City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.93.208.69 | attackbots | 04/12/2020-17:16:51.543747 142.93.208.69 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-04-13 08:28:08 |
| 142.93.208.158 | attack | SSH login attempts. |
2020-03-19 16:07:54 |
| 142.93.208.220 | attackbots | Mar 13 14:03:07 web8 sshd\[15273\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.220 user=root Mar 13 14:03:09 web8 sshd\[15273\]: Failed password for root from 142.93.208.220 port 57966 ssh2 Mar 13 14:08:03 web8 sshd\[17919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.220 user=root Mar 13 14:08:05 web8 sshd\[17919\]: Failed password for root from 142.93.208.220 port 41744 ssh2 Mar 13 14:12:56 web8 sshd\[20670\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.220 user=root |
2020-03-13 23:10:13 |
| 142.93.208.158 | attackbotsspam | Mar 9 18:36:45 lukav-desktop sshd\[16609\]: Invalid user tr from 142.93.208.158 Mar 9 18:36:45 lukav-desktop sshd\[16609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.158 Mar 9 18:36:46 lukav-desktop sshd\[16609\]: Failed password for invalid user tr from 142.93.208.158 port 36694 ssh2 Mar 9 18:40:15 lukav-desktop sshd\[16638\]: Invalid user docs from 142.93.208.158 Mar 9 18:40:15 lukav-desktop sshd\[16638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.158 |
2020-03-10 03:20:21 |
| 142.93.208.250 | attack | 2020-03-07T12:44:19.452885dmca.cloudsearch.cf sshd[26998]: Invalid user ubuntu from 142.93.208.250 port 52048 2020-03-07T12:44:19.459556dmca.cloudsearch.cf sshd[26998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=demo.b2grow.com 2020-03-07T12:44:19.452885dmca.cloudsearch.cf sshd[26998]: Invalid user ubuntu from 142.93.208.250 port 52048 2020-03-07T12:44:21.949980dmca.cloudsearch.cf sshd[26998]: Failed password for invalid user ubuntu from 142.93.208.250 port 52048 ssh2 2020-03-07T12:48:08.529859dmca.cloudsearch.cf sshd[27227]: Invalid user leo from 142.93.208.250 port 52778 2020-03-07T12:48:08.535947dmca.cloudsearch.cf sshd[27227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=demo.b2grow.com 2020-03-07T12:48:08.529859dmca.cloudsearch.cf sshd[27227]: Invalid user leo from 142.93.208.250 port 52778 2020-03-07T12:48:10.465672dmca.cloudsearch.cf sshd[27227]: Failed password for invalid user leo from 142. ... |
2020-03-07 21:06:37 |
| 142.93.208.24 | attackbots | Jan1505:49:43server4pure-ftpd:\(\?@103.16.228.20\)[WARNING]Authenticationfailedforuser[info]Jan1505:49:09server4pure-ftpd:\(\?@144.217.197.11\)[WARNING]Authenticationfailedforuser[info]Jan1505:49:28server4pure-ftpd:\(\?@144.217.197.11\)[WARNING]Authenticationfailedforuser[info]Jan1505:49:30server4pure-ftpd:\(\?@103.16.228.20\)[WARNING]Authenticationfailedforuser[info]Jan1505:49:55server4pure-ftpd:\(\?@142.93.208.24\)[WARNING]Authenticationfailedforuser[info]Jan1505:49:56server4pure-ftpd:\(\?@103.16.228.20\)[WARNING]Authenticationfailedforuser[info]Jan1505:49:59server4pure-ftpd:\(\?@103.18.179.196\)[WARNING]Authenticationfailedforuser[info]Jan1505:50:02server4pure-ftpd:\(\?@35.194.4.89\)[WARNING]Authenticationfailedforuser[info]Jan1505:49:22server4pure-ftpd:\(\?@144.217.197.11\)[WARNING]Authenticationfailedforuser[info]Jan1505:49:48server4pure-ftpd:\(\?@103.16.228.20\)[WARNING]Authenticationfailedforuser[info]IPAddressesBlocked:103.16.228.20\(HK/HongKong/www.northridgefinancialpartners.com\)144.217.197.11\(US/ |
2020-01-15 17:25:24 |
| 142.93.208.250 | attackbotsspam | Unauthorized connection attempt detected from IP address 142.93.208.250 to port 2220 [J] |
