Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: London

Region: England

Country: United Kingdom

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: DigitalOcean, LLC

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbotsspam
Invalid user jboss from 142.93.39.29 port 48258
2020-04-04 03:40:17
attackspam
SSH Brute-Force reported by Fail2Ban
2020-03-28 17:43:15
attackspam
Mar 19 14:18:17 santamaria sshd\[10545\]: Invalid user user from 142.93.39.29
Mar 19 14:18:17 santamaria sshd\[10545\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.29
Mar 19 14:18:19 santamaria sshd\[10545\]: Failed password for invalid user user from 142.93.39.29 port 48630 ssh2
...
2020-03-19 21:23:42
attackspambots
Mar 18 13:05:20 hosting180 sshd[2933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.29
Mar 18 13:05:20 hosting180 sshd[2933]: Invalid user user from 142.93.39.29 port 54600
Mar 18 13:05:23 hosting180 sshd[2933]: Failed password for invalid user user from 142.93.39.29 port 54600 ssh2
...
2020-03-19 12:05:29
attack
Mar 13 **REMOVED** sshd\[31884\]: Invalid user rootcamp from 142.93.39.29
Mar 13 **REMOVED** sshd\[31896\]: Invalid user rootcamp from 142.93.39.29
Mar 13 **REMOVED** sshd\[31963\]: Invalid user rootcamp from 142.93.39.29
2020-03-13 21:39:24
attackspambots
Mar 11 20:47:10 XXXXXX sshd[26714]: Invalid user poke from 142.93.39.29 port 58322
2020-03-12 05:20:53
attackbotsspam
SSH bruteforce
2020-03-11 03:27:24
attack
SSH authentication failure x 6 reported by Fail2Ban
...
2020-03-05 06:04:23
attack
$f2bV_matches
2020-03-04 19:39:23
attack
Invalid user admin from 142.93.39.29 port 39614
2020-02-27 07:00:28
attackspambots
Invalid user admin from 142.93.39.29 port 39614
2020-02-24 16:17:19
attackspam
Feb 16 15:08:39 hcbbdb sshd\[23776\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.29  user=root
Feb 16 15:08:41 hcbbdb sshd\[23776\]: Failed password for root from 142.93.39.29 port 44992 ssh2
Feb 16 15:12:05 hcbbdb sshd\[24110\]: Invalid user user from 142.93.39.29
Feb 16 15:12:05 hcbbdb sshd\[24110\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.29
Feb 16 15:12:06 hcbbdb sshd\[24110\]: Failed password for invalid user user from 142.93.39.29 port 46764 ssh2
2020-02-17 00:02:01
attackbotsspam
Invalid user test from 142.93.39.29 port 59604
2020-02-03 08:43:37
attack
none
2020-02-01 04:45:19
attack
Jan 18 13:13:57 sip sshd[22091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.29
Jan 18 13:13:59 sip sshd[22091]: Failed password for invalid user qhsupport from 142.93.39.29 port 32804 ssh2
Jan 18 13:14:43 sip sshd[22280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.29
2020-01-22 05:15:10
attack
SSH brutforce
2020-01-20 06:19:20
attackbots
Jan 19 18:42:19 icinga sshd[27809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.29
Jan 19 18:42:21 icinga sshd[27809]: Failed password for invalid user qhsupport from 142.93.39.29 port 59208 ssh2
...
2020-01-20 03:23:54
attack
$f2bV_matches
2020-01-18 21:41:09
attackspambots
$f2bV_matches
2020-01-11 22:59:41
attackspam
$f2bV_matches
2020-01-11 18:29:21
attackbotsspam
Jan  8 10:32:06 MK-Soft-VM3 sshd[5330]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.29 
Jan  8 10:32:08 MK-Soft-VM3 sshd[5330]: Failed password for invalid user postgres from 142.93.39.29 port 53818 ssh2
...
2020-01-08 17:33:50
attackbotsspam
Jan  7 22:38:34 dev0-dcde-rnet sshd[21718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.29
Jan  7 22:38:35 dev0-dcde-rnet sshd[21718]: Failed password for invalid user postgres from 142.93.39.29 port 50118 ssh2
Jan  7 22:40:19 dev0-dcde-rnet sshd[21780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.29
2020-01-08 06:17:23
attackspam
Jan  7 20:31:36 hcbbdb sshd\[30098\]: Invalid user postgres from 142.93.39.29
Jan  7 20:31:36 hcbbdb sshd\[30098\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.29
Jan  7 20:31:38 hcbbdb sshd\[30098\]: Failed password for invalid user postgres from 142.93.39.29 port 60174 ssh2
Jan  7 20:33:17 hcbbdb sshd\[30291\]: Invalid user ftpuser from 142.93.39.29
Jan  7 20:33:17 hcbbdb sshd\[30291\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.29
2020-01-08 04:35:55
attackspam
Jan  3 13:06:31 pi sshd\[29192\]: Invalid user postgres from 142.93.39.29 port 50112
Jan  3 13:06:31 pi sshd\[29192\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.29
