City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.93.34.237 | attackbots | [N10.H2.VM2] Port Scanner Detected Blocked by UFW |
2020-10-01 18:50:53 |
| 142.93.34.237 | attack | scans 2 times in preceeding hours on the ports (in chronological order) 2812 2812 |
2020-09-20 22:48:04 |
| 142.93.34.237 | attackbotsspam | (sshd) Failed SSH login from 142.93.34.237 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 20 02:32:21 optimus sshd[18174]: Invalid user postgres from 142.93.34.237 Sep 20 02:32:21 optimus sshd[18174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.34.237 Sep 20 02:32:23 optimus sshd[18174]: Failed password for invalid user postgres from 142.93.34.237 port 53744 ssh2 Sep 20 02:34:07 optimus sshd[19447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.34.237 user=root Sep 20 02:34:09 optimus sshd[19447]: Failed password for root from 142.93.34.237 port 47652 ssh2 |
2020-09-20 14:39:11 |
| 142.93.34.237 | attackbots | [ssh] SSH attack |
2020-09-20 06:38:03 |
| 142.93.34.237 | attack | Sep 9 08:23:48 root sshd[32474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.34.237 ... |
2020-09-09 20:18:07 |
| 142.93.34.237 | attackbots | Port scan denied |
2020-09-09 14:15:06 |
| 142.93.34.237 | attackspam | (sshd) Failed SSH login from 142.93.34.237 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 8 17:44:52 server2 sshd[5793]: Invalid user opc from 142.93.34.237 Sep 8 17:44:52 server2 sshd[5793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.34.237 Sep 8 17:44:54 server2 sshd[5793]: Failed password for invalid user opc from 142.93.34.237 port 48194 ssh2 Sep 8 17:50:46 server2 sshd[9000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.34.237 user=root Sep 8 17:50:48 server2 sshd[9000]: Failed password for root from 142.93.34.237 port 45140 ssh2 |
2020-09-09 06:26:28 |
| 142.93.34.237 | attackspambots | TCP port : 5290 |
2020-09-02 22:11:05 |
| 142.93.34.237 | attackbotsspam | Port scan denied |
2020-09-02 14:01:13 |
| 142.93.34.237 | attackspambots | Invalid user mongo from 142.93.34.237 port 43272 |
2020-09-02 07:02:07 |
| 142.93.34.237 | attackspam | Aug 30 07:54:05 lukav-desktop sshd\[20305\]: Invalid user sftp from 142.93.34.237 Aug 30 07:54:05 lukav-desktop sshd\[20305\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.34.237 Aug 30 07:54:08 lukav-desktop sshd\[20305\]: Failed password for invalid user sftp from 142.93.34.237 port 39110 ssh2 Aug 30 07:58:01 lukav-desktop sshd\[20345\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.34.237 user=root Aug 30 07:58:03 lukav-desktop sshd\[20345\]: Failed password for root from 142.93.34.237 port 47702 ssh2 |
2020-08-30 13:11:32 |
| 142.93.34.169 | attackbotsspam | 142.93.34.169 - - [24/Aug/2020:05:43:57 +0100] "POST /wp-login.php HTTP/1.1" 200 1996 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.34.169 - - [24/Aug/2020:05:43:58 +0100] "POST /wp-login.php HTTP/1.1" 200 1949 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.34.169 - - [24/Aug/2020:05:43:59 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-24 14:39:17 |
| 142.93.34.237 | attackbotsspam | Invalid user demo from 142.93.34.237 port 45858 |
2020-08-22 06:25:00 |
| 142.93.34.169 | attackbots | Attempt to hack Wordpress Login, XMLRPC or other login |
2020-08-19 19:16:09 |
| 142.93.34.237 | attack | Aug 18 12:30:05 vps-51d81928 sshd[708386]: Failed password for invalid user yuxin from 142.93.34.237 port 47050 ssh2 Aug 18 12:34:05 vps-51d81928 sshd[708526]: Invalid user josh from 142.93.34.237 port 55404 Aug 18 12:34:05 vps-51d81928 sshd[708526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.34.237 Aug 18 12:34:05 vps-51d81928 sshd[708526]: Invalid user josh from 142.93.34.237 port 55404 Aug 18 12:34:07 vps-51d81928 sshd[708526]: Failed password for invalid user josh from 142.93.34.237 port 55404 ssh2 ... |
2020-08-18 22:29:14 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.34.229
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54415
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;142.93.34.229. IN A
;; AUTHORITY SECTION:
. 10 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400
;; Query time: 24 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 04:22:10 CST 2022
;; MSG SIZE rcvd: 106229.34.93.142.in-addr.arpa domain name pointer 461171.cloudwaysapps.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
229.34.93.142.in-addr.arpa name = 461171.cloudwaysapps.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 47.156.98.118 | attackspam | tcp 8000 |
2020-06-16 08:43:26 |
| 177.5.53.176 | attack | Jun 16 10:55:16 webhost01 sshd[11361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.5.53.176 Jun 16 10:55:19 webhost01 sshd[11361]: Failed password for invalid user dummy from 177.5.53.176 port 43344 ssh2 ... |
