Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
ssh brute force
2020-03-09 13:52:17
Comments on same subnet:
IP Type Details Datetime
142.93.246.42 attackspambots
SSH Login Bruteforce
2020-09-08 03:09:58
142.93.246.42 attackbots
Sep  7 12:26:05 MainVPS sshd[10732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.246.42  user=root
Sep  7 12:26:07 MainVPS sshd[10732]: Failed password for root from 142.93.246.42 port 47020 ssh2
Sep  7 12:30:04 MainVPS sshd[16861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.246.42  user=root
Sep  7 12:30:06 MainVPS sshd[16861]: Failed password for root from 142.93.246.42 port 46532 ssh2
Sep  7 12:33:51 MainVPS sshd[24197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.246.42  user=root
Sep  7 12:33:53 MainVPS sshd[24197]: Failed password for root from 142.93.246.42 port 46046 ssh2
...
2020-09-07 18:38:58
142.93.246.42 attackspambots
(sshd) Failed SSH login from 142.93.246.42 (US/United States/-): 5 in the last 3600 secs
2020-08-28 21:43:03
142.93.246.42 attackbots
invalid user
2020-08-28 15:27:02
142.93.246.42 attack
'Fail2Ban'
2020-08-24 09:25:39
142.93.246.42 attackspam
2020-08-22T08:15:33.389407vps751288.ovh.net sshd\[26569\]: Invalid user jana from 142.93.246.42 port 43498
2020-08-22T08:15:33.398096vps751288.ovh.net sshd\[26569\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.246.42
2020-08-22T08:15:35.118809vps751288.ovh.net sshd\[26569\]: Failed password for invalid user jana from 142.93.246.42 port 43498 ssh2
2020-08-22T08:19:33.967472vps751288.ovh.net sshd\[26595\]: Invalid user alexandra from 142.93.246.42 port 52482
2020-08-22T08:19:33.973702vps751288.ovh.net sshd\[26595\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.246.42
2020-08-22 14:40:16
142.93.246.42 attackbots
Aug 20 14:50:22 sso sshd[15567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.246.42
Aug 20 14:50:24 sso sshd[15567]: Failed password for invalid user lfd from 142.93.246.42 port 45452 ssh2
...
2020-08-20 21:43:59
142.93.246.42 attackspambots
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-20T12:03:59Z and 2020-08-20T12:11:51Z
2020-08-20 20:11:59
142.93.246.42 attackspambots
2020-08-19T04:07:01.641367shield sshd\[24416\]: Invalid user lqx from 142.93.246.42 port 59456
2020-08-19T04:07:01.650018shield sshd\[24416\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.246.42
2020-08-19T04:07:03.669370shield sshd\[24416\]: Failed password for invalid user lqx from 142.93.246.42 port 59456 ssh2
2020-08-19T04:10:41.269912shield sshd\[24696\]: Invalid user admin from 142.93.246.42 port 39044
2020-08-19T04:10:41.278362shield sshd\[24696\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.246.42
2020-08-19 12:40:19
142.93.246.42 attack
Automatic Fail2ban report - Trying login SSH
2020-08-19 04:27:33
142.93.246.42 attackspam
fail2ban/Aug 15 01:39:24 h1962932 sshd[10329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.246.42  user=root
Aug 15 01:39:26 h1962932 sshd[10329]: Failed password for root from 142.93.246.42 port 56728 ssh2
Aug 15 01:43:47 h1962932 sshd[10531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.246.42  user=root
Aug 15 01:43:49 h1962932 sshd[10531]: Failed password for root from 142.93.246.42 port 37618 ssh2
Aug 15 01:48:07 h1962932 sshd[13310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.246.42  user=root
Aug 15 01:48:09 h1962932 sshd[13310]: Failed password for root from 142.93.246.42 port 46740 ssh2
2020-08-15 08:57:53
142.93.246.42 attackbots
Aug  7 13:53:13 ovpn sshd\[15541\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.246.42  user=root
Aug  7 13:53:16 ovpn sshd\[15541\]: Failed password for root from 142.93.246.42 port 50526 ssh2
Aug  7 13:58:57 ovpn sshd\[17913\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.246.42  user=root
Aug  7 13:58:59 ovpn sshd\[17913\]: Failed password for root from 142.93.246.42 port 36444 ssh2
Aug  7 14:00:40 ovpn sshd\[18709\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.246.42  user=root
2020-08-08 03:10:29
142.93.246.42 attackspam
2020-08-04T14:33:10+0200 Failed SSH Authentication/Brute Force Attack. (Server 9)
2020-08-04 22:21:58
142.93.246.42 attackspam
Jul 28 00:44:41 gospond sshd[26578]: Invalid user liuziyuan from 142.93.246.42 port 55216
Jul 28 00:44:43 gospond sshd[26578]: Failed password for invalid user liuziyuan from 142.93.246.42 port 55216 ssh2
Jul 28 00:45:56 gospond sshd[26595]: Invalid user sxltzxkt from 142.93.246.42 port 42322
...
