City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.93.115.218 | spambotsattackproxy | DDOS |
2023-02-25 22:15:30 |
| 142.93.118.252 | attack | 2020-10-13T17:20:07.902067abusebot-4.cloudsearch.cf sshd[7326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.118.252 user=root 2020-10-13T17:20:09.819878abusebot-4.cloudsearch.cf sshd[7326]: Failed password for root from 142.93.118.252 port 51186 ssh2 2020-10-13T17:25:25.711646abusebot-4.cloudsearch.cf sshd[7384]: Invalid user eliane from 142.93.118.252 port 33466 2020-10-13T17:25:25.728566abusebot-4.cloudsearch.cf sshd[7384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.118.252 2020-10-13T17:25:25.711646abusebot-4.cloudsearch.cf sshd[7384]: Invalid user eliane from 142.93.118.252 port 33466 2020-10-13T17:25:27.967571abusebot-4.cloudsearch.cf sshd[7384]: Failed password for invalid user eliane from 142.93.118.252 port 33466 ssh2 2020-10-13T17:28:29.714658abusebot-4.cloudsearch.cf sshd[7506]: Invalid user ando from 142.93.118.252 port 59804 ... |
2020-10-14 04:43:29 |
| 142.93.118.252 | attackbotsspam | Oct 13 11:48:49 ip-172-31-42-142 sshd\[2817\]: Failed password for root from 142.93.118.252 port 35510 ssh2\ Oct 13 11:53:48 ip-172-31-42-142 sshd\[2880\]: Invalid user abc123 from 142.93.118.252\ Oct 13 11:53:51 ip-172-31-42-142 sshd\[2880\]: Failed password for invalid user abc123 from 142.93.118.252 port 41950 ssh2\ Oct 13 11:55:28 ip-172-31-42-142 sshd\[2893\]: Invalid user ilya from 142.93.118.252\ Oct 13 11:55:30 ip-172-31-42-142 sshd\[2893\]: Failed password for invalid user ilya from 142.93.118.252 port 43804 ssh2\ |
2020-10-13 20:13:43 |
| 142.93.115.12 | attackspam | Sep 28 18:23:10 sip sshd[1760635]: Invalid user ec2-user from 142.93.115.12 port 46152 Sep 28 18:23:11 sip sshd[1760635]: Failed password for invalid user ec2-user from 142.93.115.12 port 46152 ssh2 Sep 28 18:30:43 sip sshd[1760661]: Invalid user kafka from 142.93.115.12 port 54806 ... |
2020-09-29 05:21:36 |
| 142.93.115.12 | attack | Time: Sun Sep 27 09:24:29 2020 +0000 IP: 142.93.115.12 (US/United States/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 27 09:11:46 3 sshd[16544]: Invalid user dbuser from 142.93.115.12 port 34274 Sep 27 09:11:48 3 sshd[16544]: Failed password for invalid user dbuser from 142.93.115.12 port 34274 ssh2 Sep 27 09:14:37 3 sshd[24114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.115.12 user=root Sep 27 09:14:39 3 sshd[24114]: Failed password for root from 142.93.115.12 port 46776 ssh2 Sep 27 09:24:25 3 sshd[17199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.115.12 user=root |
2020-09-28 21:40:34 |
| 142.93.115.12 | attack | Sep 28 06:34:49 icinga sshd[51961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.115.12 Sep 28 06:34:51 icinga sshd[51961]: Failed password for invalid user user from 142.93.115.12 port 39448 ssh2 Sep 28 06:43:59 icinga sshd[65058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.115.12 ... |
2020-09-28 13:47:50 |
| 142.93.115.12 | attackbots | Invalid user prueba from 142.93.115.12 port 59366 |
2020-09-28 03:21:28 |
| 142.93.115.12 | attack | Bruteforce detected by fail2ban |
2020-09-27 19:31:13 |
| 142.93.115.12 | attack | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): user=root |
2020-09-25 04:36:22 |
| 142.93.118.252 | attackspam | Sep 22 16:51:09 vps639187 sshd\[30772\]: Invalid user office from 142.93.118.252 port 57616 Sep 22 16:51:09 vps639187 sshd\[30772\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.118.252 Sep 22 16:51:11 vps639187 sshd\[30772\]: Failed password for invalid user office from 142.93.118.252 port 57616 ssh2 ... |
2020-09-23 00:21:49 |