Jan  3 13:06:33 pi sshd\[29192\]: Failed password for invalid user postgres from 142.93.39.29 port 50112 ssh2
Jan  3 13:08:08 pi sshd\[29206\]: Invalid user ftpuser from 142.93.39.29 port 41888
Jan  3 13:08:08 pi sshd\[29206\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.29
...
2020-01-03 21:40:15
attackbotsspam
Dec 20 13:34:23 gw1 sshd[31512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.29
Dec 20 13:34:24 gw1 sshd[31512]: Failed password for invalid user postgres from 142.93.39.29 port 49286 ssh2
...
2019-12-20 17:00:53
attack
Dec 18 23:31:32 [host] sshd[25222]: Invalid user postgres from 142.93.39.29
Dec 18 23:31:32 [host] sshd[25222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.29
Dec 18 23:31:34 [host] sshd[25222]: Failed password for invalid user postgres from 142.93.39.29 port 52426 ssh2
2019-12-19 06:39:49
attackspambots
2019-12-17T20:43:36.311907stark.klein-stark.info sshd\[26495\]: Invalid user support from 142.93.39.29 port 58686
2019-12-17T20:43:36.317734stark.klein-stark.info sshd\[26495\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.29
2019-12-17T20:43:38.325647stark.klein-stark.info sshd\[26495\]: Failed password for invalid user support from 142.93.39.29 port 58686 ssh2
...
2019-12-18 04:00:35
attack
Dec  5 22:04:05 srv206 sshd[6652]: Invalid user ethos from 142.93.39.29
Dec  5 22:04:05 srv206 sshd[6652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.29
Dec  5 22:04:05 srv206 sshd[6652]: Invalid user ethos from 142.93.39.29
Dec  5 22:04:07 srv206 sshd[6652]: Failed password for invalid user ethos from 142.93.39.29 port 56788 ssh2
...
2019-12-06 05:20:44
attack
Nov 25 15:09:09 MK-Soft-Root1 sshd[2917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.29 
Nov 25 15:09:11 MK-Soft-Root1 sshd[2917]: Failed password for invalid user cacti from 142.93.39.29 port 49134 ssh2
...
2019-11-25 22:21:22
attack
Nov 24 14:15:36 XXX sshd[49266]: Invalid user ftp_test from 142.93.39.29 port 53598
2019-11-25 07:59:49
Comments on same subnet:
IP Type Details Datetime
142.93.39.177 attack
5007/tcp
[2019-10-30]1pkt
2019-10-30 17:55:00
142.93.39.181 attack
SSH/22 MH Probe, BF, Hack -
2019-07-23 23:58:22
142.93.39.181 attack
Jul 20 15:33:42 plusreed sshd[19385]: Invalid user lr from 142.93.39.181
...
2019-07-21 03:43:36
142.93.39.181 attackspambots
2019-07-20T05:06:32.869393abusebot-5.cloudsearch.cf sshd\[15035\]: Invalid user aan from 142.93.39.181 port 58230
2019-07-20 13:09:37
142.93.39.84 attackspambots
Jun 12 22:37:34 server sshd\[31753\]: Invalid user oracle from 142.93.39.84
Jun 12 22:37:34 server sshd\[31753\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.84
Jun 12 22:37:36 server sshd\[31753\]: Failed password for invalid user oracle from 142.93.39.84 port 57464 ssh2
...
2019-07-12 04:40:52
142.93.39.181 attack
Jul  5 18:56:46 mail sshd\[25063\]: Invalid user yin from 142.93.39.181 port 39658
Jul  5 18:56:46 mail sshd\[25063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.181
Jul  5 18:56:48 mail sshd\[25063\]: Failed password for invalid user yin from 142.93.39.181 port 39658 ssh2
Jul  5 18:59:21 mail sshd\[25079\]: Invalid user knox from 142.93.39.181 port 36490
Jul  5 18:59:21 mail sshd\[25079\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.181
...
2019-07-06 06:16:22
142.93.39.181 attack
$f2bV_matches
2019-07-05 23:09:43
142.93.39.181 attack
Jul  3 16:18:01 srv-4 sshd\[11558\]: Invalid user hamish from 142.93.39.181
Jul  3 16:18:01 srv-4 sshd\[11558\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.181
Jul  3 16:18:04 srv-4 sshd\[11558\]: Failed password for invalid user hamish from 142.93.39.181 port 59938 ssh2
...
2019-07-04 02:43:22
142.93.39.181 attackspam
Jun 29 20:18:50 debian sshd\[23234\]: Invalid user admin from 142.93.39.181 port 56268
Jun 29 20:18:50 debian sshd\[23234\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.39.181
...
2019-06-30 03:34:25
142.93.39.75 attackbots
DATE:2019-06-23_02:10:22, IP:142.93.39.75, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)
2019-06-23 15:22:23
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.39.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36395
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.39.29.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019032900 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Fri Mar 29 19:03:23 +08 2019
;; MSG SIZE  rcvd: 116

