City: unknown
Region: unknown
Country: United States of America
Internet Service Provider: DigitalOcean LLC
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attack | 11109/tcp 4545/tcp 12805/tcp... [2020-08-30/09-25]50pkt,17pt.(tcp) |
2020-09-26 02:54:00 |
| attackspam | TCP ports : 4545 / 11109 |
2020-09-25 18:39:21 |
| attackspambots | 2020-09-15T15:12:08.262284sorsha.thespaminator.com sshd[16347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.191 user=root 2020-09-15T15:12:10.495909sorsha.thespaminator.com sshd[16347]: Failed password for root from 142.93.48.191 port 56048 ssh2 ... |
2020-09-16 03:26:42 |
| attack | 17418/tcp 17103/tcp 18405/tcp... [2020-08-30/09-15]31pkt,11pt.(tcp) |
2020-09-15 19:30:33 |
| attack | SSH Scan |
2020-08-31 16:34:29 |
| attackspambots | Attempted connection to port 18720. |
2020-08-31 07:25:08 |
| attack | Aug 30 14:31:11 buvik sshd[1558]: Failed password for root from 142.93.48.191 port 43900 ssh2 Aug 30 14:34:52 buvik sshd[2031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.191 user=root Aug 30 14:34:54 buvik sshd[2031]: Failed password for root from 142.93.48.191 port 45650 ssh2 ... |
2020-08-30 21:03:12 |
| attackbotsspam | "$f2bV_matches" |
2020-08-28 04:24:22 |
| attackbots | Aug 25 16:56:16 OPSO sshd\[7232\]: Invalid user ftpu from 142.93.48.191 port 39276 Aug 25 16:56:16 OPSO sshd\[7232\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.191 Aug 25 16:56:18 OPSO sshd\[7232\]: Failed password for invalid user ftpu from 142.93.48.191 port 39276 ssh2 Aug 25 17:00:30 OPSO sshd\[8411\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.191 user=root Aug 25 17:00:32 OPSO sshd\[8411\]: Failed password for root from 142.93.48.191 port 46392 ssh2 |
2020-08-25 23:06:20 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.93.48.155 | attackbotsspam | Jul 4 14:10:59 prox sshd[6702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.155 Jul 4 14:11:00 prox sshd[6702]: Failed password for invalid user king from 142.93.48.155 port 40008 ssh2 |
2020-07-05 00:10:52 |
| 142.93.48.155 | attack | 2020-06-16T12:20:32.770817abusebot-5.cloudsearch.cf sshd[15081]: Invalid user vid from 142.93.48.155 port 35614 2020-06-16T12:20:32.775990abusebot-5.cloudsearch.cf sshd[15081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.155 2020-06-16T12:20:32.770817abusebot-5.cloudsearch.cf sshd[15081]: Invalid user vid from 142.93.48.155 port 35614 2020-06-16T12:20:34.762014abusebot-5.cloudsearch.cf sshd[15081]: Failed password for invalid user vid from 142.93.48.155 port 35614 ssh2 2020-06-16T12:25:36.762081abusebot-5.cloudsearch.cf sshd[15130]: Invalid user sunil from 142.93.48.155 port 57490 2020-06-16T12:25:36.767796abusebot-5.cloudsearch.cf sshd[15130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.155 2020-06-16T12:25:36.762081abusebot-5.cloudsearch.cf sshd[15130]: Invalid user sunil from 142.93.48.155 port 57490 2020-06-16T12:25:38.823563abusebot-5.cloudsearch.cf sshd[15130]: Failed passw ... |
2020-06-17 01:26:45 |
| 142.93.48.155 | attackspam | Jun 10 10:59:35 game-panel sshd[17497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.155 Jun 10 10:59:37 game-panel sshd[17497]: Failed password for invalid user wei from 142.93.48.155 port 49882 ssh2 Jun 10 11:02:52 game-panel sshd[17638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.155 |
2020-06-10 19:24:40 |
| 142.93.48.155 | attackspambots | 2020-06-05T05:03:25.385185shield sshd\[15299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.155 user=root 2020-06-05T05:03:27.495544shield sshd\[15299\]: Failed password for root from 142.93.48.155 port 59510 ssh2 2020-06-05T05:06:49.229893shield sshd\[17291\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.155 user=root 2020-06-05T05:06:51.343897shield sshd\[17291\]: Failed password for root from 142.93.48.155 port 34986 ssh2 2020-06-05T05:10:13.555304shield sshd\[18612\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.155 user=root |
2020-06-05 14:30:07 |
| 142.93.48.155 | attack | Jun 4 08:25:14 sip sshd[534135]: Failed password for root from 142.93.48.155 port 49300 ssh2 Jun 4 08:28:30 sip sshd[534191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.155 user=root Jun 4 08:28:33 sip sshd[534191]: Failed password for root from 142.93.48.155 port 53670 ssh2 ... |
2020-06-04 14:39:29 |
| 142.93.48.155 | attack | May 25 14:47:09 sshgateway sshd\[16075\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.155 user=root May 25 14:47:10 sshgateway sshd\[16075\]: Failed password for root from 142.93.48.155 port 43496 ssh2 May 25 14:50:10 sshgateway sshd\[16112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.155 user=root |
2020-05-26 00:09:32 |
| 142.93.48.216 | attack | Automatic report - XMLRPC Attack |
2020-04-27 05:58:59 |
| 142.93.48.216 | attack | Automatic report - XMLRPC Attack |
2020-03-30 06:29:42 |
| 142.93.48.39 | attack | ZTE Router Exploit Scanner |
2020-03-25 13:00:39 |
| 142.93.48.216 | attackspam | CMS (WordPress or Joomla) login attempt. |
2020-03-22 12:00:28 |
| 142.93.48.106 | attackspam | (mod_security) mod_security (id:230011) triggered by 142.93.48.106 (US/United States/dev1.gaslamp.media): 5 in the last 3600 secs |
2020-03-18 08:19:52 |
| 142.93.48.216 | attackspambots | WordPress login Brute force / Web App Attack on client site. |
2020-02-08 09:59:21 |
| 142.93.48.216 | attackbots | xmlrpc attack |
2020-01-24 06:00:00 |
| 142.93.48.216 | attackbots | Automatic report - XMLRPC Attack |
2020-01-02 08:52:40 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.48.191
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24962
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.48.191. IN A
;; AUTHORITY SECTION:
. 521 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020082500 1800 900 604800 86400
;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Aug 25 23:06:11 CST 2020
;; MSG SIZE rcvd: 117191.48.93.142.in-addr.arpa domain name pointer ubuntu-yoursite.app.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
191.48.93.142.in-addr.arpa name = ubuntu-yoursite.app.
Authoritative answers can be found from: