178.93.42.245 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Ukraine

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
178.93.42.192	attackspambots	Unauthorized connection attempt detected from IP address 178.93.42.192 to port 80	2020-07-07 03:53:22
178.93.42.166	attackspambots	Lines containing failures of 178.93.42.166 Jun 2 12:34:27 shared03 postfix/smtpd[10623]: connect from 166-42-93-178.pool.ukrtel.net[178.93.42.166] Jun 2 12:34:29 shared03 policyd-spf[10659]: prepend Received-SPF: Softfail (mailfrom) identhostnamey=mailfrom; client-ip=178.93.42.166; helo=mx1.hostinger.com; envelope-from=x@x Jun x@x Jun x@x Jun 2 12:34:30 shared03 postfix/smtpd[10623]: lost connection after RCPT from 166-42-93-178.pool.ukrtel.net[178.93.42.166] Jun 2 12:34:30 shared03 postfix/smtpd[10623]: disconnect from 166-42-93-178.pool.ukrtel.net[178.93.42.166] ehlo=1 mail=1 rcpt=0/2 commands=2/4 Jun 2 13:50:27 shared03 postfix/smtpd[22401]: connect from 166-42-93-178.pool.ukrtel.net[178.93.42.166] Jun 2 13:50:29 shared03 policyd-spf[7410]: prepend Received-SPF: None (mailfrom) identhostnamey=mailfrom; client-ip=178.93.42.166; helo=111iu.com; envelope-from=x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.ht	2020-06-03 00:08:40
178.93.42.2	attackbots	Unauthorized connection attempt detected from IP address 178.93.42.2 to port 8080	2019-12-29 18:20:01

Type

Details

Datetime

178.93.42.192

attackspambots

Unauthorized connection attempt detected from IP address 178.93.42.192 to port 80

2020-07-07 03:53:22

178.93.42.166

attackspambots

Lines containing failures of 178.93.42.166
Jun  2 12:34:27 shared03 postfix/smtpd[10623]: connect from 166-42-93-178.pool.ukrtel.net[178.93.42.166]
Jun  2 12:34:29 shared03 policyd-spf[10659]: prepend Received-SPF: Softfail (mailfrom) identhostnamey=mailfrom; client-ip=178.93.42.166; helo=mx1.hostinger.com; envelope-from=x@x
Jun x@x
Jun x@x
Jun  2 12:34:30 shared03 postfix/smtpd[10623]: lost connection after RCPT from 166-42-93-178.pool.ukrtel.net[178.93.42.166]
Jun  2 12:34:30 shared03 postfix/smtpd[10623]: disconnect from 166-42-93-178.pool.ukrtel.net[178.93.42.166] ehlo=1 mail=1 rcpt=0/2 commands=2/4
Jun  2 13:50:27 shared03 postfix/smtpd[22401]: connect from 166-42-93-178.pool.ukrtel.net[178.93.42.166]
Jun  2 13:50:29 shared03 policyd-spf[7410]: prepend Received-SPF: None (mailfrom) identhostnamey=mailfrom; client-ip=178.93.42.166; helo=111iu.com; envelope-from=x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.ht

2020-06-03 00:08:40

178.93.42.2

attackbots

Unauthorized connection attempt detected from IP address 178.93.42.2 to port 8080

2019-12-29 18:20:01

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 178.93.42.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45026
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;178.93.42.245.			IN	A

;; AUTHORITY SECTION:
.			200	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 16:59:16 CST 2022
;; MSG SIZE  rcvd: 106

