Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
142.93.195.157 attack
Oct  6 16:46:11 IngegnereFirenze sshd[5993]: User root from 142.93.195.157 not allowed because not listed in AllowUsers
...
2020-10-07 05:17:01
142.93.195.157 attackbotsspam
Repeated brute force against a port
2020-10-06 21:26:02
142.93.195.157 attack
Oct  5 18:46:03 sachi sshd\[31984\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157  user=root
Oct  5 18:46:04 sachi sshd\[31984\]: Failed password for root from 142.93.195.157 port 53324 ssh2
Oct  5 18:49:58 sachi sshd\[32327\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157  user=root
Oct  5 18:49:59 sachi sshd\[32327\]: Failed password for root from 142.93.195.157 port 38726 ssh2
Oct  5 18:53:26 sachi sshd\[32599\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157  user=root
2020-10-06 13:07:51
142.93.195.157 attackbots
2020-09-26T18:35:19+0200 Failed SSH Authentication/Brute Force Attack. (Server 9)
2020-09-27 00:54:11
142.93.195.157 attackspam
(sshd) Failed SSH login from 142.93.195.157 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 26 03:04:05 optimus sshd[20599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157  user=root
Sep 26 03:04:07 optimus sshd[20599]: Failed password for root from 142.93.195.157 port 54994 ssh2
Sep 26 03:17:41 optimus sshd[26737]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157  user=root
Sep 26 03:17:43 optimus sshd[26737]: Failed password for root from 142.93.195.157 port 57090 ssh2
Sep 26 03:21:19 optimus sshd[28919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157  user=root
2020-09-26 16:44:26
142.93.195.157 attackbotsspam
Sep 22 15:10:58 staging sshd[43343]: Invalid user download from 142.93.195.157 port 46336
Sep 22 15:10:58 staging sshd[43343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157 
Sep 22 15:10:58 staging sshd[43343]: Invalid user download from 142.93.195.157 port 46336
Sep 22 15:11:00 staging sshd[43343]: Failed password for invalid user download from 142.93.195.157 port 46336 ssh2
...
2020-09-23 00:07:35
142.93.195.157 attackspambots
Time:     Tue Sep 22 00:21:34 2020 +0000
IP:       142.93.195.157 (US/United States/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 22 00:02:54 3 sshd[18335]: Invalid user guest from 142.93.195.157 port 43922
Sep 22 00:02:56 3 sshd[18335]: Failed password for invalid user guest from 142.93.195.157 port 43922 ssh2
Sep 22 00:18:12 3 sshd[22200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157  user=root
Sep 22 00:18:15 3 sshd[22200]: Failed password for root from 142.93.195.157 port 40852 ssh2
Sep 22 00:21:29 3 sshd[23084]: Invalid user nagios from 142.93.195.157 port 49008
2020-09-22 16:10:08
142.93.195.157 attackspam
Sep 22 01:09:56 ns382633 sshd\[22640\]: Invalid user lorenzo from 142.93.195.157 port 58940
Sep 22 01:09:56 ns382633 sshd\[22640\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157
Sep 22 01:09:58 ns382633 sshd\[22640\]: Failed password for invalid user lorenzo from 142.93.195.157 port 58940 ssh2
Sep 22 01:16:13 ns382633 sshd\[24090\]: Invalid user gerald from 142.93.195.157 port 43644
Sep 22 01:16:13 ns382633 sshd\[24090\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157
2020-09-22 08:12:57
142.93.195.157 attackspam
Sep 18 06:28:29 master sshd[1401]: Failed password for root from 142.93.195.157 port 35516 ssh2
2020-09-18 20:26:15
142.93.195.157 attack
Sep 18 00:05:55 firewall sshd[30914]: Failed password for root from 142.93.195.157 port 41982 ssh2
Sep 18 00:09:47 firewall sshd[30998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157  user=root
Sep 18 00:09:50 firewall sshd[30998]: Failed password for root from 142.93.195.157 port 52610 ssh2
...
