142.93.77.94 - IPInfo

Basic Info

City: Clifton

Region: New Jersey

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
142.93.77.12	attack	Port scan: Attack repeated for 24 hours	2020-09-10 00:55:21
142.93.77.12	attackbotsspam	SIP/5060 Probe, BF, Hack -	2020-08-17 17:50:40
142.93.77.12	attackbots	Port scan: Attack repeated for 24 hours	2020-07-28 01:59:54
142.93.77.12	attackbotsspam	07/13/2020-12:26:41.666613 142.93.77.12 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-07-14 04:28:28
142.93.77.12	attackspam	TCP port : 28371	2020-06-28 18:32:18
142.93.77.12	attackbots	Jun 23 14:05:43 debian-2gb-nbg1-2 kernel: \[15172613.900987\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=142.93.77.12 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=24699 PROTO=TCP SPT=59895 DPT=13274 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-23 23:43:59
142.93.77.108	attackspam	SSH login attempts.	2020-03-27 20:53:00

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.77.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50770
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.77.94.			IN	A

;; AUTHORITY SECTION:
.			345	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020122701 1800 900 604800 86400

;; Query time: 26 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 28 03:01:59 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 94.77.93.142.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 94.77.93.142.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
175.24.16.135	attackspambots	Connection to SSH Honeypot - Detected by HoneypotDB	2020-07-19 19:28:31
71.6.199.23	attackspambots	Unauthorized connection attempt detected from IP address 71.6.199.23 to port 5001	2020-07-19 19:26:20
119.166.183.17	attackbots	2020-07-18 UTC: (2x) - lorenzo(2x)	2020-07-19 19:23:20
43.239.220.52	attackspam	Jul 19 11:45:08 journals sshd\[123021\]: Invalid user USERID from 43.239.220.52 Jul 19 11:45:08 journals sshd\[123021\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.239.220.52 Jul 19 11:45:10 journals sshd\[123021\]: Failed password for invalid user USERID from 43.239.220.52 port 61230 ssh2 Jul 19 11:51:48 journals sshd\[123717\]: Invalid user picture from 43.239.220.52 Jul 19 11:51:48 journals sshd\[123717\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.239.220.52 ...	2020-07-19 19:48:04
212.85.69.14	attackspam	212.85.69.14 - - [19/Jul/2020:09:52:15 +0200] "GET /wp-login.php HTTP/1.1" 200 5738 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 212.85.69.14 - - [19/Jul/2020:09:52:16 +0200] "POST /wp-login.php HTTP/1.1" 200 5989 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 212.85.69.14 - - [19/Jul/2020:09:52:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-07-19 19:18:28
80.82.64.98	attackbots	Jul 19 13:08:49 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.64.98, lip=185.118.197.126, session= Jul 19 13:09:44 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.64.98, lip=185.118.197.126, session= Jul 19 13:11:05 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.64.98, lip=185.118.197.126, session= Jul 19 13:12:47 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.64.98, lip=185.118.197.126, session= Jul 19 13:13:52 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=	2020-07-19 19:47:11
122.51.216.203	attack	Unauthorized connection attempt detected from IP address 122.51.216.203 to port 2483	2020-07-19 19:32:02
152.136.131.171	attackbots	Tried to acess firewall on several ports.	2020-07-19 19:43:51
119.28.178.213	attackbots	2020-07-19T10:10:40+0200 Failed SSH Authentication/Brute Force Attack. (Server 4)	2020-07-19 19:16:47
117.103.2.114	attack	Jul 19 09:54:48 ns382633 sshd\[19199\]: Invalid user tillid from 117.103.2.114 port 55296 Jul 19 09:54:48 ns382633 sshd\[19199\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.103.2.114 Jul 19 09:54:50 ns382633 sshd\[19199\]: Failed password for invalid user tillid from 117.103.2.114 port 55296 ssh2 Jul 19 10:01:22 ns382633 sshd\[20680\]: Invalid user ts3 from 117.103.2.114 port 34258 Jul 19 10:01:22 ns382633 sshd\[20680\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.103.2.114	2020-07-19 19:33:58
218.201.102.250	attack	$f2bV_matches	2020-07-19 19:26:41
193.32.161.147	attackbots	07/19/2020-06:41:50.097090 193.32.161.147 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-07-19 19:19:11
61.164.246.45	attackspam	Jul 19 16:16:41 gw1 sshd[4515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.164.246.45 Jul 19 16:16:44 gw1 sshd[4515]: Failed password for invalid user upload from 61.164.246.45 port 55788 ssh2 ...	2020-07-19 19:22:44
144.76.7.79	attackspambots	20 attempts against mh-misbehave-ban on twig	2020-07-19 19:36:23
77.40.3.214	attackbots	(smtpauth) Failed SMTP AUTH login from 77.40.3.214 (RU/Russia/214.3.dialup.mari-el.ru): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-07-19 12:21:47 plain authenticator failed for (localhost) [77.40.3.214]: 535 Incorrect authentication data (set_id=production@safanicu.com)	2020-07-19 19:41:46

Recently Reported IPs

104.45.143.21	178.62.220.174	45.15.143.155	78.216.152.143
189.171.121.231	201.175.211.42	168.197.153.239	31.163.151.88
85.193.114.230	52.188.110.62	13.66.139.69	89.72.128.118
99.236.237.165	70.55.158.118	216.18.204.216	24.114.60.87
207.81.163.75	85.203.22.234	135.181.145.128	186.33.114.152