Host info

245.42.93.178.in-addr.arpa domain name pointer 245-42-93-178.pool.ukrtel.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
245.42.93.178.in-addr.arpa	name = 245-42-93-178.pool.ukrtel.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
172.67.181.174	attackspambots	http://cyntekey.shop/Wyv7nYOdREZBzhfM8Ml3CgpUbbl1-q9GhGz0KY3DCT_Si2IZ	2020-09-29 12:59:21
176.122.141.223	attackbots	Sep 29 05:53:47 [host] sshd[12471]: Invalid user a Sep 29 05:53:47 [host] sshd[12471]: pam_unix(sshd: Sep 29 05:53:49 [host] sshd[12471]: Failed passwor	2020-09-29 13:23:42
163.172.184.172	attack	...	2020-09-29 13:16:12
38.121.43.37	spamattack	This person hacked my Snapchat account and is using this IP address	2020-09-29 12:55:17
217.14.211.216	attack	Sep 28 21:42:53 NPSTNNYC01T sshd[23648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.14.211.216 Sep 28 21:42:55 NPSTNNYC01T sshd[23648]: Failed password for invalid user applmgr from 217.14.211.216 port 40612 ssh2 Sep 28 21:46:55 NPSTNNYC01T sshd[24068]: Failed password for root from 217.14.211.216 port 50726 ssh2 ...	2020-09-29 13:03:14
186.42.182.41	attack	firewall-block, port(s): 445/tcp	2020-09-29 13:08:15
91.213.50.99	attackspambots	uvcm 91.213.50.99 [28/Sep/2020:16:26:56 "-" "POST //xmlrpc.php 200 4606 91.213.50.99 [28/Sep/2020:16:26:58 "-" "POST //xmlrpc.php 200 4606 91.213.50.99 [28/Sep/2020:16:27:00 "-" "POST //xmlrpc.php 200 4606	2020-09-29 13:12:48
111.229.57.3	attack	111.229.57.3 (CN/China/-), 6 distributed sshd attacks on account [test] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 29 04:54:16 server2 sshd[20196]: Invalid user test from 111.229.57.3 port 32950 Sep 29 04:54:17 server2 sshd[20196]: Failed password for invalid user test from 111.229.57.3 port 32950 ssh2 Sep 29 04:59:53 server2 sshd[20964]: Invalid user test from 160.16.222.61 port 35968 Sep 29 05:04:17 server2 sshd[22001]: Invalid user test from 152.32.165.99 port 42370 Sep 29 04:30:35 server2 sshd[16201]: Invalid user test from 195.54.160.183 port 50829 Sep 29 04:30:38 server2 sshd[16201]: Failed password for invalid user test from 195.54.160.183 port 50829 ssh2 IP Addresses Blocked:	2020-09-29 13:27:36
162.243.128.227	attack	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-09-29 13:10:55
166.62.41.108	attackbotsspam	166.62.41.108 - - [29/Sep/2020:01:26:43 +0100] "POST /wp-login.php HTTP/1.1" 200 2426 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 166.62.41.108 - - [29/Sep/2020:01:26:45 +0100] "POST /wp-login.php HTTP/1.1" 200 2407 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 166.62.41.108 - - [29/Sep/2020:01:26:47 +0100] "POST /wp-login.php HTTP/1.1" 200 2405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-29 13:15:48
196.43.196.30	attackspambots	TCP (SYN) 196.43.196.30:47927 -> port 14710, len 44	2020-09-29 13:00:40
58.64.215.150	attack	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-29 13:18:54
192.241.235.57	attack	port scan and connect, tcp 9200 (elasticsearch)	2020-09-29 12:56:15
194.150.235.8	attack	Sep 29 00:25:57 mail.srvfarm.net postfix/smtpd[2235369]: NOQUEUE: reject: RCPT from unknown[194.150.235.8]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Sep 29 00:26:59 mail.srvfarm.net postfix/smtpd[2235351]: NOQUEUE: reject: RCPT from unknown[194.150.235.8]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Sep 29 00:28:29 mail.srvfarm.net postfix/smtpd[2237844]: NOQUEUE: reject: RCPT from unknown[194.150.235.8]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Sep 29 00:29:29 mail.srvfarm.net postfix/smtpd[2071208]: NOQUEUE: reject: RCPT from unknown[194.150.235.8]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo=	2020-09-29 13:25:46
195.22.148.76	attack	firewall-block, port(s): 44/tcp, 80/tcp, 5060/tcp	2020-09-29 13:02:20

Recently Reported IPs

45.163.144.194	120.85.91.123	61.221.30.145	123.9.210.89
223.229.255.93	172.70.130.250	47.108.236.182	117.182.61.189
119.90.42.94	177.53.70.144	39.107.102.41	35.188.206.51
197.62.137.163	59.94.202.185	124.121.232.152	1.7.151.66
150.107.245.30	104.211.136.96	190.120.254.52	89.165.11.105