Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: India

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
Oct 20 12:58:33 ip-172-31-1-72 sshd\[9351\]: Invalid user matsuo from 142.93.218.34
Oct 20 12:58:33 ip-172-31-1-72 sshd\[9351\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.218.34
Oct 20 12:58:35 ip-172-31-1-72 sshd\[9351\]: Failed password for invalid user matsuo from 142.93.218.34 port 41790 ssh2
Oct 20 13:04:08 ip-172-31-1-72 sshd\[9423\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.218.34  user=root
Oct 20 13:04:10 ip-172-31-1-72 sshd\[9423\]: Failed password for root from 142.93.218.34 port 52932 ssh2
2019-10-20 21:06:36
attackspambots
Oct 20 11:17:17 areeb-Workstation sshd[12273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.218.34
Oct 20 11:17:19 areeb-Workstation sshd[12273]: Failed password for invalid user NFPhq6t8 from 142.93.218.34 port 60240 ssh2
...
2019-10-20 14:06:23
Comments on same subnet:
IP Type Details Datetime
142.93.218.248 attackbots
 TCP (SYN) 142.93.218.248:58258 -> port 2528, len 44
2020-07-01 02:59:53
142.93.218.248 attackbotsspam
Unauthorized connection attempt detected from IP address 142.93.218.248 to port 3623 [T]
2020-06-22 03:09:22
142.93.218.236 attack
Jun 10 00:16:54 l02a sshd[27266]: Invalid user tomcat from 142.93.218.236
Jun 10 00:16:54 l02a sshd[27266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.218.236 
Jun 10 00:16:54 l02a sshd[27266]: Invalid user tomcat from 142.93.218.236
Jun 10 00:16:55 l02a sshd[27266]: Failed password for invalid user tomcat from 142.93.218.236 port 45462 ssh2
2020-06-10 07:34:30
142.93.218.248 attack
 TCP (SYN) 142.93.218.248:51408 -> port 17611, len 44
2020-06-04 18:02:53
142.93.218.236 attackspam
$f2bV_matches | Triggered by Fail2Ban at Vostok web server
2020-06-03 05:50:31
142.93.218.236 attackbots
Jun  2 06:06:20 localhost sshd\[24908\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.218.236  user=root
Jun  2 06:06:23 localhost sshd\[24908\]: Failed password for root from 142.93.218.236 port 36990 ssh2
Jun  2 06:10:07 localhost sshd\[25207\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.218.236  user=root
Jun  2 06:10:09 localhost sshd\[25207\]: Failed password for root from 142.93.218.236 port 41334 ssh2
Jun  2 06:13:58 localhost sshd\[25277\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.218.236  user=root
...
2020-06-02 13:01:48
142.93.218.236 attack
May 29 21:10:27 mockhub sshd[24790]: Failed password for root from 142.93.218.236 port 53268 ssh2
...
2020-05-30 12:53:37
142.93.218.236 attackspam
May 12 06:38:46 piServer sshd[2491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.218.236 
May 12 06:38:48 piServer sshd[2491]: Failed password for invalid user zabbix from 142.93.218.236 port 48924 ssh2
May 12 06:42:53 piServer sshd[2950]: Failed password for root from 142.93.218.236 port 57540 ssh2
...
2020-05-12 13:15:13
142.93.218.236 attackspam
$f2bV_matches
2020-04-27 12:18:21
142.93.218.236 attackbots
Apr 21 05:39:49 dns1 sshd[2788]: Failed password for root from 142.93.218.236 port 59968 ssh2
Apr 21 05:44:19 dns1 sshd[3179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.218.236 
Apr 21 05:44:21 dns1 sshd[3179]: Failed password for invalid user ca from 142.93.218.236 port 44892 ssh2
2020-04-21 16:58:44
142.93.218.236 attack
Apr 10 05:54:17 silence02 sshd[22146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.218.236
Apr 10 05:54:18 silence02 sshd[22146]: Failed password for invalid user webmin from 142.93.218.236 port 34488 ssh2
Apr 10 05:59:13 silence02 sshd[22589]: Failed password for root from 142.93.218.236 port 53726 ssh2
2020-04-10 12:02:13
142.93.218.236 attackbotsspam
Apr  8 sshd[13682]: Invalid user ubuntu from 142.93.218.236 port 53844
2020-04-09 09:15:10
142.93.218.236 attack
[ssh] SSH attack
2020-04-07 03:45:52
142.93.218.236 attack
2020-04-05T06:43:12.470472linuxbox-skyline sshd[74679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.218.236  user=root
2020-04-05T06:43:14.667156linuxbox-skyline sshd[74679]: Failed password for root from 142.93.218.236 port 43668 ssh2
...
2020-04-05 23:44:38
142.93.218.236 attack
Mar 30 15:55:41 ourumov-web sshd\[27198\]: Invalid user www from 142.93.218.236 port 46096
Mar 30 15:55:41 ourumov-web sshd\[27198\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.218.236
Mar 30 15:55:43 ourumov-web sshd\[27198\]: Failed password for invalid user www from 142.93.218.236 port 46096 ssh2
...
2020-03-31 00:52:27
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.218.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12676
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.218.34.			IN	A

