Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
Sep 28 18:23:10 sip sshd[1760635]: Invalid user ec2-user from 142.93.115.12 port 46152
Sep 28 18:23:11 sip sshd[1760635]: Failed password for invalid user ec2-user from 142.93.115.12 port 46152 ssh2
Sep 28 18:30:43 sip sshd[1760661]: Invalid user kafka from 142.93.115.12 port 54806
...
2020-09-29 05:21:36
attack
Time:     Sun Sep 27 09:24:29 2020 +0000
IP:       142.93.115.12 (US/United States/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 27 09:11:46 3 sshd[16544]: Invalid user dbuser from 142.93.115.12 port 34274
Sep 27 09:11:48 3 sshd[16544]: Failed password for invalid user dbuser from 142.93.115.12 port 34274 ssh2
Sep 27 09:14:37 3 sshd[24114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.115.12  user=root
Sep 27 09:14:39 3 sshd[24114]: Failed password for root from 142.93.115.12 port 46776 ssh2
Sep 27 09:24:25 3 sshd[17199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.115.12  user=root
2020-09-28 21:40:34
attack
Sep 28 06:34:49 icinga sshd[51961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.115.12 
Sep 28 06:34:51 icinga sshd[51961]: Failed password for invalid user user from 142.93.115.12 port 39448 ssh2
Sep 28 06:43:59 icinga sshd[65058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.115.12 
...
2020-09-28 13:47:50
attackbots
Invalid user prueba from 142.93.115.12 port 59366
2020-09-28 03:21:28
attack
Bruteforce detected by fail2ban
2020-09-27 19:31:13
attack
Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): user=root
2020-09-25 04:36:22
attackbots
Aug 25 03:08:48 gw1 sshd[24515]: Failed password for root from 142.93.115.12 port 44606 ssh2
...
2020-08-25 07:07:19
Comments on same subnet:
IP Type Details Datetime
142.93.115.218 spambotsattackproxy
DDOS
2023-02-25 22:15:30
142.93.115.47 attackbotsspam
May  5 11:56:22 IngegnereFirenze sshd[19702]: Failed password for invalid user bi from 142.93.115.47 port 43032 ssh2
...
2020-05-05 22:39:57
142.93.115.47 attack
SSH brutforce
2020-05-04 16:00:25
142.93.115.47 attack
SSH brute force attempt
2020-04-28 00:53:41
142.93.115.47 attackspambots
Apr  2 12:04:36 kmh-wsh-001-nbg03 sshd[12631]: Invalid user ay from 142.93.115.47 port 35384
Apr  2 12:04:36 kmh-wsh-001-nbg03 sshd[12631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.115.47
Apr  2 12:04:38 kmh-wsh-001-nbg03 sshd[12631]: Failed password for invalid user ay from 142.93.115.47 port 35384 ssh2
Apr  2 12:04:38 kmh-wsh-001-nbg03 sshd[12631]: Received disconnect from 142.93.115.47 port 35384:11: Bye Bye [preauth]
Apr  2 12:04:38 kmh-wsh-001-nbg03 sshd[12631]: Disconnected from 142.93.115.47 port 35384 [preauth]
Apr  2 12:15:36 kmh-wsh-001-nbg03 sshd[14337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.115.47  user=r.r
Apr  2 12:15:39 kmh-wsh-001-nbg03 sshd[14337]: Failed password for r.r from 142.93.115.47 port 53936 ssh2
Apr  2 12:15:39 kmh-wsh-001-nbg03 sshd[14337]: Received disconnect from 142.93.115.47 port 53936:11: Bye Bye [preauth]
Apr  2 12:15:39 kmh-w........
-------------------------------
2020-04-03 03:36:58
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.115.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32269
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.115.12.			IN	A

;; AUTHORITY SECTION:
.			594	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020082401 1800 900 604800 86400

