Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Sep  7 13:18:40 eddieflores sshd\[27227\]: Invalid user postgres from 142.93.208.219
Sep  7 13:18:40 eddieflores sshd\[27227\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.219
Sep  7 13:18:42 eddieflores sshd\[27227\]: Failed password for invalid user postgres from 142.93.208.219 port 34816 ssh2
Sep  7 13:23:09 eddieflores sshd\[27563\]: Invalid user oracle from 142.93.208.219
Sep  7 13:23:09 eddieflores sshd\[27563\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.219
2019-09-08 07:33:17
attackspambots
Sep  5 00:35:31 hpm sshd\[13710\]: Invalid user webmaster from 142.93.208.219
Sep  5 00:35:31 hpm sshd\[13710\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.219
Sep  5 00:35:33 hpm sshd\[13710\]: Failed password for invalid user webmaster from 142.93.208.219 port 38906 ssh2
Sep  5 00:40:11 hpm sshd\[14245\]: Invalid user mysqlmysql from 142.93.208.219
Sep  5 00:40:11 hpm sshd\[14245\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.219
2019-09-05 18:55:20
attack
Aug 28 05:57:31 hiderm sshd\[29194\]: Invalid user test from 142.93.208.219
Aug 28 05:57:31 hiderm sshd\[29194\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.219
Aug 28 05:57:33 hiderm sshd\[29194\]: Failed password for invalid user test from 142.93.208.219 port 57578 ssh2
Aug 28 06:02:13 hiderm sshd\[29594\]: Invalid user ftpuser1 from 142.93.208.219
Aug 28 06:02:13 hiderm sshd\[29594\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.219
2019-08-29 07:52:12
attackbots
Aug 22 12:54:39 vps691689 sshd[19492]: Failed password for root from 142.93.208.219 port 49438 ssh2
Aug 22 12:59:39 vps691689 sshd[19631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.219
...
2019-08-22 19:15:07
Comments on same subnet:
IP Type Details Datetime
142.93.208.69 attackbots
04/12/2020-17:16:51.543747 142.93.208.69 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-04-13 08:28:08
142.93.208.158 attack
SSH login attempts.
2020-03-19 16:07:54
142.93.208.220 attackbots
Mar 13 14:03:07 web8 sshd\[15273\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.220  user=root
Mar 13 14:03:09 web8 sshd\[15273\]: Failed password for root from 142.93.208.220 port 57966 ssh2
Mar 13 14:08:03 web8 sshd\[17919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.220  user=root
Mar 13 14:08:05 web8 sshd\[17919\]: Failed password for root from 142.93.208.220 port 41744 ssh2
Mar 13 14:12:56 web8 sshd\[20670\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.220  user=root
2020-03-13 23:10:13
142.93.208.158 attackbotsspam
Mar  9 18:36:45 lukav-desktop sshd\[16609\]: Invalid user tr from 142.93.208.158
Mar  9 18:36:45 lukav-desktop sshd\[16609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.158
Mar  9 18:36:46 lukav-desktop sshd\[16609\]: Failed password for invalid user tr from 142.93.208.158 port 36694 ssh2
Mar  9 18:40:15 lukav-desktop sshd\[16638\]: Invalid user docs from 142.93.208.158
Mar  9 18:40:15 lukav-desktop sshd\[16638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.158
2020-03-10 03:20:21
142.93.208.250 attack
2020-03-07T12:44:19.452885dmca.cloudsearch.cf sshd[26998]: Invalid user ubuntu from 142.93.208.250 port 52048
2020-03-07T12:44:19.459556dmca.cloudsearch.cf sshd[26998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=demo.b2grow.com
2020-03-07T12:44:19.452885dmca.cloudsearch.cf sshd[26998]: Invalid user ubuntu from 142.93.208.250 port 52048
2020-03-07T12:44:21.949980dmca.cloudsearch.cf sshd[26998]: Failed password for invalid user ubuntu from 142.93.208.250 port 52048 ssh2
2020-03-07T12:48:08.529859dmca.cloudsearch.cf sshd[27227]: Invalid user leo from 142.93.208.250 port 52778
2020-03-07T12:48:08.535947dmca.cloudsearch.cf sshd[27227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=demo.b2grow.com
2020-03-07T12:48:08.529859dmca.cloudsearch.cf sshd[27227]: Invalid user leo from 142.93.208.250 port 52778
2020-03-07T12:48:10.465672dmca.cloudsearch.cf sshd[27227]: Failed password for invalid user leo from 142.
