142.93.2.104 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	TCP (SYN) 142.93.2.104:44651 -> port 22, len 44	2020-07-27 16:28:40

Comments on same subnet:

IP	Type	Details	Datetime
142.93.240.62	spamattack	PHISHING AND SPAM ATTACK FROM "Important Notification - newsletter@app.ksinergy.biz - " : SUBJECT "Congrats! Open Immediately! " : RECEIVED "from mail-02.ksinergy.biz ([142.93.240.62]:39126) " : DATE/TIMESENT "Mon, 01 Mar 2021 10:14:52 ": IP ADDRESS "inetnum: 142.93.0.0 - 142.93.255.255 OrgName: DigitalOcean, LLC	2021-03-01 08:16:37
142.93.240.62	spamattack	PHISHING AND SPAM ATTACK FROM "Casino For You - newsletter@app.ksinergy.biz -" : SUBJECT "Join today and receive an amazing welcome bonus " : RECEIVED "from mail-02.ksinergy.biz ([142.93.240.62]:57421) " : DATE/TIMESENT "Tue, 23 Feb 2021 01:27:07 "	2021-02-23 04:32:24
142.93.212.91	attackbotsspam	SSH BruteForce Attack	2020-10-13 01:56:49
142.93.237.57	attack	Multiport scan 2 ports : 1583 27080	2020-10-12 21:16:28
142.93.212.91	attack	Oct 12 10:23:09 localhost sshd\[19098\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.91 user=root Oct 12 10:23:11 localhost sshd\[19098\]: Failed password for root from 142.93.212.91 port 59394 ssh2 Oct 12 10:27:27 localhost sshd\[19552\]: Invalid user sanjeev from 142.93.212.91 Oct 12 10:27:27 localhost sshd\[19552\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.91 Oct 12 10:27:29 localhost sshd\[19552\]: Failed password for invalid user sanjeev from 142.93.212.91 port 36984 ssh2 ...	2020-10-12 17:20:25
142.93.237.57	attack	1089/tcp 5984/tcp [2020-10-11]2pkt	2020-10-12 12:46:46
142.93.211.36	attackspambots	Oct 12 00:25:27 hidden sshd[869]: Failed password for hidden from 142.93.211.36 port 56534 ssh2 Oct 12 00:28:28 hidden sshd[1320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.211.36 user=root Oct 12 00:28:30 hidden sshd[1320]: Failed password for hidden from 142.93.211.36 port 40212 ssh2	2020-10-12 07:11:11
142.93.209.251	attackbotsspam	Oct 11 22:07:55 v2202009116398126984 sshd[2515868]: Invalid user elke from 142.93.209.251 port 44534 ...	2020-10-12 06:24:15
142.93.223.118	attackspam	SSH login attempts.	2020-10-12 04:12:31
142.93.211.36	attackspam	Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-10-11 23:23:00
142.93.209.251	attack	Oct 11 16:26:57 sso sshd[30604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.209.251 Oct 11 16:26:59 sso sshd[30604]: Failed password for invalid user chris from 142.93.209.251 port 59794 ssh2 ...	2020-10-11 22:34:31
142.93.223.118	attackspam	SSH login attempts.	2020-10-11 20:11:30
142.93.211.36	attack	Fail2Ban	2020-10-11 15:21:45
142.93.209.251	attackbots	(sshd) Failed SSH login from 142.93.209.251 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 11 00:54:24 optimus sshd[28004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.209.251 user=root Oct 11 00:54:27 optimus sshd[28004]: Failed password for root from 142.93.209.251 port 54930 ssh2 Oct 11 01:19:11 optimus sshd[6951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.209.251 user=root Oct 11 01:19:13 optimus sshd[6951]: Failed password for root from 142.93.209.251 port 56072 ssh2 Oct 11 01:24:49 optimus sshd[11852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.209.251 user=root	2020-10-11 14:29:57
142.93.223.118	attackspam	2020-10-11T07:03:53.476597lavrinenko.info sshd[19701]: Failed password for root from 142.93.223.118 port 55582 ssh2 2020-10-11T07:07:58.292860lavrinenko.info sshd[19798]: Invalid user next from 142.93.223.118 port 33376 2020-10-11T07:07:58.302917lavrinenko.info sshd[19798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.223.118 2020-10-11T07:07:58.292860lavrinenko.info sshd[19798]: Invalid user next from 142.93.223.118 port 33376 2020-10-11T07:08:00.553715lavrinenko.info sshd[19798]: Failed password for invalid user next from 142.93.223.118 port 33376 ssh2 ...	2020-10-11 12:10:33

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.2.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62261
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.2.104.			IN	A

;; AUTHORITY SECTION:
.			321	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020072700 1800 900 604800 86400

