Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbotsspam
SSH authentication failure x 6 reported by Fail2Ban
...
2019-12-09 16:57:27
Comments on same subnet:
IP Type Details Datetime
142.93.240.62 spamattack
PHISHING AND SPAM ATTACK
FROM "Important Notification - newsletter@app.ksinergy.biz - " : 
SUBJECT "Congrats! Open Immediately! " :
RECEIVED "from mail-02.ksinergy.biz ([142.93.240.62]:39126) " :
DATE/TIMESENT "Mon, 01 Mar 2021 10:14:52 ":
IP ADDRESS "inetnum: 142.93.0.0 - 142.93.255.255  OrgName: DigitalOcean, LLC
2021-03-01 08:16:37
142.93.240.62 spamattack
PHISHING AND SPAM ATTACK
FROM "Casino For You - newsletter@app.ksinergy.biz -" : 
SUBJECT "Join today and receive an amazing welcome bonus " :
RECEIVED "from mail-02.ksinergy.biz ([142.93.240.62]:57421) " :
DATE/TIMESENT "Tue, 23 Feb 2021 01:27:07 "
2021-02-23 04:32:24
142.93.240.192 attackspambots
Oct  1 18:12:46 serwer sshd\[22357\]: Invalid user dal from 142.93.240.192 port 54980
Oct  1 18:12:46 serwer sshd\[22357\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.240.192
Oct  1 18:12:48 serwer sshd\[22357\]: Failed password for invalid user dal from 142.93.240.192 port 54980 ssh2
...
2020-10-02 02:48:55
142.93.240.192 attackspambots
Oct  1 12:49:00 localhost sshd\[19580\]: Invalid user alex from 142.93.240.192
Oct  1 12:49:00 localhost sshd\[19580\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.240.192
Oct  1 12:49:02 localhost sshd\[19580\]: Failed password for invalid user alex from 142.93.240.192 port 37830 ssh2
Oct  1 12:52:58 localhost sshd\[19839\]: Invalid user jiaxing from 142.93.240.192
Oct  1 12:52:58 localhost sshd\[19839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.240.192
...
2020-10-01 19:00:30
142.93.240.192 attackspam
Invalid user admin from 142.93.240.192 port 39536
2020-09-24 00:38:38
142.93.240.192 attackspambots
2020-09-23T07:26:16.897242server.espacesoutien.com sshd[4118]: Invalid user bkp from 142.93.240.192 port 53984
2020-09-23T07:26:16.908492server.espacesoutien.com sshd[4118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.240.192
2020-09-23T07:26:16.897242server.espacesoutien.com sshd[4118]: Invalid user bkp from 142.93.240.192 port 53984
2020-09-23T07:26:18.670688server.espacesoutien.com sshd[4118]: Failed password for invalid user bkp from 142.93.240.192 port 53984 ssh2
...
2020-09-23 16:44:39
142.93.240.192 attackbots
2020-09-23T00:31:10.216791shield sshd\[15217\]: Invalid user lulu from 142.93.240.192 port 43432
2020-09-23T00:31:10.229707shield sshd\[15217\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.240.192
2020-09-23T00:31:12.166257shield sshd\[15217\]: Failed password for invalid user lulu from 142.93.240.192 port 43432 ssh2
2020-09-23T00:35:28.978654shield sshd\[15762\]: Invalid user dropbox from 142.93.240.192 port 52614
2020-09-23T00:35:28.992637shield sshd\[15762\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.240.192
2020-09-23 08:43:11
142.93.240.192 attack
(sshd) Failed SSH login from 142.93.240.192 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 22 08:39:02 server sshd[18219]: Invalid user voip from 142.93.240.192
Sep 22 08:39:02 server sshd[18219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.240.192 
Sep 22 08:39:04 server sshd[18219]: Failed password for invalid user voip from 142.93.240.192 port 53544 ssh2
Sep 22 08:53:46 server sshd[20601]: Invalid user superman from 142.93.240.192
Sep 22 08:53:46 server sshd[20601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.240.192
2020-09-22 15:55:17
142.93.240.192 attackbots
Sep 21 23:59:45 abendstille sshd\[22867\]: Invalid user raj from 142.93.240.192
Sep 21 23:59:45 abendstille sshd\[22867\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.240.192
Sep 21 23:59:47 abendstille sshd\[22867\]: Failed password for invalid user raj from 142.93.240.192 port 51240 ssh2
Sep 22 00:03:55 abendstille sshd\[26670\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.240.192  user=root
Sep 22 00:03:57 abendstille sshd\[26670\]: Failed password for root from 142.93.240.192 port 60802 ssh2
...
2020-09-22 07:59:09
142.93.240.192 attackspam
Aug 25 19:09:12 XXX sshd[56521]: Invalid user visitor from 142.93.240.192 port 48842
2020-08-26 06:53:51
142.93.240.192 attackspambots
$f2bV_matches
2020-08-23 02:58:53
142.93.240.192 attackbots
Aug 18 09:08:42 plex-server sshd[3186842]: Invalid user bonny from 142.93.240.192 port 47966
Aug 18 09:08:42 plex-server sshd[3186842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.240.192 
Aug 18 09:08:42 plex-server sshd[3186842]: Invalid user bonny from 142.93.240.192 port 47966
Aug 18 09:08:44 plex-server sshd[3186842]: Failed password for invalid user bonny from 142.93.240.192 port 47966 ssh2
Aug 18 09:11:15 plex-server sshd[3187859]: Invalid user release from 142.93.240.192 port 60848
...
2020-08-18 17:21:16
142.93.240.192 attackspambots
2020-08-16T03:38:38.948866ionos.janbro.de sshd[25322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.240.192  user=root
2020-08-16T03:38:41.531750ionos.janbro.de sshd[25322]: Failed password for root from 142.93.240.192 port 48956 ssh2
2020-08-16T03:42:50.693715ionos.janbro.de sshd[25329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.240.192  user=root
2020-08-16T03:42:52.870340ionos.janbro.de sshd[25329]: Failed password for root from 142.93.240.192 port 59626 ssh2
2020-08-16T03:47:08.827147ionos.janbro.de sshd[25346]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.240.192  user=root
2020-08-16T03:47:10.421711ionos.janbro.de sshd[25346]: Failed password for root from 142.93.240.192 port 42080 ssh2
2020-08-16T03:51:33.528204ionos.janbro.de sshd[25348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14
...
2020-08-16 14:02:31
142.93.240.192 attackspam
Aug 14 12:11:59 ws24vmsma01 sshd[193566]: Failed password for root from 142.93.240.192 port 51096 ssh2
...
2020-08-15 01:22:49
142.93.240.192 attackbots
SSH Brute Force
2020-08-09 02:07:56
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.240.103
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19203
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.240.103.			IN	A

