Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-08-11 01:25:04
attack
 TCP (SYN) 142.93.201.112:50711 -> port 12072, len 44
2020-08-08 04:11:37
attackspam
07/13/2020-10:59:02.940680 142.93.201.112 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-07-13 23:02:23
attackbots
Jul  9 23:41:53 debian-2gb-nbg1-2 kernel: \[16589505.305724\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=142.93.201.112 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=16093 PROTO=TCP SPT=48956 DPT=9360 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-10 05:52:48
attackbots
Port scan denied
2020-05-27 17:31:10
attack
" "
2020-05-24 15:38:59
attack
" "
2020-05-08 21:02:26
attackbotsspam
Apr 18 13:59:42 debian-2gb-nbg1-2 kernel: \[9470154.029182\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=142.93.201.112 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=20208 PROTO=TCP SPT=54543 DPT=2205 WINDOW=1024 RES=0x00 SYN URGP=0
2020-04-19 00:58:46
Comments on same subnet:
IP Type Details Datetime
142.93.201.168 attackbotsspam
Dec 27 10:36:41 v22018076590370373 sshd[11016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.201.168 
...
2020-02-02 03:53:39
142.93.201.168 attackbots
Unauthorized connection attempt detected from IP address 142.93.201.168 to port 22
2020-01-01 05:53:35
142.93.201.168 attack
Dec 31 13:16:22 server sshd\[30253\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.201.168  user=root
Dec 31 13:16:24 server sshd\[30253\]: Failed password for root from 142.93.201.168 port 51863 ssh2
Dec 31 13:22:08 server sshd\[31481\]: Invalid user chien from 142.93.201.168
Dec 31 13:22:08 server sshd\[31481\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.201.168 
Dec 31 13:22:10 server sshd\[31481\]: Failed password for invalid user chien from 142.93.201.168 port 41983 ssh2
...
2019-12-31 18:42:20
142.93.201.168 attack
" "
2019-12-28 13:35:34
142.93.201.168 attackspambots
*Port Scan* detected from 142.93.201.168 (US/United States/209060.cloudwaysapps.com). 4 hits in the last 215 seconds
2019-12-24 13:15:12
142.93.201.168 attackspambots
Dec 23 22:24:37 raspberrypi sshd\[2322\]: Invalid user fraties from 142.93.201.168Dec 23 22:24:40 raspberrypi sshd\[2322\]: Failed password for invalid user fraties from 142.93.201.168 port 33917 ssh2Dec 23 22:46:23 raspberrypi sshd\[2954\]: Invalid user guest from 142.93.201.168
...
2019-12-24 08:54:04
142.93.201.168 attackbotsspam
Dec  9 00:37:13 itv-usvr-02 sshd[18818]: Invalid user boukra from 142.93.201.168 port 43310
Dec  9 00:37:13 itv-usvr-02 sshd[18818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.201.168
Dec  9 00:37:13 itv-usvr-02 sshd[18818]: Invalid user boukra from 142.93.201.168 port 43310
Dec  9 00:37:15 itv-usvr-02 sshd[18818]: Failed password for invalid user boukra from 142.93.201.168 port 43310 ssh2
Dec  9 00:43:48 itv-usvr-02 sshd[18918]: Invalid user user from 142.93.201.168 port 57970
2019-12-09 02:05:05
142.93.201.168 attackspam
Dec  7 09:08:22 hcbbdb sshd\[16200\]: Invalid user acunningham from 142.93.201.168
Dec  7 09:08:22 hcbbdb sshd\[16200\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.201.168
Dec  7 09:08:24 hcbbdb sshd\[16200\]: Failed password for invalid user acunningham from 142.93.201.168 port 53326 ssh2
Dec  7 09:13:51 hcbbdb sshd\[16826\]: Invalid user emesh from 142.93.201.168
Dec  7 09:13:51 hcbbdb sshd\[16826\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.201.168
2019-12-07 20:47:38
142.93.201.168 attack
2019-11-29T05:32:57.6204951495-001 sshd\[20431\]: Invalid user hobesh from 142.93.201.168 port 44941
2019-11-29T05:32:57.6277221495-001 sshd\[20431\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.201.168
2019-11-29T05:32:59.7501251495-001 sshd\[20431\]: Failed password for invalid user hobesh from 142.93.201.168 port 44941 ssh2
2019-11-29T05:35:57.2355031495-001 sshd\[20580\]: Invalid user webmaster from 142.93.201.168 port 34556
2019-11-29T05:35:57.2388761495-001 sshd\[20580\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.201.168
2019-11-29T05:35:59.4060201495-001 sshd\[20580\]: Failed password for invalid user webmaster from 142.93.201.168 port 34556 ssh2
...
