City: unknown
Region: unknown
Country: United States of America
Internet Service Provider: DigitalOcean LLC
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attack | Oct 6 16:46:11 IngegnereFirenze sshd[5993]: User root from 142.93.195.157 not allowed because not listed in AllowUsers ... |
2020-10-07 05:17:01 |
| attackbotsspam | Repeated brute force against a port |
2020-10-06 21:26:02 |
| attack | Oct 5 18:46:03 sachi sshd\[31984\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157 user=root Oct 5 18:46:04 sachi sshd\[31984\]: Failed password for root from 142.93.195.157 port 53324 ssh2 Oct 5 18:49:58 sachi sshd\[32327\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157 user=root Oct 5 18:49:59 sachi sshd\[32327\]: Failed password for root from 142.93.195.157 port 38726 ssh2 Oct 5 18:53:26 sachi sshd\[32599\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157 user=root |
2020-10-06 13:07:51 |
| attackbots | 2020-09-26T18:35:19+0200 Failed SSH Authentication/Brute Force Attack. (Server 9) |
2020-09-27 00:54:11 |
| attackspam | (sshd) Failed SSH login from 142.93.195.157 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 26 03:04:05 optimus sshd[20599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157 user=root Sep 26 03:04:07 optimus sshd[20599]: Failed password for root from 142.93.195.157 port 54994 ssh2 Sep 26 03:17:41 optimus sshd[26737]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157 user=root Sep 26 03:17:43 optimus sshd[26737]: Failed password for root from 142.93.195.157 port 57090 ssh2 Sep 26 03:21:19 optimus sshd[28919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157 user=root |
2020-09-26 16:44:26 |
| attackbotsspam | Sep 22 15:10:58 staging sshd[43343]: Invalid user download from 142.93.195.157 port 46336 Sep 22 15:10:58 staging sshd[43343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157 Sep 22 15:10:58 staging sshd[43343]: Invalid user download from 142.93.195.157 port 46336 Sep 22 15:11:00 staging sshd[43343]: Failed password for invalid user download from 142.93.195.157 port 46336 ssh2 ... |
2020-09-23 00:07:35 |
| attackspambots | Time: Tue Sep 22 00:21:34 2020 +0000 IP: 142.93.195.157 (US/United States/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 22 00:02:54 3 sshd[18335]: Invalid user guest from 142.93.195.157 port 43922 Sep 22 00:02:56 3 sshd[18335]: Failed password for invalid user guest from 142.93.195.157 port 43922 ssh2 Sep 22 00:18:12 3 sshd[22200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157 user=root Sep 22 00:18:15 3 sshd[22200]: Failed password for root from 142.93.195.157 port 40852 ssh2 Sep 22 00:21:29 3 sshd[23084]: Invalid user nagios from 142.93.195.157 port 49008 |
2020-09-22 16:10:08 |
| attackspam | Sep 22 01:09:56 ns382633 sshd\[22640\]: Invalid user lorenzo from 142.93.195.157 port 58940 Sep 22 01:09:56 ns382633 sshd\[22640\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157 Sep 22 01:09:58 ns382633 sshd\[22640\]: Failed password for invalid user lorenzo from 142.93.195.157 port 58940 ssh2 Sep 22 01:16:13 ns382633 sshd\[24090\]: Invalid user gerald from 142.93.195.157 port 43644 Sep 22 01:16:13 ns382633 sshd\[24090\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157 |
2020-09-22 08:12:57 |
| attackspam | Sep 18 06:28:29 master sshd[1401]: Failed password for root from 142.93.195.157 port 35516 ssh2 |
2020-09-18 20:26:15 |
| attack | Sep 18 00:05:55 firewall sshd[30914]: Failed password for root from 142.93.195.157 port 41982 ssh2 Sep 18 00:09:47 firewall sshd[30998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157 user=root Sep 18 00:09:50 firewall sshd[30998]: Failed password for root from 142.93.195.157 port 52610 ssh2 ... |
2020-09-18 12:45:07 |
| attackbots | 2 SSH login attempts. |
2020-09-18 02:59:57 |
