IP: 72.214.101.2
Ports affected
    World Wide Web HTTP (80) 
Abuse Confidence rating 20%
ASN Details
   AS22898 ATLINK
   United States (US)
   CIDR 72.214.96.0/21
Log Date: 7/03/2020 12:36:00 PM UTC

2020-03-07T20:25:37.050485wiz-ks3 sshd[6735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.202.208.107  user=root
2020-03-07T20:25:39.695970wiz-ks3 sshd[6735]: Failed password for root from 116.202.208.107 port 43350 ssh2
2020-03-07T20:26:19.459857wiz-ks3 sshd[6738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.202.208.107  user=root
2020-03-07T20:26:21.869705wiz-ks3 sshd[6738]: Failed password for root from 116.202.208.107 port 32922 ssh2
2020-03-07T20:27:01.126420wiz-ks3 sshd[6740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.202.208.107  user=root
2020-03-07T20:27:02.969166wiz-ks3 sshd[6740]: Failed password for root from 116.202.208.107 port 50722 ssh2
2020-03-07T20:27:43.266963wiz-ks3 sshd[6744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.202.208.107  user=root
2020-03-07T20:27:45.541388wiz-ks3 sshd[6744]: Failed pas

[SatMar0714:29:17.3031412020][:error][pid23072:tid47374116968192][client180.183.42.39:41640][client180.183.42.39]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\|WormlyBot\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"402"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSIE6.0detected\(DisableifyouwanttoallowMSIE6\)"][severity"WARNING"][hostname"patriziatodiosogna.ch"][uri"/"][unique_id"XmOhrSFZQu0upYTvzaHyGwAAAUA"][SatMar0714:29:22.3245642020][:error][pid23137:tid47374144284416][client180.183.42.39:60150][client180.183.42.39]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\|WormlyBot\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"402"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSIE6.0detected\(Dis

(From storybitestudio14@gmail.com) Hey! I just visited nwchiro.net and thought I would reach out to you. 
 
I run an animation studio that makes animated explainer videos helping companies to better explain their offering and why potential customers should work with them over the competition. 
 
Watch some of our work here: http://www.story-bite.com/ - do you like it? 
 
Our team works out of Denmark to create high quality videos made from scratch, designed to make your business stand out and get results. No templates, no cookie cutter animation that tarnishes your brand. 
 
I really wanted to make you a super awesome animated video explaining what your company does and the value behind it. 
 
We have a smooth production process and handle everything needed for a high-quality video that typically takes us 6 weeks to produce from start to finish. 
 
First, we nail the script, design storyboards you can’t wait to see animated. Voice actors in your native language that capture your brand and animatio

Honeypot attack, port: 81, PTR: PTR record not found

" "

2020-03-07T18:37:34.021317dmca.cloudsearch.cf sshd[17762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.232.100.246  user=root
2020-03-07T18:37:36.215422dmca.cloudsearch.cf sshd[17762]: Failed password for root from 77.232.100.246 port 42968 ssh2
2020-03-07T18:42:01.284163dmca.cloudsearch.cf sshd[18116]: Invalid user svnuser from 77.232.100.246 port 59472
2020-03-07T18:42:01.289811dmca.cloudsearch.cf sshd[18116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.232.100.246
2020-03-07T18:42:01.284163dmca.cloudsearch.cf sshd[18116]: Invalid user svnuser from 77.232.100.246 port 59472
2020-03-07T18:42:03.469159dmca.cloudsearch.cf sshd[18116]: Failed password for invalid user svnuser from 77.232.100.246 port 59472 ssh2
2020-03-07T18:46:18.395197dmca.cloudsearch.cf sshd[18397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.232.100.246  user=root
2020-03-07T18:
...

[SatMar0714:29:45.9581202020][:error][pid22865:tid47374150588160][client124.104.220.229:57398][client124.104.220.229]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\|WormlyBot\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"402"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSIE6.0detected\(DisableifyouwanttoallowMSIE6\)"][severity"WARNING"][hostname"patriziatodiosogna.ch"][uri"/"][unique_id"XmOhyUxEYV9Jn2sXpUU-ZQAAANA"][SatMar0714:29:50.7138312020][:error][pid22858:tid47374119069440][client124.104.220.229:57409][client124.104.220.229]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\|WormlyBot\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"402"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSIE6.0detec

Mar  7 13:29:19 src: 80.82.70.106 signature match: "BACKDOOR SatansBackdoor.2.0.Beta, or BackConstruction 2.1 Connection Attempt" (sid: 100041) tcp port: 666

Honeypot attack, port: 445, PTR: 42.119.130.46.in-addr.mts.am.

Spammer_1

IP: 159.203.190.238
Ports affected
    Simple Mail Transfer (25) 
Found in DNSBL('s)
ASN Details
   AS14061 DigitalOcean LLC
   United States (US)
   CIDR 159.203.0.0/16
Log Date: 7/03/2020 2:23:58 PM UTC

Honeypot attack, port: 81, PTR: 85.96.174.221.dynamic.ttnet.com.tr.

Unauthorized connection attempt from IP address 82.162.58.49 on Port 445(SMB)

Honeypot attack, port: 5555, PTR: ip-142-238.oxygen.id.