;; AUTHORITY SECTION:
.			109	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102000 1800 900 604800 86400

;; Query time: 117 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 20 14:06:18 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 34.218.93.142.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 34.218.93.142.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
170.84.15.212 attackspam
port scan and connect, tcp 23 (telnet)
2020-05-16 17:24:08
139.99.84.85 attackbotsspam
May 16 10:47:43 web1 sshd[4818]: Invalid user celinepc from 139.99.84.85 port 36132
May 16 10:47:43 web1 sshd[4818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.84.85
May 16 10:47:43 web1 sshd[4818]: Invalid user celinepc from 139.99.84.85 port 36132
May 16 10:47:44 web1 sshd[4818]: Failed password for invalid user celinepc from 139.99.84.85 port 36132 ssh2
May 16 10:53:23 web1 sshd[6202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.84.85  user=root
May 16 10:53:25 web1 sshd[6202]: Failed password for root from 139.99.84.85 port 57468 ssh2
May 16 10:56:49 web1 sshd[7065]: Invalid user csgo-server from 139.99.84.85 port 56380
May 16 10:56:49 web1 sshd[7065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.84.85
May 16 10:56:49 web1 sshd[7065]: Invalid user csgo-server from 139.99.84.85 port 56380
May 16 10:56:51 web1 sshd[7065]: Failed pass
...
2020-05-16 17:25:29
82.221.105.7 attackspam
Port scan: Attack repeated for 24 hours
2020-05-16 17:15:00
170.150.72.28 attackbotsspam
SSH-BruteForce
2020-05-16 17:02:57
92.57.74.239 attackspam
(sshd) Failed SSH login from 92.57.74.239 (ES/Spain/Andalusia/Granada/-/[AS12479 Orange Espagne SA]): 1 in the last 3600 secs
2020-05-16 17:20:32
2a02:a03f:3e3b:d900:a49a:58:4351:bbc9 attackspam
May 16 04:52:38 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=2a02:a03f:3e3b:d900:a49a:58:4351:bbc9, lip=2a01:7e01:e001:164::, session=
May 16 04:52:44 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=2a02:a03f:3e3b:d900:a49a:58:4351:bbc9, lip=2a01:7e01:e001:164::, session=<4xfNBbulovUqAqA/PjvZAKSaAFhDUbvJ>
May 16 04:52:44 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=2a02:a03f:3e3b:d900:a49a:58:4351:bbc9, lip=2a01:7e01:e001:164::, session=
May 16 04:52:54 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=2a02:a03f:3e3b:d900:a49a:58:4351:bbc9, lip=2a01:7e01:e001:164::, session=

...
2020-05-16 16:44:51
27.71.122.159 attack
May  9 12:52:22 ms-srv sshd[29825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.71.122.159
May  9 12:52:25 ms-srv sshd[29825]: Failed password for invalid user sniffer from 27.71.122.159 port 17300 ssh2
2020-05-16 17:25:59
142.93.109.76 attackspam
May 16 04:48:24 electroncash sshd[14059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.109.76 
May 16 04:48:24 electroncash sshd[14059]: Invalid user sen from 142.93.109.76 port 45820
May 16 04:48:26 electroncash sshd[14059]: Failed password for invalid user sen from 142.93.109.76 port 45820 ssh2
May 16 04:51:38 electroncash sshd[14927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.109.76  user=root
May 16 04:51:40 electroncash sshd[14927]: Failed password for root from 142.93.109.76 port 53478 ssh2
...
2020-05-16 17:03:55
5.206.235.80 attack
Invalid user admin from 5.206.235.80 port 35080
2020-05-16 17:15:53
121.135.111.7 attack
Invalid user cristian from 121.135.111.7 port 36728
2020-05-16 16:54:20
183.237.40.52 attack
Helo
2020-05-16 17:02:38
52.231.25.195 attackspambots
Brute-force attempt banned
2020-05-16 17:04:15
106.13.20.61 attackspam
2020-05-16T04:46:12.931575sd-86998 sshd[16594]: Invalid user eli from 106.13.20.61 port 34122
2020-05-16T04:46:12.937099sd-86998 sshd[16594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.20.61
2020-05-16T04:46:12.931575sd-86998 sshd[16594]: Invalid user eli from 106.13.20.61 port 34122
2020-05-16T04:46:14.828847sd-86998 sshd[16594]: Failed password for invalid user eli from 106.13.20.61 port 34122 ssh2
2020-05-16T04:50:17.539557sd-86998 sshd[17132]: Invalid user nx from 106.13.20.61 port 46898
...
2020-05-16 16:50:41
148.70.133.175 attack
Invalid user bureau from 148.70.133.175 port 50190
2020-05-16 17:10:56
190.15.59.5 attack
May 15 11:45:19: Invalid user admin from 190.15.59.5 port 42372
2020-05-16 16:45:45

Recently Reported IPs

45.11.192.10 193.112.197.85 148.248.113.56 185.40.15.58
254.10.195.97 135.181.58.207 214.31.63.90 200.66.254.222
180.246.214.124 15.163.2.76 48.31.196.188 107.197.73.73
117.69.30.106 79.223.128.36 236.230.228.208 43.233.154.154
98.120.77.128 86.151.169.223 115.241.59.9 90.250.251.55