City: unknown
Region: unknown
Country: United States
Internet Service Provider: DigitalOcean LLC
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attack | Honeypot attack, port: 23, PTR: PTR record not found |
2019-07-05 04:16:00 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.93.223.118 | attackspam | SSH login attempts. |
2020-10-12 04:12:31 |
| 142.93.223.118 | attackspam | SSH login attempts. |
2020-10-11 20:11:30 |
| 142.93.223.118 | attackspam | 2020-10-11T07:03:53.476597lavrinenko.info sshd[19701]: Failed password for root from 142.93.223.118 port 55582 ssh2 2020-10-11T07:07:58.292860lavrinenko.info sshd[19798]: Invalid user next from 142.93.223.118 port 33376 2020-10-11T07:07:58.302917lavrinenko.info sshd[19798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.223.118 2020-10-11T07:07:58.292860lavrinenko.info sshd[19798]: Invalid user next from 142.93.223.118 port 33376 2020-10-11T07:08:00.553715lavrinenko.info sshd[19798]: Failed password for invalid user next from 142.93.223.118 port 33376 ssh2 ... |
2020-10-11 12:10:33 |
| 142.93.223.118 | attackbotsspam | Oct 10 21:27:55 plex-server sshd[3588434]: Invalid user test001 from 142.93.223.118 port 46208 Oct 10 21:27:55 plex-server sshd[3588434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.223.118 Oct 10 21:27:55 plex-server sshd[3588434]: Invalid user test001 from 142.93.223.118 port 46208 Oct 10 21:27:56 plex-server sshd[3588434]: Failed password for invalid user test001 from 142.93.223.118 port 46208 ssh2 Oct 10 21:31:46 plex-server sshd[3591113]: Invalid user mdpi from 142.93.223.118 port 50738 ... |
2020-10-11 05:34:04 |
| 142.93.226.235 | attack | 142.93.226.235 - - [01/Oct/2020:19:13:57 +0100] "POST /wp-login.php HTTP/1.1" 200 2426 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.226.235 - - [01/Oct/2020:19:14:06 +0100] "POST /wp-login.php HTTP/1.1" 200 2407 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.226.235 - - [01/Oct/2020:19:14:11 +0100] "POST /wp-login.php HTTP/1.1" 200 2441 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-10-02 02:21:36 |
| 142.93.226.235 | attackspam | 142.93.226.235 - - [01/Oct/2020:10:54:27 +0100] "POST /wp-login.php HTTP/1.1" 200 2604 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.226.235 - - [01/Oct/2020:10:54:29 +0100] "POST /wp-login.php HTTP/1.1" 200 2580 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.226.235 - - [01/Oct/2020:10:54:30 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-10-01 18:30:52 |
| 142.93.226.235 | attackspambots | 142.93.226.235 - - \[30/Sep/2020:01:15:36 +0200\] "POST /wp-login.php HTTP/1.1" 200 12843 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 142.93.226.235 - - \[30/Sep/2020:01:15:39 +0200\] "POST /wp-login.php HTTP/1.1" 200 12678 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ... |
2020-09-30 09:15:31 |
| 142.93.226.235 | attack | 142.93.226.235 - - [29/Sep/2020:17:37:16 +0100] "POST /wp-login.php HTTP/1.1" 200 2394 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.226.235 - - [29/Sep/2020:17:37:21 +0100] "POST /wp-login.php HTTP/1.1" 200 2328 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.226.235 - - [29/Sep/2020:17:37:24 +0100] "POST /wp-login.php HTTP/1.1" 200 2332 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-30 02:07:34 |
| 142.93.226.235 | attack | (PERMBLOCK) 142.93.226.235 (NL/Netherlands/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: |
2020-09-29 18:08:25 |
| 142.93.226.235 | attack | Attempts to probe web pages for vulnerable PHP or other applications |
2020-08-28 16:58:58 |
| 142.93.226.235 | attack | 142.93.226.235 - - [22/Aug/2020:22:31:06 +0200] "POST /wp-login.php HTTP/1.0" 200 4748 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-23 07:49:40 |
| 142.93.226.195 | attackbotsspam | Port Scan ... |
2020-08-14 07:54:42 |
| 142.93.226.235 | attackbots | 142.93.226.235 - - [12/Aug/2020:16:13:23 +0100] "POST /wp-login.php HTTP/1.1" 200 1969 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.226.235 - - [12/Aug/2020:16:13:32 +0100] "POST /wp-login.php HTTP/1.1" 200 1954 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.226.235 - - [12/Aug/2020:16:13:34 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-13 00:34:58 |
| 142.93.226.235 | attackspam | Detected by ModSecurity. Request URI: /wp-login.php |
2020-08-06 03:19:39 |
| 142.93.229.65 | attackspam | lee-Joomla Authentification : try to force the door... |
2020-08-04 13:46:48 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.22.9
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11854