...
2020-03-07 21:06:37
142.93.208.24 attackbots
Jan1505:49:43server4pure-ftpd:\(\?@103.16.228.20\)[WARNING]Authenticationfailedforuser[info]Jan1505:49:09server4pure-ftpd:\(\?@144.217.197.11\)[WARNING]Authenticationfailedforuser[info]Jan1505:49:28server4pure-ftpd:\(\?@144.217.197.11\)[WARNING]Authenticationfailedforuser[info]Jan1505:49:30server4pure-ftpd:\(\?@103.16.228.20\)[WARNING]Authenticationfailedforuser[info]Jan1505:49:55server4pure-ftpd:\(\?@142.93.208.24\)[WARNING]Authenticationfailedforuser[info]Jan1505:49:56server4pure-ftpd:\(\?@103.16.228.20\)[WARNING]Authenticationfailedforuser[info]Jan1505:49:59server4pure-ftpd:\(\?@103.18.179.196\)[WARNING]Authenticationfailedforuser[info]Jan1505:50:02server4pure-ftpd:\(\?@35.194.4.89\)[WARNING]Authenticationfailedforuser[info]Jan1505:49:22server4pure-ftpd:\(\?@144.217.197.11\)[WARNING]Authenticationfailedforuser[info]Jan1505:49:48server4pure-ftpd:\(\?@103.16.228.20\)[WARNING]Authenticationfailedforuser[info]IPAddressesBlocked:103.16.228.20\(HK/HongKong/www.northridgefinancialpartners.com\)144.217.197.11\(US/
2020-01-15 17:25:24
142.93.208.250 attackbotsspam
Unauthorized connection attempt detected from IP address 142.93.208.250 to port 2220 [J]
2020-01-14 05:10:49
142.93.208.92 attackbotsspam
Dec 26 07:18:41 mail sshd\[2145\]: Invalid user ftpuser from 142.93.208.92
Dec 26 07:18:53 mail sshd\[2149\]: Invalid user git from 142.93.208.92
Dec 26 07:19:06 mail sshd\[2166\]: Invalid user oracle from 142.93.208.92
Dec 26 07:19:33 mail sshd\[2172\]: Invalid user ftpuser from 142.93.208.92
Dec 26 07:19:47 mail sshd\[2175\]: Invalid user oracle from 142.93.208.92
...
2019-12-26 22:06:43
142.93.208.92 attackbots
2019-12-25T07:09:01.598728shield sshd\[31609\]: Invalid user redis from 142.93.208.92 port 53980
2019-12-25T07:09:01.603088shield sshd\[31609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.92
2019-12-25T07:09:03.531532shield sshd\[31609\]: Failed password for invalid user redis from 142.93.208.92 port 53980 ssh2
2019-12-25T07:12:35.235777shield sshd\[559\]: Invalid user www from 142.93.208.92 port 33408
2019-12-25T07:12:35.240148shield sshd\[559\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.92
2019-12-25 20:39:01
142.93.208.190 attackbotsspam
RDP Bruteforce
2019-12-18 21:48:05
142.93.208.158 attackbots
SSH Brute-Force reported by Fail2Ban
2019-08-13 03:51:15
142.93.208.158 attackbots
19.07.2019 02:02:44 SSH access blocked by firewall
2019-07-19 10:35:13
142.93.208.158 attackbots
Jul 17 04:09:03 pornomens sshd\[14137\]: Invalid user orange from 142.93.208.158 port 51408
Jul 17 04:09:03 pornomens sshd\[14137\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.158
Jul 17 04:09:05 pornomens sshd\[14137\]: Failed password for invalid user orange from 142.93.208.158 port 51408 ssh2
...