2020-07-28 07:51:31
142.93.246.42 attackbotsspam
$f2bV_matches
2020-07-27 01:10:48
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.246.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1114
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.246.239.			IN	A

;; AUTHORITY SECTION:
.			552	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030900 1800 900 604800 86400

;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 09 13:52:11 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 239.246.93.142.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 239.246.93.142.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
45.80.65.83 attackbotsspam
Sep  7 13:51:57 [host] sshd[10338]: Invalid user www from 45.80.65.83
Sep  7 13:51:57 [host] sshd[10338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.80.65.83
Sep  7 13:51:59 [host] sshd[10338]: Failed password for invalid user www from 45.80.65.83 port 36140 ssh2
2019-09-07 23:17:46
45.131.2.32 attack
Received: from shaxiachapter.top (45.131.2.32)
Domain Service
2019-09-07 23:50:33
49.88.112.74 attackbots
SSH Brute-Force reported by Fail2Ban
2019-09-07 23:16:22
134.255.234.104 attack
Sep  7 14:32:31 s64-1 sshd[23637]: Failed password for mysql from 134.255.234.104 port 48712 ssh2
Sep  7 14:33:00 s64-1 sshd[23640]: Failed password for mysql from 134.255.234.104 port 40298 ssh2
...
2019-09-07 23:54:24
212.73.66.91 attack
2019-09-07 05:45:00 H=smtp.beeline.am [212.73.66.91]:39454 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in psbl.surriel.com (127.0.0.2) (Listed in PSBL, see http://psbl.org/listing?ip=212.73.66.91)
2019-09-07 05:45:07 H=smtp.beeline.am [212.73.66.91]:39908 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in psbl.surriel.com (127.0.0.2) (Listed in PSBL, see http://psbl.org/listing?ip=212.73.66.91)
2019-09-07 05:46:47 H=smtp.beeline.am [212.73.66.91]:43872 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in psbl.surriel.com (127.0.0.2) (Listed in PSBL, see http://psbl.org/listing?ip=212.73.66.91)
...
2019-09-07 23:31:40
176.255.147.129 attackspambots
Portscan detected
2019-09-07 23:52:56
114.236.160.218 attackbots
Sep712:17:20server4pure-ftpd:\(\?@223.72.86.19\)[WARNING]Authenticationfailedforuser[www]Sep712:17:21server4pure-ftpd:\(\?@223.72.86.19\)[WARNING]Authenticationfailedforuser[www]Sep712:28:09server4pure-ftpd:\(\?@114.236.160.218\)[WARNING]Authenticationfailedforuser[www]Sep712:28:02server4pure-ftpd:\(\?@114.236.160.218\)[WARNING]Authenticationfailedforuser[www]Sep712:17:13server4pure-ftpd:\(\?@223.72.86.19\)[WARNING]Authenticationfailedforuser[www]Sep712:17:15server4pure-ftpd:\(\?@223.72.86.19\)[WARNING]Authenticationfailedforuser[www]Sep712:46:42server4pure-ftpd:\(\?@125.224.38.29\)[WARNING]Authenticationfailedforuser[www]Sep712:21:39server4pure-ftpd:\(\?@113.108.126.23\)[WARNING]Authenticationfailedforuser[www]Sep712:17:43server4pure-ftpd:\(\?@223.72.86.19\)[WARNING]Authenticationfailedforuser[www]Sep712:21:44server4pure-ftpd:\(\?@113.108.126.23\)[WARNING]Authenticationfailedforuser[www]IPAddressesBlocked:223.72.86.19\(CN/China/-\)
2019-09-07 23:39:15
92.53.124.13 attackspambots
Sep  7 17:31:51 MK-Soft-Root1 sshd\[5173\]: Invalid user ftp from 92.53.124.13 port 59100
Sep  7 17:31:51 MK-Soft-Root1 sshd\[5173\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.53.124.13
Sep  7 17:31:52 MK-Soft-Root1 sshd\[5173\]: Failed password for invalid user ftp from 92.53.124.13 port 59100 ssh2
...