2019-11-29 18:49:08
142.93.201.168 attackbotsspam
Nov 27 10:24:24 server sshd\[10517\]: Invalid user clintick from 142.93.201.168 port 55199
Nov 27 10:24:24 server sshd\[10517\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.201.168
Nov 27 10:24:25 server sshd\[10517\]: Failed password for invalid user clintick from 142.93.201.168 port 55199 ssh2
Nov 27 10:30:27 server sshd\[10916\]: Invalid user flyer from 142.93.201.168 port 45067
Nov 27 10:30:27 server sshd\[10916\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.201.168
2019-11-27 16:36:23
142.93.201.168 attackspambots
detected by Fail2Ban
2019-11-22 03:49:25
142.93.201.168 attack
SSH Brute-Force attacks
2019-11-17 05:03:42
142.93.201.168 attack
Nov 14 08:57:44 root sshd[6856]: Failed password for root from 142.93.201.168 port 43292 ssh2
Nov 14 09:01:34 root sshd[6887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.201.168 
Nov 14 09:01:37 root sshd[6887]: Failed password for invalid user phyliss from 142.93.201.168 port 33423 ssh2
...
2019-11-14 16:58:58
142.93.201.168 attackspam
Nov 10 09:17:50 vps sshd[31190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.201.168 
Nov 10 09:17:52 vps sshd[31190]: Failed password for invalid user mg from 142.93.201.168 port 35880 ssh2
Nov 10 09:33:08 vps sshd[31846]: Failed password for root from 142.93.201.168 port 56933 ssh2
...
2019-11-10 19:26:15
142.93.201.168 attackspam
SSH Bruteforce attempt
2019-11-08 17:31:39
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.201.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2960
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.201.112.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020041702 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 19 00:58:42 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 112.201.93.142.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 112.201.93.142.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
198.108.67.50 attack
Port scan: Attack repeated for 24 hours
2019-07-13 06:06:17
36.84.80.31 attackspambots
Jul 12 23:31:42 localhost sshd\[22788\]: Invalid user db2fenc1 from 36.84.80.31 port 57249
Jul 12 23:31:42 localhost sshd\[22788\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.84.80.31
Jul 12 23:31:44 localhost sshd\[22788\]: Failed password for invalid user db2fenc1 from 36.84.80.31 port 57249 ssh2
2019-07-13 06:14:43
197.204.45.110 attack
Jul 12 21:58:02 tux postfix/smtpd[31571]: connect from unknown[197.204.45.110]
Jul x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=197.204.45.110
2019-07-13 06:46:02
178.33.234.234 attackbotsspam
Jul 13 00:11:31 s64-1 sshd[15669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.234.234
Jul 13 00:11:33 s64-1 sshd[15669]: Failed password for invalid user joe from 178.33.234.234 port 44180 ssh2
Jul 13 00:16:12 s64-1 sshd[15750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.234.234
...
2019-07-13 06:31:03
197.248.16.118 attackbotsspam
Jul 12 22:07:31 MK-Soft-Root1 sshd\[16777\]: Invalid user johan from 197.248.16.118 port 40362
Jul 12 22:07:31 MK-Soft-Root1 sshd\[16777\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.16.118
Jul 12 22:07:33 MK-Soft-Root1 sshd\[16777\]: Failed password for invalid user johan from 197.248.16.118 port 40362 ssh2
...
