142.93.212.168

Basic Info

City: unknown

Region: unknown

Country: India

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt detected from IP address 142.93.212.168 to port 2220 [J]	2020-02-02 03:49:19
attackbots	$f2bV_matches	2020-01-11 23:01:44
attackspam	Dec 19 18:48:51 hpm sshd\[15788\]: Invalid user advanced from 142.93.212.168 Dec 19 18:48:51 hpm sshd\[15788\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.168 Dec 19 18:48:52 hpm sshd\[15788\]: Failed password for invalid user advanced from 142.93.212.168 port 47410 ssh2 Dec 19 18:56:55 hpm sshd\[16573\]: Invalid user rippere from 142.93.212.168 Dec 19 18:56:55 hpm sshd\[16573\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.168	2019-12-20 13:00:41
attack	Dec 15 21:14:51 kapalua sshd\[16321\]: Invalid user presbruhi from 142.93.212.168 Dec 15 21:14:51 kapalua sshd\[16321\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.168 Dec 15 21:14:53 kapalua sshd\[16321\]: Failed password for invalid user presbruhi from 142.93.212.168 port 60192 ssh2 Dec 15 21:20:36 kapalua sshd\[16874\]: Invalid user guest from 142.93.212.168 Dec 15 21:20:36 kapalua sshd\[16874\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.168	2019-12-16 15:22:48
attackspam	SSH Brute Force	2019-12-07 22:12:03
attack	$f2bV_matches	2019-12-02 06:38:44
attack	2019-11-16T08:28:23.699388hub.schaetter.us sshd\[23635\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.168 user=bin 2019-11-16T08:28:25.975308hub.schaetter.us sshd\[23635\]: Failed password for bin from 142.93.212.168 port 49512 ssh2 2019-11-16T08:32:42.837558hub.schaetter.us sshd\[23675\]: Invalid user worren from 142.93.212.168 port 60280 2019-11-16T08:32:42.859118hub.schaetter.us sshd\[23675\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.168 2019-11-16T08:32:45.024428hub.schaetter.us sshd\[23675\]: Failed password for invalid user worren from 142.93.212.168 port 60280 ssh2 ...	2019-11-16 17:20:10
attackspambots	Nov 9 07:38:18 srv01 sshd[10793]: Invalid user url from 142.93.212.168 Nov 9 07:38:18 srv01 sshd[10793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.168 Nov 9 07:38:18 srv01 sshd[10793]: Invalid user url from 142.93.212.168 Nov 9 07:38:20 srv01 sshd[10793]: Failed password for invalid user url from 142.93.212.168 port 48458 ssh2 Nov 9 07:42:40 srv01 sshd[10988]: Invalid user svk from 142.93.212.168 ...	2019-11-09 17:39:52
attack	2019-11-06T17:22:42.669746abusebot-8.cloudsearch.cf sshd\[30298\]: Invalid user userftp from 142.93.212.168 port 34264	2019-11-07 01:47:23
attackbots	Nov 5 21:33:04 hanapaa sshd\[20809\]: Invalid user 123 from 142.93.212.168 Nov 5 21:33:04 hanapaa sshd\[20809\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.168 Nov 5 21:33:06 hanapaa sshd\[20809\]: Failed password for invalid user 123 from 142.93.212.168 port 36974 ssh2 Nov 5 21:37:38 hanapaa sshd\[21312\]: Invalid user franktang from 142.93.212.168 Nov 5 21:37:38 hanapaa sshd\[21312\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.168	2019-11-06 15:46:44
attackbotsspam	2019-11-04T16:10:07.651765abusebot-8.cloudsearch.cf sshd\[19598\]: Invalid user abc123 from 142.93.212.168 port 49734	2019-11-05 04:31:51
attackbots	Oct 28 11:44:54 ip-172-31-62-245 sshd\[9771\]: Invalid user wletc04 from 142.93.212.168\ Oct 28 11:44:56 ip-172-31-62-245 sshd\[9771\]: Failed password for invalid user wletc04 from 142.93.212.168 port 33222 ssh2\ Oct 28 11:49:20 ip-172-31-62-245 sshd\[9793\]: Invalid user 1234@Qwer from 142.93.212.168\ Oct 28 11:49:22 ip-172-31-62-245 sshd\[9793\]: Failed password for invalid user 1234@Qwer from 142.93.212.168 port 43354 ssh2\ Oct 28 11:53:49 ip-172-31-62-245 sshd\[9828\]: Invalid user Puckett from 142.93.212.168\	2019-10-28 20:33:04
attackspam	Invalid user cocoon from 142.93.212.168 port 60296	2019-10-18 01:19:25
attackspam	SSH Brute Force, server-1 sshd[23033]: Failed password for root from 142.93.212.168 port 32836 ssh2	2019-10-13 08:12:30
attack	Brute force SMTP login attempted. ...	2019-10-06 19:27:32
attackbotsspam	Oct 3 23:41:05 v22019058497090703 sshd[26453]: Failed password for root from 142.93.212.168 port 57132 ssh2 Oct 3 23:45:21 v22019058497090703 sshd[26736]: Failed password for root from 142.93.212.168 port 42146 ssh2 ...	2019-10-04 05:57:11
attackspam	ssh failed login	2019-09-28 19:50:51

