142.93.12.133 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
142.93.122.58	attackspam	Oct 14 01:26:40 host sshd\[5445\]: Invalid user minecraft from 142.93.122.58 port 53172	2020-10-14 07:55:07
142.93.127.16	attack	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-10-13T21:20:04Z and 2020-10-13T21:27:01Z	2020-10-14 06:54:24
142.93.126.181	attackspam	142.93.126.181 - - [12/Oct/2020:15:05:43 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.126.181 - - [12/Oct/2020:15:05:44 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.126.181 - - [12/Oct/2020:15:05:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-10-12 22:35:27
142.93.122.207	attackspam	Oct 9 23:04:39 b-vps wordpress(www.gpfans.cz)[22349]: Authentication attempt for unknown user buchtic from 142.93.122.207 ...	2020-10-10 06:03:12
142.93.122.207	attackspam	Automatically reported by fail2ban report script (mx1)	2020-10-09 22:09:03
142.93.122.207	attack	Automatic report - Banned IP Access	2020-10-09 13:59:24
142.93.126.181	attack	CF RAY ID: 5de8a8b66915f059 IP Class: noRecord URI: /wp-login.php	2020-10-08 00:35:00
142.93.126.181	attack	142.93.126.181 - - [07/Oct/2020:09:22:48 +0100] "POST /wp-login.php HTTP/1.1" 200 2491 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.126.181 - - [07/Oct/2020:09:22:51 +0100] "POST /wp-login.php HTTP/1.1" 200 2431 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.126.181 - - [07/Oct/2020:09:22:55 +0100] "POST /wp-login.php HTTP/1.1" 200 2475 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-10-07 16:42:39
142.93.122.207	attack	Automatic report - Banned IP Access	2020-10-05 08:05:38
142.93.122.207	attackbots	142.93.122.207 - - [04/Oct/2020:18:20:02 +0200] "GET /wp-login.php HTTP/1.1" 200 1984 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.122.207 - - [04/Oct/2020:18:20:08 +0200] "POST /wp-login.php HTTP/1.1" 200 2104 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.122.207 - - [04/Oct/2020:18:20:13 +0200] "GET /wp-login.php HTTP/1.1" 200 1984 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.122.207 - - [04/Oct/2020:18:20:14 +0200] "POST /wp-login.php HTTP/1.1" 200 2090 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.122.207 - - [04/Oct/2020:18:20:19 +0200] "GET /wp-login.php HTTP/1.1" 200 1984 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.122.207 - - [04/Oct/2020:18:20:20 +0200] "POST /wp-login.php HTTP/1.1" 200 2091 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/201001 ...	2020-10-05 00:28:37
142.93.122.207	attack	Oct 4 09:05:47 wordpress wordpress(www.ruhnke.cloud)[71192]: Blocked authentication attempt for admin from 142.93.122.207	2020-10-04 16:11:30
142.93.126.181	attackbotsspam	142.93.126.181 - - [30/Sep/2020:21:53:08 +0100] "POST /wp-login.php HTTP/1.1" 200 1908 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.126.181 - - [30/Sep/2020:21:53:09 +0100] "POST /wp-login.php HTTP/1.1" 200 1856 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.126.181 - - [30/Sep/2020:21:53:11 +0100] "POST /wp-login.php HTTP/1.1" 200 1835 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-10-01 05:23:50
142.93.126.181	attackspambots	142.93.126.181 - - [30/Sep/2020:14:26:47 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.126.181 - - [30/Sep/2020:14:26:48 +0200] "POST /wp-login.php HTTP/1.1" 200 2698 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.126.181 - - [30/Sep/2020:14:26:48 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.126.181 - - [30/Sep/2020:14:26:48 +0200] "POST /wp-login.php HTTP/1.1" 200 2697 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.126.181 - - [30/Sep/2020:14:26:48 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.126.181 - - [30/Sep/2020:14:26:49 +0200] "POST /wp-login.php HTTP/1.1" 200 2696 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/201001 ...	2020-09-30 21:40:41
142.93.126.181	attackspambots	142.93.126.181 - - [30/Sep/2020:06:14:39 +0100] "POST /wp-login.php HTTP/1.1" 200 2223 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.126.181 - - [30/Sep/2020:06:14:41 +0100] "POST /wp-login.php HTTP/1.1" 200 2207 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.126.181 - - [30/Sep/2020:06:14:43 +0100] "POST /wp-login.php HTTP/1.1" 200 2204 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-30 14:12:46
142.93.127.173	attackbotsspam	DATE:2020-09-28 23:58:52, IP:142.93.127.173, PORT:ssh SSH brute force auth (docker-dc)	2020-09-29 06:24:31

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.12.133
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47467
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;142.93.12.133.			IN	A