2020-01-14 05:10:49 |
| 142.93.208.92 | attackbotsspam | Dec 26 07:18:41 mail sshd\[2145\]: Invalid user ftpuser from 142.93.208.92 Dec 26 07:18:53 mail sshd\[2149\]: Invalid user git from 142.93.208.92 Dec 26 07:19:06 mail sshd\[2166\]: Invalid user oracle from 142.93.208.92 Dec 26 07:19:33 mail sshd\[2172\]: Invalid user ftpuser from 142.93.208.92 Dec 26 07:19:47 mail sshd\[2175\]: Invalid user oracle from 142.93.208.92 ... |
2019-12-26 22:06:43 |
| 142.93.208.92 | attackbots | 2019-12-25T07:09:01.598728shield sshd\[31609\]: Invalid user redis from 142.93.208.92 port 53980 2019-12-25T07:09:01.603088shield sshd\[31609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.92 2019-12-25T07:09:03.531532shield sshd\[31609\]: Failed password for invalid user redis from 142.93.208.92 port 53980 ssh2 2019-12-25T07:12:35.235777shield sshd\[559\]: Invalid user www from 142.93.208.92 port 33408 2019-12-25T07:12:35.240148shield sshd\[559\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.92 |
2019-12-25 20:39:01 |
| 142.93.208.190 | attackbotsspam | RDP Bruteforce |
2019-12-18 21:48:05 |
| 142.93.208.219 | attackspambots | Sep 7 13:18:40 eddieflores sshd\[27227\]: Invalid user postgres from 142.93.208.219 Sep 7 13:18:40 eddieflores sshd\[27227\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.219 Sep 7 13:18:42 eddieflores sshd\[27227\]: Failed password for invalid user postgres from 142.93.208.219 port 34816 ssh2 Sep 7 13:23:09 eddieflores sshd\[27563\]: Invalid user oracle from 142.93.208.219 Sep 7 13:23:09 eddieflores sshd\[27563\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.219 |
2019-09-08 07:33:17 |
| 142.93.208.219 | attackspambots | Sep 5 00:35:31 hpm sshd\[13710\]: Invalid user webmaster from 142.93.208.219 Sep 5 00:35:31 hpm sshd\[13710\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.219 Sep 5 00:35:33 hpm sshd\[13710\]: Failed password for invalid user webmaster from 142.93.208.219 port 38906 ssh2 Sep 5 00:40:11 hpm sshd\[14245\]: Invalid user mysqlmysql from 142.93.208.219 Sep 5 00:40:11 hpm sshd\[14245\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.219 |
2019-09-05 18:55:20 |
| 142.93.208.219 | attack | Aug 28 05:57:31 hiderm sshd\[29194\]: Invalid user test from 142.93.208.219 Aug 28 05:57:31 hiderm sshd\[29194\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.219 Aug 28 05:57:33 hiderm sshd\[29194\]: Failed password for invalid user test from 142.93.208.219 port 57578 ssh2 Aug 28 06:02:13 hiderm sshd\[29594\]: Invalid user ftpuser1 from 142.93.208.219 Aug 28 06:02:13 hiderm sshd\[29594\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.219 |
2019-08-29 07:52:12 |
| 142.93.208.219 | attackbots | Aug 22 12:54:39 vps691689 sshd[19492]: Failed password for root from 142.93.208.219 port 49438 ssh2 Aug 22 12:59:39 vps691689 sshd[19631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.219 ... |
2019-08-22 19:15:07 |
| 142.93.208.158 | attackbots | SSH Brute-Force reported by Fail2Ban |
2019-08-13 03:51:15 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.208.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27281
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;142.93.208.149. IN A
;; AUTHORITY SECTION:
. 275 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400
;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 11:00:10 CST 2022
