City: North Bergen
Region: New Jersey
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.93.62.222 | attack | Bad IP |
2024-04-30 13:05:00 |
| 142.93.68.181 | attack |
|
2020-10-10 06:23:00 |
| 142.93.68.181 | attackspambots | [N10.H2.VM2] Port Scanner Detected Blocked by UFW |
2020-10-09 22:33:25 |
| 142.93.68.181 | attackspam | Port scan denied |
2020-10-09 14:23:39 |
| 142.93.62.231 | attackbots | Oct 7 13:48:33 hosting sshd[12236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.62.231 user=root Oct 7 13:48:35 hosting sshd[12236]: Failed password for root from 142.93.62.231 port 48454 ssh2 ... |
2020-10-08 06:47:50 |
| 142.93.62.231 | attackspam | Oct 7 13:48:33 hosting sshd[12236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.62.231 user=root Oct 7 13:48:35 hosting sshd[12236]: Failed password for root from 142.93.62.231 port 48454 ssh2 ... |
2020-10-07 23:09:21 |
| 142.93.62.231 | attackspam | $f2bV_matches |
2020-10-07 15:15:23 |
| 142.93.66.165 | attackbots | MYH,DEF GET /wp-login.php |
2020-10-03 06:22:50 |
| 142.93.66.165 | attack | 142.93.66.165 - - [02/Oct/2020:07:28:05 +0000] "POST /wp-login.php HTTP/1.1" 200 2077 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 142.93.66.165 - - [02/Oct/2020:07:28:08 +0000] "POST /wp-login.php HTTP/1.1" 200 2055 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 142.93.66.165 - - [02/Oct/2020:07:28:10 +0000] "POST /wp-login.php HTTP/1.1" 200 2052 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 142.93.66.165 - - [02/Oct/2020:07:28:12 +0000] "POST /wp-login.php HTTP/1.1" 200 2052 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 142.93.66.165 - - [02/Oct/2020:07:28:14 +0000] "POST /xmlrpc.php HTTP/1.1" 200 236 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" |
2020-10-03 01:50:22 |
| 142.93.66.165 | attackspam | 142.93.66.165 - - [02/Oct/2020:07:28:05 +0000] "POST /wp-login.php HTTP/1.1" 200 2077 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 142.93.66.165 - - [02/Oct/2020:07:28:08 +0000] "POST /wp-login.php HTTP/1.1" 200 2055 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 142.93.66.165 - - [02/Oct/2020:07:28:10 +0000] "POST /wp-login.php HTTP/1.1" 200 2052 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 142.93.66.165 - - [02/Oct/2020:07:28:12 +0000] "POST /wp-login.php HTTP/1.1" 200 2052 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 142.93.66.165 - - [02/Oct/2020:07:28:14 +0000] "POST /xmlrpc.php HTTP/1.1" 200 236 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" |
2020-10-02 22:18:34 |
| 142.93.66.165 | attack | 142.93.66.165 - - [02/Oct/2020:07:28:05 +0000] "POST /wp-login.php HTTP/1.1" 200 2077 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 142.93.66.165 - - [02/Oct/2020:07:28:08 +0000] "POST /wp-login.php HTTP/1.1" 200 2055 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 142.93.66.165 - - [02/Oct/2020:07:28:10 +0000] "POST /wp-login.php HTTP/1.1" 200 2052 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 142.93.66.165 - - [02/Oct/2020:07:28:12 +0000] "POST /wp-login.php HTTP/1.1" 200 2052 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 142.93.66.165 - - [02/Oct/2020:07:28:14 +0000] "POST /xmlrpc.php HTTP/1.1" 200 236 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" |
2020-10-02 18:51:05 |
| 142.93.66.165 | attackbots | CMS (WordPress or Joomla) login attempt. |
2020-10-02 15:26:09 |
| 142.93.62.231 | attack | 2020-09-24T20:15:59.264943abusebot-4.cloudsearch.cf sshd[28847]: Invalid user sms from 142.93.62.231 port 37906 2020-09-24T20:15:59.273521abusebot-4.cloudsearch.cf sshd[28847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.62.231 2020-09-24T20:15:59.264943abusebot-4.cloudsearch.cf sshd[28847]: Invalid user sms from 142.93.62.231 port 37906 2020-09-24T20:16:01.375888abusebot-4.cloudsearch.cf sshd[28847]: Failed password for invalid user sms from 142.93.62.231 port 37906 ssh2 2020-09-24T20:19:20.827360abusebot-4.cloudsearch.cf sshd[28854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.62.231 user=root 2020-09-24T20:19:22.187495abusebot-4.cloudsearch.cf sshd[28854]: Failed password for root from 142.93.62.231 port 47050 ssh2 2020-09-24T20:22:39.126038abusebot-4.cloudsearch.cf sshd[28860]: Invalid user bitcoin from 142.93.62.231 port 56162 ... |
