City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.93.14.123 | attack | Malicious IP / Malware |
2024-06-14 12:55:54 |
| 142.93.142.51 | attackspam | SSH Bruteforce Attempt on Honeypot |
2020-10-01 08:48:22 |
| 142.93.142.51 | attack | Sep 30 15:24:37 vlre-nyc-1 sshd\[16561\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.142.51 user=root Sep 30 15:24:39 vlre-nyc-1 sshd\[16561\]: Failed password for root from 142.93.142.51 port 44634 ssh2 Sep 30 15:32:59 vlre-nyc-1 sshd\[16917\]: Invalid user server from 142.93.142.51 Sep 30 15:32:59 vlre-nyc-1 sshd\[16917\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.142.51 Sep 30 15:33:01 vlre-nyc-1 sshd\[16917\]: Failed password for invalid user server from 142.93.142.51 port 46860 ssh2 ... |
2020-10-01 01:23:49 |
| 142.93.142.51 | attackspambots | Sep 30 11:00:52 DAAP sshd[26619]: Invalid user test from 142.93.142.51 port 48914 Sep 30 11:00:52 DAAP sshd[26619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.142.51 Sep 30 11:00:52 DAAP sshd[26619]: Invalid user test from 142.93.142.51 port 48914 Sep 30 11:00:54 DAAP sshd[26619]: Failed password for invalid user test from 142.93.142.51 port 48914 ssh2 Sep 30 11:07:21 DAAP sshd[26802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.142.51 user=root Sep 30 11:07:23 DAAP sshd[26802]: Failed password for root from 142.93.142.51 port 58030 ssh2 ... |
2020-09-30 17:36:20 |
| 142.93.146.198 | attack | firewall-block, port(s): 22/tcp |
2020-09-01 06:45:18 |
| 142.93.149.57 | attack |
|
2020-08-28 16:17:34 |
| 142.93.146.198 | attackspambots | Aug 10 22:00:51 : SSH login attempts with invalid user |
2020-08-13 08:40:12 |
| 142.93.149.57 | attack | SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: do-prod-us-north-clients-0106-9.do.binaryedge.ninja. |
2020-08-11 08:50:11 |
| 142.93.143.85 | attack | Trolling for resource vulnerabilities |
2020-08-02 22:17:05 |
| 142.93.143.85 | attackbots | 142.93.143.85 - - [30/Jul/2020:12:29:59 +0200] "POST /xmlrpc.php HTTP/1.1" 403 21861 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.143.85 - - [30/Jul/2020:12:46:22 +0200] "POST /xmlrpc.php HTTP/1.1" 403 31 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-07-30 19:09:59 |
| 142.93.143.85 | attack | 142.93.143.85 - - [11/Jul/2020:15:50:31 +0200] "GET /wp-login.php HTTP/1.1" 200 6310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.143.85 - - [11/Jul/2020:15:50:31 +0200] "POST /wp-login.php HTTP/1.1" 200 6561 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.143.85 - - [11/Jul/2020:15:50:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-07-11 22:01:26 |
| 142.93.143.85 | attackspambots | 142.93.143.85 has been banned for [WebApp Attack] ... |
2020-07-05 16:37:18 |
| 142.93.148.12 | attack | Automatic report - XMLRPC Attack |
2020-06-24 06:23:24 |
| 142.93.140.242 | attack | 2020-06-17T00:03:36.067695mail.standpoint.com.ua sshd[31174]: Invalid user silvio from 142.93.140.242 port 43750 2020-06-17T00:03:36.070299mail.standpoint.com.ua sshd[31174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 2020-06-17T00:03:36.067695mail.standpoint.com.ua sshd[31174]: Invalid user silvio from 142.93.140.242 port 43750 2020-06-17T00:03:37.535152mail.standpoint.com.ua sshd[31174]: Failed password for invalid user silvio from 142.93.140.242 port 43750 ssh2 2020-06-17T00:06:56.112872mail.standpoint.com.ua sshd[31629]: Invalid user teamspeak3 from 142.93.140.242 port 45070 ... |
2020-06-17 05:46:46 |
| 142.93.140.214 | attackspambots | Jun 15 18:54:18 php1 sshd\[21780\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.214 user=root Jun 15 18:54:20 php1 sshd\[21780\]: Failed password for root from 142.93.140.214 port 35010 ssh2 Jun 15 18:57:30 php1 sshd\[21985\]: Invalid user lia from 142.93.140.214 Jun 15 18:57:30 php1 sshd\[21985\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.214 Jun 15 18:57:32 php1 sshd\[21985\]: Failed password for invalid user lia from 142.93.140.214 port 36260 ssh2 |
