City: unknown
Region: unknown
Country: United States of America
Internet Service Provider: DigitalOcean LLC
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspam | Sep 1 11:28:50 webhost01 sshd[2657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.101.21 Sep 1 11:28:51 webhost01 sshd[2657]: Failed password for invalid user amber from 142.93.101.21 port 40062 ssh2 ... |
2020-09-01 12:29:27 |
| attackbots | Aug 29 08:03:23 george sshd[22808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.101.21 Aug 29 08:03:25 george sshd[22808]: Failed password for invalid user user1 from 142.93.101.21 port 58914 ssh2 Aug 29 08:09:05 george sshd[22937]: Invalid user juan from 142.93.101.21 port 40464 Aug 29 08:09:05 george sshd[22937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.101.21 Aug 29 08:09:06 george sshd[22937]: Failed password for invalid user juan from 142.93.101.21 port 40464 ssh2 ... |
2020-08-29 23:32:11 |
| attackspam | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-18T03:44:37Z and 2020-08-18T03:56:56Z |
2020-08-18 12:41:27 |
| attackbotsspam | Jul 28 12:06:16 localhost sshd\[27603\]: Invalid user lzs from 142.93.101.21 port 56872 Jul 28 12:06:16 localhost sshd\[27603\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.101.21 Jul 28 12:06:19 localhost sshd\[27603\]: Failed password for invalid user lzs from 142.93.101.21 port 56872 ssh2 ... |
2020-07-28 22:16:49 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.93.101.2 | attackspambots | Banned for a week because repeated abuses, for example SSH, but not only |
2020-10-08 01:01:05 |
| 142.93.101.2 | attack | Oct 7 11:36:29 root sshd[417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.101.2 user=root Oct 7 11:36:32 root sshd[417]: Failed password for root from 142.93.101.2 port 49244 ssh2 ... |
2020-10-07 17:09:59 |
| 142.93.101.46 | attack | TCP port : 11535 |
2020-09-21 20:15:34 |
| 142.93.101.46 | attack | $f2bV_matches |
2020-09-21 12:07:29 |
| 142.93.101.46 | attack | Port scan denied |
2020-09-21 03:58:10 |
| 142.93.101.46 | attack | Sep 19 15:43:29 nextcloud sshd\[13636\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.101.46 user=root Sep 19 15:43:31 nextcloud sshd\[13636\]: Failed password for root from 142.93.101.46 port 40324 ssh2 Sep 19 15:59:11 nextcloud sshd\[30368\]: Invalid user user123 from 142.93.101.46 Sep 19 15:59:11 nextcloud sshd\[30368\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.101.46 |
2020-09-19 22:00:31 |
| 142.93.101.46 | attackspam | 11777/tcp 30023/tcp 23124/tcp... [2020-08-30/09-18]65pkt,22pt.(tcp) |
2020-09-19 13:53:09 |
| 142.93.101.46 | attackbotsspam | fail2ban detected bruce force on ssh iptables |
2020-09-19 05:32:24 |
| 142.93.101.46 | attack | Invalid user weblogic from 142.93.101.46 port 35024 |
2020-09-17 06:30:38 |
| 142.93.101.46 | attackbotsspam | 2020-09-14T14:37:49+0000 Failed SSH Authentication/Brute Force Attack. (Server 6) |
2020-09-15 00:50:55 |
| 142.93.101.46 | attack | Sep 14 09:46:15 v22019038103785759 sshd\[8351\]: Invalid user vodafone from 142.93.101.46 port 51558 Sep 14 09:46:15 v22019038103785759 sshd\[8351\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.101.46 Sep 14 09:46:17 v22019038103785759 sshd\[8351\]: Failed password for invalid user vodafone from 142.93.101.46 port 51558 ssh2 Sep 14 09:55:29 v22019038103785759 sshd\[9157\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.101.46 user=root Sep 14 09:55:31 v22019038103785759 sshd\[9157\]: Failed password for root from 142.93.101.46 port 60406 ssh2 ... |
2020-09-14 16:34:32 |
| 142.93.101.148 | attack | detected by Fail2Ban |
2020-09-12 23:39:39 |
| 142.93.101.148 | attack | (sshd) Failed SSH login from 142.93.101.148 (DE/Germany/-): 5 in the last 3600 secs |
2020-09-12 15:43:02 |
| 142.93.101.148 | attack | Sep 12 00:25:35 sshgateway sshd\[10111\]: Invalid user oneadmin from 142.93.101.148 Sep 12 00:25:35 sshgateway sshd\[10111\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.101.148 Sep 12 00:25:37 sshgateway sshd\[10111\]: Failed password for invalid user oneadmin from 142.93.101.148 port 41276 ssh2 |
2020-09-12 07:29:58 |
| 142.93.101.46 | attackbotsspam | Aug 28 19:17:24 minden010 sshd[22457]: Failed password for mysql from 142.93.101.46 port 49918 ssh2 Aug 28 19:21:12 minden010 sshd[23829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.101.46 Aug 28 19:21:14 minden010 sshd[23829]: Failed password for invalid user sysop from 142.93.101.46 port 58718 ssh2 ... |
