City: North Bergen
Region: New Jersey
Country: United States
Internet Service Provider: DigitalOcean LLC
Hostname: unknown
Organization: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackbots | Jul 1 13:59:58 animalibera sshd[3620]: Invalid user off from 142.93.202.47 port 59816 ... |
2019-07-02 00:08:51 |
| attackbotsspam | Tried sshing with brute force. |
2019-07-01 15:58:02 |
| attack | Jun 30 03:43:41 MK-Soft-VM3 sshd\[3838\]: Invalid user deploy from 142.93.202.47 port 54936 Jun 30 03:43:41 MK-Soft-VM3 sshd\[3838\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.202.47 Jun 30 03:43:43 MK-Soft-VM3 sshd\[3838\]: Failed password for invalid user deploy from 142.93.202.47 port 54936 ssh2 ... |
2019-06-30 14:12:13 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.93.202.82 | attackspam | firewall-block, port(s): 10000/tcp |
2020-07-14 03:01:13 |
| 142.93.202.159 | attack | 2020-06-16T19:42:35.769855vps773228.ovh.net sshd[9491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.202.159 2020-06-16T19:42:35.753180vps773228.ovh.net sshd[9491]: Invalid user odoo from 142.93.202.159 port 52434 2020-06-16T19:42:37.135961vps773228.ovh.net sshd[9491]: Failed password for invalid user odoo from 142.93.202.159 port 52434 ssh2 2020-06-16T19:45:49.570650vps773228.ovh.net sshd[9541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.202.159 user=root 2020-06-16T19:45:51.569203vps773228.ovh.net sshd[9541]: Failed password for root from 142.93.202.159 port 52696 ssh2 ... |
2020-06-17 03:33:43 |
| 142.93.202.159 | attackspambots | Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) |
2020-06-12 13:48:07 |
| 142.93.202.159 | attack | *Port Scan* detected from 142.93.202.159 (US/United States/New Jersey/North Bergen/-). 4 hits in the last 121 seconds |
2020-06-09 14:17:45 |
| 142.93.202.159 | attackspam | <6 unauthorized SSH connections |
2020-06-07 16:21:27 |
| 142.93.202.159 | attack | Jun 6 09:46:53 vps333114 sshd[26505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.202.159 user=root Jun 6 09:46:54 vps333114 sshd[26505]: Failed password for root from 142.93.202.159 port 42794 ssh2 ... |
2020-06-06 16:59:13 |
| 142.93.202.159 | attackbotsspam | 2020-05-30T05:11:17.000055suse-nuc sshd[11801]: User root from 142.93.202.159 not allowed because listed in DenyUsers ... |
2020-05-30 23:59:27 |
| 142.93.202.159 | attackspambots | May 29 08:31:40 MainVPS sshd[8466]: Invalid user oracle from 142.93.202.159 port 50330 May 29 08:31:40 MainVPS sshd[8466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.202.159 May 29 08:31:40 MainVPS sshd[8466]: Invalid user oracle from 142.93.202.159 port 50330 May 29 08:31:42 MainVPS sshd[8466]: Failed password for invalid user oracle from 142.93.202.159 port 50330 ssh2 May 29 08:35:26 MainVPS sshd[11803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.202.159 user=root May 29 08:35:27 MainVPS sshd[11803]: Failed password for root from 142.93.202.159 port 42948 ssh2 ... |
2020-05-29 19:42:58 |
| 142.93.202.159 | attackspambots | May 26 02:11:46 OPSO sshd\[2661\]: Invalid user neptune from 142.93.202.159 port 50368 May 26 02:11:46 OPSO sshd\[2661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.202.159 May 26 02:11:48 OPSO sshd\[2661\]: Failed password for invalid user neptune from 142.93.202.159 port 50368 ssh2 May 26 02:15:21 OPSO sshd\[4790\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.202.159 user=root May 26 02:15:24 OPSO sshd\[4790\]: Failed password for root from 142.93.202.159 port 57754 ssh2 |
