City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.93.48.191 | attack | 11109/tcp 4545/tcp 12805/tcp... [2020-08-30/09-25]50pkt,17pt.(tcp) |
2020-09-26 02:54:00 |
| 142.93.48.191 | attackspam | TCP ports : 4545 / 11109 |
2020-09-25 18:39:21 |
| 142.93.48.191 | attackspambots | 2020-09-15T15:12:08.262284sorsha.thespaminator.com sshd[16347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.191 user=root 2020-09-15T15:12:10.495909sorsha.thespaminator.com sshd[16347]: Failed password for root from 142.93.48.191 port 56048 ssh2 ... |
2020-09-16 03:26:42 |
| 142.93.48.191 | attack | 17418/tcp 17103/tcp 18405/tcp... [2020-08-30/09-15]31pkt,11pt.(tcp) |
2020-09-15 19:30:33 |
| 142.93.48.191 | attack | SSH Scan |
2020-08-31 16:34:29 |
| 142.93.48.191 | attackspambots | Attempted connection to port 18720. |
2020-08-31 07:25:08 |
| 142.93.48.191 | attack | Aug 30 14:31:11 buvik sshd[1558]: Failed password for root from 142.93.48.191 port 43900 ssh2 Aug 30 14:34:52 buvik sshd[2031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.191 user=root Aug 30 14:34:54 buvik sshd[2031]: Failed password for root from 142.93.48.191 port 45650 ssh2 ... |
2020-08-30 21:03:12 |
| 142.93.48.191 | attackbotsspam | "$f2bV_matches" |
2020-08-28 04:24:22 |
| 142.93.48.191 | attackbots | Aug 25 16:56:16 OPSO sshd\[7232\]: Invalid user ftpu from 142.93.48.191 port 39276 Aug 25 16:56:16 OPSO sshd\[7232\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.191 Aug 25 16:56:18 OPSO sshd\[7232\]: Failed password for invalid user ftpu from 142.93.48.191 port 39276 ssh2 Aug 25 17:00:30 OPSO sshd\[8411\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.191 user=root Aug 25 17:00:32 OPSO sshd\[8411\]: Failed password for root from 142.93.48.191 port 46392 ssh2 |
2020-08-25 23:06:20 |
| 142.93.48.155 | attackbotsspam | Jul 4 14:10:59 prox sshd[6702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.155 Jul 4 14:11:00 prox sshd[6702]: Failed password for invalid user king from 142.93.48.155 port 40008 ssh2 |
2020-07-05 00:10:52 |
| 142.93.48.155 | attack | 2020-06-16T12:20:32.770817abusebot-5.cloudsearch.cf sshd[15081]: Invalid user vid from 142.93.48.155 port 35614 2020-06-16T12:20:32.775990abusebot-5.cloudsearch.cf sshd[15081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.155 2020-06-16T12:20:32.770817abusebot-5.cloudsearch.cf sshd[15081]: Invalid user vid from 142.93.48.155 port 35614 2020-06-16T12:20:34.762014abusebot-5.cloudsearch.cf sshd[15081]: Failed password for invalid user vid from 142.93.48.155 port 35614 ssh2 2020-06-16T12:25:36.762081abusebot-5.cloudsearch.cf sshd[15130]: Invalid user sunil from 142.93.48.155 port 57490 2020-06-16T12:25:36.767796abusebot-5.cloudsearch.cf sshd[15130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.155 2020-06-16T12:25:36.762081abusebot-5.cloudsearch.cf sshd[15130]: Invalid user sunil from 142.93.48.155 port 57490 2020-06-16T12:25:38.823563abusebot-5.cloudsearch.cf sshd[15130]: Failed passw ... |
2020-06-17 01:26:45 |
| 142.93.48.155 | attackspam | Jun 10 10:59:35 game-panel sshd[17497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.155 Jun 10 10:59:37 game-panel sshd[17497]: Failed password for invalid user wei from 142.93.48.155 port 49882 ssh2 Jun 10 11:02:52 game-panel sshd[17638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.155 |
2020-06-10 19:24:40 |
| 142.93.48.155 | attackspambots | 2020-06-05T05:03:25.385185shield sshd\[15299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.155 user=root 2020-06-05T05:03:27.495544shield sshd\[15299\]: Failed password for root from 142.93.48.155 port 59510 ssh2 2020-06-05T05:06:49.229893shield sshd\[17291\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.155 user=root 2020-06-05T05:06:51.343897shield sshd\[17291\]: Failed password for root from 142.93.48.155 port 34986 ssh2 2020-06-05T05:10:13.555304shield sshd\[18612\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.155 user=root |
2020-06-05 14:30:07 |
| 142.93.48.155 | attack | Jun 4 08:25:14 sip sshd[534135]: Failed password for root from 142.93.48.155 port 49300 ssh2 Jun 4 08:28:30 sip sshd[534191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.155 user=root Jun 4 08:28:33 sip sshd[534191]: Failed password for root from 142.93.48.155 port 53670 ssh2 ... |
2020-06-04 14:39:29 |
| 142.93.48.155 | attack | May 25 14:47:09 sshgateway sshd\[16075\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.155 user=root May 25 14:47:10 sshgateway sshd\[16075\]: Failed password for root from 142.93.48.155 port 43496 ssh2 May 25 14:50:10 sshgateway sshd\[16112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.48.155 user=root |
2020-05-26 00:09:32 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.48.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49347
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;142.93.48.245. IN A
;; AUTHORITY SECTION:
. 489 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400
;; Query time: 45 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 12:24:13 CST 2022