2019-07-13 06:13:21
89.252.184.54 attackspam
WordPress brute force
2019-07-13 06:19:08
211.38.244.205 attack
Jul 12 21:26:15 localhost sshd\[15048\]: Invalid user pedro from 211.38.244.205 port 50890
Jul 12 21:26:15 localhost sshd\[15048\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.38.244.205
Jul 12 21:26:17 localhost sshd\[15048\]: Failed password for invalid user pedro from 211.38.244.205 port 50890 ssh2
...
2019-07-13 06:39:39
191.100.26.142 attackspam
Jul 12 23:47:32 * sshd[17706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.100.26.142
Jul 12 23:47:34 * sshd[17706]: Failed password for invalid user mailserver from 191.100.26.142 port 46013 ssh2
2019-07-13 06:06:37
208.118.88.242 attackspam
Jul 12 22:07:29 62-210-73-4 sshd\[4030\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.118.88.242  user=root
Jul 12 22:07:31 62-210-73-4 sshd\[4030\]: Failed password for root from 208.118.88.242 port 52722 ssh2
...
2019-07-13 06:16:37
14.207.98.19 attackspambots
Jul 12 21:53:46 xxxxxxx sshd[2109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mx-ll-14.207.98-19.dynamic.3bb.co.th
Jul 12 21:53:48 xxxxxxx sshd[2109]: Failed password for invalid user admin from 14.207.98.19 port 58144 ssh2
Jul 12 21:53:49 xxxxxxx sshd[2109]: Connection closed by 14.207.98.19 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=14.207.98.19
2019-07-13 06:20:58
95.248.112.28 attackbots
Jul1222:07:33server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin4secs\):user=\\,method=PLAIN\,rip=95.248.112.28\,lip=148.251.104.70\,TLS:Connectionclosed\,session=\Jul1222:19:26server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin13secs\):user=\\,method=PLAIN\,rip=95.248.112.28\,lip=148.251.104.70\,TLS:Connectionclosed\,session=\Jul1222:19:26server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin8secs\):user=\\,method=PLAIN\,rip=95.248.112.28\,lip=148.251.104.70\,TLS:Connectionclosed\,session=\<5hsCoIGN6Olf HAc\>Jul1222:19:33server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin7secs\):user=\\,method=PLAIN\,rip=95.248.112.28\,lip=148.251.104.70\,TLS\,session=\Jul1222:14:11server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin3secs\):user=\\,method=PLAIN\,rip=95.248.112.28\,lip=148.251.104.70\,
2019-07-13 06:12:47
182.151.214.108 attack
Jul 12 23:48:13 vps647732 sshd[32109]: Failed password for root from 182.151.214.108 port 23546 ssh2
Jul 12 23:54:03 vps647732 sshd[32345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.151.214.108
...
2019-07-13 06:13:04
213.124.16.74 attack
RDP Brute-Force (Grieskirchen RZ1)
2019-07-13 06:12:28
178.128.82.133 attack
Jul 12 21:59:42 mail sshd\[23691\]: Invalid user jana from 178.128.82.133 port 59368
Jul 12 21:59:42 mail sshd\[23691\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.82.133
Jul 12 21:59:44 mail sshd\[23691\]: Failed password for invalid user jana from 178.128.82.133 port 59368 ssh2
Jul 12 22:05:34 mail sshd\[25113\]: Invalid user tomee from 178.128.82.133 port 60998
Jul 12 22:05:34 mail sshd\[25113\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.82.133
2019-07-13 06:34:28
112.85.42.180 attack
SSH Brute Force
2019-07-13 06:00:52

Recently Reported IPs

113.190.109.103 113.172.122.202 89.40.115.154 196.194.253.205
183.88.38.2 181.30.28.174 179.241.230.0 157.55.81.99
156.223.158.107 156.213.38.184 90.197.101.211 123.21.197.139
117.36.74.58 113.173.185.141 113.173.48.166 113.162.159.38
102.45.38.150 78.24.218.27 49.235.183.37 41.232.212.247