Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Unified Layer

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Sep 27 19:07:43 pve1 sshd[15415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.4.16.20 
Sep 27 19:07:44 pve1 sshd[15415]: Failed password for invalid user s from 142.4.16.20 port 45291 ssh2
...
2020-09-28 01:55:55
attackspambots
Sep 27 11:05:09 pve1 sshd[4229]: Failed password for root from 142.4.16.20 port 26901 ssh2
...
2020-09-27 18:00:19
attackbots
$f2bV_matches
2020-09-13 21:30:40
attack
SSH Invalid Login
2020-09-13 13:26:01
attackbots
Sep 12 16:10:06 firewall sshd[21323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.4.16.20  user=root
Sep 12 16:10:08 firewall sshd[21323]: Failed password for root from 142.4.16.20 port 46217 ssh2
Sep 12 16:14:01 firewall sshd[21377]: Invalid user diddy from 142.4.16.20
...
2020-09-13 05:10:39
attack
2020-09-11T13:00:10.091291mail.thespaminator.com sshd[15466]: Invalid user test1 from 142.4.16.20 port 49469
2020-09-11T13:00:11.848874mail.thespaminator.com sshd[15466]: Failed password for invalid user test1 from 142.4.16.20 port 49469 ssh2
...
2020-09-12 02:53:21
attackspam
Sep 11 12:40:49 ns381471 sshd[17868]: Failed password for root from 142.4.16.20 port 41215 ssh2
Sep 11 12:44:55 ns381471 sshd[19160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.4.16.20
2020-09-11 18:51:03
attackspambots
reported through recidive - multiple failed attempts(SSH)
2020-08-17 18:00:18
attack
2020-08-11T05:48:03.931129vps773228.ovh.net sshd[2541]: Invalid user Pa$$word_.123 from 142.4.16.20 port 62392
2020-08-11T05:48:03.940410vps773228.ovh.net sshd[2541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.desu.ninja
2020-08-11T05:48:03.931129vps773228.ovh.net sshd[2541]: Invalid user Pa$$word_.123 from 142.4.16.20 port 62392
2020-08-11T05:48:06.353081vps773228.ovh.net sshd[2541]: Failed password for invalid user Pa$$word_.123 from 142.4.16.20 port 62392 ssh2
2020-08-11T05:51:57.392516vps773228.ovh.net sshd[2582]: Invalid user Delete from 142.4.16.20 port 41730
...
2020-08-11 16:38:47
attack
Aug  4 01:22:33 localhost sshd[3886917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.4.16.20  user=root
Aug  4 01:22:35 localhost sshd[3886917]: Failed password for root from 142.4.16.20 port 62838 ssh2
...
2020-08-04 00:50:21
attackspam
SSH Brute Force
2020-07-31 15:30:18
attack
2020-07-23T05:42:49.947630shield sshd\[19234\]: Invalid user ticket from 142.4.16.20 port 27398
2020-07-23T05:42:49.957066shield sshd\[19234\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.desu.ninja
2020-07-23T05:42:52.275268shield sshd\[19234\]: Failed password for invalid user ticket from 142.4.16.20 port 27398 ssh2
2020-07-23T05:47:12.747975shield sshd\[19893\]: Invalid user nick from 142.4.16.20 port 56277
2020-07-23T05:47:12.756637shield sshd\[19893\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.desu.ninja
2020-07-23 13:47:30
attackbots
Jul 22 10:48:21 NPSTNNYC01T sshd[31434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.4.16.20
Jul 22 10:48:23 NPSTNNYC01T sshd[31434]: Failed password for invalid user sc from 142.4.16.20 port 63122 ssh2
Jul 22 10:52:47 NPSTNNYC01T sshd[31769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.4.16.20
...
2020-07-22 23:03:00
attack
$f2bV_matches
2020-07-15 07:34:46
attackspambots
Invalid user bohan from 142.4.16.20 port 33930
2020-07-13 16:28:06
attackspam
2020-07-09T08:34:24+0200 Failed SSH Authentication/Brute Force Attack. (Server 4)
2020-07-09 15:51:57
attackbotsspam
Jun 19 22:22:58 localhost sshd[3697277]: Invalid user sst from 142.4.16.20 port 52578
...
