Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: North Bergen

Region: New Jersey

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Nov 11 09:39:35 ms-srv sshd[52318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.14.190
Nov 11 09:39:38 ms-srv sshd[52318]: Failed password for invalid user swbell from 142.93.14.190 port 39526 ssh2
2019-11-11 19:27:46
Comments on same subnet:
IP Type Details Datetime
142.93.14.123 attack
Malicious IP / Malware
2024-06-14 12:55:54
142.93.142.51 attackspam
SSH Bruteforce Attempt on Honeypot
2020-10-01 08:48:22
142.93.142.51 attack
Sep 30 15:24:37 vlre-nyc-1 sshd\[16561\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.142.51  user=root
Sep 30 15:24:39 vlre-nyc-1 sshd\[16561\]: Failed password for root from 142.93.142.51 port 44634 ssh2
Sep 30 15:32:59 vlre-nyc-1 sshd\[16917\]: Invalid user server from 142.93.142.51
Sep 30 15:32:59 vlre-nyc-1 sshd\[16917\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.142.51
Sep 30 15:33:01 vlre-nyc-1 sshd\[16917\]: Failed password for invalid user server from 142.93.142.51 port 46860 ssh2
...
2020-10-01 01:23:49
142.93.142.51 attackspambots
Sep 30 11:00:52 DAAP sshd[26619]: Invalid user test from 142.93.142.51 port 48914
Sep 30 11:00:52 DAAP sshd[26619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.142.51
Sep 30 11:00:52 DAAP sshd[26619]: Invalid user test from 142.93.142.51 port 48914
Sep 30 11:00:54 DAAP sshd[26619]: Failed password for invalid user test from 142.93.142.51 port 48914 ssh2
Sep 30 11:07:21 DAAP sshd[26802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.142.51  user=root
Sep 30 11:07:23 DAAP sshd[26802]: Failed password for root from 142.93.142.51 port 58030 ssh2
...
2020-09-30 17:36:20
142.93.146.198 attack
firewall-block, port(s): 22/tcp
2020-09-01 06:45:18
142.93.149.57 attack
 TCP (SYN) 142.93.149.57:39570 -> port 8080, len 44
2020-08-28 16:17:34
142.93.146.198 attackspambots
Aug 10 22:00:51 : SSH login attempts with invalid user
2020-08-13 08:40:12
142.93.149.57 attack
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: do-prod-us-north-clients-0106-9.do.binaryedge.ninja.
2020-08-11 08:50:11
142.93.143.85 attack
Trolling for resource vulnerabilities
2020-08-02 22:17:05
142.93.143.85 attackbots
142.93.143.85 - - [30/Jul/2020:12:29:59 +0200] "POST /xmlrpc.php HTTP/1.1" 403 21861 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.93.143.85 - - [30/Jul/2020:12:46:22 +0200] "POST /xmlrpc.php HTTP/1.1" 403 31 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-07-30 19:09:59
142.93.143.85 attack
142.93.143.85 - - [11/Jul/2020:15:50:31 +0200] "GET /wp-login.php HTTP/1.1" 200 6310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.93.143.85 - - [11/Jul/2020:15:50:31 +0200] "POST /wp-login.php HTTP/1.1" 200 6561 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.93.143.85 - - [11/Jul/2020:15:50:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-07-11 22:01:26
142.93.143.85 attackspambots
142.93.143.85 has been banned for [WebApp Attack]
...
2020-07-05 16:37:18
142.93.148.12 attack
Automatic report - XMLRPC Attack
2020-06-24 06:23:24
142.93.140.242 attack
2020-06-17T00:03:36.067695mail.standpoint.com.ua sshd[31174]: Invalid user silvio from 142.93.140.242 port 43750
2020-06-17T00:03:36.070299mail.standpoint.com.ua sshd[31174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242
2020-06-17T00:03:36.067695mail.standpoint.com.ua sshd[31174]: Invalid user silvio from 142.93.140.242 port 43750
2020-06-17T00:03:37.535152mail.standpoint.com.ua sshd[31174]: Failed password for invalid user silvio from 142.93.140.242 port 43750 ssh2
2020-06-17T00:06:56.112872mail.standpoint.com.ua sshd[31629]: Invalid user teamspeak3 from 142.93.140.242 port 45070
...
2020-06-17 05:46:46
142.93.140.214 attackspambots
Jun 15 18:54:18 php1 sshd\[21780\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.214  user=root
Jun 15 18:54:20 php1 sshd\[21780\]: Failed password for root from 142.93.140.214 port 35010 ssh2
Jun 15 18:57:30 php1 sshd\[21985\]: Invalid user lia from 142.93.140.214
Jun 15 18:57:30 php1 sshd\[21985\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.214
Jun 15 18:57:32 php1 sshd\[21985\]: Failed password for invalid user lia from 142.93.140.214 port 36260 ssh2
2020-06-16 13:11:36
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.14.190
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18081
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.14.190.			IN	A