| attackbots | Aug 31 16:25:20 meumeu sshd[718297]: Invalid user lkj from 142.93.195.157 port 45962 Aug 31 16:25:20 meumeu sshd[718297]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157 Aug 31 16:25:20 meumeu sshd[718297]: Invalid user lkj from 142.93.195.157 port 45962 Aug 31 16:25:21 meumeu sshd[718297]: Failed password for invalid user lkj from 142.93.195.157 port 45962 ssh2 Aug 31 16:29:06 meumeu sshd[718442]: Invalid user florent from 142.93.195.157 port 53084 Aug 31 16:29:06 meumeu sshd[718442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157 Aug 31 16:29:06 meumeu sshd[718442]: Invalid user florent from 142.93.195.157 port 53084 Aug 31 16:29:08 meumeu sshd[718442]: Failed password for invalid user florent from 142.93.195.157 port 53084 ssh2 Aug 31 16:32:56 meumeu sshd[718568]: Invalid user pokemon from 142.93.195.157 port 60198 ... |
2020-08-31 23:45:52 |
| attackbots | 2020-08-29T05:34:43+0200 Failed SSH Authentication/Brute Force Attack. (Server 5) |
2020-08-29 19:34:29 |
| attack | Aug 23 14:25:21 vpn01 sshd[2318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157 Aug 23 14:25:23 vpn01 sshd[2318]: Failed password for invalid user ug from 142.93.195.157 port 39912 ssh2 ... |
2020-08-23 20:41:16 |
| attackspam | Aug 20 15:10:55 vps639187 sshd\[26695\]: Invalid user www from 142.93.195.157 port 38360 Aug 20 15:10:55 vps639187 sshd\[26695\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157 Aug 20 15:10:57 vps639187 sshd\[26695\]: Failed password for invalid user www from 142.93.195.157 port 38360 ssh2 ... |
2020-08-20 21:13:27 |
| attackspambots | web-1 [ssh] SSH Attack |
2020-08-19 08:47:33 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.93.195.249 | attackspam | $f2bV_matches |
2020-09-09 23:48:56 |
| 142.93.195.15 | attackbotsspam | Sep 9 06:47:37 haigwepa sshd[30682]: Failed password for root from 142.93.195.15 port 34886 ssh2 ... |
2020-09-09 20:22:45 |
| 142.93.195.249 | attack | SSH brute-force attempt |
2020-09-09 17:22:27 |
| 142.93.195.15 | attack | Sep 9 06:47:37 haigwepa sshd[30682]: Failed password for root from 142.93.195.15 port 34886 ssh2 ... |
2020-09-09 14:20:26 |
| 142.93.195.15 | attack | 2020-09-08T18:59:04+0200 Failed SSH Authentication/Brute Force Attack. (Server 9) |
2020-09-09 06:31:32 |
| 142.93.195.249 | attackbots | Fail2Ban |
2020-09-09 00:46:41 |
| 142.93.195.249 | attack | Sep 8 09:41:03 vpn01 sshd[19053]: Failed password for root from 142.93.195.249 port 34586 ssh2 Sep 8 09:41:13 vpn01 sshd[19066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.249 ... |
2020-09-08 16:15:06 |
| 142.93.195.249 | attackbotsspam | SSH-BruteForce |
2020-09-08 08:50:27 |
| 142.93.195.249 | attackspam | Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-09-07T17:47:16Z and 2020-09-07T17:48:54Z |
2020-09-08 02:08:56 |
| 142.93.195.249 | attack | Sep 7 11:10:44 ns1 sshd[39890]: Did not receive identification string from 142.93.195.249 port 37134 Sep 7 11:11:01 ns1 sshd[39903]: Unable to negotiate with 142.93.195.249 port 58228: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Sep 7 11:11:13 ns1 sshd[39905]: Unable to negotiate with 142.93.195.249 port 53052: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Sep 7 11:11:24 ns1 sshd[39907]: Unable to negotiate with 142.93.195.249 port 47216: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Sep 7 11:11:34 ns1 sshd[39909]: Unable to negotiate with 142.93.195.249 port 41672: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-e ... |
2020-09-07 17:33:47 |
| 142.93.195.249 | attackbots | Sep 4 12:09:33 marvibiene sshd[7134]: Failed password for root from 142.93.195.249 port 35784 ssh2 Sep 4 12:09:42 marvibiene sshd[7138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.249 Sep 4 12:09:44 marvibiene sshd[7138]: Failed password for invalid user oracle from 142.93.195.249 port 60592 ssh2 |
