City: North Bergen
Region: New Jersey
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.93.115.218 | spambotsattackproxy | DDOS |
2023-02-25 22:15:30 |
| 142.93.115.12 | attackspam | Sep 28 18:23:10 sip sshd[1760635]: Invalid user ec2-user from 142.93.115.12 port 46152 Sep 28 18:23:11 sip sshd[1760635]: Failed password for invalid user ec2-user from 142.93.115.12 port 46152 ssh2 Sep 28 18:30:43 sip sshd[1760661]: Invalid user kafka from 142.93.115.12 port 54806 ... |
2020-09-29 05:21:36 |
| 142.93.115.12 | attack | Time: Sun Sep 27 09:24:29 2020 +0000 IP: 142.93.115.12 (US/United States/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 27 09:11:46 3 sshd[16544]: Invalid user dbuser from 142.93.115.12 port 34274 Sep 27 09:11:48 3 sshd[16544]: Failed password for invalid user dbuser from 142.93.115.12 port 34274 ssh2 Sep 27 09:14:37 3 sshd[24114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.115.12 user=root Sep 27 09:14:39 3 sshd[24114]: Failed password for root from 142.93.115.12 port 46776 ssh2 Sep 27 09:24:25 3 sshd[17199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.115.12 user=root |
2020-09-28 21:40:34 |
| 142.93.115.12 | attack | Sep 28 06:34:49 icinga sshd[51961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.115.12 Sep 28 06:34:51 icinga sshd[51961]: Failed password for invalid user user from 142.93.115.12 port 39448 ssh2 Sep 28 06:43:59 icinga sshd[65058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.115.12 ... |
2020-09-28 13:47:50 |
| 142.93.115.12 | attackbots | Invalid user prueba from 142.93.115.12 port 59366 |
2020-09-28 03:21:28 |
| 142.93.115.12 | attack | Bruteforce detected by fail2ban |
2020-09-27 19:31:13 |
| 142.93.115.12 | attack | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): user=root |
2020-09-25 04:36:22 |
| 142.93.115.12 | attackbots | Aug 25 03:08:48 gw1 sshd[24515]: Failed password for root from 142.93.115.12 port 44606 ssh2 ... |
2020-08-25 07:07:19 |
| 142.93.115.47 | attackbotsspam | May 5 11:56:22 IngegnereFirenze sshd[19702]: Failed password for invalid user bi from 142.93.115.47 port 43032 ssh2 ... |
2020-05-05 22:39:57 |
| 142.93.115.47 | attack | SSH brutforce |
2020-05-04 16:00:25 |
| 142.93.115.47 | attack | SSH brute force attempt |
2020-04-28 00:53:41 |
| 142.93.115.47 | attackspambots | Apr 2 12:04:36 kmh-wsh-001-nbg03 sshd[12631]: Invalid user ay from 142.93.115.47 port 35384 Apr 2 12:04:36 kmh-wsh-001-nbg03 sshd[12631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.115.47 Apr 2 12:04:38 kmh-wsh-001-nbg03 sshd[12631]: Failed password for invalid user ay from 142.93.115.47 port 35384 ssh2 Apr 2 12:04:38 kmh-wsh-001-nbg03 sshd[12631]: Received disconnect from 142.93.115.47 port 35384:11: Bye Bye [preauth] Apr 2 12:04:38 kmh-wsh-001-nbg03 sshd[12631]: Disconnected from 142.93.115.47 port 35384 [preauth] Apr 2 12:15:36 kmh-wsh-001-nbg03 sshd[14337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.115.47 user=r.r Apr 2 12:15:39 kmh-wsh-001-nbg03 sshd[14337]: Failed password for r.r from 142.93.115.47 port 53936 ssh2 Apr 2 12:15:39 kmh-wsh-001-nbg03 sshd[14337]: Received disconnect from 142.93.115.47 port 53936:11: Bye Bye [preauth] Apr 2 12:15:39 kmh-w........ ------------------------------- |
2020-04-03 03:36:58 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.115.128
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2133