2020-05-26 08:18:58 |
| 142.93.202.159 | attack | 2020-05-10T15:08:03.597361vivaldi2.tree2.info sshd[30283]: Invalid user perpetua from 142.93.202.159 2020-05-10T15:08:03.608706vivaldi2.tree2.info sshd[30283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.202.159 2020-05-10T15:08:03.597361vivaldi2.tree2.info sshd[30283]: Invalid user perpetua from 142.93.202.159 2020-05-10T15:08:05.838540vivaldi2.tree2.info sshd[30283]: Failed password for invalid user perpetua from 142.93.202.159 port 55558 ssh2 2020-05-10T15:11:59.735896vivaldi2.tree2.info sshd[30523]: Invalid user ubuntu from 142.93.202.159 ... |
2020-05-10 15:14:40 |
| 142.93.202.188 | attack | enlinea.de 142.93.202.188 [04/May/2020:22:27:18 +0200] "POST /wp-login.php HTTP/1.1" 200 6105 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" enlinea.de 142.93.202.188 [04/May/2020:22:27:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4109 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-05-05 04:43:32 |
| 142.93.202.188 | attackbots | 142.93.202.188 - - [29/Apr/2020:09:35:23 +0200] "GET /wp-login.php HTTP/1.1" 200 1689 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.202.188 - - [29/Apr/2020:09:35:24 +0200] "GET /wp-login.php HTTP/1.1" 200 1689 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.202.188 - - [29/Apr/2020:09:35:24 +0200] "GET /wp-login.php HTTP/1.1" 200 1689 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.202.188 - - [29/Apr/2020:09:35:26 +0200] "POST /wp-login.php HTTP/1.1" 200 1818 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.202.188 - - [29/Apr/2020:09:35:26 +0200] "POST /wp-login.php HTTP/1.1" 200 1816 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.202.188 - - [29/Apr/2020:09:35:26 +0200] "POST /wp-login.php HTTP/1.1" 200 1819 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/201001 ... |
2020-04-29 16:41:56 |
| 142.93.202.159 | attack | Apr 26 15:31:03 scw-6657dc sshd[3646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.202.159 Apr 26 15:31:03 scw-6657dc sshd[3646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.202.159 Apr 26 15:31:04 scw-6657dc sshd[3646]: Failed password for invalid user dev from 142.93.202.159 port 40768 ssh2 ... |
2020-04-27 03:07:35 |
| 142.93.202.159 | attackbots | 2020-04-26T05:47:09.396447shield sshd\[22267\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.202.159 user=root 2020-04-26T05:47:11.127295shield sshd\[22267\]: Failed password for root from 142.93.202.159 port 42096 ssh2 2020-04-26T05:51:24.123113shield sshd\[22733\]: Invalid user cg from 142.93.202.159 port 56832 2020-04-26T05:51:24.126796shield sshd\[22733\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.202.159 2020-04-26T05:51:26.196990shield sshd\[22733\]: Failed password for invalid user cg from 142.93.202.159 port 56832 ssh2 |
2020-04-26 14:47:40 |
| 142.93.202.159 | attackbotsspam | Apr 25 14:12:47 roki-contabo sshd\[10980\]: Invalid user net from 142.93.202.159 Apr 25 14:12:47 roki-contabo sshd\[10980\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.202.159 Apr 25 14:12:49 roki-contabo sshd\[10980\]: Failed password for invalid user net from 142.93.202.159 port 41318 ssh2 Apr 25 14:15:23 roki-contabo sshd\[11044\]: Invalid user test3 from 142.93.202.159 Apr 25 14:15:23 roki-contabo sshd\[11044\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.202.159 ... |
2020-04-25 21:24:45 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.202.47
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37095