2020-09-04 18:35:50 |
| 142.93.195.249 | attackbots | Sep 2 19:16:02 master sshd[23796]: Did not receive identification string from 142.93.195.249 Sep 2 19:16:23 master sshd[23797]: Failed password for root from 142.93.195.249 port 42000 ssh2 Sep 2 19:16:34 master sshd[23799]: Failed password for invalid user oracle from 142.93.195.249 port 35648 ssh2 Sep 2 19:16:43 master sshd[23801]: Failed password for root from 142.93.195.249 port 57486 ssh2 Sep 2 19:16:53 master sshd[23803]: Failed password for invalid user postgres from 142.93.195.249 port 51124 ssh2 Sep 2 19:17:02 master sshd[23805]: Failed password for root from 142.93.195.249 port 44798 ssh2 Sep 2 19:17:12 master sshd[23810]: Failed password for invalid user hadoop from 142.93.195.249 port 38392 ssh2 Sep 2 19:17:22 master sshd[23812]: Failed password for root from 142.93.195.249 port 60294 ssh2 Sep 2 19:17:31 master sshd[23814]: Failed password for git from 142.93.195.249 port 54458 ssh2 Sep 2 19:17:40 master sshd[23816]: Failed password for root from 142.93.195.249 port 47538 ssh2 |
2020-09-03 02:11:16 |
| 142.93.195.249 | attackbots | Auto Fail2Ban report, multiple SSH login attempts. |
2020-09-02 17:41:52 |
| 142.93.195.249 | attack | 2020-09-01 03:31:53.763995-0500 localhost sshd[64887]: Failed password for root from 142.93.195.249 port 58868 ssh2 |
2020-09-01 16:35:20 |
| 142.93.195.15 | attackbotsspam | Aug 30 12:12:12 124388 sshd[24834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.15 Aug 30 12:12:12 124388 sshd[24834]: Invalid user pgadmin from 142.93.195.15 port 51480 Aug 30 12:12:14 124388 sshd[24834]: Failed password for invalid user pgadmin from 142.93.195.15 port 51480 ssh2 Aug 30 12:14:23 124388 sshd[24930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.15 user=root Aug 30 12:14:26 124388 sshd[24930]: Failed password for root from 142.93.195.15 port 57140 ssh2 |
2020-08-30 23:38:22 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.195.157
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47717
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.195.157. IN A
;; AUTHORITY SECTION:
. 345 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020081802 1800 900 604800 86400
;; Query time: 27 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Aug 19 08:47:27 CST 2020
;; MSG SIZE rcvd: 118Host 157.195.93.142.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 157.195.93.142.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 94.96.102.74 | attackbots | Attempt to attack host OS, exploiting network vulnerabilities, on 16-02-2020 13:50:33. |
2020-02-16 22:27:19 |
| 129.226.125.177 | attack | 2020-02-16T15:02:44.798827scmdmz1 sshd[30678]: Invalid user client from 129.226.125.177 port 34458 2020-02-16T15:02:44.801869scmdmz1 sshd[30678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.125.177 2020-02-16T15:02:44.798827scmdmz1 sshd[30678]: Invalid user client from 129.226.125.177 port 34458 2020-02-16T15:02:46.567297scmdmz1 sshd[30678]: Failed password for invalid user client from 129.226.125.177 port 34458 ssh2 2020-02-16T15:05:55.271294scmdmz1 sshd[31060]: Invalid user pleasant from 129.226.125.177 port 59872 ... |
2020-02-16 22:09:45 |
| 185.12.78.161 | attackspambots | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-16 22:04:31 |
| 178.128.81.125 | attackspam | Feb 16 13:47:15 game-panel sshd[830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.81.125 Feb 16 13:47:18 game-panel sshd[830]: Failed password for invalid user admin from 178.128.81.125 port 18524 ssh2 Feb 16 13:51:06 game-panel sshd[993]: Failed password for root from 178.128.81.125 port 48528 ssh2 |
2020-02-16 21:58:43 |
| 90.6.129.32 | attackspambots | Automatic report - Port Scan Attack |
2020-02-16 22:27:58 |