;; MSG SIZE rcvd: 107Host 149.208.93.142.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 149.208.93.142.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.233.77.12 | attack | 2020-08-08T06:06:51.161123shield sshd\[31547\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.77.12 user=root 2020-08-08T06:06:53.542810shield sshd\[31547\]: Failed password for root from 49.233.77.12 port 38978 ssh2 2020-08-08T06:11:03.318589shield sshd\[1273\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.77.12 user=root 2020-08-08T06:11:05.293516shield sshd\[1273\]: Failed password for root from 49.233.77.12 port 55804 ssh2 2020-08-08T06:15:11.308414shield sshd\[4549\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.77.12 user=root |
2020-08-08 19:07:05 |
| 46.38.145.251 | attack | Jul 11 16:22:36 mail postfix/smtpd[2510]: warning: unknown[46.38.145.251]: SASL LOGIN authentication failed: authentication failure |
2020-08-08 19:15:12 |
| 51.38.57.78 | attackbotsspam | Aug 8 10:43:30 XXX sshd[35238]: Invalid user lijun from 51.38.57.78 port 41668 |
2020-08-08 19:02:51 |
| 101.37.21.63 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 97 - port: 80 proto: tcp cat: Misc Attackbytes: 74 |
2020-08-08 19:13:42 |
| 82.64.32.76 | attack | Aug 8 09:02:31 lukav-desktop sshd\[26482\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.64.32.76 user=root Aug 8 09:02:32 lukav-desktop sshd\[26482\]: Failed password for root from 82.64.32.76 port 48830 ssh2 Aug 8 09:06:27 lukav-desktop sshd\[29443\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.64.32.76 user=root Aug 8 09:06:30 lukav-desktop sshd\[29443\]: Failed password for root from 82.64.32.76 port 59286 ssh2 Aug 8 09:10:21 lukav-desktop sshd\[3561\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.64.32.76 user=root |
2020-08-08 19:03:51 |
| 173.247.174.198 | attackspambots | SSH break in attempt ... |
2020-08-08 19:16:45 |
| 195.231.81.43 | attack | Aug 8 05:41:35 vmd17057 sshd[11072]: Failed password for root from 195.231.81.43 port 35348 ssh2 ... |
2020-08-08 19:04:44 |
| 185.234.219.229 | attackspam | Jul 22 07:43:47 mail postfix/smtpd[32700]: warning: unknown[185.234.219.229]: SASL LOGIN authentication failed: authentication failure |
2020-08-08 19:35:33 |
| 172.81.238.222 | attack | 2020-08-08T12:49:20.032315vps773228.ovh.net sshd[32590]: Failed password for root from 172.81.238.222 port 52784 ssh2 2020-08-08T12:54:55.477550vps773228.ovh.net sshd[32628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.238.222 user=root 2020-08-08T12:54:56.983354vps773228.ovh.net sshd[32628]: Failed password for root from 172.81.238.222 port 56840 ssh2 2020-08-08T13:00:28.263004vps773228.ovh.net sshd[32656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.238.222 user=root 2020-08-08T13:00:30.150165vps773228.ovh.net sshd[32656]: Failed password for root from 172.81.238.222 port 60858 ssh2 ... |
2020-08-08 19:35:55 |
| 109.74.144.130 | attack | Unauthorized IMAP connection attempt |
2020-08-08 19:31:55 |
| 212.129.16.53 | attackbotsspam | SSH Brute Force |
2020-08-08 18:59:11 |
| 87.246.7.17 | attackbots | SASL broute force |
2020-08-08 19:14:00 |
| 185.30.177.42 | attackbotsspam | Unauthorized IMAP connection attempt |
2020-08-08 19:05:08 |
| 222.186.30.57 | attackbotsspam | Unauthorized connection attempt detected from IP address 222.186.30.57 to port 22 |
2020-08-08 19:20:10 |
| 46.38.150.190 | attackspambots | Jul 10 12:52:03 mail postfix/smtpd[5622]: warning: unknown[46.38.150.190]: SASL LOGIN authentication failed: authentication failure |
2020-08-08 19:07:55 |