:13 srv-4 sshd\[16832\]: Failed password for invalid user angelo from 190.129.39.114 port 33793 ssh2 ... |
2019-07-14 04:55:40 |
| 118.69.128.22 | attackspambots | Jul 13 21:06:13 debian sshd\[29048\]: Invalid user saulo from 118.69.128.22 port 58446 Jul 13 21:06:13 debian sshd\[29048\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.69.128.22 ... |
2019-07-14 05:06:10 |
| 151.224.125.124 | attackspambots | Lines containing failures of 151.224.125.124 Jul 13 16:53:34 mellenthin postfix/smtpd[31568]: connect from 97e07d7c.skybroadband.com[151.224.125.124] Jul x@x Jul 13 16:53:36 mellenthin postfix/smtpd[31568]: lost connection after DATA from 97e07d7c.skybroadband.com[151.224.125.124] Jul 13 16:53:36 mellenthin postfix/smtpd[31568]: disconnect from 97e07d7c.skybroadband.com[151.224.125.124] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=151.224.125.124 |
2019-07-14 05:28:42 |
| 95.9.164.12 | attackbotsspam | port scan and connect, tcp 23 (telnet) |
2019-07-14 05:09:58 |
| 171.80.187.35 | attackspam | Jul 13 17:55:44 localhost postfix/smtpd\[11398\]: warning: unknown\[171.80.187.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 13 17:55:52 localhost postfix/smtpd\[11398\]: warning: unknown\[171.80.187.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 13 17:56:04 localhost postfix/smtpd\[11398\]: warning: unknown\[171.80.187.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 13 17:56:19 localhost postfix/smtpd\[11398\]: warning: unknown\[171.80.187.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 13 17:56:28 localhost postfix/smtpd\[11398\]: warning: unknown\[171.80.187.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-07-14 05:13:34 |
| 93.102.5.187 | attack | Lines containing failures of 93.102.5.187 Jul 12 15:52:00 mellenthin postfix/smtpd[29805]: connect from 93.102.5.187.rev.optimus.pt[93.102.5.187] Jul x@x Jul 12 15:52:03 mellenthin postfix/smtpd[29805]: lost connection after DATA from 93.102.5.187.rev.optimus.pt[93.102.5.187] Jul 12 15:52:03 mellenthin postfix/smtpd[29805]: disconnect from 93.102.5.187.rev.optimus.pt[93.102.5.187] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4 Jul 13 16:54:21 mellenthin postfix/smtpd[5323]: connect from 93.102.5.187.rev.optimus.pt[93.102.5.187] Jul x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=93.102.5.187 |
2019-07-14 05:24:09 |
| 193.142.42.200 | spam | Lifestyle Daily. Revolutionary portable air conditioner is breaking sales records. |
2019-07-14 05:27:52 |
| 194.152.206.93 | attack | Automated report - ssh fail2ban: Jul 13 22:50:43 wrong password, user=daniel, port=54141, ssh2 Jul 13 23:21:24 authentication failure Jul 13 23:21:26 wrong password, user=toor, port=56864, ssh2 |
2019-07-14 05:27:14 |
| 103.27.48.174 | attack | Unauthorised access (Jul 13) SRC=103.27.48.174 LEN=44 TTL=245 ID=5474 TCP DPT=139 WINDOW=1024 SYN Unauthorised access (Jul 12) SRC=103.27.48.174 LEN=44 TTL=245 ID=14130 TCP DPT=139 WINDOW=1024 SYN Unauthorised access (Jul 11) SRC=103.27.48.174 LEN=44 TTL=245 ID=19860 TCP DPT=139 WINDOW=1024 SYN Unauthorised access (Jul 10) SRC=103.27.48.174 LEN=44 TTL=245 ID=3486 TCP DPT=139 WINDOW=1024 SYN Unauthorised access (Jul 9) SRC=103.27.48.174 LEN=44 TTL=245 ID=63951 TCP DPT=139 WINDOW=1024 SYN |
2019-07-14 05:11:11 |
| 92.118.160.1 | attackspam | Caught in portsentry honeypot |
2019-07-14 05:19:11 |
| 91.113.235.158 | attackbots | Jul 14 01:30:18 vibhu-HP-Z238-Microtower-Workstation sshd\[4601\]: Invalid user filip from 91.113.235.158 Jul 14 01:30:18 vibhu-HP-Z238-Microtower-Workstation sshd\[4601\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.113.235.158 Jul 14 01:30:19 vibhu-HP-Z238-Microtower-Workstation sshd\[4601\]: Failed password for invalid user filip from 91.113.235.158 port 48440 ssh2 Jul 14 01:35:24 vibhu-HP-Z238-Microtower-Workstation sshd\[4939\]: Invalid user stp from 91.113.235.158 Jul 14 01:35:24 vibhu-HP-Z238-Microtower-Workstation sshd\[4939\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.113.235.158 ... |
2019-07-14 05:25:09 |
| 46.77.90.18 | attack | Lines containing failures of 46.77.90.18 Jul 13 16:54:11 mellenthin postfix/smtpd[5662]: connect from apn-46-77-90-18.dynamic.gprs.plus.pl[46.77.90.18] Jul x@x Jul 13 16:54:12 mellenthin postfix/smtpd[5662]: lost connection after DATA from apn-46-77-90-18.dynamic.gprs.plus.pl[46.77.90.18] Jul 13 16:54:12 mellenthin postfix/smtpd[5662]: disconnect from apn-46-77-90-18.dynamic.gprs.plus.pl[46.77.90.18] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=46.77.90.18 |
2019-07-14 05:19:53 |
| 111.122.181.250 | attack | Jul 13 18:11:05 MK-Soft-Root1 sshd\[6574\]: Invalid user julie from 111.122.181.250 port 2327 Jul 13 18:11:05 MK-Soft-Root1 sshd\[6574\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.122.181.250 Jul 13 18:11:08 MK-Soft-Root1 sshd\[6574\]: Failed password for invalid user julie from 111.122.181.250 port 2327 ssh2 ... |
2019-07-14 05:32:06 |
| 14.186.56.31 | attack | Automatic report - Port Scan Attack |
2019-07-14 05:35:24 |