| 185.119.120.197 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-16 22:20:42 |
| 148.245.128.102 | attackspam | unauthorized connection attempt |
2020-02-16 21:50:13 |
| 51.77.202.172 | attack | Feb 16 14:48:31 plex sshd[29047]: Invalid user nimrod from 51.77.202.172 port 56100 Feb 16 14:48:31 plex sshd[29047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.202.172 Feb 16 14:48:31 plex sshd[29047]: Invalid user nimrod from 51.77.202.172 port 56100 Feb 16 14:48:34 plex sshd[29047]: Failed password for invalid user nimrod from 51.77.202.172 port 56100 ssh2 Feb 16 14:50:52 plex sshd[29132]: Invalid user alexandra from 51.77.202.172 port 51926 |
2020-02-16 22:10:15 |
| 179.124.34.9 | attackbotsspam | Feb 16 14:43:06 srv-ubuntu-dev3 sshd[124142]: Invalid user bryanm from 179.124.34.9 Feb 16 14:43:06 srv-ubuntu-dev3 sshd[124142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.124.34.9 Feb 16 14:43:06 srv-ubuntu-dev3 sshd[124142]: Invalid user bryanm from 179.124.34.9 Feb 16 14:43:08 srv-ubuntu-dev3 sshd[124142]: Failed password for invalid user bryanm from 179.124.34.9 port 44663 ssh2 Feb 16 14:47:10 srv-ubuntu-dev3 sshd[124493]: Invalid user roetker from 179.124.34.9 Feb 16 14:47:10 srv-ubuntu-dev3 sshd[124493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.124.34.9 Feb 16 14:47:10 srv-ubuntu-dev3 sshd[124493]: Invalid user roetker from 179.124.34.9 Feb 16 14:47:11 srv-ubuntu-dev3 sshd[124493]: Failed password for invalid user roetker from 179.124.34.9 port 59424 ssh2 Feb 16 14:51:07 srv-ubuntu-dev3 sshd[124861]: Invalid user newyork from 179.124.34.9 ... |
2020-02-16 21:58:17 |
| 163.172.63.244 | attack | Feb 16 08:51:00 plusreed sshd[26494]: Invalid user mnv from 163.172.63.244 ... |
2020-02-16 22:04:57 |
| 190.207.214.112 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 16-02-2020 13:50:28. |
2020-02-16 22:36:46 |
| 187.209.255.137 | attackbots | Automatic report - Port Scan Attack |
2020-02-16 21:49:22 |
| 155.133.142.66 | attackspambots | [munged]::443 155.133.142.66 - - [16/Feb/2020:14:50:14 +0100] "POST /[munged]: HTTP/1.1" 200 7006 "-" "-" [munged]::443 155.133.142.66 - - [16/Feb/2020:14:50:30 +0100] "POST /[munged]: HTTP/1.1" 200 6948 "-" "-" [munged]::443 155.133.142.66 - - [16/Feb/2020:14:50:30 +0100] "POST /[munged]: HTTP/1.1" 200 6948 "-" "-" |
2020-02-16 22:32:32 |
| 83.135.111.168 | attackspam | Feb 16 14:41:47 srv-ubuntu-dev3 sshd[124040]: Invalid user www from 83.135.111.168 Feb 16 14:41:47 srv-ubuntu-dev3 sshd[124040]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.135.111.168 Feb 16 14:41:47 srv-ubuntu-dev3 sshd[124040]: Invalid user www from 83.135.111.168 Feb 16 14:41:48 srv-ubuntu-dev3 sshd[124040]: Failed password for invalid user www from 83.135.111.168 port 46654 ssh2 Feb 16 14:46:22 srv-ubuntu-dev3 sshd[124436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.135.111.168 user=root Feb 16 14:46:23 srv-ubuntu-dev3 sshd[124436]: Failed password for root from 83.135.111.168 port 48710 ssh2 Feb 16 14:50:50 srv-ubuntu-dev3 sshd[124781]: Invalid user test1 from 83.135.111.168 Feb 16 14:50:50 srv-ubuntu-dev3 sshd[124781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.135.111.168 Feb 16 14:50:50 srv-ubuntu-dev3 sshd[124781]: Invalid user test1 ... |
2020-02-16 22:09:59 |
| 106.52.196.166 | attack | Feb 16 03:45:33 auw2 sshd\[26983\]: Invalid user p@ssw0rd123456 from 106.52.196.166 Feb 16 03:45:33 auw2 sshd\[26983\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.196.166 Feb 16 03:45:36 auw2 sshd\[26983\]: Failed password for invalid user p@ssw0rd123456 from 106.52.196.166 port 54362 ssh2 Feb 16 03:51:05 auw2 sshd\[27611\]: Invalid user qwerty from 106.52.196.166 Feb 16 03:51:05 auw2 sshd\[27611\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.196.166 |
2020-02-16 22:00:48 |