City: unknown
Region: unknown
Country: United States of America
Internet Service Provider: DigitalOcean LLC
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspam | 142.93.52.174 - - [21/Sep/2020:20:43:25 +0200] "POST /xmlrpc.php HTTP/1.1" 403 613 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.52.174 - - [21/Sep/2020:20:55:53 +0200] "POST /xmlrpc.php HTTP/1.1" 403 613 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-22 03:16:06 |
| attack | 142.93.52.174 - - [21/Sep/2020:12:12:36 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.52.174 - - [21/Sep/2020:12:12:37 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.52.174 - - [21/Sep/2020:12:12:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-09-21 19:01:02 |
| attackspam | Attempt to hack Wordpress Login, XMLRPC or other login |
2020-08-17 06:43:23 |
| attackspambots | 142.93.52.174 - - [11/Jul/2020:06:15:19 +0200] "GET /wp-login.php HTTP/1.1" 200 1901 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.52.174 - - [11/Jul/2020:06:15:26 +0200] "POST /wp-login.php HTTP/1.1" 200 2031 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.52.174 - - [11/Jul/2020:06:15:26 +0200] "GET /wp-login.php HTTP/1.1" 200 1901 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.52.174 - - [11/Jul/2020:06:15:27 +0200] "POST /wp-login.php HTTP/1.1" 200 2030 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.52.174 - - [11/Jul/2020:06:15:27 +0200] "GET /wp-login.php HTTP/1.1" 200 1901 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.52.174 - - [11/Jul/2020:06:15:27 +0200] "POST /wp-login.php HTTP/1.1" 200 2030 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Fir ... |
2020-07-11 13:36:24 |
| attack | 142.93.52.174 - - \[28/May/2020:15:40:10 +0200\] "POST /wp-login.php HTTP/1.0" 200 6728 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 142.93.52.174 - - \[28/May/2020:15:40:12 +0200\] "POST /wp-login.php HTTP/1.0" 200 6558 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 142.93.52.174 - - \[28/May/2020:15:40:23 +0200\] "POST /wp-login.php HTTP/1.0" 200 6552 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2020-05-29 00:20:51 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.93.52.3 | attackbots | 142.93.52.3 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 16 07:43:32 server2 sshd[30326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.132.211 user=root Sep 16 07:43:34 server2 sshd[30326]: Failed password for root from 119.28.132.211 port 57056 ssh2 Sep 16 07:43:52 server2 sshd[30379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.217.161 user=root Sep 16 07:43:24 server2 sshd[30269]: Failed password for root from 142.93.52.3 port 60144 ssh2 Sep 16 07:43:19 server2 sshd[30128]: Failed password for root from 119.250.158.217 port 62043 ssh2 Sep 16 07:43:22 server2 sshd[30269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3 user=root IP Addresses Blocked: 119.28.132.211 (HK/Hong Kong/-) 134.175.217.161 (CN/China/-) |
2020-09-16 23:30:14 |
| 142.93.52.3 | attack | Banned for a week because repeated abuses, for example SSH, but not only |
2020-09-16 15:47:17 |
| 142.93.52.3 | attack | detected by Fail2Ban |
2020-09-16 07:47:29 |
| 142.93.52.3 | attack | Sep 8 13:52:28 markkoudstaal sshd[19974]: Failed password for root from 142.93.52.3 port 39644 ssh2 Sep 8 13:56:14 markkoudstaal sshd[21048]: Failed password for root from 142.93.52.3 port 45878 ssh2 Sep 8 13:59:58 markkoudstaal sshd[22064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3 ... |
2020-09-08 20:22:38 |
| 142.93.52.3 | attack | 2020-09-08T05:00:26.289010billing sshd[19563]: Failed password for root from 142.93.52.3 port 35248 ssh2 2020-09-08T05:03:36.432267billing sshd[25813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3 user=root 2020-09-08T05:03:38.974327billing sshd[25813]: Failed password for root from 142.93.52.3 port 39546 ssh2 ... |
2020-09-08 12:17:30 |
| 142.93.52.3 | attack | Triggered by Fail2Ban at Ares web server |
2020-09-08 04:54:31 |