2020-06-19 23:24:44
attack
(sshd) Failed SSH login from 142.4.16.20 (US/United States/mail.desu.ninja): 5 in the last 3600 secs
2020-06-13 18:25:33
attackspam
Jun 10 10:56:26 web8 sshd\[25332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.4.16.20  user=root
Jun 10 10:56:29 web8 sshd\[25332\]: Failed password for root from 142.4.16.20 port 29182 ssh2
Jun 10 10:59:41 web8 sshd\[26842\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.4.16.20  user=root
Jun 10 10:59:43 web8 sshd\[26842\]: Failed password for root from 142.4.16.20 port 43587 ssh2
Jun 10 11:02:58 web8 sshd\[28481\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.4.16.20  user=root
2020-06-10 19:17:40
attackspambots
Bruteforce detected by fail2ban
2020-06-03 18:08:24
attackbots
May 30 07:56:23 ArkNodeAT sshd\[12794\]: Invalid user test2 from 142.4.16.20
May 30 07:56:23 ArkNodeAT sshd\[12794\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.4.16.20
May 30 07:56:25 ArkNodeAT sshd\[12794\]: Failed password for invalid user test2 from 142.4.16.20 port 60198 ssh2
2020-05-30 14:43:26
attackbots
2020-05-21T08:05:32.181319afi-git.jinr.ru sshd[8787]: Invalid user yos from 142.4.16.20 port 42200
2020-05-21T08:05:32.184488afi-git.jinr.ru sshd[8787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.desu.ninja
2020-05-21T08:05:32.181319afi-git.jinr.ru sshd[8787]: Invalid user yos from 142.4.16.20 port 42200
2020-05-21T08:05:33.836594afi-git.jinr.ru sshd[8787]: Failed password for invalid user yos from 142.4.16.20 port 42200 ssh2
2020-05-21T08:09:30.620979afi-git.jinr.ru sshd[9945]: Invalid user czm from 142.4.16.20 port 65279
...
2020-05-21 13:18:29
attackbots
May 10 15:56:14 home sshd[27396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.4.16.20
May 10 15:56:16 home sshd[27396]: Failed password for invalid user tex from 142.4.16.20 port 42165 ssh2
May 10 15:58:13 home sshd[27678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.4.16.20
...
2020-05-11 00:24:01
attack
*Port Scan* detected from 142.4.16.20 (US/United States/Utah/Provo (East Bay)/mail.desu.ninja). 4 hits in the last 185 seconds
2020-05-04 00:31:20
attack
Invalid user wq from 142.4.16.20 port 30641
2020-04-19 07:19:22
attackbotsspam
Apr 17 07:43:12 rotator sshd\[17678\]: Invalid user vc from 142.4.16.20Apr 17 07:43:14 rotator sshd\[17678\]: Failed password for invalid user vc from 142.4.16.20 port 61324 ssh2Apr 17 07:47:01 rotator sshd\[18470\]: Invalid user xq from 142.4.16.20Apr 17 07:47:02 rotator sshd\[18470\]: Failed password for invalid user xq from 142.4.16.20 port 42710 ssh2Apr 17 07:50:36 rotator sshd\[19264\]: Invalid user ut from 142.4.16.20Apr 17 07:50:38 rotator sshd\[19264\]: Failed password for invalid user ut from 142.4.16.20 port 65079 ssh2
...
2020-04-17 14:40:00
attackbots
k+ssh-bruteforce
2020-04-04 03:40:54
attackspam
Apr  1 23:33:50 ewelt sshd[6786]: Invalid user wfz from 142.4.16.20 port 35409
Apr  1 23:33:50 ewelt sshd[6786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.4.16.20
Apr  1 23:33:50 ewelt sshd[6786]: Invalid user wfz from 142.4.16.20 port 35409
Apr  1 23:33:52 ewelt sshd[6786]: Failed password for invalid user wfz from 142.4.16.20 port 35409 ssh2
...
