City: unknown
Region: unknown
Country: United States of America
Internet Service Provider: DigitalOcean LLC
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspambots | Malicious/Probing: //.env |
2020-08-01 04:51:32 |
| attackbotsspam | GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 |
2020-07-27 21:19:47 |
| attackbotsspam | Forbidden directory scan :: 2020/07/26 13:50:01 [error] 3005#3005: *97002 access forbidden by rule, client: 142.93.58.2, server: [censored_1], request: "GET /.env HTTP/1.1", host: "www.[censored_1]" 2020/07/26 13:50:01 [error] 3005#3005: *97003 access forbidden by rule, client: 142.93.58.2, server: [censored_1], request: "GET /.env HTTP/1.1", host: "www.[censored_1]" |
2020-07-26 22:19:35 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.93.58.151 | attack | probes 12 times on the port 52869 |
2020-07-06 23:16:43 |
| 142.93.58.213 | attack | SSHAttack |
2019-10-27 04:58:55 |
| 142.93.58.123 | attackspambots | Sep 6 00:25:48 vps647732 sshd[23690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.58.123 Sep 6 00:25:50 vps647732 sshd[23690]: Failed password for invalid user 123456789 from 142.93.58.123 port 50090 ssh2 ... |
2019-09-06 06:26:37 |
| 142.93.58.123 | attackspam | Sep 4 03:55:10 web8 sshd\[19720\]: Invalid user vdr from 142.93.58.123 Sep 4 03:55:10 web8 sshd\[19720\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.58.123 Sep 4 03:55:12 web8 sshd\[19720\]: Failed password for invalid user vdr from 142.93.58.123 port 51682 ssh2 Sep 4 03:58:52 web8 sshd\[21408\]: Invalid user apache from 142.93.58.123 Sep 4 03:58:52 web8 sshd\[21408\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.58.123 |
2019-09-04 12:14:26 |
| 142.93.58.123 | attack | Sep 1 15:37:28 TORMINT sshd\[28373\]: Invalid user ezequiel123 from 142.93.58.123 Sep 1 15:37:28 TORMINT sshd\[28373\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.58.123 Sep 1 15:37:31 TORMINT sshd\[28373\]: Failed password for invalid user ezequiel123 from 142.93.58.123 port 38724 ssh2 ... |
2019-09-02 03:52:42 |
| 142.93.58.123 | attackbots | Sep 1 02:52:11 ns341937 sshd[3151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.58.123 Sep 1 02:52:13 ns341937 sshd[3151]: Failed password for invalid user tommie from 142.93.58.123 port 52846 ssh2 Sep 1 03:03:08 ns341937 sshd[5185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.58.123 ... |
2019-09-01 10:41:46 |
| 142.93.58.123 | attackspam | SSH Bruteforce attack |
2019-08-20 13:15:31 |
| 142.93.58.123 | attackspam | Fail2Ban Ban Triggered |
2019-08-11 02:34:38 |
| 142.93.58.123 | attackspam | Aug 9 10:56:15 srv-4 sshd\[1982\]: Invalid user matthias from 142.93.58.123 Aug 9 10:56:15 srv-4 sshd\[1982\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.58.123 Aug 9 10:56:17 srv-4 sshd\[1982\]: Failed password for invalid user matthias from 142.93.58.123 port 35420 ssh2 ... |
2019-08-10 01:06:10 |
| 142.93.58.123 | attackspam | Aug 2 17:21:01 xtremcommunity sshd\[20347\]: Invalid user teamspeak from 142.93.58.123 port 58700 Aug 2 17:21:01 xtremcommunity sshd\[20347\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.58.123 Aug 2 17:21:03 xtremcommunity sshd\[20347\]: Failed password for invalid user teamspeak from 142.93.58.123 port 58700 ssh2 Aug 2 17:24:59 xtremcommunity sshd\[20524\]: Invalid user dana from 142.93.58.123 port 52552 Aug 2 17:24:59 xtremcommunity sshd\[20524\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.58.123 ... |
2019-08-03 05:36:45 |
| 142.93.58.123 | attackspambots | 2019-08-01T05:26:33.780172abusebot-8.cloudsearch.cf sshd\[16483\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.58.123 user=root |
2019-08-01 17:24:56 |
| 142.93.58.123 | attack | Automatic report - Banned IP Access |
2019-07-28 17:59:34 |
| 142.93.58.123 | attackbotsspam | Jul 18 08:33:59 icinga sshd[9522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.58.123 Jul 18 08:34:01 icinga sshd[9522]: Failed password for invalid user teamspeak3 from 142.93.58.123 port 44746 ssh2 ... |
2019-07-18 15:12:21 |
| 142.93.58.123 | attackspambots | Jul 14 22:17:57 MK-Soft-VM3 sshd\[9279\]: Invalid user wilson from 142.93.58.123 port 42190 Jul 14 22:17:57 MK-Soft-VM3 sshd\[9279\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.58.123 Jul 14 22:17:59 MK-Soft-VM3 sshd\[9279\]: Failed password for invalid user wilson from 142.93.58.123 port 42190 ssh2 ... |
2019-07-15 07:07:12 |
| 142.93.58.123 | attackbotsspam | Jul 6 11:51:20 server sshd\[2190\]: Invalid user frontdesk from 142.93.58.123 Jul 6 11:51:20 server sshd\[2190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.58.123 Jul 6 11:51:22 server sshd\[2190\]: Failed password for invalid user frontdesk from 142.93.58.123 port 33636 ssh2 ... |
2019-07-12 04:38:27 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.58.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48318