2020-09-25 05:16:47 |
| 142.93.62.231 | attack | 2020-09-22 UTC: (2x) - chart(2x) |
2020-09-24 01:07:59 |
| 142.93.62.231 | attack | Sep 23 07:12:32 staging sshd[71513]: Invalid user rochelle from 142.93.62.231 port 41190 Sep 23 07:12:32 staging sshd[71513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.62.231 Sep 23 07:12:32 staging sshd[71513]: Invalid user rochelle from 142.93.62.231 port 41190 Sep 23 07:12:34 staging sshd[71513]: Failed password for invalid user rochelle from 142.93.62.231 port 41190 ssh2 ... |
2020-09-23 17:11:22 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.6.115
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10666
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.6.115. IN A
;; AUTHORITY SECTION:
. 462 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019102801 1800 900 604800 86400
;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 29 04:09:11 CST 2019
;; MSG SIZE rcvd: 116Host 115.6.93.142.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 115.6.93.142.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 94.191.70.187 | attackspambots | suspicious action Thu, 12 Mar 2020 13:46:27 -0300 |
2020-03-13 02:20:08 |
| 62.14.232.3 | attackbotsspam | 2020-01-05T11:26:53.242Z CLOSE host=62.14.232.3 port=25014 fd=4 time=40.032 bytes=32 ... |
2020-03-13 02:29:21 |
| 206.189.188.223 | attackbots | Invalid user user from 206.189.188.223 port 57596 |
2020-03-13 02:30:38 |
| 5.34.131.72 | attack | $f2bV_matches |
2020-03-13 02:42:37 |
| 146.185.203.177 | attackbotsspam | B: zzZZzz blocked content access |
2020-03-13 02:19:44 |
| 64.227.8.166 | attack | 2020-02-25T05:14:43.108Z CLOSE host=64.227.8.166 port=54818 fd=4 time=20.005 bytes=11 ... |
2020-03-13 02:17:34 |
| 120.237.46.74 | attack | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-03-13 02:37:54 |
| 212.47.238.207 | attackbots | (sshd) Failed SSH login from 212.47.238.207 (FR/France/207.1-24.238.47.212.in-addr.arpa): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 12 13:27:37 amsweb01 sshd[15340]: Invalid user billy from 212.47.238.207 port 40954 Mar 12 13:27:39 amsweb01 sshd[15340]: Failed password for invalid user billy from 212.47.238.207 port 40954 ssh2 Mar 12 13:35:50 amsweb01 sshd[16191]: Failed password for root from 212.47.238.207 port 60024 ssh2 Mar 12 13:41:23 amsweb01 sshd[16803]: Invalid user node from 212.47.238.207 port 47542 Mar 12 13:41:25 amsweb01 sshd[16803]: Failed password for invalid user node from 212.47.238.207 port 47542 ssh2 |
2020-03-13 02:34:34 |
| 54.38.188.34 | attack | Mar 12 19:03:03 tuxlinux sshd[24372]: Invalid user eric from 54.38.188.34 port 36370 Mar 12 19:03:03 tuxlinux sshd[24372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.188.34 Mar 12 19:03:03 tuxlinux sshd[24372]: Invalid user eric from 54.38.188.34 port 36370 Mar 12 19:03:03 tuxlinux sshd[24372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.188.34 Mar 12 19:03:03 tuxlinux sshd[24372]: Invalid user eric from 54.38.188.34 port 36370 Mar 12 19:03:03 tuxlinux sshd[24372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.188.34 Mar 12 19:03:04 tuxlinux sshd[24372]: Failed password for invalid user eric from 54.38.188.34 port 36370 ssh2 ... |
2020-03-13 02:46:51 |
| 62.219.50.252 | attack | 2019-11-15T04:16:42.857Z CLOSE host=62.219.50.252 port=43601 fd=4 time=40.040 bytes=31 ... |
2020-03-13 02:27:30 |
| 45.147.228.41 | attack | looking for open 25/tcp |
2020-03-13 02:48:42 |
| 220.247.174.14 | attack | suspicious action Thu, 12 Mar 2020 09:29:15 -0300 |
2020-03-13 02:34:05 |
| 64.227.39.120 | attackbotsspam | 2020-02-24T19:24:38.430Z CLOSE host=64.227.39.120 port=58740 fd=4 time=20.009 bytes=20 ... |
2020-03-13 02:21:20 |
| 66.175.56.96 | attack | 2019-12-17T23:28:52.254Z CLOSE host=66.175.56.96 port=40676 fd=4 time=20.020 bytes=32 ... |
2020-03-13 02:14:06 |
| 61.94.143.232 | attackbots | 2019-11-05T14:12:39.993Z CLOSE host=61.94.143.232 port=49286 fd=4 time=20.008 bytes=4 ... |
2020-03-13 02:29:45 |