City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.93.52.174 | attackspam | 142.93.52.174 - - [21/Sep/2020:20:43:25 +0200] "POST /xmlrpc.php HTTP/1.1" 403 613 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.52.174 - - [21/Sep/2020:20:55:53 +0200] "POST /xmlrpc.php HTTP/1.1" 403 613 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-22 03:16:06 |
| 142.93.52.174 | attack | 142.93.52.174 - - [21/Sep/2020:12:12:36 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.52.174 - - [21/Sep/2020:12:12:37 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.52.174 - - [21/Sep/2020:12:12:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-09-21 19:01:02 |
| 142.93.52.3 | attackbots | 142.93.52.3 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 16 07:43:32 server2 sshd[30326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.132.211 user=root Sep 16 07:43:34 server2 sshd[30326]: Failed password for root from 119.28.132.211 port 57056 ssh2 Sep 16 07:43:52 server2 sshd[30379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.217.161 user=root Sep 16 07:43:24 server2 sshd[30269]: Failed password for root from 142.93.52.3 port 60144 ssh2 Sep 16 07:43:19 server2 sshd[30128]: Failed password for root from 119.250.158.217 port 62043 ssh2 Sep 16 07:43:22 server2 sshd[30269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3 user=root IP Addresses Blocked: 119.28.132.211 (HK/Hong Kong/-) 134.175.217.161 (CN/China/-) |
2020-09-16 23:30:14 |
| 142.93.52.3 | attack | Banned for a week because repeated abuses, for example SSH, but not only |
2020-09-16 15:47:17 |
| 142.93.52.3 | attack | detected by Fail2Ban |
2020-09-16 07:47:29 |
| 142.93.52.3 | attack | Sep 8 13:52:28 markkoudstaal sshd[19974]: Failed password for root from 142.93.52.3 port 39644 ssh2 Sep 8 13:56:14 markkoudstaal sshd[21048]: Failed password for root from 142.93.52.3 port 45878 ssh2 Sep 8 13:59:58 markkoudstaal sshd[22064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3 ... |
2020-09-08 20:22:38 |
| 142.93.52.3 | attack | 2020-09-08T05:00:26.289010billing sshd[19563]: Failed password for root from 142.93.52.3 port 35248 ssh2 2020-09-08T05:03:36.432267billing sshd[25813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3 user=root 2020-09-08T05:03:38.974327billing sshd[25813]: Failed password for root from 142.93.52.3 port 39546 ssh2 ... |
2020-09-08 12:17:30 |
| 142.93.52.3 | attack | Triggered by Fail2Ban at Ares web server |
2020-09-08 04:54:31 |
| 142.93.52.3 | attackbots | Aug 30 02:12:22 web9 sshd\[21063\]: Invalid user tamaki from 142.93.52.3 Aug 30 02:12:22 web9 sshd\[21063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3 Aug 30 02:12:24 web9 sshd\[21063\]: Failed password for invalid user tamaki from 142.93.52.3 port 41090 ssh2 Aug 30 02:16:22 web9 sshd\[21548\]: Invalid user admin from 142.93.52.3 Aug 30 02:16:22 web9 sshd\[21548\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3 |
2020-08-30 20:27:55 |
| 142.93.52.3 | attackbotsspam | Aug 17 14:05:26 [host] sshd[5813]: Invalid user to Aug 17 14:05:26 [host] sshd[5813]: pam_unix(sshd:a Aug 17 14:05:28 [host] sshd[5813]: Failed password |
2020-08-17 21:49:53 |
| 142.93.52.174 | attackspam | Attempt to hack Wordpress Login, XMLRPC or other login |
2020-08-17 06:43:23 |
| 142.93.52.3 | attack | k+ssh-bruteforce |
2020-08-07 08:35:44 |