2020-09-18 12:45:07
142.93.195.157 attackbots
2 SSH login attempts.
2020-09-18 02:59:57
142.93.195.249 attackspam
$f2bV_matches
2020-09-09 23:48:56
142.93.195.15 attackbotsspam
Sep  9 06:47:37 haigwepa sshd[30682]: Failed password for root from 142.93.195.15 port 34886 ssh2
...
2020-09-09 20:22:45
142.93.195.249 attack
SSH brute-force attempt
2020-09-09 17:22:27
142.93.195.15 attack
Sep  9 06:47:37 haigwepa sshd[30682]: Failed password for root from 142.93.195.15 port 34886 ssh2
...
2020-09-09 14:20:26
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.195.136
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19886
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;142.93.195.136.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 14:05:34 CST 2022
;; MSG SIZE  rcvd: 107
Host info
136.195.93.142.in-addr.arpa domain name pointer box.vastlabs.co.tz.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
136.195.93.142.in-addr.arpa	name = box.vastlabs.co.tz.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
157.55.39.161 attackbotsspam
Automatic report - Banned IP Access
2020-07-31 17:50:05
51.210.64.114 attackbotsspam
Bruteforce detected by fail2ban
2020-07-31 17:57:50
222.186.175.163 attackbots
Jul 31 11:42:01 eventyay sshd[31923]: Failed password for root from 222.186.175.163 port 45724 ssh2
Jul 31 11:42:11 eventyay sshd[31923]: Failed password for root from 222.186.175.163 port 45724 ssh2
Jul 31 11:42:14 eventyay sshd[31923]: Failed password for root from 222.186.175.163 port 45724 ssh2
Jul 31 11:42:14 eventyay sshd[31923]: error: maximum authentication attempts exceeded for root from 222.186.175.163 port 45724 ssh2 [preauth]
...
2020-07-31 17:51:24
182.61.21.200 attackbots
Jul 31 11:21:54 lukav-desktop sshd\[4968\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.21.200  user=root
Jul 31 11:21:56 lukav-desktop sshd\[4968\]: Failed password for root from 182.61.21.200 port 48724 ssh2
Jul 31 11:25:48 lukav-desktop sshd\[4989\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.21.200  user=root
Jul 31 11:25:50 lukav-desktop sshd\[4989\]: Failed password for root from 182.61.21.200 port 35732 ssh2
Jul 31 11:29:49 lukav-desktop sshd\[5015\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.21.200  user=root
2020-07-31 17:34:32
202.70.65.229 attackbotsspam
Invalid user lby from 202.70.65.229 port 35562
2020-07-31 17:38:23
83.2.189.11 attack
Jul 31 05:42:12 mail.srvfarm.net postfix/smtps/smtpd[168050]: warning: unknown[83.2.189.11]: SASL PLAIN authentication failed: 
Jul 31 05:42:12 mail.srvfarm.net postfix/smtps/smtpd[168050]: lost connection after AUTH from unknown[83.2.189.11]
Jul 31 05:45:28 mail.srvfarm.net postfix/smtpd[170516]: warning: unknown[83.2.189.11]: SASL PLAIN authentication failed: 
Jul 31 05:45:28 mail.srvfarm.net postfix/smtpd[170516]: lost connection after AUTH from unknown[83.2.189.11]
Jul 31 05:48:30 mail.srvfarm.net postfix/smtps/smtpd[167189]: warning: unknown[83.2.189.11]: SASL PLAIN authentication failed:
2020-07-31 17:23:52
114.6.57.130 attackbotsspam
Failed password for root from 114.6.57.130 port 54274 ssh2
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.6.57.130  user=root
Failed password for root from 114.6.57.130 port 52968 ssh2
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.6.57.130  user=root