| 142.93.52.3 | attackbots | Aug 30 02:12:22 web9 sshd\[21063\]: Invalid user tamaki from 142.93.52.3 Aug 30 02:12:22 web9 sshd\[21063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3 Aug 30 02:12:24 web9 sshd\[21063\]: Failed password for invalid user tamaki from 142.93.52.3 port 41090 ssh2 Aug 30 02:16:22 web9 sshd\[21548\]: Invalid user admin from 142.93.52.3 Aug 30 02:16:22 web9 sshd\[21548\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3 |
2020-08-30 20:27:55 |
| 142.93.52.3 | attackbotsspam | Aug 17 14:05:26 [host] sshd[5813]: Invalid user to Aug 17 14:05:26 [host] sshd[5813]: pam_unix(sshd:a Aug 17 14:05:28 [host] sshd[5813]: Failed password |
2020-08-17 21:49:53 |
| 142.93.52.3 | attack | k+ssh-bruteforce |
2020-08-07 08:35:44 |
| 142.93.52.3 | attackbotsspam | Aug 6 02:09:31 firewall sshd[10490]: Failed password for root from 142.93.52.3 port 51364 ssh2 Aug 6 02:13:18 firewall sshd[10609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3 user=root Aug 6 02:13:20 firewall sshd[10609]: Failed password for root from 142.93.52.3 port 34064 ssh2 ... |
2020-08-06 13:22:04 |
| 142.93.52.3 | attack | Aug 4 13:57:57 piServer sshd[7616]: Failed password for root from 142.93.52.3 port 39134 ssh2 Aug 4 14:00:41 piServer sshd[7924]: Failed password for root from 142.93.52.3 port 57462 ssh2 ... |
2020-08-04 21:30:59 |
| 142.93.52.3 | attack | Jul 31 16:50:10 *hidden* sshd[7811]: Failed password for *hidden* from 142.93.52.3 port 33184 ssh2 Jul 31 16:54:07 *hidden* sshd[17514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3 user=root Jul 31 16:54:09 *hidden* sshd[17514]: Failed password for *hidden* from 142.93.52.3 port 45844 ssh2 Jul 31 16:58:05 *hidden* sshd[27196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3 user=root Jul 31 16:58:07 *hidden* sshd[27196]: Failed password for *hidden* from 142.93.52.3 port 58508 ssh2 |
2020-08-01 03:33:18 |
| 142.93.52.3 | attack | Jul 25 10:17:08 vps sshd[25858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3 Jul 25 10:17:10 vps sshd[25858]: Failed password for invalid user cristiano from 142.93.52.3 port 56604 ssh2 Jul 25 10:21:28 vps sshd[26138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3 ... |
2020-07-25 18:25:15 |
| 142.93.52.3 | attackbotsspam | Jun 30 17:56:45 h1745522 sshd[22297]: Invalid user bhq from 142.93.52.3 port 51416 Jun 30 17:56:45 h1745522 sshd[22297]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3 Jun 30 17:56:45 h1745522 sshd[22297]: Invalid user bhq from 142.93.52.3 port 51416 Jun 30 17:56:47 h1745522 sshd[22297]: Failed password for invalid user bhq from 142.93.52.3 port 51416 ssh2 Jun 30 18:00:00 h1745522 sshd[22582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3 user=root Jun 30 18:00:02 h1745522 sshd[22582]: Failed password for root from 142.93.52.3 port 50798 ssh2 Jun 30 18:03:15 h1745522 sshd[24059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3 user=root Jun 30 18:03:17 h1745522 sshd[24059]: Failed password for root from 142.93.52.3 port 50176 ssh2 Jun 30 18:06:31 h1745522 sshd[24229]: Invalid user vpnuser from 142.93.52.3 port 49556 ... |
2020-07-01 04:29:01 |
| 142.93.52.3 | attack | Jun 28 17:24:04 ns382633 sshd\[11870\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3 user=root Jun 28 17:24:07 ns382633 sshd\[11870\]: Failed password for root from 142.93.52.3 port 44448 ssh2 Jun 28 17:38:41 ns382633 sshd\[14687\]: Invalid user deploy from 142.93.52.3 port 44512 Jun 28 17:38:41 ns382633 sshd\[14687\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3 Jun 28 17:38:43 ns382633 sshd\[14687\]: Failed password for invalid user deploy from 142.93.52.3 port 44512 ssh2 |
2020-06-29 02:03:53 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.52.174
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34282
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.52.174. IN A
;; AUTHORITY SECTION:
. 583 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020052800 1800 900 604800 86400
;; Query time: 112 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 29 00:20:47 CST 2020
;; MSG SIZE rcvd: 117174.52.93.142.in-addr.arpa domain name pointer 344532.cloudwaysapps.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
