Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Amsterdam

Region: North Holland

Country: Netherlands

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
...
2020-02-02 04:07:10
attack
SSH bruteforce
2019-11-08 07:18:44
Comments on same subnet:
IP Type Details Datetime
142.93.137.144 attackbots
Jul  9 06:42:13 meumeu sshd[200539]: Invalid user bedelia from 142.93.137.144 port 42268
Jul  9 06:42:13 meumeu sshd[200539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.137.144 
Jul  9 06:42:13 meumeu sshd[200539]: Invalid user bedelia from 142.93.137.144 port 42268
Jul  9 06:42:14 meumeu sshd[200539]: Failed password for invalid user bedelia from 142.93.137.144 port 42268 ssh2
Jul  9 06:45:09 meumeu sshd[200604]: Invalid user kunxu from 142.93.137.144 port 39210
Jul  9 06:45:09 meumeu sshd[200604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.137.144 
Jul  9 06:45:09 meumeu sshd[200604]: Invalid user kunxu from 142.93.137.144 port 39210
Jul  9 06:45:11 meumeu sshd[200604]: Failed password for invalid user kunxu from 142.93.137.144 port 39210 ssh2
Jul  9 06:48:08 meumeu sshd[200667]: Invalid user ikanri from 142.93.137.144 port 36152
...
2020-07-09 15:03:31
142.93.137.144 attackspam
Jul  8 12:30:02 plex-server sshd[750338]: Invalid user matthew from 142.93.137.144 port 32926
Jul  8 12:30:02 plex-server sshd[750338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.137.144 
Jul  8 12:30:02 plex-server sshd[750338]: Invalid user matthew from 142.93.137.144 port 32926
Jul  8 12:30:03 plex-server sshd[750338]: Failed password for invalid user matthew from 142.93.137.144 port 32926 ssh2
Jul  8 12:32:55 plex-server sshd[750578]: Invalid user padir from 142.93.137.144 port 58716
...
2020-07-08 20:49:33
142.93.137.144 attackbots
Jul  8 13:21:31 server sshd[30828]: Failed password for invalid user jobs from 142.93.137.144 port 33812 ssh2
Jul  8 13:24:34 server sshd[33206]: Failed password for invalid user test from 142.93.137.144 port 59296 ssh2
Jul  8 13:27:25 server sshd[35414]: Failed password for invalid user www from 142.93.137.144 port 56548 ssh2
2020-07-08 19:36:34
142.93.137.144 attack
Jul  7 17:52:11 mail sshd[669]: Failed password for invalid user jochen from 142.93.137.144 port 47840 ssh2
...
2020-07-08 02:07:43
142.93.137.144 attackbots
Jul  7 00:10:45 george sshd[15008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.137.144 
Jul  7 00:10:47 george sshd[15008]: Failed password for invalid user moodle from 142.93.137.144 port 60458 ssh2
Jul  7 00:13:40 george sshd[15028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.137.144
2020-07-07 12:43:55
142.93.137.144 attackbots
Invalid user mb from 142.93.137.144 port 36162
2020-07-05 19:00:14
142.93.137.144 attackspam
Jun 27 19:16:40 eventyay sshd[24519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.137.144
Jun 27 19:16:42 eventyay sshd[24519]: Failed password for invalid user mdm from 142.93.137.144 port 45784 ssh2
Jun 27 19:19:43 eventyay sshd[24603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.137.144
...
2020-06-28 01:20:05
142.93.137.144 attackbotsspam
Jun 21 05:53:24 jumpserver sshd[159896]: Invalid user tc from 142.93.137.144 port 48488
Jun 21 05:53:26 jumpserver sshd[159896]: Failed password for invalid user tc from 142.93.137.144 port 48488 ssh2
Jun 21 05:55:37 jumpserver sshd[159919]: Invalid user frank from 142.93.137.144 port 59070
...
2020-06-21 15:27:00
142.93.137.144 attack
2020-06-13T11:10:39.916038mail.thespaminator.com sshd[32401]: Invalid user uftp from 142.93.137.144 port 56796
2020-06-13T11:10:42.186830mail.thespaminator.com sshd[32401]: Failed password for invalid user uftp from 142.93.137.144 port 56796 ssh2
...
2020-06-14 00:39:49
142.93.137.144 attackspambots
Jun  8 22:47:40 PorscheCustomer sshd[5478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.137.144
Jun  8 22:47:42 PorscheCustomer sshd[5478]: Failed password for invalid user P2sapKs8xcox from 142.93.137.144 port 42876 ssh2
Jun  8 22:50:45 PorscheCustomer sshd[5601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.137.144
...
2020-06-09 04:59:06
142.93.137.144 attack
Jun  8 09:03:38 firewall sshd[4938]: Failed password for root from 142.93.137.144 port 52104 ssh2
Jun  8 09:06:43 firewall sshd[5032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.137.144  user=root
Jun  8 09:06:44 firewall sshd[5032]: Failed password for root from 142.93.137.144 port 53576 ssh2
...
2020-06-08 23:07:54
142.93.137.144 attackbotsspam
May 30 01:04:35 home sshd[6650]: Failed password for root from 142.93.137.144 port 33122 ssh2
May 30 01:08:05 home sshd[6948]: Failed password for root from 142.93.137.144 port 40020 ssh2
...
2020-05-30 07:12:53
142.93.137.144 attack
2020-05-23T11:12:18.039019morrigan.ad5gb.com sshd[20382]: Invalid user vjz from 142.93.137.144 port 56982
2020-05-23T11:12:20.251713morrigan.ad5gb.com sshd[20382]: Failed password for invalid user vjz from 142.93.137.144 port 56982 ssh2
2020-05-23T11:12:21.837333morrigan.ad5gb.com sshd[20382]: Disconnected from invalid user vjz 142.93.137.144 port 56982 [preauth]
2020-05-24 02:18:40
142.93.137.144 attack
May  6 22:47:35 server sshd[25142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.137.144
May  6 22:47:37 server sshd[25142]: Failed password for invalid user ao from 142.93.137.144 port 53330 ssh2
May  6 22:51:07 server sshd[25397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.137.144
...
2020-05-07 04:57:35
142.93.137.144 attack
May  4 17:05:07 rotator sshd\[19841\]: Invalid user alex from 142.93.137.144May  4 17:05:09 rotator sshd\[19841\]: Failed password for invalid user alex from 142.93.137.144 port 57254 ssh2May  4 17:07:56 rotator sshd\[20462\]: Invalid user kd from 142.93.137.144May  4 17:07:59 rotator sshd\[20462\]: Failed password for invalid user kd from 142.93.137.144 port 52280 ssh2May  4 17:10:53 rotator sshd\[21263\]: Invalid user yrd from 142.93.137.144May  4 17:10:56 rotator sshd\[21263\]: Failed password for invalid user yrd from 142.93.137.144 port 47318 ssh2
...
2020-05-04 23:37:53
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.137.22
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13289
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.137.22.			IN	A