;; AUTHORITY SECTION:
.			503	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019120900 1800 900 604800 86400

;; Query time: 101 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 09 16:57:24 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 103.240.93.142.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 103.240.93.142.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
138.197.195.52 attackbots
Sep  1 22:33:49 nextcloud sshd\[24489\]: Invalid user tester from 138.197.195.52
Sep  1 22:33:49 nextcloud sshd\[24489\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.195.52
Sep  1 22:33:51 nextcloud sshd\[24489\]: Failed password for invalid user tester from 138.197.195.52 port 56124 ssh2
...
2019-09-02 08:38:35
62.210.188.211 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2019-09-02 08:55:32
62.28.140.233 attack
2019-09-01T22:44:49Z - RDP login failed multiple times. (62.28.140.233)
2019-09-02 08:16:57
124.205.103.66 attackbots
Sep  1 23:28:11 localhost sshd\[2435\]: Invalid user zhy from 124.205.103.66 port 55000
Sep  1 23:28:11 localhost sshd\[2435\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.205.103.66
Sep  1 23:28:13 localhost sshd\[2435\]: Failed password for invalid user zhy from 124.205.103.66 port 55000 ssh2
2019-09-02 08:56:35
77.247.108.187 attackbots
SIPVicious Scanner Detection, PTR: PTR record not found
2019-09-02 08:23:16
106.12.11.166 attackbotsspam
6 failed attempt(s) in the last 24h
2019-09-02 09:07:13
159.65.146.250 attack
Sep  1 13:49:50 lcdev sshd\[8813\]: Invalid user london from 159.65.146.250
Sep  1 13:49:50 lcdev sshd\[8813\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.146.250
Sep  1 13:49:52 lcdev sshd\[8813\]: Failed password for invalid user london from 159.65.146.250 port 59852 ssh2
Sep  1 13:54:23 lcdev sshd\[9182\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.146.250  user=root
Sep  1 13:54:25 lcdev sshd\[9182\]: Failed password for root from 159.65.146.250 port 47296 ssh2
2019-09-02 08:12:08
193.112.220.76 attackspambots
Invalid user alex from 193.112.220.76 port 55272
2019-09-02 08:12:39
85.206.165.15 attackspambots
(From gemmastone@live.co.uk) Look at an provocativeoffers in place of you. http://sivemypa.tk/3rlyf
2019-09-02 08:27:30
187.190.236.88 attack
Sep  2 02:17:25 eventyay sshd[31678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.190.236.88
Sep  2 02:17:27 eventyay sshd[31678]: Failed password for invalid user gta from 187.190.236.88 port 20640 ssh2
Sep  2 02:21:46 eventyay sshd[449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.190.236.88
...
2019-09-02 08:31:35
201.145.27.102 attackspam
SSHScan
2019-09-02 08:39:42
165.22.26.134 attackspam
Sep  1 17:02:23 ny01 sshd[15204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.26.134
Sep  1 17:02:25 ny01 sshd[15204]: Failed password for invalid user temp from 165.22.26.134 port 46712 ssh2
Sep  1 17:06:15 ny01 sshd[15820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.26.134
2019-09-02 09:03:56
218.98.40.132 attackspam
Sep  1 14:55:49 auw2 sshd\[18900\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.40.132  user=root
Sep  1 14:55:51 auw2 sshd\[18900\]: Failed password for root from 218.98.40.132 port 45242 ssh2
Sep  1 14:55:54 auw2 sshd\[18900\]: Failed password for root from 218.98.40.132 port 45242 ssh2
Sep  1 14:55:56 auw2 sshd\[18900\]: Failed password for root from 218.98.40.132 port 45242 ssh2
Sep  1 14:55:58 auw2 sshd\[18919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.40.132  user=root
2019-09-02 09:08:15
177.128.121.210 attack
Automatic report - Port Scan Attack
2019-09-02 08:49:25
221.122.67.66 attackbots
Invalid user nicholas from 221.122.67.66 port 57490
2019-09-02 08:36:52

Recently Reported IPs

214.161.81.173 6.42.128.221 95.29.97.3 121.10.160.138
41.41.67.69 189.28.144.8 196.221.244.56 247.101.147.136
117.4.49.76 87.66.156.53 194.228.227.157 162.253.42.208
83.242.157.71 89.110.39.34 88.56.9.212 191.47.29.252
98.134.127.192 179.35.251.9 138.36.22.28 71.109.48.125