;; AUTHORITY SECTION:
.			258	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111100 1800 900 604800 86400

;; Query time: 98 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Nov 11 19:27:42 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 190.14.93.142.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 190.14.93.142.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
81.22.45.107 attack
Oct 30 23:32:03 mc1 kernel: \[3761044.785240\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=8247 PROTO=TCP SPT=46244 DPT=36600 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 30 23:33:00 mc1 kernel: \[3761102.318996\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=22906 PROTO=TCP SPT=46244 DPT=37491 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 30 23:34:47 mc1 kernel: \[3761208.848869\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=41250 PROTO=TCP SPT=46244 DPT=36713 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-10-31 06:35:38
82.99.244.13 attack
" "
2019-10-31 06:20:48
103.35.198.219 attack
Oct 30 23:01:53 [host] sshd[18592]: Invalid user jo from 103.35.198.219
Oct 30 23:01:53 [host] sshd[18592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.35.198.219
Oct 30 23:01:55 [host] sshd[18592]: Failed password for invalid user jo from 103.35.198.219 port 28863 ssh2
2019-10-31 06:44:32
95.80.252.189 attackbots
Mail sent to address harvested from public web site
2019-10-31 06:26:23
106.75.210.147 attack
Oct 30 22:50:24 vps666546 sshd\[11590\]: Invalid user doku from 106.75.210.147 port 56768
Oct 30 22:50:24 vps666546 sshd\[11590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.210.147
Oct 30 22:50:26 vps666546 sshd\[11590\]: Failed password for invalid user doku from 106.75.210.147 port 56768 ssh2
Oct 30 22:54:37 vps666546 sshd\[11647\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.210.147  user=root
Oct 30 22:54:39 vps666546 sshd\[11647\]: Failed password for root from 106.75.210.147 port 37160 ssh2
...
2019-10-31 06:19:40
119.52.253.2 attack
Oct 30 21:26:38 arianus sshd\[7375\]: Invalid user ftpuser from 119.52.253.2 port 48087
...
2019-10-31 06:35:06
185.176.27.18 attack
ET DROP Dshield Block Listed Source group 1 - port: 7806 proto: TCP cat: Misc Attack
2019-10-31 06:27:14
95.213.129.163 attackbotsspam
30.10.2019 21:27:28 - RDP Login Fail Detected by 
https://www.elinox.de/RDP-Wächter
2019-10-31 06:15:20
115.159.122.190 attackspambots
Oct 30 23:16:56 server sshd\[18641\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.122.190  user=root
Oct 30 23:16:58 server sshd\[18641\]: Failed password for root from 115.159.122.190 port 57518 ssh2
Oct 30 23:26:20 server sshd\[20791\]: Invalid user db from 115.159.122.190
Oct 30 23:26:20 server sshd\[20791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.122.190 
Oct 30 23:26:22 server sshd\[20791\]: Failed password for invalid user db from 115.159.122.190 port 57444 ssh2
...
2019-10-31 06:45:52
172.105.208.132 attackspam
Connection by 172.105.208.132 on port: 1080 got caught by honeypot at 10/30/2019 8:27:03 PM
2019-10-31 06:22:49
51.68.195.146 attack
Port scan on 2 port(s): 139 445
2019-10-31 06:32:58
23.129.64.153 attack
10/30/2019-16:30:46.262156 23.129.64.153 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 57
2019-10-31 06:47:50
106.12.13.247 attackbots
$f2bV_matches
2019-10-31 06:37:19
200.39.251.245 attack
Automatic report - Port Scan Attack
2019-10-31 06:17:34
123.126.20.94 attackspambots
Oct 30 21:54:08 localhost sshd\[14977\]: Invalid user \ from 123.126.20.94
Oct 30 21:54:08 localhost sshd\[14977\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.126.20.94
Oct 30 21:54:10 localhost sshd\[14977\]: Failed password for invalid user \ from 123.126.20.94 port 49410 ssh2
Oct 30 21:58:12 localhost sshd\[15192\]: Invalid user devrey from 123.126.20.94
Oct 30 21:58:12 localhost sshd\[15192\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.126.20.94
...
2019-10-31 06:34:39

Recently Reported IPs

118.97.15.185 81.28.107.123 182.61.12.58 84.54.78.248
95.84.45.146 34.76.225.49 139.59.78.179 47.93.11.251
2.132.84.155 170.82.5.245 155.133.43.184 171.91.157.135
5.140.14.45 2.176.108.154 167.71.82.148 192.228.100.229
187.108.207.59 139.9.34.13 178.93.14.182 90.219.144.8