2019-09-07 23:41:51
51.38.83.164 attack
Sep  7 17:08:29 localhost sshd\[26358\]: Invalid user ts3 from 51.38.83.164 port 42194
Sep  7 17:08:29 localhost sshd\[26358\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.83.164
Sep  7 17:08:32 localhost sshd\[26358\]: Failed password for invalid user ts3 from 51.38.83.164 port 42194 ssh2
2019-09-07 23:27:51
173.249.49.99 attack
Sep  7 04:39:51 friendsofhawaii sshd\[15863\]: Invalid user 1 from 173.249.49.99
Sep  7 04:39:51 friendsofhawaii sshd\[15863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.49.99
Sep  7 04:39:53 friendsofhawaii sshd\[15863\]: Failed password for invalid user 1 from 173.249.49.99 port 56020 ssh2
Sep  7 04:44:40 friendsofhawaii sshd\[16270\]: Invalid user 1q2w3e4r5t6y from 173.249.49.99
Sep  7 04:44:40 friendsofhawaii sshd\[16270\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.49.99
2019-09-07 23:08:58
167.71.253.81 attack
5 pkts, ports: UDP:53413
2019-09-08 00:05:55
132.145.162.191 attackspambots
Automatic report - SSH Brute-Force Attack
2019-09-08 00:01:46
52.253.228.47 attackbotsspam
Sep  7 14:10:36 mail sshd[28731]: Invalid user tsbot from 52.253.228.47
Sep  7 14:10:36 mail sshd[28731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.253.228.47
Sep  7 14:10:36 mail sshd[28731]: Invalid user tsbot from 52.253.228.47
Sep  7 14:10:38 mail sshd[28731]: Failed password for invalid user tsbot from 52.253.228.47 port 1344 ssh2
Sep  7 14:28:34 mail sshd[24222]: Invalid user oracle from 52.253.228.47
...
2019-09-07 23:44:46
218.98.40.153 attack
Sep  7 17:13:43 amit sshd\[15972\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.40.153  user=root
Sep  7 17:13:45 amit sshd\[15972\]: Failed password for root from 218.98.40.153 port 54478 ssh2
Sep  7 17:14:09 amit sshd\[15975\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.40.153  user=root
...
2019-09-07 23:30:19
106.75.65.162 attack
Sep  7 11:39:14 nexus sshd[28330]: Invalid user plex from 106.75.65.162 port 58730
Sep  7 11:39:14 nexus sshd[28330]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.65.162
Sep  7 11:39:16 nexus sshd[28330]: Failed password for invalid user plex from 106.75.65.162 port 58730 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=106.75.65.162
2019-09-07 23:56:00

Recently Reported IPs

202.67.38.10 45.136.109.219 240.90.230.51 185.246.187.44
176.98.42.15 190.174.195.131 116.226.248.217 148.70.151.134
20.7.170.201 185.162.167.27 83.25.29.45 142.91.207.173
14.170.237.192 202.137.131.162 161.10.219.211 40.247.8.34
177.43.160.149 113.23.6.24 161.32.52.13 51.158.127.70