;; Query time: 74 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jul 27 16:28:33 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 104.2.93.142.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 104.2.93.142.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
138.68.48.118	attack	Apr 4 15:37:58 vpn01 sshd[12142]: Failed password for root from 138.68.48.118 port 49230 ssh2 ...	2020-04-04 21:43:04
112.85.42.188	attack	04/04/2020-09:46:36.529698 112.85.42.188 Protocol: 6 ET SCAN Potential SSH Scan	2020-04-04 21:48:22
119.192.55.100	attack	Invalid user timson from 119.192.55.100 port 52109	2020-04-04 21:32:34
67.219.145.11	attackspambots	SpamScore above: 10.0	2020-04-04 21:47:11
114.67.69.80	attack	2020-04-04T10:52:12.449376dmca.cloudsearch.cf sshd[27378]: Invalid user cy from 114.67.69.80 port 48544 2020-04-04T10:52:12.456533dmca.cloudsearch.cf sshd[27378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.69.80 2020-04-04T10:52:12.449376dmca.cloudsearch.cf sshd[27378]: Invalid user cy from 114.67.69.80 port 48544 2020-04-04T10:52:14.468399dmca.cloudsearch.cf sshd[27378]: Failed password for invalid user cy from 114.67.69.80 port 48544 ssh2 2020-04-04T10:56:18.561205dmca.cloudsearch.cf sshd[27748]: Invalid user cy from 114.67.69.80 port 43360 2020-04-04T10:56:18.567342dmca.cloudsearch.cf sshd[27748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.69.80 2020-04-04T10:56:18.561205dmca.cloudsearch.cf sshd[27748]: Invalid user cy from 114.67.69.80 port 43360 2020-04-04T10:56:20.353248dmca.cloudsearch.cf sshd[27748]: Failed password for invalid user cy from 114.67.69.80 port 43360 ssh2 ...	2020-04-04 21:20:17
195.154.28.205	attack	[2020-04-04 09:18:47] NOTICE[12114][C-00001500] chan_sip.c: Call from '' (195.154.28.205:55706) to extension '681017652305118' rejected because extension not found in context 'public'. [2020-04-04 09:18:47] SECURITY[12128] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-04T09:18:47.686-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="681017652305118",SessionID="0x7f020c0ca898",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154.28.205/55706",ACLName="no_extension_match" [2020-04-04 09:26:58] NOTICE[12114][C-0000150d] chan_sip.c: Call from '' (195.154.28.205:58323) to extension '581017652305118' rejected because extension not found in context 'public'. [2020-04-04 09:26:58] SECURITY[12128] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-04T09:26:58.140-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="581017652305118",SessionID="0x7f020c04b958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IP ...	2020-04-04 21:41:56
171.244.37.199	attack	Automatic report - XMLRPC Attack	2020-04-04 21:09:42
49.233.69.121	attackbotsspam	3x Failed Password	2020-04-04 21:22:27
107.180.109.1	attackspambots	Wordpress attack	2020-04-04 21:36:28
128.199.177.16	attack	(sshd) Failed SSH login from 128.199.177.16 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 4 12:09:54 elude sshd[21085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.177.16 user=root Apr 4 12:09:56 elude sshd[21085]: Failed password for root from 128.199.177.16 port 47526 ssh2 Apr 4 12:23:39 elude sshd[21652]: Invalid user test from 128.199.177.16 port 57606 Apr 4 12:23:40 elude sshd[21652]: Failed password for invalid user test from 128.199.177.16 port 57606 ssh2 Apr 4 12:28:37 elude sshd[21878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.177.16 user=root	2020-04-04 21:09:59
132.232.69.56	attackbots	Apr 4 18:38:47 gw1 sshd[28787]: Failed password for root from 132.232.69.56 port 32810 ssh2 ...	2020-04-04 21:51:41
103.254.198.67	attackbotsspam	sshd jail - ssh hack attempt	2020-04-04 21:33:35
180.168.141.246	attackbots	Apr 4 15:39:47 lock-38 sshd[553890]: Failed password for root from 180.168.141.246 port 51514 ssh2 Apr 4 15:41:13 lock-38 sshd[553948]: Failed password for root from 180.168.141.246 port 41960 ssh2 Apr 4 15:42:19 lock-38 sshd[553984]: Failed password for root from 180.168.141.246 port 56734 ssh2 Apr 4 15:43:17 lock-38 sshd[554017]: Failed password for root from 180.168.141.246 port 43276 ssh2 Apr 4 15:44:19 lock-38 sshd[554040]: Failed password for root from 180.168.141.246 port 58050 ssh2 ...	2020-04-04 22:09:32
34.67.167.106	attack	Apr 4 06:00:11 xxxxxxx0 sshd[26245]: Invalid user user from 34.67.167.106 port 60438 Apr 4 06:00:12 xxxxxxx0 sshd[26245]: Failed password for invalid user user from 34.67.167.106 port 60438 ssh2 Apr 4 06:04:50 xxxxxxx0 sshd[27985]: Failed password for r.r from 34.67.167.106 port 55196 ssh2 Apr 4 06:08:41 xxxxxxx0 sshd[28812]: Failed password for r.r from 34.67.167.106 port 41556 ssh2 Apr 4 06:12:37 xxxxxxx0 sshd[29650]: Failed password for r.r from 34.67.167.106 port 56142 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=34.67.167.106	2020-04-04 21:19:13
51.15.205.28	attack	2020-04-03T23:29:14.376681randservbullet-proofcloud-66.localdomain sshd[10328]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.205.28 user=root 2020-04-03T23:29:16.824968randservbullet-proofcloud-66.localdomain sshd[10328]: Failed password for root from 51.15.205.28 port 54320 ssh2 2020-04-04T03:49:03.672861randservbullet-proofcloud-66.localdomain sshd[11331]: Invalid user admin from 51.15.205.28 port 43010 ...	2020-04-04 21:10:34

Recently Reported IPs

171.212.81.203	58.161.78.214	69.144.62.43	1.0.135.56
187.250.65.244	46.41.134.9	177.129.206.95	209.97.177.73
41.239.2.18	198.37.61.44	46.169.253.158	182.73.171.90
209.239.115.183	72.228.61.61	1.4.246.223	6.156.98.197
46.59.65.88	191.16.102.226	210.175.233.154	93.184.92.236