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.202.47. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019040300 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Wed Apr 03 13:50:01 +08 2019
;; MSG SIZE rcvd: 117
Host 47.202.93.142.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.3
Address: 67.207.67.3#53
** server can't find 47.202.93.142.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 61.228.108.245 | attackbotsspam | 445/tcp [2020-05-01]1pkt |
2020-05-02 03:04:04 |
| 92.169.67.98 | attackspambots | May 1 16:47:02 vpn01 sshd[6601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.169.67.98 May 1 16:47:03 vpn01 sshd[6601]: Failed password for invalid user ftp from 92.169.67.98 port 43086 ssh2 ... |
2020-05-02 03:26:19 |
| 87.26.157.79 | attackspambots | Unauthorized connection attempt from IP address 87.26.157.79 on Port 445(SMB) |
2020-05-02 03:30:18 |
| 59.97.236.182 | attackspam | Attempted connection to port 1433. |
2020-05-02 03:41:20 |
| 170.106.36.137 | attack | 1588333583 - 05/01/2020 13:46:23 Host: 170.106.36.137/170.106.36.137 Port: 623 UDP Blocked |
2020-05-02 03:09:41 |
| 49.204.178.75 | attack | 1588339727 - 05/01/2020 15:28:47 Host: 49.204.178.75/49.204.178.75 Port: 445 TCP Blocked |
2020-05-02 03:38:06 |
| 49.233.46.219 | attack | Invalid user heike from 49.233.46.219 port 60364 |
2020-05-02 03:41:42 |
| 106.54.242.239 | attackspam | May 1 13:42:38 DAAP sshd[28385]: Invalid user sysadmin from 106.54.242.239 port 37842 May 1 13:42:38 DAAP sshd[28385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.242.239 May 1 13:42:38 DAAP sshd[28385]: Invalid user sysadmin from 106.54.242.239 port 37842 May 1 13:42:40 DAAP sshd[28385]: Failed password for invalid user sysadmin from 106.54.242.239 port 37842 ssh2 May 1 13:46:10 DAAP sshd[28399]: Invalid user tfs from 106.54.242.239 port 47564 ... |
2020-05-02 03:32:10 |
| 131.161.224.12 | attackspam | May 1 12:48:26 ip-172-31-62-245 sshd\[6017\]: Invalid user sinus from 131.161.224.12\ May 1 12:48:28 ip-172-31-62-245 sshd\[6017\]: Failed password for invalid user sinus from 131.161.224.12 port 45764 ssh2\ May 1 12:52:53 ip-172-31-62-245 sshd\[6162\]: Invalid user felipe from 131.161.224.12\ May 1 12:52:55 ip-172-31-62-245 sshd\[6162\]: Failed password for invalid user felipe from 131.161.224.12 port 58502 ssh2\ May 1 12:57:17 ip-172-31-62-245 sshd\[6210\]: Invalid user customer from 131.161.224.12\ |
2020-05-02 03:39:57 |
| 201.113.40.90 | attackbots | Portscan - Unauthorized connection attempt |
2020-05-02 03:28:46 |
| 43.245.141.85 | attackbots | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-05-02 03:06:32 |
| 1.83.100.31 | attackbotsspam | 23/tcp [2020-05-01]1pkt |
2020-05-02 03:15:28 |
| 185.50.149.32 | attack | May 1 20:47:14 mail.srvfarm.net postfix/smtpd[1397725]: warning: unknown[185.50.149.32]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 1 20:47:14 mail.srvfarm.net postfix/smtpd[1397725]: lost connection after AUTH from unknown[185.50.149.32] May 1 20:47:22 mail.srvfarm.net postfix/smtpd[1401774]: lost connection after AUTH from unknown[185.50.149.32] May 1 20:47:28 mail.srvfarm.net postfix/smtpd[1397730]: lost connection after AUTH from unknown[185.50.149.32] May 1 20:47:37 mail.srvfarm.net postfix/smtpd[1381698]: warning: unknown[185.50.149.32]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-05-02 03:07:04 |
| 78.175.224.175 | attackspambots | Attempted connection to port 445. |
2020-05-02 03:41:03 |
| 122.117.93.69 | attackbots | 23/tcp [2020-05-01]1pkt |
2020-05-02 03:34:34 |