City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.93.78.79 | attackspambots | May 30 08:47:49 debian-2gb-nbg1-2 kernel: \[13080050.867384\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=142.93.78.79 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=47132 PROTO=TCP SPT=3834 DPT=23 WINDOW=10970 RES=0x00 SYN URGP=0 |
2020-05-30 15:44:00 |
| 142.93.78.39 | attackbots | WordPress login Brute force / Web App Attack on client site. |
2020-01-20 21:40:39 |
| 142.93.78.39 | attackbots | WordPress wp-login brute force :: 142.93.78.39 0.096 BYPASS [20/Jan/2020:04:53:14 0000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 2287 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-01-20 16:43:57 |
| 142.93.78.37 | attackspambots | Brute forcing Wordpress login |
2019-08-13 14:16:49 |
| 142.93.78.12 | attack | [TueJul3004:17:34.4758262019][:error][pid26783:tid47872557745920][client142.93.78.12:36700][client142.93.78.12]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"Datanyze"atREQUEST_HEADERS:User-Agent.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"68"][id"337749"][rev"2"][msg"Atomicorp.comWAFRules:Datanyzebotblocked"][severity"ERROR"][hostname"boltonholding.com"][uri"/"][unique_id"XT@ovoqU3HWy4hEjR2ks9QAAAAY"][TueJul3004:17:35.5998262019][:error][pid26889:tid47872507315968][client142.93.78.12:49456][client142.93.78.12]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"Datanyze"atREQUEST_HEADERS:User-Agent.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"68"][id"337749"][rev"2"][msg"Atomicorp.comWAFRules:Datanyzebotblocked"][severity"ERROR"][hostname"boltonholding.com"][uri"/"][unique_id"XT@ov5PS3cYgKqjF5IrTvAAAAAE"] |
2019-07-30 19:18:04 |
| 142.93.78.37 | attack | www.fahrschule-mihm.de 142.93.78.37 \[24/Jul/2019:01:58:46 +0200\] "POST /wp-login.php HTTP/1.1" 200 5757 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.fahrschule-mihm.de 142.93.78.37 \[24/Jul/2019:01:58:47 +0200\] "POST /wp-login.php HTTP/1.1" 200 5657 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-07-24 08:09:28 |
| 142.93.78.37 | attackbots | WordPress brute force |
2019-07-17 04:57:39 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.78.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48326
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;142.93.78.5. IN A
;; AUTHORITY SECTION:
. 481 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 12:24:21 CST 2022
;; MSG SIZE rcvd: 104Host 5.78.93.142.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 5.78.93.142.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 141.98.80.53 | attackbots | Jul 16 19:31:03 relay postfix/smtpd\[9430\]: warning: unknown\[141.98.80.53\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 16 19:31:03 relay postfix/smtpd\[8413\]: warning: unknown\[141.98.80.53\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 16 19:33:35 relay postfix/smtpd\[8453\]: warning: unknown\[141.98.80.53\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 16 19:33:35 relay postfix/smtpd\[14245\]: warning: unknown\[141.98.80.53\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 16 19:36:17 relay postfix/smtpd\[14245\]: warning: unknown\[141.98.80.53\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 16 19:36:17 relay postfix/smtpd\[8413\]: warning: unknown\[141.98.80.53\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-07-17 01:37:19 |
| 116.132.47.50 | attackbotsspam | Fail2Ban |
2020-07-17 01:55:08 |
| 191.13.222.215 | attackbotsspam | Failed password for invalid user tobias from 191.13.222.215 port 57751 ssh2 |
2020-07-17 01:38:02 |
| 174.219.145.155 | attackspam | Brute forcing email accounts |
2020-07-17 01:14:28 |
| 139.59.57.2 | attackbotsspam | SSH bruteforce |
2020-07-17 01:14:46 |
| 129.204.177.7 | attack | Jul 16 15:54:04 rush sshd[21913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.177.7 Jul 16 15:54:06 rush sshd[21913]: Failed password for invalid user huang from 129.204.177.7 port 45640 ssh2 Jul 16 15:59:23 rush sshd[22068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.177.7 ... |
2020-07-17 01:33:31 |
| 118.36.234.187 | attackbots | 2020-07-16T16:18:31.864655mail.csmailer.org sshd[30560]: Invalid user liu from 118.36.234.187 port 54460 2020-07-16T16:18:31.869061mail.csmailer.org sshd[30560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.36.234.187 2020-07-16T16:18:31.864655mail.csmailer.org sshd[30560]: Invalid user liu from 118.36.234.187 port 54460 2020-07-16T16:18:33.901032mail.csmailer.org sshd[30560]: Failed password for invalid user liu from 118.36.234.187 port 54460 ssh2 2020-07-16T16:21:36.516725mail.csmailer.org sshd[30709]: Invalid user tdi from 118.36.234.187 port 43868 ... |
2020-07-17 01:46:40 |
| 96.46.27.0 | attackspambots | Jul 15 21:31:42 vzmaster sshd[31341]: Address 96.46.27.0 maps to 96.46.27.0.nwinternet.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jul 15 21:31:42 vzmaster sshd[31341]: Invalid user admin from 96.46.27.0 Jul 15 21:31:42 vzmaster sshd[31341]: Failed none for invalid user admin from 96.46.27.0 port 60050 ssh2 Jul 15 21:31:42 vzmaster sshd[31341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.46.27.0 Jul 15 21:31:44 vzmaster sshd[31341]: Failed password for invalid user admin from 96.46.27.0 port 60050 ssh2 Jul 15 21:31:45 vzmaster sshd[31374]: Address 96.46.27.0 maps to 96.46.27.0.nwinternet.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jul 15 21:31:46 vzmaster sshd[31374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.46.27.0 user=r.r Jul 15 21:31:48 vzmaster sshd[31374]: Failed password for r.r from 96.46.27.0 port 601........ ------------------------------- |
2020-07-17 01:39:05 |
| 193.202.85.68 | attack | Forbidden access |
2020-07-17 01:35:18 |
| 82.148.17.37 | attackbotsspam | bruteforce detected |
2020-07-17 01:32:45 |
| 110.74.179.157 | attackbots | Jul 16 18:08:17 rocket sshd[5039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.74.179.157 Jul 16 18:08:19 rocket sshd[5039]: Failed password for invalid user stefan from 110.74.179.157 port 42370 ssh2 Jul 16 18:12:08 rocket sshd[5725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.74.179.157 ... |
2020-07-17 01:15:56 |
| 43.242.227.128 | attackspam | Sniffing for wp-login |
2020-07-17 01:39:42 |
| 134.175.99.237 | attack | Jul 16 18:41:59 rancher-0 sshd[381238]: Invalid user biblioteca from 134.175.99.237 port 37524 ... |
2020-07-17 01:21:22 |
| 111.206.198.93 | attackbots | Automatic report - Banned IP Access |
2020-07-17 01:47:17 |
| 84.54.12.239 | attackbotsspam | Explore Air Drone is the latest drone for creating unique videos and ways to explore the world. |
2020-07-17 01:17:57 |