City: unknown
Region: unknown
Country: Canada
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.93.159.29 | attackspambots | Invalid user sphinx from 142.93.159.29 port 47600 |
2020-07-30 19:18:26 |
| 142.93.159.29 | attack | Jul 27 13:53:51 abendstille sshd\[2034\]: Invalid user catholic from 142.93.159.29 Jul 27 13:53:51 abendstille sshd\[2034\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.159.29 Jul 27 13:53:53 abendstille sshd\[2034\]: Failed password for invalid user catholic from 142.93.159.29 port 57642 ssh2 Jul 27 13:57:58 abendstille sshd\[6330\]: Invalid user ftpuser from 142.93.159.29 Jul 27 13:57:58 abendstille sshd\[6330\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.159.29 ... |
2020-07-27 20:08:57 |
| 142.93.159.29 | attack | $f2bV_matches |
2020-07-24 22:18:14 |
| 142.93.159.29 | attackbots | Jul 10 18:39:16 gw1 sshd[15407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.159.29 Jul 10 18:39:19 gw1 sshd[15407]: Failed password for invalid user hector from 142.93.159.29 port 52324 ssh2 ... |
2020-07-10 23:21:40 |
| 142.93.159.29 | attackbots | 2020-07-08T03:30:31.494146upcloud.m0sh1x2.com sshd[15457]: Invalid user pgadmin from 142.93.159.29 port 36386 |
2020-07-08 11:42:12 |
| 142.93.159.29 | attackbots | $f2bV_matches |
2020-07-06 13:55:58 |
| 142.93.159.29 | attackbots | (sshd) Failed SSH login from 142.93.159.29 (CA/Canada/-): 5 in the last 3600 secs |
2020-07-04 01:33:28 |
| 142.93.159.29 | attackbotsspam | SSH Brute-Force reported by Fail2Ban |
2020-06-24 07:40:24 |
| 142.93.159.29 | attackspambots | ... |
2020-06-22 20:30:53 |
| 142.93.159.29 | attack | Jun 19 18:17:07 jane sshd[28798]: Failed password for root from 142.93.159.29 port 40030 ssh2 ... |
2020-06-20 01:06:47 |
| 142.93.159.29 | attackspam | Jun 10 17:15:53 ns382633 sshd\[5148\]: Invalid user glenn from 142.93.159.29 port 40006 Jun 10 17:15:53 ns382633 sshd\[5148\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.159.29 Jun 10 17:15:55 ns382633 sshd\[5148\]: Failed password for invalid user glenn from 142.93.159.29 port 40006 ssh2 Jun 10 17:29:07 ns382633 sshd\[7298\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.159.29 user=root Jun 10 17:29:09 ns382633 sshd\[7298\]: Failed password for root from 142.93.159.29 port 58852 ssh2 |
2020-06-11 00:42:22 |
| 142.93.159.29 | attackspam | Jun 1 07:33:22 legacy sshd[28133]: Failed password for root from 142.93.159.29 port 41674 ssh2 Jun 1 07:37:07 legacy sshd[28234]: Failed password for root from 142.93.159.29 port 46838 ssh2 ... |
2020-06-01 13:54:27 |
| 142.93.159.29 | attackbotsspam | May 24 22:41:29 abendstille sshd\[20844\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.159.29 user=root May 24 22:41:31 abendstille sshd\[20844\]: Failed password for root from 142.93.159.29 port 54398 ssh2 May 24 22:44:53 abendstille sshd\[24372\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.159.29 user=root May 24 22:44:55 abendstille sshd\[24372\]: Failed password for root from 142.93.159.29 port 59908 ssh2 May 24 22:48:21 abendstille sshd\[27791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.159.29 user=root ... |
2020-05-25 05:26:50 |
| 142.93.159.29 | attackspam | May 5 15:23:19 dns1 sshd[17248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.159.29 May 5 15:23:22 dns1 sshd[17248]: Failed password for invalid user lyb from 142.93.159.29 port 46568 ssh2 May 5 15:27:05 dns1 sshd[17405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.159.29 |
2020-05-06 02:51:39 |
| 142.93.159.29 | attackspambots | May 4 22:14:58 h1745522 sshd[30542]: Invalid user catadmin from 142.93.159.29 port 39156 May 4 22:14:58 h1745522 sshd[30542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.159.29 May 4 22:14:58 h1745522 sshd[30542]: Invalid user catadmin from 142.93.159.29 port 39156 May 4 22:15:01 h1745522 sshd[30542]: Failed password for invalid user catadmin from 142.93.159.29 port 39156 ssh2 May 4 22:18:37 h1745522 sshd[30805]: Invalid user manu from 142.93.159.29 port 50578 May 4 22:18:37 h1745522 sshd[30805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.159.29 May 4 22:18:37 h1745522 sshd[30805]: Invalid user manu from 142.93.159.29 port 50578 May 4 22:18:39 h1745522 sshd[30805]: Failed password for invalid user manu from 142.93.159.29 port 50578 ssh2 May 4 22:22:26 h1745522 sshd[31024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.159.29 u ... |
2020-05-05 08:44:46 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.159.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29990
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;142.93.159.66. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012300 1800 900 604800 86400
;; Query time: 40 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 18:57:17 CST 2025