| 142.93.52.3 | attackbotsspam | Aug 6 02:09:31 firewall sshd[10490]: Failed password for root from 142.93.52.3 port 51364 ssh2 Aug 6 02:13:18 firewall sshd[10609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3 user=root Aug 6 02:13:20 firewall sshd[10609]: Failed password for root from 142.93.52.3 port 34064 ssh2 ... |
2020-08-06 13:22:04 |
| 142.93.52.3 | attack | Aug 4 13:57:57 piServer sshd[7616]: Failed password for root from 142.93.52.3 port 39134 ssh2 Aug 4 14:00:41 piServer sshd[7924]: Failed password for root from 142.93.52.3 port 57462 ssh2 ... |
2020-08-04 21:30:59 |
| 142.93.52.3 | attack | Jul 31 16:50:10 *hidden* sshd[7811]: Failed password for *hidden* from 142.93.52.3 port 33184 ssh2 Jul 31 16:54:07 *hidden* sshd[17514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3 user=root Jul 31 16:54:09 *hidden* sshd[17514]: Failed password for *hidden* from 142.93.52.3 port 45844 ssh2 Jul 31 16:58:05 *hidden* sshd[27196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3 user=root Jul 31 16:58:07 *hidden* sshd[27196]: Failed password for *hidden* from 142.93.52.3 port 58508 ssh2 |
2020-08-01 03:33:18 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.52.178
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42897
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.52.178. IN A
;; AUTHORITY SECTION:
. 270 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019101001 1800 900 604800 86400
;; Query time: 100 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 11 17:51:43 CST 2019
;; MSG SIZE rcvd: 117Host 178.52.93.142.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 178.52.93.142.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 182.117.96.18 | attackspam | Seq 2995002506 |
2019-12-07 03:18:27 |
| 113.224.0.5 | attackbots | Seq 2995002506 |
2019-12-07 03:28:26 |
| 117.50.16.177 | attack | Failed password for root from 117.50.16.177 port 51486 ssh2 |
2019-12-07 03:12:38 |
| 124.134.43.47 | attackbots | Seq 2995002506 |
2019-12-07 03:24:48 |
| 114.33.143.68 | attackspambots | Seq 2995002506 |
2019-12-07 03:45:58 |
| 124.236.22.54 | attackbotsspam | Dec 6 20:03:54 sso sshd[9155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.236.22.54 Dec 6 20:03:57 sso sshd[9155]: Failed password for invalid user candi from 124.236.22.54 port 56680 ssh2 ... |
2019-12-07 03:11:06 |
| 175.175.21.77 | attack | Seq 2995002506 |
2019-12-07 03:44:34 |
| 13.68.175.90 | attackspam | SSH bruteforce |
2019-12-07 03:13:52 |
| 218.253.240.189 | attackbotsspam | Seq 2995002506 |
2019-12-07 03:43:52 |
| 223.252.72.189 | attackbotsspam | Seq 2995002506 |
2019-12-07 03:15:00 |
| 119.108.62.196 | attack | Seq 2995002506 |
2019-12-07 03:26:39 |
| 106.13.181.147 | attack | Dec 6 19:47:09 ns3042688 sshd\[9347\]: Invalid user gwenette from 106.13.181.147 Dec 6 19:47:09 ns3042688 sshd\[9347\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.181.147 Dec 6 19:47:11 ns3042688 sshd\[9347\]: Failed password for invalid user gwenette from 106.13.181.147 port 33136 ssh2 Dec 6 19:56:44 ns3042688 sshd\[12659\]: Invalid user operator from 106.13.181.147 Dec 6 19:56:44 ns3042688 sshd\[12659\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.181.147 ... |
2019-12-07 03:06:43 |
| 89.187.235.241 | attackbotsspam | Seq 2995002506 |
2019-12-07 03:33:58 |
| 177.158.103.96 | attackspambots | Seq 2995002506 |
2019-12-07 03:19:50 |
| 118.103.212.3 | attack | " " |
2019-12-07 03:26:56 |