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.58.2. IN A
;; AUTHORITY SECTION:
. 526 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020072600 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jul 26 22:20:05 CST 2020
;; MSG SIZE rcvd: 115
Host 2.58.93.142.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 2.58.93.142.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 79.77.190.109 | attack | Netgear DGN Device Remote Command Execution Vulnerability |
2019-09-26 18:00:53 |
| 178.140.223.140 | attackbotsspam | SSH Bruteforce attack |
2019-09-26 18:20:34 |
| 218.72.76.143 | attack | Sep 24 12:01:41 xb3 sshd[4051]: reveeclipse mapping checking getaddrinfo for 143.76.72.218.broad.hz.zj.dynamic.163data.com.cn [218.72.76.143] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 24 12:01:43 xb3 sshd[4051]: Failed password for invalid user qazwsxedc from 218.72.76.143 port 50078 ssh2 Sep 24 12:01:44 xb3 sshd[4051]: Received disconnect from 218.72.76.143: 11: Bye Bye [preauth] Sep 24 12:05:26 xb3 sshd[817]: reveeclipse mapping checking getaddrinfo for 143.76.72.218.broad.hz.zj.dynamic.163data.com.cn [218.72.76.143] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 24 12:05:28 xb3 sshd[817]: Failed password for invalid user p4$$w0rd from 218.72.76.143 port 55356 ssh2 Sep 24 12:05:28 xb3 sshd[817]: Received disconnect from 218.72.76.143: 11: Bye Bye [preauth] Sep 24 12:08:56 xb3 sshd[11925]: reveeclipse mapping checking getaddrinfo for 143.76.72.218.broad.hz.zj.dynamic.163data.com.cn [218.72.76.143] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 24 12:08:57 xb3 sshd[11925]: Failed passw........ ------------------------------- |
2019-09-26 18:06:50 |
| 217.182.252.161 | attackspambots | Sep 26 07:00:06 www2 sshd\[21979\]: Invalid user neng from 217.182.252.161Sep 26 07:00:07 www2 sshd\[21979\]: Failed password for invalid user neng from 217.182.252.161 port 41422 ssh2Sep 26 07:03:57 www2 sshd\[22277\]: Failed password for root from 217.182.252.161 port 55786 ssh2 ... |
2019-09-26 18:07:08 |
| 5.188.210.47 | attackspambots | ft-1848-basketball.de 5.188.210.47 \[26/Sep/2019:05:45:20 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 578 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/74.0.3729.169 Safari/537.36" ft-1848-basketball.de 5.188.210.47 \[26/Sep/2019:05:45:20 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 578 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/74.0.3729.169 Safari/537.36" |
2019-09-26 17:54:24 |
| 129.211.141.207 | attackspambots | 2019-09-26T10:08:45.836955abusebot-5.cloudsearch.cf sshd\[12464\]: Invalid user gerrit2 from 129.211.141.207 port 60778 |
2019-09-26 18:27:44 |
| 95.167.123.54 | attackspam | postfix (unknown user, SPF fail or relay access denied) |
2019-09-26 17:56:07 |
| 218.93.22.135 | attackspam | 376 packets to port 22 |
2019-09-26 17:59:16 |
| 5.196.67.41 | attackbotsspam | Sep 25 21:39:38 lcprod sshd\[6810\]: Invalid user ding from 5.196.67.41 Sep 25 21:39:38 lcprod sshd\[6810\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns378499.ip-5-196-67.eu Sep 25 21:39:41 lcprod sshd\[6810\]: Failed password for invalid user ding from 5.196.67.41 port 58998 ssh2 Sep 25 21:44:14 lcprod sshd\[7168\]: Invalid user dev from 5.196.67.41 Sep 25 21:44:14 lcprod sshd\[7168\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns378499.ip-5-196-67.eu |
2019-09-26 17:48:06 |
| 27.106.5.186 | attackbotsspam | Automatic report - Port Scan Attack |
2019-09-26 18:16:13 |
| 49.235.242.253 | attackbots | Sep 26 11:39:38 meumeu sshd[3545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.242.253 Sep 26 11:39:40 meumeu sshd[3545]: Failed password for invalid user tcl from 49.235.242.253 port 59866 ssh2 Sep 26 11:44:51 meumeu sshd[4234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.242.253 ... |
2019-09-26 17:58:29 |
| 121.101.133.204 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 26-09-2019 04:45:24. |
2019-09-26 17:50:28 |
| 117.2.165.32 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 26-09-2019 04:45:22. |
2019-09-26 17:51:57 |
| 123.207.88.97 | attack | Sep 25 23:48:33 web1 sshd\[32306\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.88.97 user=mysql Sep 25 23:48:35 web1 sshd\[32306\]: Failed password for mysql from 123.207.88.97 port 38642 ssh2 Sep 25 23:53:01 web1 sshd\[32704\]: Invalid user cloud from 123.207.88.97 Sep 25 23:53:01 web1 sshd\[32704\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.88.97 Sep 25 23:53:03 web1 sshd\[32704\]: Failed password for invalid user cloud from 123.207.88.97 port 50698 ssh2 |
2019-09-26 17:56:38 |
| 113.186.45.202 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 26-09-2019 04:45:21. |
2019-09-26 17:53:51 |