;; MSG SIZE rcvd: 10666.159.93.142.in-addr.arpa domain name pointer b.primat.app.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
66.159.93.142.in-addr.arpa name = b.primat.app.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 119.29.15.124 | attackspam | Oct 19 22:25:53 host sshd[24998]: Invalid user ts3 from 119.29.15.124 port 46212 Oct 19 22:25:53 host sshd[24998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.15.124 Oct 19 22:25:53 host sshd[24998]: Invalid user ts3 from 119.29.15.124 port 46212 Oct 19 22:25:55 host sshd[24998]: Failed password for invalid user ts3 from 119.29.15.124 port 46212 ssh2 ... |
2019-10-20 06:48:48 |
| 109.185.181.14 | attack | Automatic report - Banned IP Access |
2019-10-20 06:57:21 |
| 121.33.247.107 | attack | Oct 20 01:01:12 andromeda postfix/smtpd\[56357\]: warning: unknown\[121.33.247.107\]: SASL LOGIN authentication failed: authentication failure Oct 20 01:01:15 andromeda postfix/smtpd\[1966\]: warning: unknown\[121.33.247.107\]: SASL LOGIN authentication failed: authentication failure Oct 20 01:01:18 andromeda postfix/smtpd\[56357\]: warning: unknown\[121.33.247.107\]: SASL LOGIN authentication failed: authentication failure Oct 20 01:01:23 andromeda postfix/smtpd\[6029\]: warning: unknown\[121.33.247.107\]: SASL LOGIN authentication failed: authentication failure Oct 20 01:01:29 andromeda postfix/smtpd\[56357\]: warning: unknown\[121.33.247.107\]: SASL LOGIN authentication failed: authentication failure |
2019-10-20 07:10:06 |
| 222.186.175.154 | attack | Oct 19 23:03:32 marvibiene sshd[8071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.154 user=root Oct 19 23:03:34 marvibiene sshd[8071]: Failed password for root from 222.186.175.154 port 18762 ssh2 Oct 19 23:03:38 marvibiene sshd[8071]: Failed password for root from 222.186.175.154 port 18762 ssh2 Oct 19 23:03:32 marvibiene sshd[8071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.154 user=root Oct 19 23:03:34 marvibiene sshd[8071]: Failed password for root from 222.186.175.154 port 18762 ssh2 Oct 19 23:03:38 marvibiene sshd[8071]: Failed password for root from 222.186.175.154 port 18762 ssh2 ... |
2019-10-20 07:05:30 |
| 58.221.49.157 | attackbots | 10/19/2019-18:05:23.647432 58.221.49.157 Protocol: 6 ET SCAN Suspicious inbound to mySQL port 3306 |
2019-10-20 06:56:08 |
| 45.227.255.202 | attackspambots | Oct 19 23:26:07 h2177944 kernel: \[4396277.890613\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.227.255.202 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=123 PROTO=TCP SPT=65531 DPT=3419 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 19 23:26:07 h2177944 kernel: \[4396277.890628\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.227.255.202 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=123 PROTO=TCP SPT=65531 DPT=3418 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 19 23:26:07 h2177944 kernel: \[4396277.890632\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.227.255.202 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=123 PROTO=TCP SPT=65531 DPT=3415 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 19 23:26:07 h2177944 kernel: \[4396277.890635\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.227.255.202 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=123 PROTO=TCP SPT=65531 DPT=3417 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 19 23:26:07 h2177944 kernel: \[4396277.890640\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.227.255.202 DST=85.214.117.9 LE |
2019-10-20 07:06:08 |
| 174.138.56.102 | attack | MYH,DEF GET /news/wp-login.php |
2019-10-20 06:50:50 |
| 185.174.130.54 | attackspambots | ssh failed login |
2019-10-20 06:46:50 |
| 61.150.76.90 | attackspam | (mod_security) mod_security (id:230011) triggered by 61.150.76.90 (CN/China/-): 5 in the last 3600 secs |
2019-10-20 06:48:36 |
| 103.17.159.54 | attackspam | Oct 19 12:42:05 web9 sshd\[28197\]: Invalid user com from 103.17.159.54 Oct 19 12:42:05 web9 sshd\[28197\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.17.159.54 Oct 19 12:42:08 web9 sshd\[28197\]: Failed password for invalid user com from 103.17.159.54 port 52146 ssh2 Oct 19 12:46:06 web9 sshd\[28724\]: Invalid user wqa from 103.17.159.54 Oct 19 12:46:06 web9 sshd\[28724\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.17.159.54 |
2019-10-20 06:57:58 |
| 59.120.189.234 | attackspambots | SSHScan |
2019-10-20 07:04:17 |
| 121.240.227.66 | attackbots | Automatic report - Banned IP Access |
2019-10-20 06:52:09 |
| 185.173.35.13 | attack | Automatic report - Port Scan Attack |
2019-10-20 07:09:50 |
| 167.99.226.184 | attackbots | 167.99.226.184 - - [19/Oct/2019:22:28:15 +0200] "GET /test/wp-login.php HTTP/1.1" 301 252 "http://mediaxtend.com/test/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-10-20 07:01:39 |
| 222.186.173.238 | attackspam | $f2bV_matches |
2019-10-20 06:49:07 |