2020-04-02 05:49:22
attackbots
(sshd) Failed SSH login from 142.4.16.20 (US/United States/mail.desu.ninja): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr  1 18:24:46 srv sshd[1053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.4.16.20  user=root
Apr  1 18:24:48 srv sshd[1053]: Failed password for root from 142.4.16.20 port 26741 ssh2
Apr  1 18:27:25 srv sshd[1083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.4.16.20  user=root
Apr  1 18:27:27 srv sshd[1083]: Failed password for root from 142.4.16.20 port 24744 ssh2
Apr  1 18:29:24 srv sshd[1104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.4.16.20  user=root
2020-04-01 23:59:31
attackspam
Mar 31 12:49:47 dallas01 sshd[24451]: Failed password for root from 142.4.16.20 port 52263 ssh2
Mar 31 12:53:01 dallas01 sshd[24887]: Failed password for root from 142.4.16.20 port 54556 ssh2
2020-04-01 04:01:53
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.4.16.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10656
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.4.16.20.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019073101 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Aug 01 05:12:32 CST 2019
;; MSG SIZE  rcvd: 115
Host info
20.16.4.142.in-addr.arpa domain name pointer mail.desu.ninja.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
20.16.4.142.in-addr.arpa	name = mail.desu.ninja.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
37.59.107.100 attackspam
Nov 15 19:16:59 vps691689 sshd[24655]: Failed password for root from 37.59.107.100 port 46450 ssh2
Nov 15 19:20:35 vps691689 sshd[24692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.107.100
...
2019-11-16 06:41:46
94.191.15.67 attackbotsspam
Malicious/Probing: /fdnvf73193.txt
2019-11-16 06:23:26
106.13.74.93 attackbots
Nov 15 17:56:56 firewall sshd[31993]: Invalid user bamford from 106.13.74.93
Nov 15 17:56:58 firewall sshd[31993]: Failed password for invalid user bamford from 106.13.74.93 port 42710 ssh2
Nov 15 18:01:19 firewall sshd[32110]: Invalid user peszynski from 106.13.74.93
...
2019-11-16 06:48:08
220.173.55.8 attack
2019-11-15T13:02:22.318792suse-nuc sshd[17529]: Invalid user csantander from 220.173.55.8 port 50776
...
2019-11-16 06:33:38
185.216.132.15 attackspam
k+ssh-bruteforce
2019-11-16 06:11:30
92.118.160.45 attack
Fail2Ban Ban Triggered
2019-11-16 06:45:40
122.3.88.147 attackspambots
Automatic report - Banned IP Access
2019-11-16 06:18:17
196.52.43.126 attackspam
ICMP MH Probe, Scan /Distributed -
2019-11-16 06:24:54
167.172.244.78 attackspam
Invalid user admin from 167.172.244.78 port 53058
2019-11-16 06:42:55
112.161.203.170 attack
2019-11-15T22:58:03.918024  sshd[15342]: Invalid user dantzen from 112.161.203.170 port 60210
2019-11-15T22:58:03.931200  sshd[15342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.161.203.170
2019-11-15T22:58:03.918024  sshd[15342]: Invalid user dantzen from 112.161.203.170 port 60210
2019-11-15T22:58:06.512813  sshd[15342]: Failed password for invalid user dantzen from 112.161.203.170 port 60210 ssh2
2019-11-15T23:11:09.805162  sshd[15502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.161.203.170  user=mysql
2019-11-15T23:11:11.955533  sshd[15502]: Failed password for mysql from 112.161.203.170 port 53994 ssh2
...
2019-11-16 06:42:17
92.118.160.53 attackbotsspam
11/15/2019-17:01:40.369677 92.118.160.53 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-11-16 06:33:23
141.98.80.99 attackbotsspam
141.98.80.99 has been banned from MailServer for Abuse
...
2019-11-16 06:36:28
69.94.143.13 attack
2019-11-15T15:35:29.972717stark.klein-stark.info postfix/smtpd\[2600\]: NOQUEUE: reject: RCPT from chop.nabhaa.com\[69.94.143.13\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\
...
2019-11-16 06:16:57
165.22.123.39 attackspam
SMTP/25/465/587 Probe, BadAuth, SPAM, Hack -
2019-11-16 06:44:51
211.23.61.194 attack
2019-11-15T15:35:36.173703abusebot-5.cloudsearch.cf sshd\[17837\]: Invalid user rozy from 211.23.61.194 port 52650
2019-11-16 06:47:21

Recently Reported IPs

52.12.123.51 115.76.79.217 218.241.98.198 195.60.175.58
178.128.158.199 213.200.15.80 180.126.235.175 126.34.239.18
222.73.129.15 205.126.170.176 153.42.236.176 162.254.135.35
239.77.154.114 80.203.64.18 18.223.199.9 173.238.90.206
161.228.192.134 65.19.13.125 50.166.5.255 104.245.145.36