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.22.9. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019070401 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jul 05 04:15:54 CST 2019
;; MSG SIZE rcvd: 115Host 9.22.93.142.in-addr.arpa. not found: 3(NXDOMAIN)Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 9.22.93.142.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 68.32.12.137 | attackbotsspam | SSH brutforce |
2020-04-11 04:57:50 |
| 51.38.80.173 | attack | Apr 10 22:29:10 pve sshd[3512]: Failed password for root from 51.38.80.173 port 58366 ssh2 Apr 10 22:32:53 pve sshd[4260]: Failed password for root from 51.38.80.173 port 39776 ssh2 |
2020-04-11 04:58:09 |
| 106.13.35.232 | attackspam | Apr 10 22:32:12 host01 sshd[30012]: Failed password for root from 106.13.35.232 port 36396 ssh2 Apr 10 22:34:31 host01 sshd[30504]: Failed password for root from 106.13.35.232 port 44716 ssh2 ... |
2020-04-11 04:42:17 |
| 51.75.23.62 | attackspambots | Apr 10 22:36:40 host sshd[10309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.ip-51-75-23.eu user=root Apr 10 22:36:42 host sshd[10309]: Failed password for root from 51.75.23.62 port 57770 ssh2 ... |
2020-04-11 04:46:23 |
| 58.17.250.96 | attackspam | Apr 10 22:27:19 v22019038103785759 sshd\[25161\]: Invalid user dnjenga from 58.17.250.96 port 48609 Apr 10 22:27:19 v22019038103785759 sshd\[25161\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.17.250.96 Apr 10 22:27:20 v22019038103785759 sshd\[25161\]: Failed password for invalid user dnjenga from 58.17.250.96 port 48609 ssh2 Apr 10 22:36:24 v22019038103785759 sshd\[25669\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.17.250.96 user=root Apr 10 22:36:26 v22019038103785759 sshd\[25669\]: Failed password for root from 58.17.250.96 port 9089 ssh2 ... |
2020-04-11 04:59:00 |
| 124.251.38.143 | attack | Apr 10 20:26:32 localhost sshd[53306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.251.38.143 user=root Apr 10 20:26:34 localhost sshd[53306]: Failed password for root from 124.251.38.143 port 56988 ssh2 Apr 10 20:31:22 localhost sshd[53870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.251.38.143 user=root Apr 10 20:31:24 localhost sshd[53870]: Failed password for root from 124.251.38.143 port 33136 ssh2 Apr 10 20:36:15 localhost sshd[54418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.251.38.143 user=root Apr 10 20:36:17 localhost sshd[54418]: Failed password for root from 124.251.38.143 port 37566 ssh2 ... |
2020-04-11 05:04:29 |
| 142.44.251.207 | attackbots | 2020-04-10T20:32:35.571411shield sshd\[24454\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip207.ip-142-44-251.net user=root 2020-04-10T20:32:37.140975shield sshd\[24454\]: Failed password for root from 142.44.251.207 port 57220 ssh2 2020-04-10T20:34:38.988052shield sshd\[24886\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip207.ip-142-44-251.net user=root 2020-04-10T20:34:41.104487shield sshd\[24886\]: Failed password for root from 142.44.251.207 port 47139 ssh2 2020-04-10T20:36:46.914990shield sshd\[25255\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip207.ip-142-44-251.net user=root |
2020-04-11 04:41:49 |
| 209.141.41.96 | attack | Apr 10 22:33:56 host01 sshd[30395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.41.96 Apr 10 22:33:58 host01 sshd[30395]: Failed password for invalid user admin from 209.141.41.96 port 49950 ssh2 Apr 10 22:36:37 host01 sshd[30905]: Failed password for root from 209.141.41.96 port 41624 ssh2 ... |
2020-04-11 04:47:48 |
| 121.229.2.190 | attackspambots | Brute-force attempt banned |
2020-04-11 04:44:34 |
| 138.97.40.230 | attackbotsspam | Automatic report - SSH Brute-Force Attack |
2020-04-11 04:38:26 |
| 182.61.55.154 | attackspam | Apr 10 22:55:54 mout sshd[1077]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.55.154 user=root Apr 10 22:55:56 mout sshd[1077]: Failed password for root from 182.61.55.154 port 34012 ssh2 |
2020-04-11 04:57:13 |
| 38.86.163.40 | attackbotsspam | Port probing on unauthorized port 23 |
2020-04-11 04:36:11 |
| 192.241.148.205 | attackspambots | Invalid user git from 192.241.148.205 port 43276 |
2020-04-11 04:32:38 |
| 213.35.252.130 | attack | Apr 10 22:29:31 pve sshd[3610]: Failed password for root from 213.35.252.130 port 43836 ssh2 Apr 10 22:33:08 pve sshd[4329]: Failed password for root from 213.35.252.130 port 51856 ssh2 |
2020-04-11 04:43:27 |
| 77.42.91.77 | attackspambots | 1586550987 - 04/11/2020 03:36:27 Host: 77.42.91.77/77.42.91.77 Port: 23 TCP Blocked ... |
2020-04-11 04:57:35 |