Failed password for root from 114.6.57.130 port 51664 ssh2
2020-07-31 17:36:08
51.195.139.140 attackspambots
2020-07-31T04:33:41.670542morrigan.ad5gb.com sshd[240134]: Failed password for root from 51.195.139.140 port 39728 ssh2
2020-07-31T04:33:42.361504morrigan.ad5gb.com sshd[240134]: Disconnected from authenticating user root 51.195.139.140 port 39728 [preauth]
2020-07-31 17:41:55
45.145.67.252 attackspambots
ET CINS Active Threat Intelligence Poor Reputation IP group 26 - port: 3000 proto: tcp cat: Misc Attackbytes: 60
2020-07-31 17:56:54
168.197.209.73 attack
Jul 31 04:59:41 mail.srvfarm.net postfix/smtps/smtpd[150342]: warning: unknown[168.197.209.73]: SASL PLAIN authentication failed: 
Jul 31 04:59:41 mail.srvfarm.net postfix/smtps/smtpd[150342]: lost connection after AUTH from unknown[168.197.209.73]
Jul 31 05:01:54 mail.srvfarm.net postfix/smtps/smtpd[150907]: warning: unknown[168.197.209.73]: SASL PLAIN authentication failed: 
Jul 31 05:01:54 mail.srvfarm.net postfix/smtps/smtpd[150907]: lost connection after AUTH from unknown[168.197.209.73]
Jul 31 05:08:07 mail.srvfarm.net postfix/smtps/smtpd[150342]: warning: unknown[168.197.209.73]: SASL PLAIN authentication failed:
2020-07-31 17:20:08
80.90.131.190 attackspam
Jul 31 05:21:46 mail.srvfarm.net postfix/smtpd[165497]: warning: 80-90-131-190.static.oxid.cz[80.90.131.190]: SASL PLAIN authentication failed: 
Jul 31 05:21:46 mail.srvfarm.net postfix/smtpd[165497]: lost connection after AUTH from 80-90-131-190.static.oxid.cz[80.90.131.190]
Jul 31 05:23:19 mail.srvfarm.net postfix/smtps/smtpd[167794]: warning: 80-90-131-190.static.oxid.cz[80.90.131.190]: SASL PLAIN authentication failed: 
Jul 31 05:23:19 mail.srvfarm.net postfix/smtps/smtpd[167794]: lost connection after AUTH from 80-90-131-190.static.oxid.cz[80.90.131.190]
Jul 31 05:24:15 mail.srvfarm.net postfix/smtps/smtpd[168051]: warning: 80-90-131-190.static.oxid.cz[80.90.131.190]: SASL PLAIN authentication failed:
2020-07-31 17:24:18
118.186.2.18 attackspambots
Jul 31 08:36:33 ncomp sshd[17179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.186.2.18  user=root
Jul 31 08:36:36 ncomp sshd[17179]: Failed password for root from 118.186.2.18 port 55315 ssh2
Jul 31 09:02:05 ncomp sshd[17686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.186.2.18  user=root
Jul 31 09:02:06 ncomp sshd[17686]: Failed password for root from 118.186.2.18 port 40520 ssh2
2020-07-31 17:50:34
37.189.29.12 attackbotsspam
Jul 31 03:49:53 hermescis postfix/smtpd[2028]: NOQUEUE: reject: RCPT from unknown[37.189.29.12]: 550 5.1.1 : Recipient address rejected:* from= to= proto=ESMTP helo=
2020-07-31 17:38:08
128.199.121.32 attackbots
Jul 31 05:09:58 NPSTNNYC01T sshd[14832]: Failed password for root from 128.199.121.32 port 40964 ssh2
Jul 31 05:14:37 NPSTNNYC01T sshd[15294]: Failed password for root from 128.199.121.32 port 54010 ssh2
...
2020-07-31 17:47:27
120.92.35.5 attack
sshd: Failed password for invalid user .... from 120.92.35.5 port 3914 ssh2 (6 attempts)
2020-07-31 17:47:59

Recently Reported IPs

142.93.194.50 142.93.195.221 142.93.190.53 142.93.194.68
142.93.199.176 142.93.2.171 142.93.205.224 142.93.198.196
142.93.209.225 142.93.202.100 142.93.206.239 142.93.209.89
142.93.57.208 142.93.58.128 142.93.56.6 142.93.54.254
142.93.56.94 142.93.55.119 142.93.60.60 142.93.51.48