2019-07-17 10:15:45
142.93.208.158 attack
Fail2Ban Ban Triggered
2019-07-16 18:25:57
142.93.208.158 attackspambots
2019-07-15T17:06:48.204572abusebot-7.cloudsearch.cf sshd\[5504\]: Invalid user bank from 142.93.208.158 port 43958
2019-07-16 01:41:09
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.208.219
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35359
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.208.219.			IN	A

;; AUTHORITY SECTION:
.			1998	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081900 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Aug 19 17:14:14 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 219.208.93.142.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 219.208.93.142.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
51.91.19.169 attack
Invalid user oracle from 51.91.19.169 port 45254
2020-06-06 02:33:13
112.31.12.175 attack
Invalid user ewald from 112.31.12.175 port 42761
2020-06-06 02:21:00
61.160.99.44 attackbotsspam
Invalid user ftpuser from 61.160.99.44 port 33279
2020-06-06 02:30:52
82.79.29.101 attackbots
Invalid user dong from 82.79.29.101 port 42498
2020-06-06 02:29:17
101.99.20.59 attackbots
Invalid user nagesh from 101.99.20.59 port 58888
2020-06-06 02:26:40
62.234.156.221 attack
Jun  5 19:55:24 minden010 sshd[4971]: Failed password for root from 62.234.156.221 port 35696 ssh2
Jun  5 20:00:43 minden010 sshd[6717]: Failed password for root from 62.234.156.221 port 52594 ssh2
...
2020-06-06 02:30:24
54.37.66.73 attack
Invalid user tochika from 54.37.66.73 port 44956
2020-06-06 02:32:54
58.20.129.76 attackbotsspam
Jun  5 20:06:54 server sshd[29058]: Failed password for root from 58.20.129.76 port 54508 ssh2
Jun  5 20:09:58 server sshd[29506]: Failed password for root from 58.20.129.76 port 41512 ssh2
...
2020-06-06 02:32:17
1.248.175.183 attackbots
Invalid user pi from 1.248.175.183 port 25304
2020-06-06 02:38:29
106.12.77.32 attackspambots
Invalid user carlton from 106.12.77.32 port 55640
2020-06-06 02:24:48
112.65.127.154 attackspam
Jun  5 19:08:22 haigwepa sshd[31512]: Failed password for root from 112.65.127.154 port 14287 ssh2
...
2020-06-06 02:20:12
73.41.104.30 attack
2020-06-05T19:55:27.481497h2857900.stratoserver.net sshd[24821]: Invalid user song from 73.41.104.30 port 34377
2020-06-05T20:01:48.701868h2857900.stratoserver.net sshd[24863]: Invalid user song from 73.41.104.30 port 54569
...
2020-06-06 02:30:06
122.51.183.47 attackspambots
Jun  5 17:59:12 lukav-desktop sshd\[10790\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.183.47  user=root
Jun  5 17:59:14 lukav-desktop sshd\[10790\]: Failed password for root from 122.51.183.47 port 56716 ssh2
Jun  5 18:01:29 lukav-desktop sshd\[10816\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.183.47  user=root
Jun  5 18:01:31 lukav-desktop sshd\[10816\]: Failed password for root from 122.51.183.47 port 51334 ssh2
Jun  5 18:03:45 lukav-desktop sshd\[10838\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.183.47  user=root
2020-06-06 02:17:54
167.172.249.58 attack
Jun  5 20:04:14 vmi345603 sshd[18381]: Failed password for root from 167.172.249.58 port 53986 ssh2
...
2020-06-06 02:49:46
5.39.94.77 attackbots
Jun  5 19:23:30 DAAP sshd[2089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.94.77  user=root
Jun  5 19:23:31 DAAP sshd[2089]: Failed password for root from 5.39.94.77 port 12780 ssh2
Jun  5 19:26:59 DAAP sshd[2145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.94.77  user=root
Jun  5 19:27:01 DAAP sshd[2145]: Failed password for root from 5.39.94.77 port 44257 ssh2
Jun  5 19:30:18 DAAP sshd[2210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.94.77  user=root
Jun  5 19:30:19 DAAP sshd[2210]: Failed password for root from 5.39.94.77 port 52480 ssh2
...
2020-06-06 02:45:02

Recently Reported IPs

37.127.114.254 202.154.186.106 222.189.206.183 56.195.200.56
108.173.78.82 164.68.112.203 218.88.201.253 201.114.252.23
122.215.173.81 24.151.75.63 80.142.201.233 84.163.255.14
134.249.170.100 81.155.16.195 185.163.109.66 98.190.154.53
69.171.214.176 220.173.104.148 119.51.85.159 174.138.20.134