;; MSG SIZE rcvd: 106Host 245.48.93.142.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 245.48.93.142.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 233.26.100.208 | attack | 2020-07-20 14:35:36 | |
| 138.197.180.29 | attack | Jul 20 06:56:29 h2779839 sshd[13765]: Invalid user ek from 138.197.180.29 port 54316 Jul 20 06:56:29 h2779839 sshd[13765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.180.29 Jul 20 06:56:29 h2779839 sshd[13765]: Invalid user ek from 138.197.180.29 port 54316 Jul 20 06:56:31 h2779839 sshd[13765]: Failed password for invalid user ek from 138.197.180.29 port 54316 ssh2 Jul 20 07:01:07 h2779839 sshd[13835]: Invalid user csw from 138.197.180.29 port 41614 Jul 20 07:01:07 h2779839 sshd[13835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.180.29 Jul 20 07:01:07 h2779839 sshd[13835]: Invalid user csw from 138.197.180.29 port 41614 Jul 20 07:01:09 h2779839 sshd[13835]: Failed password for invalid user csw from 138.197.180.29 port 41614 ssh2 Jul 20 07:05:30 h2779839 sshd[13930]: Invalid user git from 138.197.180.29 port 57122 ... |
2020-07-20 14:34:04 |
| 175.215.65.133 | attackspambots | 1595217295 - 07/20/2020 10:54:55 Host: 175.215.65.133/175.215.65.133 Port: 23 TCP Blocked ... |
2020-07-20 14:40:42 |
| 128.199.240.120 | attackspambots | Jul 20 05:51:48 *hidden* sshd[19895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.240.120 Jul 20 05:51:51 *hidden* sshd[19895]: Failed password for invalid user rrp from 128.199.240.120 port 43396 ssh2 Jul 20 06:05:53 *hidden* sshd[22686]: Invalid user dorian from 128.199.240.120 port 60742 |
2020-07-20 14:24:40 |
| 190.147.33.171 | attackbots | $f2bV_matches |
2020-07-20 14:38:56 |
| 222.186.30.57 | attackspam | Jul 20 11:40:21 gw1 sshd[21191]: Failed password for root from 222.186.30.57 port 35372 ssh2 Jul 20 11:40:23 gw1 sshd[21191]: Failed password for root from 222.186.30.57 port 35372 ssh2 ... |
2020-07-20 14:42:58 |
| 177.93.191.216 | attackbotsspam | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-07-20 14:28:47 |
| 54.36.109.74 | attack | *Port Scan* detected from 54.36.109.74 (DE/Germany/Saarland/Saarbrücken (Mitte)/ns3102391.ip-54-36-109.eu). 4 hits in the last 140 seconds |
2020-07-20 14:21:46 |
| 185.189.14.84 | attackspambots | Jul 20 00:47:35 ws12vmsma01 sshd[27654]: Invalid user courtney from 185.189.14.84 Jul 20 00:47:38 ws12vmsma01 sshd[27654]: Failed password for invalid user courtney from 185.189.14.84 port 37266 ssh2 Jul 20 00:53:47 ws12vmsma01 sshd[28643]: Invalid user ftpuser from 185.189.14.84 ... |
2020-07-20 14:28:15 |
| 143.202.209.37 | attack | 2020-07-20T03:55:05.586638randservbullet-proofcloud-66.localdomain sshd[9286]: Invalid user brs from 143.202.209.37 port 58535 2020-07-20T03:55:05.591568randservbullet-proofcloud-66.localdomain sshd[9286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.202.209.37 2020-07-20T03:55:05.586638randservbullet-proofcloud-66.localdomain sshd[9286]: Invalid user brs from 143.202.209.37 port 58535 2020-07-20T03:55:07.527008randservbullet-proofcloud-66.localdomain sshd[9286]: Failed password for invalid user brs from 143.202.209.37 port 58535 ssh2 ... |
2020-07-20 14:27:54 |
| 169.255.148.18 | attack | SSH invalid-user multiple login try |
2020-07-20 14:30:21 |
| 109.236.50.201 | attackspam | 2020-07-20 14:39:49 | |
| 185.53.88.221 | attackspambots | [2020-07-20 01:45:39] NOTICE[1277][C-00001526] chan_sip.c: Call from '' (185.53.88.221:5070) to extension '972595897084' rejected because extension not found in context 'public'. [2020-07-20 01:45:39] SECURITY[1295] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-20T01:45:39.400-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="972595897084",SessionID="0x7f1754188e58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.221/5070",ACLName="no_extension_match" [2020-07-20 01:53:05] NOTICE[1277][C-0000152b] chan_sip.c: Call from '' (185.53.88.221:5071) to extension '011972595897084' rejected because extension not found in context 'public'. [2020-07-20 01:53:05] SECURITY[1295] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-20T01:53:05.128-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011972595897084",SessionID="0x7f175441b988",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88 ... |
2020-07-20 14:23:23 |
| 61.177.172.102 | attackbotsspam | Jul 20 08:13:16 abendstille sshd\[14805\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.102 user=root Jul 20 08:13:18 abendstille sshd\[14805\]: Failed password for root from 61.177.172.102 port 20920 ssh2 Jul 20 08:13:21 abendstille sshd\[14805\]: Failed password for root from 61.177.172.102 port 20920 ssh2 Jul 20 08:13:23 abendstille sshd\[14805\]: Failed password for root from 61.177.172.102 port 20920 ssh2 Jul 20 08:13:25 abendstille sshd\[15102\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.102 user=root ... |
2020-07-20 14:18:30 |
| 41.218.119.140 | attack | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-07-20 14:48:00 |