| 142.93.118.252 | attack | Sep 22 13:00:23 lunarastro sshd[22244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.118.252 Sep 22 13:00:25 lunarastro sshd[22244]: Failed password for invalid user liwei from 142.93.118.252 port 34628 ssh2 |
2020-09-22 16:23:15 |
| 142.93.118.252 | attack | SSH Brute-force |
2020-09-22 08:25:55 |
| 142.93.112.41 | attackspambots | 2916/tcp 26695/tcp 31248/tcp... [2020-06-30/08-30]163pkt,61pt.(tcp) |
2020-08-31 18:02:05 |
| 142.93.111.202 | attackspambots | Unauthorized connection attempt detected from IP address 142.93.111.202 to port 10001 [T] |
2020-08-29 21:52:36 |
| 142.93.118.252 | attackbots | 2020-08-28T04:38:18.520419shield sshd\[1428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.118.252 user=root 2020-08-28T04:38:20.489603shield sshd\[1428\]: Failed password for root from 142.93.118.252 port 57866 ssh2 2020-08-28T04:42:16.430313shield sshd\[1752\]: Invalid user pjv from 142.93.118.252 port 39446 2020-08-28T04:42:16.455090shield sshd\[1752\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.118.252 2020-08-28T04:42:18.097824shield sshd\[1752\]: Failed password for invalid user pjv from 142.93.118.252 port 39446 ssh2 |
2020-08-28 12:53:56 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.11.233
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27684
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;142.93.11.233. IN A
;; AUTHORITY SECTION:
. 151 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 10:05:21 CST 2022
;; MSG SIZE rcvd: 106233.11.93.142.in-addr.arpa domain name pointer 393781.cloudwaysapps.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
233.11.93.142.in-addr.arpa name = 393781.cloudwaysapps.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 134.209.123.26 | attack | Invalid user web from 134.209.123.26 port 46648 |
2020-01-18 22:09:41 |
| 139.59.14.210 | attackbots | none |
2020-01-18 22:34:22 |
| 171.234.246.97 | attackbotsspam | Invalid user admin from 171.234.246.97 port 56374 |
2020-01-18 22:05:53 |
| 124.235.206.130 | attack | Invalid user admin from 124.235.206.130 port 39085 |
2020-01-18 22:35:34 |
| 129.211.75.184 | attackbotsspam | Invalid user scan from 129.211.75.184 port 47716 |
2020-01-18 22:09:57 |
| 139.199.168.18 | attack | Unauthorized connection attempt detected from IP address 139.199.168.18 to port 2220 [J] |
2020-01-18 22:34:07 |
| 110.185.166.137 | attackspambots | Invalid user Admin from 110.185.166.137 port 52172 |
2020-01-18 22:13:23 |
| 106.241.16.105 | attackspam | Unauthorized connection attempt detected from IP address 106.241.16.105 to port 2220 [J] |
2020-01-18 22:40:27 |
| 188.82.219.243 | attackbotsspam | Invalid user jdavila from 188.82.219.243 port 53688 |
2020-01-18 22:01:24 |
| 114.67.80.39 | attack | Invalid user je from 114.67.80.39 port 39112 |
2020-01-18 22:38:11 |
| 196.1.100.229 | attack | Invalid user ubuntu from 196.1.100.229 port 36548 |
2020-01-18 22:25:44 |
| 125.129.26.238 | attackspam | Jan 18 04:16:49 kapalua sshd\[30007\]: Invalid user photos from 125.129.26.238 Jan 18 04:16:49 kapalua sshd\[30007\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.129.26.238 Jan 18 04:16:50 kapalua sshd\[30007\]: Failed password for invalid user photos from 125.129.26.238 port 53162 ssh2 Jan 18 04:17:05 kapalua sshd\[30041\]: Invalid user jasmin from 125.129.26.238 Jan 18 04:17:05 kapalua sshd\[30041\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.129.26.238 |
2020-01-18 22:35:11 |
| 104.236.244.98 | attackspambots | Unauthorized connection attempt detected from IP address 104.236.244.98 to port 2220 [J] |
2020-01-18 22:15:35 |
| 188.207.37.129 | attackspam | Invalid user admin from 188.207.37.129 port 48446 |
2020-01-18 22:26:27 |
| 197.45.117.66 | attackbotsspam | Honeypot attack, port: 445, PTR: host-197.45.117.66.tedata.net. |
2020-01-18 21:58:47 |