Host info
Host 29.39.93.142.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 29.39.93.142.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
210.105.82.53 attackbotsspam
Jun  6 22:34:57 ourumov-web sshd\[24879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.105.82.53  user=root
Jun  6 22:35:00 ourumov-web sshd\[24879\]: Failed password for root from 210.105.82.53 port 55994 ssh2
Jun  6 22:42:18 ourumov-web sshd\[25407\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.105.82.53  user=root
...
2020-06-07 04:43:57
45.33.243.46 attack
SQL injection
2020-06-07 04:29:17
104.236.33.155 attackspambots
May 12 21:32:52 pi sshd[8488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.33.155 
May 12 21:32:54 pi sshd[8488]: Failed password for invalid user test from 104.236.33.155 port 54196 ssh2
2020-06-07 04:41:59
45.187.204.32 attackbotsspam
20 attempts against mh-ssh on echoip
2020-06-07 04:37:31
195.175.55.106 attackbots
Unauthorized connection attempt from IP address 195.175.55.106 on Port 445(SMB)
2020-06-07 05:01:44
49.88.112.71 attackspam
2020-06-06T12:24:12.255400abusebot-6.cloudsearch.cf sshd[28765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.71  user=root
2020-06-06T12:24:13.960525abusebot-6.cloudsearch.cf sshd[28765]: Failed password for root from 49.88.112.71 port 45571 ssh2
2020-06-06T12:24:16.322871abusebot-6.cloudsearch.cf sshd[28765]: Failed password for root from 49.88.112.71 port 45571 ssh2
2020-06-06T12:24:12.255400abusebot-6.cloudsearch.cf sshd[28765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.71  user=root
2020-06-06T12:24:13.960525abusebot-6.cloudsearch.cf sshd[28765]: Failed password for root from 49.88.112.71 port 45571 ssh2
2020-06-06T12:24:16.322871abusebot-6.cloudsearch.cf sshd[28765]: Failed password for root from 49.88.112.71 port 45571 ssh2
2020-06-06T12:24:12.255400abusebot-6.cloudsearch.cf sshd[28765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rho
...
2020-06-07 04:50:00
162.243.145.30 attackbots
Unauthorized connection attempt detected from IP address 162.243.145.30 to port 20 [T]
2020-06-07 04:47:37
39.37.171.194 attackbotsspam
Jun  6 20:45:58 localhost sshd\[9189\]: Invalid user support from 39.37.171.194 port 52018
Jun  6 20:45:58 localhost sshd\[9189\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.37.171.194
Jun  6 20:46:00 localhost sshd\[9189\]: Failed password for invalid user support from 39.37.171.194 port 52018 ssh2
...
2020-06-07 04:51:14
187.2.11.82 attack
Jun  6 20:05:05 ws26vmsma01 sshd[138312]: Failed password for root from 187.2.11.82 port 39736 ssh2
...
2020-06-07 04:39:59
159.203.198.34 attackspam
Jun  6 14:54:52 home sshd[11026]: Failed password for root from 159.203.198.34 port 40091 ssh2
Jun  6 14:58:22 home sshd[11361]: Failed password for root from 159.203.198.34 port 38302 ssh2
...
2020-06-07 04:30:00
120.92.139.2 attack
Jun  6 21:08:46 serwer sshd\[32112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.139.2  user=root
Jun  6 21:08:47 serwer sshd\[32112\]: Failed password for root from 120.92.139.2 port 62808 ssh2
Jun  6 21:12:01 serwer sshd\[32569\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.139.2  user=root
...
2020-06-07 04:40:58
121.46.26.126 attackbotsspam
May  9 17:27:38 pi sshd[24178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.46.26.126 
May  9 17:27:40 pi sshd[24178]: Failed password for invalid user tao from 121.46.26.126 port 38866 ssh2
2020-06-07 04:33:42
79.184.197.112 attack
Unauthorized connection attempt detected from IP address 79.184.197.112 to port 22
2020-06-07 04:38:42
160.16.208.139 attackspam
michaelklotzbier.de 160.16.208.139 [06/Jun/2020:22:45:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4257 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
MICHAELKLOTZBIER.DE 160.16.208.139 [06/Jun/2020:22:45:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4257 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
2020-06-07 05:07:27
142.93.101.148 attack
Jun  6 22:28:24 server sshd[22175]: Failed password for root from 142.93.101.148 port 46808 ssh2
Jun  6 22:31:29 server sshd[22417]: Failed password for root from 142.93.101.148 port 49676 ssh2
...
2020-06-07 04:41:43

Recently Reported IPs

142.93.39.181 141.85.224.117 124.43.17.69 118.89.60.84
118.25.127.254 118.25.108.101 111.231.54.116 109.190.153.178
106.12.194.79 103.108.144.134 94.132.46.32 93.85.82.88
83.250.193.188 83.169.32.169 79.11.181.225 68.183.113.232
54.37.120.112 46.101.101.66 46.43.0.109 31.7.62.28