2020-08-29 03:24:50 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.101.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37321
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.101.21. IN A
;; AUTHORITY SECTION:
. 362 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020072800 1800 900 604800 86400
;; Query time: 80 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jul 28 22:16:42 CST 2020
;; MSG SIZE rcvd: 117Host 21.101.93.142.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 21.101.93.142.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 118.70.180.174 | attackspambots | 2020-07-16T17:27:38.506597shield sshd\[6766\]: Invalid user frodo from 118.70.180.174 port 57597 2020-07-16T17:27:38.516808shield sshd\[6766\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.180.174 2020-07-16T17:27:40.527834shield sshd\[6766\]: Failed password for invalid user frodo from 118.70.180.174 port 57597 ssh2 2020-07-16T17:32:38.714123shield sshd\[7968\]: Invalid user sasi from 118.70.180.174 port 44691 2020-07-16T17:32:38.724043shield sshd\[7968\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.180.174 |
2020-07-17 02:42:13 |
| 197.44.50.126 | attackspambots | Attempted connection to port 445. |
2020-07-17 03:11:43 |
| 195.154.237.111 | attack | Jul 16 09:26:13 mockhub sshd[15840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.237.111 Jul 16 09:26:15 mockhub sshd[15840]: Failed password for invalid user tempuser from 195.154.237.111 port 53659 ssh2 ... |
2020-07-17 03:03:23 |
| 94.75.30.224 | attackspam | Attempted connection to port 445. |
2020-07-17 03:02:39 |
| 52.136.123.132 | attackspambots | port scan and connect, tcp 22 (ssh) |
2020-07-17 03:09:34 |
| 178.165.56.235 | attackspambots | Fail2Ban Ban Triggered |
2020-07-17 02:52:23 |
| 218.92.0.250 | attack | Jul 16 21:01:47 srv-ubuntu-dev3 sshd[70868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.250 user=root Jul 16 21:01:48 srv-ubuntu-dev3 sshd[70868]: Failed password for root from 218.92.0.250 port 1818 ssh2 Jul 16 21:01:51 srv-ubuntu-dev3 sshd[70868]: Failed password for root from 218.92.0.250 port 1818 ssh2 Jul 16 21:01:47 srv-ubuntu-dev3 sshd[70868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.250 user=root Jul 16 21:01:48 srv-ubuntu-dev3 sshd[70868]: Failed password for root from 218.92.0.250 port 1818 ssh2 Jul 16 21:01:51 srv-ubuntu-dev3 sshd[70868]: Failed password for root from 218.92.0.250 port 1818 ssh2 Jul 16 21:01:47 srv-ubuntu-dev3 sshd[70868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.250 user=root Jul 16 21:01:48 srv-ubuntu-dev3 sshd[70868]: Failed password for root from 218.92.0.250 port 1818 ssh2 Jul 16 21:01:5 ... |
2020-07-17 03:10:25 |
| 167.114.3.105 | attackbots | Jul 16 18:17:16 fhem-rasp sshd[23243]: Invalid user ftpuser2 from 167.114.3.105 port 60600 ... |
2020-07-17 02:57:12 |
| 34.101.117.198 | attack | 2020-07-16T13:40:19.302432abusebot-5.cloudsearch.cf sshd[10380]: Invalid user usuario from 34.101.117.198 port 46212 2020-07-16T13:40:19.307687abusebot-5.cloudsearch.cf sshd[10380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.117.101.34.bc.googleusercontent.com 2020-07-16T13:40:19.302432abusebot-5.cloudsearch.cf sshd[10380]: Invalid user usuario from 34.101.117.198 port 46212 2020-07-16T13:40:21.258351abusebot-5.cloudsearch.cf sshd[10380]: Failed password for invalid user usuario from 34.101.117.198 port 46212 ssh2 2020-07-16T13:45:41.274944abusebot-5.cloudsearch.cf sshd[10487]: Invalid user guest from 34.101.117.198 port 37384 2020-07-16T13:45:41.280976abusebot-5.cloudsearch.cf sshd[10487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.117.101.34.bc.googleusercontent.com 2020-07-16T13:45:41.274944abusebot-5.cloudsearch.cf sshd[10487]: Invalid user guest from 34.101.117.198 port 37384 2020-07- ... |
2020-07-17 02:52:55 |
| 93.40.9.14 | attackbotsspam | Attempted connection to port 445. |
2020-07-17 03:02:54 |
| 162.218.52.195 | attackspambots | Unauthorized connection attempt from IP address 162.218.52.195 on Port 445(SMB) |
2020-07-17 03:00:37 |
| 94.102.51.95 | attack | 07/16/2020-14:24:39.334715 94.102.51.95 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-07-17 02:44:07 |
| 177.18.5.153 | attack | Unauthorized connection attempt from IP address 177.18.5.153 on Port 445(SMB) |
2020-07-17 02:58:46 |
| 46.36.27.120 | attackspam | Fail2Ban - SSH Bruteforce Attempt |
2020-07-17 02:53:47 |
| 122.155.11.89 | attackbots | $f2bV_matches |
2020-07-17 03:13:03 |