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;142.93.115.128. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023030600 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 06 15:20:47 CST 2023
;; MSG SIZE rcvd: 107Host 128.115.93.142.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 128.115.93.142.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 51.68.122.216 | attackspambots | Oct 23 01:53:45 firewall sshd[2008]: Invalid user Welcome1 from 51.68.122.216 Oct 23 01:53:46 firewall sshd[2008]: Failed password for invalid user Welcome1 from 51.68.122.216 port 38626 ssh2 Oct 23 01:57:32 firewall sshd[2062]: Invalid user caleb from 51.68.122.216 ... |
2019-10-23 17:18:40 |
| 139.155.123.84 | attack | 2019-10-23T08:12:44.074766abusebot-3.cloudsearch.cf sshd\[30648\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.123.84 user=root |
2019-10-23 17:09:01 |
| 5.39.67.11 | attackbots | Oct 23 08:47:21 game-panel sshd[4860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.67.11 Oct 23 08:47:23 game-panel sshd[4860]: Failed password for invalid user filpx from 5.39.67.11 port 34996 ssh2 Oct 23 08:48:22 game-panel sshd[4885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.67.11 |
2019-10-23 16:48:46 |
| 194.7.35.200 | attack | Joomla User : try to access forms... |
2019-10-23 17:08:18 |
| 51.83.69.99 | attack | 51.83.69.99 - - [23/Oct/2019:12:51:31 +0400] "POST /GponForm/diag_Form?style/ HTTP/1.1" 502 157 "-" "curl/7.3.2" ... |
2019-10-23 17:12:01 |
| 140.143.154.13 | attackspambots | Oct 23 05:22:19 firewall sshd[7257]: Failed password for invalid user qun from 140.143.154.13 port 60594 ssh2 Oct 23 05:27:00 firewall sshd[7377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.154.13 user=root Oct 23 05:27:02 firewall sshd[7377]: Failed password for root from 140.143.154.13 port 40674 ssh2 ... |
2019-10-23 17:04:59 |
| 192.42.116.26 | attack | Oct 23 09:32:25 rotator sshd\[31538\]: Failed password for root from 192.42.116.26 port 48848 ssh2Oct 23 09:32:27 rotator sshd\[31538\]: Failed password for root from 192.42.116.26 port 48848 ssh2Oct 23 09:32:29 rotator sshd\[31538\]: Failed password for root from 192.42.116.26 port 48848 ssh2Oct 23 09:32:32 rotator sshd\[31538\]: Failed password for root from 192.42.116.26 port 48848 ssh2Oct 23 09:32:35 rotator sshd\[31538\]: Failed password for root from 192.42.116.26 port 48848 ssh2Oct 23 09:32:37 rotator sshd\[31538\]: Failed password for root from 192.42.116.26 port 48848 ssh2 ... |
2019-10-23 16:46:44 |
| 173.212.250.131 | attack | Wordpress Admin Login attack |
2019-10-23 16:41:58 |
| 31.184.215.237 | attack | 10/22/2019-23:51:04.109020 31.184.215.237 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 21 |
2019-10-23 16:52:51 |
| 198.54.122.62 | attack | SEO spam from MTA-10-4.privateemail.com (198.54.122.62) |
2019-10-23 16:56:04 |
| 58.248.254.124 | attack | ssh brute force |
2019-10-23 16:52:16 |
| 151.27.96.133 | attackbotsspam | Automatic report - Port Scan Attack |
2019-10-23 16:48:00 |
| 218.75.132.59 | attack | F2B jail: sshd. Time: 2019-10-23 05:50:55, Reported by: VKReport |
2019-10-23 16:58:48 |
| 104.131.1.137 | attackspambots | $f2bV_matches |
2019-10-23 16:46:23 |
| 31.197.135.130 | attackspam | 10/22/2019-23:50:58.713387 31.197.135.130 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2019-10-23 16:57:49 |