Comments on same subnet:

IP	Type	Details	Datetime
142.93.212.91	attackbotsspam	SSH BruteForce Attack	2020-10-13 01:56:49
142.93.212.91	attack	Oct 12 10:23:09 localhost sshd\[19098\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.91 user=root Oct 12 10:23:11 localhost sshd\[19098\]: Failed password for root from 142.93.212.91 port 59394 ssh2 Oct 12 10:27:27 localhost sshd\[19552\]: Invalid user sanjeev from 142.93.212.91 Oct 12 10:27:27 localhost sshd\[19552\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.91 Oct 12 10:27:29 localhost sshd\[19552\]: Failed password for invalid user sanjeev from 142.93.212.91 port 36984 ssh2 ...	2020-10-12 17:20:25
142.93.212.213	attack	srv02 Mass scanning activity detected Target: 1188 ..	2020-10-11 03:26:16
142.93.212.213	attack	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-10-10 19:16:45
142.93.212.213	attackbotsspam	" "	2020-09-10 22:18:28
142.93.212.91	attack	Sep 10 12:02:14 vm0 sshd[26132]: Failed password for root from 142.93.212.91 port 58080 ssh2 ...	2020-09-10 20:51:21
142.93.212.213	attackspam	20 attempts against mh-ssh on echoip	2020-09-10 13:57:40
142.93.212.91	attackbots	Bruteforce detected by fail2ban	2020-09-10 12:37:34
142.93.212.213	attackbots	2020-09-09T16:38:59.730213vps-d63064a2 sshd[34276]: User root from 142.93.212.213 not allowed because not listed in AllowUsers 2020-09-09T16:39:01.868358vps-d63064a2 sshd[34276]: Failed password for invalid user root from 142.93.212.213 port 35072 ssh2 2020-09-09T16:56:18.095461vps-d63064a2 sshd[36186]: User root from 142.93.212.213 not allowed because not listed in AllowUsers 2020-09-09T16:56:18.121628vps-d63064a2 sshd[36186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.213 user=root 2020-09-09T16:56:18.095461vps-d63064a2 sshd[36186]: User root from 142.93.212.213 not allowed because not listed in AllowUsers 2020-09-09T16:56:20.546327vps-d63064a2 sshd[36186]: Failed password for invalid user root from 142.93.212.213 port 48158 ssh2 ...	2020-09-10 04:39:54
142.93.212.91	attackbots	Sep 9 18:59:24 gospond sshd[30881]: Failed password for root from 142.93.212.91 port 41002 ssh2 Sep 9 19:02:47 gospond sshd[30923]: Invalid user admin from 142.93.212.91 port 33558 Sep 9 19:02:47 gospond sshd[30923]: Invalid user admin from 142.93.212.91 port 33558 ...	2020-09-10 03:25:35
142.93.212.101	attackspam	Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):	2020-09-09 18:08:32
142.93.212.101	attack	Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):	2020-09-09 12:06:10
142.93.212.101	attackbotsspam	Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):	2020-09-09 04:23:52
142.93.212.10	attackbotsspam	Sep 5 17:19:42 h2646465 sshd[17290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.10 user=backup Sep 5 17:19:45 h2646465 sshd[17290]: Failed password for backup from 142.93.212.10 port 48518 ssh2 Sep 5 17:30:58 h2646465 sshd[19020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.10 user=root Sep 5 17:31:00 h2646465 sshd[19020]: Failed password for root from 142.93.212.10 port 60882 ssh2 Sep 5 17:36:27 h2646465 sshd[19668]: Invalid user support from 142.93.212.10 Sep 5 17:36:27 h2646465 sshd[19668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.10 Sep 5 17:36:27 h2646465 sshd[19668]: Invalid user support from 142.93.212.10 Sep 5 17:36:29 h2646465 sshd[19668]: Failed password for invalid user support from 142.93.212.10 port 37346 ssh2 Sep 5 17:41:59 h2646465 sshd[20364]: Invalid user sample from 142.93.212.10 ...	2020-09-06 01:09:57
142.93.212.10	attackspam	Invalid user admin1 from 142.93.212.10 port 54786	2020-09-05 16:41:11

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.212.168
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6106
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.212.168.			IN	A

;; AUTHORITY SECTION:
.			532	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092800 1800 900 604800 86400