;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Aug 25 07:07:16 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 12.115.93.142.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 12.115.93.142.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
51.38.126.92 attack
Oct 18 23:06:24 pkdns2 sshd\[45915\]: Invalid user hj from 51.38.126.92Oct 18 23:06:26 pkdns2 sshd\[45915\]: Failed password for invalid user hj from 51.38.126.92 port 51684 ssh2Oct 18 23:10:22 pkdns2 sshd\[46096\]: Invalid user security from 51.38.126.92Oct 18 23:10:24 pkdns2 sshd\[46096\]: Failed password for invalid user security from 51.38.126.92 port 34604 ssh2Oct 18 23:14:17 pkdns2 sshd\[46224\]: Invalid user monit from 51.38.126.92Oct 18 23:14:20 pkdns2 sshd\[46224\]: Failed password for invalid user monit from 51.38.126.92 port 45764 ssh2
...
2019-10-19 04:43:53
157.230.240.34 attackspam
Oct 18 23:25:37 sauna sshd[51765]: Failed password for root from 157.230.240.34 port 42824 ssh2
...
2019-10-19 04:43:35
83.246.93.210 attackbots
Oct 19 02:14:17 areeb-Workstation sshd[11221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.246.93.210
Oct 19 02:14:19 areeb-Workstation sshd[11221]: Failed password for invalid user matt from 83.246.93.210 port 47567 ssh2
...
2019-10-19 05:00:04
119.54.0.199 attackbots
Unauthorised access (Oct 18) SRC=119.54.0.199 LEN=40 TTL=49 ID=16451 TCP DPT=8080 WINDOW=11350 SYN 
Unauthorised access (Oct 18) SRC=119.54.0.199 LEN=40 TTL=49 ID=26888 TCP DPT=8080 WINDOW=8845 SYN 
Unauthorised access (Oct 18) SRC=119.54.0.199 LEN=40 TTL=49 ID=63442 TCP DPT=8080 WINDOW=8845 SYN 
Unauthorised access (Oct 17) SRC=119.54.0.199 LEN=40 TTL=49 ID=1352 TCP DPT=8080 WINDOW=21269 SYN 
Unauthorised access (Oct 17) SRC=119.54.0.199 LEN=40 TTL=49 ID=21297 TCP DPT=8080 WINDOW=42927 SYN 
Unauthorised access (Oct 17) SRC=119.54.0.199 LEN=40 TTL=49 ID=37294 TCP DPT=8080 WINDOW=62107 SYN 
Unauthorised access (Oct 16) SRC=119.54.0.199 LEN=40 TTL=49 ID=43367 TCP DPT=8080 WINDOW=42927 SYN
2019-10-19 04:54:18
65.124.94.138 attack
$f2bV_matches
2019-10-19 05:00:30
124.239.191.101 attackbotsspam
Failed password for invalid user 1qaz2wsx1234 from 124.239.191.101 port 39764 ssh2
Invalid user 14 from 124.239.191.101 port 49854
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.239.191.101
Failed password for invalid user 14 from 124.239.191.101 port 49854 ssh2
Invalid user romanova from 124.239.191.101 port 59950
2019-10-19 05:12:07
159.203.197.157 attackbots
1571428329 - 10/18/2019 21:52:09 Host: zg-0911a-53.stretchoid.com/159.203.197.157 Port: 5351 UDP Blocked
2019-10-19 05:09:44
165.22.246.63 attackspam
Oct 18 21:43:35 microserver sshd[61123]: Failed password for root from 165.22.246.63 port 53192 ssh2
Oct 18 21:47:45 microserver sshd[61811]: Invalid user kinder from 165.22.246.63 port 36684
Oct 18 21:47:45 microserver sshd[61811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.246.63
Oct 18 21:47:47 microserver sshd[61811]: Failed password for invalid user kinder from 165.22.246.63 port 36684 ssh2
Oct 18 22:00:29 microserver sshd[64027]: Invalid user shi from 165.22.246.63 port 43614
Oct 18 22:00:29 microserver sshd[64027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.246.63
Oct 18 22:00:31 microserver sshd[64027]: Failed password for invalid user shi from 165.22.246.63 port 43614 ssh2
Oct 18 22:04:54 microserver sshd[64395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.246.63  user=root
Oct 18 22:04:56 microserver sshd[64395]: Failed password for root from 165.
2019-10-19 04:35:44
177.11.42.72 attackspam
$f2bV_matches
2019-10-19 05:06:12
5.55.10.26 attack
Telnet Server BruteForce Attack
2019-10-19 05:05:48
218.197.16.152 attackbots
Oct 18 22:57:33 MK-Soft-Root1 sshd[12106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.197.16.152 
Oct 18 22:57:35 MK-Soft-Root1 sshd[12106]: Failed password for invalid user ashish from 218.197.16.152 port 47320 ssh2
...
2019-10-19 05:02:24
217.182.206.141 attackbotsspam
Oct 18 16:48:27 plusreed sshd[24425]: Invalid user leave from 217.182.206.141
...
2019-10-19 04:51:02
128.134.30.40 attackspambots
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.134.30.40  user=root
Failed password for root from 128.134.30.40 port 12116 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.134.30.40  user=root
Failed password for root from 128.134.30.40 port 31990 ssh2
Invalid user guest from 128.134.30.40 port 51857
2019-10-19 04:59:20
119.251.90.45 attack
Telnet Server BruteForce Attack
2019-10-19 05:14:50
106.12.42.110 attack
Oct 18 10:25:44 php1 sshd\[14203\]: Invalid user hax from 106.12.42.110
Oct 18 10:25:44 php1 sshd\[14203\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.42.110
Oct 18 10:25:46 php1 sshd\[14203\]: Failed password for invalid user hax from 106.12.42.110 port 44570 ssh2
Oct 18 10:30:34 php1 sshd\[14616\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.42.110  user=root
Oct 18 10:30:35 php1 sshd\[14616\]: Failed password for root from 106.12.42.110 port 54258 ssh2
2019-10-19 04:55:20

Recently Reported IPs

173.220.122.140 122.51.91.2 36.57.64.117 103.114.246.184
104.248.28.42 49.144.191.133 202.173.121.150 75.125.200.232
187.182.21.151 118.97.222.38 61.155.209.51 198.38.82.146
192.241.223.68 60.178.119.121 107.172.150.88 79.146.130.85
18.25.123.140 93.225.215.250 67.175.89.188 161.43.220.126