;; AUTHORITY SECTION:
.			399	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110701 1800 900 604800 86400

;; Query time: 54 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 08 07:18:41 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 22.137.93.142.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 22.137.93.142.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
69.55.49.187 attackbots
...
2020-09-12 18:33:24
191.238.214.66 attackbotsspam
Sep 12 07:55:17 inter-technics sshd[16199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.238.214.66  user=root
Sep 12 07:55:19 inter-technics sshd[16199]: Failed password for root from 191.238.214.66 port 48418 ssh2
Sep 12 08:00:12 inter-technics sshd[16475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.238.214.66  user=root
Sep 12 08:00:15 inter-technics sshd[16475]: Failed password for root from 191.238.214.66 port 32996 ssh2
Sep 12 08:05:10 inter-technics sshd[16703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.238.214.66  user=root
Sep 12 08:05:12 inter-technics sshd[16703]: Failed password for root from 191.238.214.66 port 45806 ssh2
...
2020-09-12 18:40:56
5.188.87.53 attack
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-09-12T10:27:16Z
2020-09-12 18:56:28
111.72.193.188 attackspambots
Sep 11 20:24:54 srv01 postfix/smtpd\[22026\]: warning: unknown\[111.72.193.188\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 11 20:28:20 srv01 postfix/smtpd\[22103\]: warning: unknown\[111.72.193.188\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 11 20:28:31 srv01 postfix/smtpd\[22103\]: warning: unknown\[111.72.193.188\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 11 20:28:47 srv01 postfix/smtpd\[22103\]: warning: unknown\[111.72.193.188\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 11 20:29:06 srv01 postfix/smtpd\[22103\]: warning: unknown\[111.72.193.188\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-09-12 19:02:45
111.229.109.26 attackbotsspam
SmallBizIT.US 1 packets to tcp(22)
2020-09-12 18:37:05
101.231.146.36 attack
IP blocked
2020-09-12 18:54:17
82.118.236.186 attackbotsspam
ssh brute force
2020-09-12 18:54:47
185.239.242.84 attackbotsspam
DATE:2020-09-11 18:50:18, IP:185.239.242.84, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)
2020-09-12 18:28:35
113.57.170.50 attack
2020-09-12 12:10:15,828 fail2ban.actions: WARNING [ssh] Ban 113.57.170.50
2020-09-12 18:53:07
222.186.175.169 attackspam
Sep 12 10:46:29 scw-6657dc sshd[6206]: Failed password for root from 222.186.175.169 port 5366 ssh2
Sep 12 10:46:29 scw-6657dc sshd[6206]: Failed password for root from 222.186.175.169 port 5366 ssh2
Sep 12 10:46:32 scw-6657dc sshd[6206]: Failed password for root from 222.186.175.169 port 5366 ssh2
...
2020-09-12 18:52:29
1.32.210.108 attackbotsspam
TCP port : 15671
2020-09-12 18:34:56
101.231.124.6 attackbots
...
2020-09-12 18:45:23
119.60.252.242 attackspambots
(sshd) Failed SSH login from 119.60.252.242 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 12 08:06:15 amsweb01 sshd[17207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.60.252.242  user=root
Sep 12 08:06:18 amsweb01 sshd[17207]: Failed password for root from 119.60.252.242 port 36382 ssh2
Sep 12 08:13:55 amsweb01 sshd[18219]: Invalid user ramses from 119.60.252.242 port 36442
Sep 12 08:13:57 amsweb01 sshd[18219]: Failed password for invalid user ramses from 119.60.252.242 port 36442 ssh2
Sep 12 08:17:11 amsweb01 sshd[18725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.60.252.242  user=root
2020-09-12 18:51:56
111.93.200.50 attack
Sep 12 08:10:04 IngegnereFirenze sshd[7412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.200.50  user=root
...
2020-09-12 18:49:15
203.205.37.233 attackbotsspam
...
2020-09-12 18:46:49

Recently Reported IPs

84.245.121.98 61.227.33.142 157.245.122.30 45.117.53.141
102.164.150.238 177.99.150.72 78.128.113.121 36.255.25.100
159.89.48.128 77.93.211.207 80.249.145.151 195.76.107.105
113.108.203.235 2.115.68.98 134.73.26.225 61.223.139.181
220.249.9.90 93.87.171.176 95.58.221.134 61.164.152.209