;; AUTHORITY SECTION:
.			506	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 09:42:35 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 133.12.93.142.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 133.12.93.142.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
5.76.207.51	attack	TCP port 445 (SMB) attempt blocked by firewall. [2019-06-24 06:56:50]	2019-06-24 14:46:17
60.250.23.105	attack	Jun 24 06:54:13 vps691689 sshd[4241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.250.23.105 Jun 24 06:54:15 vps691689 sshd[4241]: Failed password for invalid user jack from 60.250.23.105 port 55646 ssh2 ...	2019-06-24 15:28:56
222.130.33.251	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2019-06-24 15:20:20
89.32.227.146	attackbotsspam	webserver:80 [24/Jun/2019] "GET /webdav/ HTTP/1.1" 404 369 "-" "Mozilla/5.0" webserver:80 [24/Jun/2019] "POST /App52ebb05e.php HTTP/1.1" 404 210 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0" webserver:80 [24/Jun/2019] "GET /robots.txt HTTP/1.1" 404 408 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0" webserver:80 [24/Jun/2019] "GET / HTTP/1.1" 200 445 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:31.0) Gecko/20100101 Firefox/31.0"	2019-06-24 14:45:15
80.211.3.109	attackbots	ssh failed login	2019-06-24 15:08:49
101.0.93.194	attack	xmlrpc attack	2019-06-24 15:12:06
206.189.197.48	attackbots	Jun 24 08:23:53 tuxlinux sshd[59381]: Invalid user bmakwembere from 206.189.197.48 port 53084 Jun 24 08:23:53 tuxlinux sshd[59381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.197.48 Jun 24 08:23:53 tuxlinux sshd[59381]: Invalid user bmakwembere from 206.189.197.48 port 53084 Jun 24 08:23:53 tuxlinux sshd[59381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.197.48 ...	2019-06-24 14:39:39
198.98.56.196	attackbotsspam	Jun 24 09:33:56 hostnameis sshd[55572]: reveeclipse mapping checking getaddrinfo for stewadrs [198.98.56.196] failed - POSSIBLE BREAK-IN ATTEMPT! Jun 24 09:33:56 hostnameis sshd[55572]: Invalid user admin from 198.98.56.196 Jun 24 09:33:56 hostnameis sshd[55572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.98.56.196 Jun 24 09:33:58 hostnameis sshd[55572]: Failed password for invalid user admin from 198.98.56.196 port 60764 ssh2 Jun 24 09:33:58 hostnameis sshd[55572]: Received disconnect from 198.98.56.196: 11: Bye Bye [preauth] Jun 24 09:33:59 hostnameis sshd[55574]: reveeclipse mapping checking getaddrinfo for stewadrs [198.98.56.196] failed - POSSIBLE BREAK-IN ATTEMPT! Jun 24 09:33:59 hostnameis sshd[55574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.98.56.196 user=r.r Jun 24 09:34:02 hostnameis sshd[55574]: Failed password for r.r from 198.98.56.196 port 36278 ssh2 Jun 2........ ------------------------------	2019-06-24 15:05:17
77.247.110.197	attackbotsspam	1561357785 - 06/24/2019 08:29:45 Host: 77.247.110.197/77.247.110.197 Port: 5060 UDP Blocked	2019-06-24 15:15:56
122.228.19.80	attackspam	Scanning (more than 2 packets) random ports - tries to find possible vulnerable services	2019-06-24 15:28:34
187.85.206.114	attackbotsspam	Distributed brute force attack	2019-06-24 14:49:52
162.243.151.237	attackspam	24.06.2019 04:57:54 Connection to port 5900 blocked by firewall	2019-06-24 14:51:16
108.61.96.48	attackbots	Spam ILLUMINATI OFFICIA Rich Illuminati Mon, 24 Jun 2019 02:26:00 +0000 Authentication-Results: spf=none (sender IP is 108.61.96.48) smtp.mailfrom=illuminati.net; hotmail.co.uk; dkim=none (message not signed) header.d=none;hotmail.co.uk; dmarc=none action=none header.from=illuminati.net; Received-SPF: None (protection.outlook.com: illuminati.net does not designate permitted sender hosts) Received: from syd1.qvirtual.com.au (108.61.96.48) by DB3EUR04FT043.mail.protection.outlook.com (10.152.25.196) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2008.13 via Frontend Transport; Mon, 24 Jun 2019 02:25:59 +0000	2019-06-24 15:24:08
190.213.87.223	attack	DATE:2019-06-24 06:55:27, IP:190.213.87.223, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)	2019-06-24 15:29:46
94.23.145.124	attackbotsspam	Jun 24 02:22:19 vps200512 sshd\[26166\]: Invalid user admin from 94.23.145.124 Jun 24 02:22:20 vps200512 sshd\[26166\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.23.145.124 Jun 24 02:22:23 vps200512 sshd\[26166\]: Failed password for invalid user admin from 94.23.145.124 port 47116 ssh2 Jun 24 02:22:46 vps200512 sshd\[26170\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.23.145.124 user=root Jun 24 02:22:47 vps200512 sshd\[26170\]: Failed password for root from 94.23.145.124 port 31803 ssh2	2019-06-24 14:37:58

Recently Reported IPs

142.93.119.230	118.96.95.77	142.93.119.9	118.96.96.148
118.96.96.198	118.96.96.244	118.96.96.25	142.93.129.209
142.93.129.216	142.93.129.41	142.93.13.176	142.93.129.5
142.93.13.66	142.93.130.100	142.93.129.224	142.93.13.212
142.93.13.220	142.93.13.135	142.93.13.89	142.93.130.114