2020-06-16 13:11:36 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.14.248
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54831
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;142.93.14.248. IN A
;; AUTHORITY SECTION:
. 317 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 18:53:30 CST 2022
;; MSG SIZE rcvd: 106Host 248.14.93.142.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 248.14.93.142.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.53.69.173 | attack | ssh failed login |
2019-10-22 02:27:02 |
| 39.57.120.74 | attackspam | Automatic report - Port Scan Attack |
2019-10-22 02:17:54 |
| 106.13.125.159 | attack | Repeated brute force against a port |
2019-10-22 02:21:10 |
| 36.66.188.183 | attackspambots | Oct 21 13:04:01 askasleikir sshd[909724]: Failed password for invalid user mysql from 36.66.188.183 port 41931 ssh2 |
2019-10-22 02:29:57 |
| 38.77.16.137 | attack | SSH Scan |
2019-10-22 02:08:17 |
| 37.203.208.3 | attackspambots | Oct 21 14:59:25 firewall sshd[17274]: Failed password for root from 37.203.208.3 port 52084 ssh2 Oct 21 15:03:03 firewall sshd[17378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.203.208.3 user=root Oct 21 15:03:05 firewall sshd[17378]: Failed password for root from 37.203.208.3 port 35110 ssh2 ... |
2019-10-22 02:07:43 |
| 210.105.192.76 | attackspambots | $f2bV_matches_ltvn |
2019-10-22 02:24:55 |
| 41.45.62.163 | attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/41.45.62.163/ EG - 1H : (40) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : EG NAME ASN : ASN8452 IP : 41.45.62.163 CIDR : 41.45.32.0/19 PREFIX COUNT : 833 UNIQUE IP COUNT : 7610368 ATTACKS DETECTED ASN8452 : 1H - 2 3H - 8 6H - 11 12H - 19 24H - 36 DateTime : 2019-10-21 13:38:11 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-22 02:07:21 |
| 106.12.100.119 | attackspam | Invalid user ubuntu from 106.12.100.119 port 35413 |
2019-10-22 02:13:14 |
| 13.77.101.114 | attack | DATE:2019-10-21 13:37:59, IP:13.77.101.114, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) |
2019-10-22 02:12:16 |
| 183.89.80.223 | attackbotsspam | port scan and connect, tcp 80 (http) |
2019-10-22 02:06:39 |
| 159.65.67.134 | attackbots | Oct 21 19:28:16 dedicated sshd[21099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.67.134 user=root Oct 21 19:28:18 dedicated sshd[21099]: Failed password for root from 159.65.67.134 port 46364 ssh2 |
2019-10-22 02:04:27 |
| 111.93.4.174 | attackspam | Oct 21 20:10:54 lnxmail61 sshd[2875]: Failed password for root from 111.93.4.174 port 53666 ssh2 Oct 21 20:10:54 lnxmail61 sshd[2875]: Failed password for root from 111.93.4.174 port 53666 ssh2 |
2019-10-22 02:18:34 |
| 140.143.228.18 | attack | Oct 21 08:09:31 kapalua sshd\[26293\]: Invalid user jair from 140.143.228.18 Oct 21 08:09:31 kapalua sshd\[26293\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.228.18 Oct 21 08:09:33 kapalua sshd\[26293\]: Failed password for invalid user jair from 140.143.228.18 port 34462 ssh2 Oct 21 08:13:30 kapalua sshd\[26585\]: Invalid user oracle from 140.143.228.18 Oct 21 08:13:30 kapalua sshd\[26585\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.228.18 |
2019-10-22 02:18:19 |
| 60.248.28.105 | attackspam | Oct 21 02:57:27 kapalua sshd\[31022\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60-248-28-105.hinet-ip.hinet.net user=root Oct 21 02:57:29 kapalua sshd\[31022\]: Failed password for root from 60.248.28.105 port 35228 ssh2 Oct 21 03:01:30 kapalua sshd\[31361\]: Invalid user cn!@\# from 60.248.28.105 Oct 21 03:01:30 kapalua sshd\[31361\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60-248-28-105.hinet-ip.hinet.net Oct 21 03:01:32 kapalua sshd\[31361\]: Failed password for invalid user cn!@\# from 60.248.28.105 port 54577 ssh2 |
2019-10-22 02:25:12 |