174.52.93.142.in-addr.arpa name = 344532.cloudwaysapps.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.55.201.219 | attackbots | Jun 8 07:12:54 home sshd[14678]: Failed password for root from 45.55.201.219 port 53746 ssh2 Jun 8 07:16:15 home sshd[15089]: Failed password for root from 45.55.201.219 port 55880 ssh2 ... |
2020-06-08 13:32:13 |
| 202.184.121.176 | attackspam | 9000/tcp [2020-06-08]1pkt |
2020-06-08 13:19:25 |
| 49.234.18.158 | attackspambots | Jun 8 05:48:18 ourumov-web sshd\[14752\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.18.158 user=root Jun 8 05:48:20 ourumov-web sshd\[14752\]: Failed password for root from 49.234.18.158 port 54350 ssh2 Jun 8 05:53:52 ourumov-web sshd\[15119\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.18.158 user=root ... |
2020-06-08 13:56:07 |
| 125.124.253.203 | attackbotsspam | Jun 8 06:55:25 nextcloud sshd\[11613\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.253.203 user=root Jun 8 06:55:27 nextcloud sshd\[11613\]: Failed password for root from 125.124.253.203 port 50542 ssh2 Jun 8 06:59:10 nextcloud sshd\[15637\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.253.203 user=root |
2020-06-08 13:30:43 |
| 49.88.112.73 | attackspambots | Jun 8 07:25:38 eventyay sshd[23715]: Failed password for root from 49.88.112.73 port 48205 ssh2 Jun 8 07:26:17 eventyay sshd[23745]: Failed password for root from 49.88.112.73 port 32015 ssh2 ... |
2020-06-08 13:42:16 |
| 2001:e68:504c:ce99:12be:f5ff:fe29:8258 | attackspam | hacking account |
2020-06-08 13:37:37 |
| 41.165.19.242 | attackspambots | Port probing on unauthorized port 445 |
2020-06-08 13:46:02 |
| 103.28.52.84 | attack | Jun 8 07:10:06 piServer sshd[12523]: Failed password for root from 103.28.52.84 port 43658 ssh2 Jun 8 07:12:47 piServer sshd[12696]: Failed password for root from 103.28.52.84 port 54526 ssh2 ... |
2020-06-08 13:39:06 |
| 113.142.134.193 | attackspam | 2020-06-08T05:32:57.714978 sshd[19002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.134.193 user=root 2020-06-08T05:32:59.633985 sshd[19002]: Failed password for root from 113.142.134.193 port 55322 ssh2 2020-06-08T05:54:25.372224 sshd[19474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.142.134.193 user=root 2020-06-08T05:54:27.777457 sshd[19474]: Failed password for root from 113.142.134.193 port 51324 ssh2 ... |
2020-06-08 13:26:24 |
| 80.82.68.130 | attackspam | SSH login attempts brute force. |
2020-06-08 13:37:19 |
| 14.243.45.112 | attackspam | Jun 8 05:54:21 prod4 vsftpd\[30754\]: \[anonymous\] FAIL LOGIN: Client "14.243.45.112" Jun 8 05:54:23 prod4 vsftpd\[30759\]: \[fleurissement\] FAIL LOGIN: Client "14.243.45.112" Jun 8 05:54:26 prod4 vsftpd\[30771\]: \[fleurissement\] FAIL LOGIN: Client "14.243.45.112" Jun 8 05:54:29 prod4 vsftpd\[30781\]: \[fleurissement\] FAIL LOGIN: Client "14.243.45.112" Jun 8 05:54:32 prod4 vsftpd\[30789\]: \[fleurissement\] FAIL LOGIN: Client "14.243.45.112" ... |
2020-06-08 13:21:40 |
| 118.174.184.102 | attackspambots | 20/6/7@23:54:12: FAIL: Alarm-Network address from=118.174.184.102 ... |
2020-06-08 13:44:00 |
| 181.48.139.118 | attackbotsspam | 2020-06-08T04:49:34.383760ionos.janbro.de sshd[66093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.48.139.118 user=root 2020-06-08T04:49:36.723957ionos.janbro.de sshd[66093]: Failed password for root from 181.48.139.118 port 56130 ssh2 2020-06-08T04:53:17.666359ionos.janbro.de sshd[66105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.48.139.118 user=root 2020-06-08T04:53:19.289009ionos.janbro.de sshd[66105]: Failed password for root from 181.48.139.118 port 59068 ssh2 2020-06-08T04:56:56.881032ionos.janbro.de sshd[66134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.48.139.118 user=root 2020-06-08T04:56:58.899928ionos.janbro.de sshd[66134]: Failed password for root from 181.48.139.118 port 33878 ssh2 2020-06-08T05:00:39.622344ionos.janbro.de sshd[66165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18 ... |
2020-06-08 13:45:39 |
| 220.88.1.208 | attackspam | Jun 8 07:03:02 piServer sshd[11862]: Failed password for root from 220.88.1.208 port 45863 ssh2 Jun 8 07:06:55 piServer sshd[12170]: Failed password for root from 220.88.1.208 port 47665 ssh2 ... |
2020-06-08 13:19:04 |
| 115.146.127.147 | attackspam | Wordpress login scanning |
2020-06-08 13:33:52 |