;; Query time: 494 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Sep 28 19:50:44 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 168.212.93.142.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 168.212.93.142.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
122.51.125.71	attack	Invalid user nick from 122.51.125.71 port 56326	2020-09-29 05:05:24
192.35.168.249	attack	1601326671 - 09/29/2020 03:57:51 Host: worker-15.sfj.censys-scanner.com/192.35.168.249 Port: 2 TCP Blocked ...	2020-09-29 05:00:13
106.13.129.8	attackspambots	Invalid user hts from 106.13.129.8 port 59826	2020-09-29 05:17:51
37.187.181.155	attack	Invalid user kibana from 37.187.181.155 port 37376	2020-09-29 05:19:40
82.65.19.181	attackbots	Sep 28 22:00:06 * sshd[32714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.65.19.181 Sep 28 22:00:08 * sshd[32714]: Failed password for invalid user ubuntu from 82.65.19.181 port 57106 ssh2	2020-09-29 04:51:40
188.254.0.160	attack	Sep 28 18:37:59 h2779839 sshd[1795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.160 user=root Sep 28 18:38:01 h2779839 sshd[1795]: Failed password for root from 188.254.0.160 port 40108 ssh2 Sep 28 18:41:56 h2779839 sshd[1983]: Invalid user alpha from 188.254.0.160 port 49476 Sep 28 18:41:56 h2779839 sshd[1983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.160 Sep 28 18:41:56 h2779839 sshd[1983]: Invalid user alpha from 188.254.0.160 port 49476 Sep 28 18:41:58 h2779839 sshd[1983]: Failed password for invalid user alpha from 188.254.0.160 port 49476 ssh2 Sep 28 18:46:03 h2779839 sshd[2093]: Invalid user eoffice from 188.254.0.160 port 58910 Sep 28 18:46:03 h2779839 sshd[2093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.160 Sep 28 18:46:03 h2779839 sshd[2093]: Invalid user eoffice from 188.254.0.160 port 58910 Sep 28 18:46:05 ...	2020-09-29 05:00:57
58.56.164.66	attackspam	58.56.164.66 (CN/China/-), 7 distributed sshd attacks on account [test] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 28 14:22:12 server sshd[20440]: Failed password for invalid user test from 51.75.28.25 port 41084 ssh2 Sep 28 14:23:41 server sshd[20676]: Invalid user test from 37.187.54.67 Sep 28 14:23:43 server sshd[20676]: Failed password for invalid user test from 37.187.54.67 port 45431 ssh2 Sep 28 14:22:10 server sshd[20440]: Invalid user test from 51.75.28.25 Sep 28 14:53:10 server sshd[25379]: Invalid user test from 58.56.164.66 Sep 28 14:42:56 server sshd[23629]: Invalid user test from 119.45.208.191 Sep 28 14:42:58 server sshd[23629]: Failed password for invalid user test from 119.45.208.191 port 40792 ssh2 IP Addresses Blocked: 51.75.28.25 (FR/France/-) 37.187.54.67 (FR/France/-)	2020-09-29 04:53:52
122.172.170.12	attackbots	Sep 28 20:39:31 ns3164893 sshd[31393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.172.170.12 user=root Sep 28 20:39:33 ns3164893 sshd[31393]: Failed password for root from 122.172.170.12 port 29377 ssh2 ...	2020-09-29 05:07:49
223.71.1.209	attackbots	bruteforce detected	2020-09-29 05:18:15
108.62.123.167	attackspambots	[2020-09-28 17:01:25] NOTICE[1159] chan_sip.c: Registration from '"2010" ' failed for '108.62.123.167:5328' - Wrong password [2020-09-28 17:01:25] SECURITY[1198] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-28T17:01:25.549-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2010",SessionID="0x7fcaa00dd368",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/108.62.123.167/5328",Challenge="172b15a8",ReceivedChallenge="172b15a8",ReceivedHash="40f06e3cc4f3eae10470eda9fb7a0b0e" [2020-09-28 17:01:25] NOTICE[1159] chan_sip.c: Registration from '"2010" ' failed for '108.62.123.167:5328' - Wrong password [2020-09-28 17:01:25] SECURITY[1198] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-28T17:01:25.636-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2010",SessionID="0x7fcaa02d7a38",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-09-29 05:12:20
112.196.26.202	attackbotsspam	SSH login attempts.	2020-09-29 05:02:48
157.245.205.24	attack	$f2bV_matches	2020-09-29 05:11:29
149.154.68.146	attackspambots	SSH login attempts.	2020-09-29 04:55:36
152.32.164.141	attack	SSH Brute-Force attacks	2020-09-29 05:13:38
122.51.68.7	attack	Sep 28 16:55:18 scw-tender-jepsen sshd[20369]: Failed password for root from 122.51.68.7 port 49694 ssh2 Sep 28 17:20:00 scw-tender-jepsen sshd[20924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.68.7	2020-09-29 05:15:09

Recently Reported IPs

115.203.213.173	80.26.154.189	195.231.67.105	116.110.218.0
213.149.187.36	36.230.72.212	89.237.3.52	123.24.130.177
104.236.228.46	151.248.0.54	67.76.65.5	3.16.150.13
223.22.243.177	42.117.53.65	117.64.249.138	65.60.38.210
92.255.187.222	162.13.137.98	160.16.52.115	111.243.57.79