City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.93.249.118 | attack | Oct 6 15:45:52 Tower sshd[36555]: Connection from 142.93.249.118 port 44680 on 192.168.10.220 port 22 rdomain "" Oct 6 15:45:55 Tower sshd[36555]: Failed password for root from 142.93.249.118 port 44680 ssh2 Oct 6 15:45:55 Tower sshd[36555]: Received disconnect from 142.93.249.118 port 44680:11: Bye Bye [preauth] Oct 6 15:45:55 Tower sshd[36555]: Disconnected from authenticating user root 142.93.249.118 port 44680 [preauth] |
2020-10-07 04:30:28 |
| 142.93.249.118 | attackbotsspam | Oct 5 13:23:11 our-server-hostname sshd[32265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.249.118 user=r.r Oct 5 13:23:13 our-server-hostname sshd[32265]: Failed password for r.r from 142.93.249.118 port 42104 ssh2 Oct 5 13:36:50 our-server-hostname sshd[1601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.249.118 user=r.r Oct 5 13:36:52 our-server-hostname sshd[1601]: Failed password for r.r from 142.93.249.118 port 41912 ssh2 Oct 5 13:41:08 our-server-hostname sshd[2260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.249.118 user=r.r Oct 5 13:41:10 our-server-hostname sshd[2260]: Failed password for r.r from 142.93.249.118 port 49428 ssh2 Oct 5 13:45:12 our-server-hostname sshd[2814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.249.118 user=r.r Oct 5 13:45:1........ ------------------------------- |
2020-10-06 20:34:11 |
| 142.93.249.118 | attackspam | Oct 5 13:23:11 our-server-hostname sshd[32265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.249.118 user=r.r Oct 5 13:23:13 our-server-hostname sshd[32265]: Failed password for r.r from 142.93.249.118 port 42104 ssh2 Oct 5 13:36:50 our-server-hostname sshd[1601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.249.118 user=r.r Oct 5 13:36:52 our-server-hostname sshd[1601]: Failed password for r.r from 142.93.249.118 port 41912 ssh2 Oct 5 13:41:08 our-server-hostname sshd[2260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.249.118 user=r.r Oct 5 13:41:10 our-server-hostname sshd[2260]: Failed password for r.r from 142.93.249.118 port 49428 ssh2 Oct 5 13:45:12 our-server-hostname sshd[2814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.249.118 user=r.r Oct 5 13:45:1........ ------------------------------- |
2020-10-06 12:15:43 |
| 142.93.249.29 | attackbots | 142.93.249.29 - - [25/May/2020:22:17:45 +0200] "GET /wp-login.php HTTP/1.1" 200 5865 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.249.29 - - [25/May/2020:22:17:47 +0200] "POST /wp-login.php HTTP/1.1" 200 6116 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.249.29 - - [25/May/2020:22:17:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-05-26 07:01:04 |
| 142.93.249.29 | attack | xmlrpc attack |
2020-05-13 20:40:53 |
| 142.93.249.29 | attack | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-05-02 23:46:12 |
| 142.93.249.29 | attackbots | Automatic report - XMLRPC Attack |
2020-05-02 12:40:51 |
| 142.93.249.69 | attackspambots | " " |
2019-12-14 02:52:56 |
| 142.93.249.69 | attackbotsspam | IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking. |
2019-12-13 07:49:53 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.249.192
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60145
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;142.93.249.192. IN A
;; AUTHORITY SECTION:
. 58 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021801 1800 900 604800 86400
;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 19 03:38:48 CST 2022
;; MSG SIZE rcvd: 107192.249.93.142.in-addr.arpa domain name pointer 349827.cloudwaysapps.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
192.249.93.142.in-addr.arpa name = 349827.cloudwaysapps.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 111.20.101.66 | attackbotsspam | Unauthorized connection attempt detected from IP address 111.20.101.66 to port 9527 |
2020-01-01 02:31:42 |
| 1.55.174.100 | attack | Unauthorized connection attempt detected from IP address 1.55.174.100 to port 23 |
2020-01-01 02:43:44 |
| 106.13.39.232 | attackbotsspam | Unauthorized connection attempt detected from IP address 106.13.39.232 to port 23 |
2020-01-01 02:34:46 |
| 190.145.26.90 | attackbots | Unauthorized connection attempt detected from IP address 190.145.26.90 to port 445 |
2020-01-01 03:07:22 |
| 49.89.97.139 | attack | Unauthorized connection attempt detected from IP address 49.89.97.139 to port 23 |
2020-01-01 02:38:19 |
| 221.217.59.118 | attack | Unauthorized connection attempt detected from IP address 221.217.59.118 to port 1433 |
2020-01-01 02:45:08 |
| 196.35.41.86 | attackbots | Dec 31 14:39:43 sw2 sshd[3794]: Failed password for invalid user delazzer from 196.35.41.86 port 33586 ssh2 Dec 31 14:46:03 sw2 sshd[3850]: Failed password for root from 196.35.41.86 port 57285 ssh2 Dec 31 14:49:31 sw2 sshd[3949]: Failed password for root from 196.35.41.86 port 44766 ssh2 |
2020-01-01 03:05:52 |
| 92.118.160.17 | attackspambots | firewall-block, port(s): 5905/tcp |
2020-01-01 02:35:08 |
| 179.95.252.139 | attack | Unauthorized connection attempt detected from IP address 179.95.252.139 to port 445 |
2020-01-01 02:48:53 |
| 14.192.245.40 | attackspambots | Unauthorized connection attempt detected from IP address 14.192.245.40 to port 23 |
2020-01-01 02:43:27 |
| 112.5.172.26 | attackspambots | Unauthorized connection attempt detected from IP address 112.5.172.26 to port 1433 |
2020-01-01 02:30:43 |
| 42.113.229.69 | attackbots | Unauthorized connection attempt detected from IP address 42.113.229.69 to port 23 |
2020-01-01 02:40:52 |
| 109.191.158.133 | attackbots | Unauthorized connection attempt detected from IP address 109.191.158.133 to port 445 |
2020-01-01 02:58:18 |
| 78.29.35.75 | attackbotsspam | Unauthorized connection attempt detected from IP address 78.29.35.75 to port 1433 |
2020-01-01 03:01:18 |
| 111.199.29.182 | attackbots | Unauthorized connection attempt detected from IP address 111.199.29.182 to port 1433 |
2020-01-01 02:31:18 |