2020-06-16 12:12:03 |
| 93.123.73.198 | attackbotsspam | Compromised user logged in from this IP. |
2020-06-16 12:02:17 |
| 200.17.0.32 | attackspambots | Lines containing failures of 200.17.0.32 (max 1000) Jun 16 04:45:36 localhost sshd[1976]: Invalid user harlan from 200.17.0.32 port 41782 Jun 16 04:45:36 localhost sshd[1976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.17.0.32 Jun 16 04:45:38 localhost sshd[1976]: Failed password for invalid user harlan from 200.17.0.32 port 41782 ssh2 Jun 16 04:45:40 localhost sshd[1976]: Received disconnect from 200.17.0.32 port 41782:11: Bye Bye [preauth] Jun 16 04:45:40 localhost sshd[1976]: Disconnected from invalid user harlan 200.17.0.32 port 41782 [preauth] Jun 16 04:48:52 localhost sshd[2766]: User r.r from 200.17.0.32 not allowed because listed in DenyUsers Jun 16 04:48:52 localhost sshd[2766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.17.0.32 user=r.r ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=200.17.0.32 |
2020-06-16 12:05:35 |
| 104.198.176.196 | attackbots | Jun 16 02:20:09 ns1 sshd[6621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.198.176.196 Jun 16 02:20:11 ns1 sshd[6621]: Failed password for invalid user zcw from 104.198.176.196 port 37472 ssh2 |
2020-06-16 08:38:24 |
| 60.212.191.66 | attackspambots | 2020-06-16T02:45:00+0200 Failed SSH Authentication/Brute Force Attack. (Server 10) |
2020-06-16 08:49:05 |
| 81.150.111.35 | attack | Jun 16 06:49:21 lukav-desktop sshd\[14621\]: Invalid user vmc from 81.150.111.35 Jun 16 06:49:21 lukav-desktop sshd\[14621\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.150.111.35 Jun 16 06:49:23 lukav-desktop sshd\[14621\]: Failed password for invalid user vmc from 81.150.111.35 port 56936 ssh2 Jun 16 06:55:21 lukav-desktop sshd\[14699\]: Invalid user ts3 from 81.150.111.35 Jun 16 06:55:21 lukav-desktop sshd\[14699\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.150.111.35 |
2020-06-16 12:08:31 |
| 40.114.108.93 | attackbotsspam | Invalid user anonymous from 40.114.108.93 port 35164 |
2020-06-16 08:48:19 |
| 15.206.14.199 | attackbotsspam | Jun 15 23:55:12 Tower sshd[9020]: Connection from 15.206.14.199 port 56922 on 192.168.10.220 port 22 rdomain "" Jun 15 23:55:14 Tower sshd[9020]: Invalid user ares from 15.206.14.199 port 56922 Jun 15 23:55:14 Tower sshd[9020]: error: Could not get shadow information for NOUSER Jun 15 23:55:14 Tower sshd[9020]: Failed password for invalid user ares from 15.206.14.199 port 56922 ssh2 Jun 15 23:55:14 Tower sshd[9020]: Received disconnect from 15.206.14.199 port 56922:11: Bye Bye [preauth] Jun 15 23:55:14 Tower sshd[9020]: Disconnected from invalid user ares 15.206.14.199 port 56922 [preauth] |
2020-06-16 12:08:55 |
| 61.177.172.102 | attackspam | Jun 16 02:37:57 vps639187 sshd\[29642\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.102 user=root Jun 16 02:37:59 vps639187 sshd\[29642\]: Failed password for root from 61.177.172.102 port 17533 ssh2 Jun 16 02:38:01 vps639187 sshd\[29642\]: Failed password for root from 61.177.172.102 port 17533 ssh2 ... |
2020-06-16 08:42:58 |
| 46.38.145.253 | attackspam | Jun 16 12:08:52 bacztwo courieresmtpd[13448]: error,relay=::ffff:46.38.145.253,msg="535 Authentication failed.",cmd: AUTH LOGIN md-92@idv.tw ... |
2020-06-16 12:10:44 |
| 144.91.64.169 | attack | 2020-06-16T00:27:03.154814shield sshd\[17732\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmi297175.contaboserver.net user=root 2020-06-16T00:27:05.554520shield sshd\[17732\]: Failed password for root from 144.91.64.169 port 59788 ssh2 2020-06-16T00:28:26.726747shield sshd\[17886\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmi297175.contaboserver.net user=root 2020-06-16T00:28:29.517176shield sshd\[17886\]: Failed password for root from 144.91.64.169 port 51394 ssh2 2020-06-16T00:29:51.358214shield sshd\[17978\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmi297175.contaboserver.net user=root |
2020-06-16 08:35:44 |
| 196.179.78.79 | attackspam | Email rejected due to spam filtering |
2020-06-16 08:49:56 |
| 45.143.223.253 | attack | Brute forcing email accounts |
2020-06-16 12:03:27 |
| 122.224.232.66 | attack | Jun 16 06:47:56 lukav-desktop sshd\[14587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.224.232.66 user=root Jun 16 06:47:58 lukav-desktop sshd\[14587\]: Failed password for root from 122.224.232.66 port 54962 ssh2 Jun 16 06:51:27 lukav-desktop sshd\[14645\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.224.232.66 user=root Jun 16 06:51:29 lukav-desktop sshd\[14645\]: Failed password for root from 122.224.232.66 port 46128 ssh2 Jun 16 06:55:13 lukav-desktop sshd\[14689\]: Invalid user admin from 122.224.232.66 |
2020-06-16 12:12:15 |