142.93.69.5 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	SSH bruteforce	2019-09-22 20:32:30

Comments on same subnet:

IP	Type	Details	Datetime
142.93.69.223	attackspam	Sep 22 20:24:25 web9 sshd\[16266\]: Invalid user wsxedc from 142.93.69.223 Sep 22 20:24:25 web9 sshd\[16266\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.69.223 Sep 22 20:24:27 web9 sshd\[16266\]: Failed password for invalid user wsxedc from 142.93.69.223 port 54284 ssh2 Sep 22 20:28:48 web9 sshd\[17168\]: Invalid user 123456789 from 142.93.69.223 Sep 22 20:28:48 web9 sshd\[17168\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.69.223	2019-09-23 17:07:08
142.93.69.223	attack	Sep 15 02:03:43 microserver sshd[17152]: Invalid user test from 142.93.69.223 port 39408 Sep 15 02:03:43 microserver sshd[17152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.69.223 Sep 15 02:03:46 microserver sshd[17152]: Failed password for invalid user test from 142.93.69.223 port 39408 ssh2 Sep 15 02:07:50 microserver sshd[17800]: Invalid user test from 142.93.69.223 port 55538 Sep 15 02:07:50 microserver sshd[17800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.69.223 Sep 15 02:20:06 microserver sshd[19451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.69.223 user=root Sep 15 02:20:08 microserver sshd[19451]: Failed password for root from 142.93.69.223 port 46994 ssh2 Sep 15 02:24:13 microserver sshd[20042]: Invalid user stefan from 142.93.69.223 port 34678 Sep 15 02:24:13 microserver sshd[20042]: pam_unix(sshd:auth): authentication failure; logname= uid=0	2019-09-15 10:47:44
142.93.69.223	attackspambots	/var/log/secure-20190825:Aug 23 04:58:25 XXX sshd[49392]: Invalid user dcc from 142.93.69.223 port 57156	2019-09-11 22:36:41
142.93.69.223	attack	Sep 10 04:55:55 web1 sshd\[5226\]: Invalid user robot from 142.93.69.223 Sep 10 04:55:55 web1 sshd\[5226\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.69.223 Sep 10 04:55:58 web1 sshd\[5226\]: Failed password for invalid user robot from 142.93.69.223 port 42212 ssh2 Sep 10 05:02:08 web1 sshd\[5809\]: Invalid user test from 142.93.69.223 Sep 10 05:02:08 web1 sshd\[5809\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.69.223	2019-09-10 23:08:46
142.93.69.223	attack	Sep 7 12:52:11 [host] sshd[8709]: Invalid user student2 from 142.93.69.223 Sep 7 12:52:11 [host] sshd[8709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.69.223 Sep 7 12:52:13 [host] sshd[8709]: Failed password for invalid user student2 from 142.93.69.223 port 48108 ssh2	2019-09-07 19:22:54
142.93.69.223	attackspam	$f2bV_matches	2019-08-24 03:28:34
142.93.69.223	attackspambots	Aug 21 03:25:45 ns341937 sshd[2943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.69.223 Aug 21 03:25:47 ns341937 sshd[2943]: Failed password for invalid user leo from 142.93.69.223 port 46418 ssh2 Aug 21 03:33:45 ns341937 sshd[4087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.69.223 ...	2019-08-21 10:22:36
142.93.69.223	attack	Aug 17 17:55:01 aiointranet sshd\[24873\]: Invalid user gautam from 142.93.69.223 Aug 17 17:55:01 aiointranet sshd\[24873\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.69.223 Aug 17 17:55:04 aiointranet sshd\[24873\]: Failed password for invalid user gautam from 142.93.69.223 port 42154 ssh2 Aug 17 17:59:19 aiointranet sshd\[25228\]: Invalid user monitoring from 142.93.69.223 Aug 17 17:59:19 aiointranet sshd\[25228\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.69.223	2019-08-18 12:15:21
142.93.69.223	attack	Aug 7 04:40:48 GIZ-Server-02 sshd[9693]: Invalid user leonard from 142.93.69.223 Aug 7 04:40:48 GIZ-Server-02 sshd[9693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.69.223 Aug 7 04:40:49 GIZ-Server-02 sshd[9693]: Failed password for invalid user leonard from 142.93.69.223 port 38718 ssh2 Aug 7 04:40:49 GIZ-Server-02 sshd[9693]: Received disconnect from 142.93.69.223: 11: Bye Bye [preauth] Aug 7 04:47:07 GIZ-Server-02 sshd[10205]: Invalid user developer from 142.93.69.223 Aug 7 04:47:07 GIZ-Server-02 sshd[10205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.69.223 Aug 7 04:47:08 GIZ-Server-02 sshd[10205]: Failed password for invalid user developer from 142.93.69.223 port 48228 ssh2 Aug 7 04:47:09 GIZ-Server-02 sshd[10205]: Received disconnect from 142.93.69.223: 11: Bye Bye [preauth] Aug 7 04:51:14 GIZ-Server-02 sshd[10417]: Invalid user test from 142.93.69.22........ -------------------------------	2019-08-07 22:47:44
142.93.69.148	attackspam	SSH User Authentication Brute Force Attempt, PTR: PTR record not found	2019-07-25 03:50:53
142.93.69.115	attackspam	10s of requests to none existent pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined node-superagent/4.1.0	2019-07-18 20:11:30

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.69.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46754
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.69.5.			IN	A

;; AUTHORITY SECTION:
.			582	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092200 1800 900 604800 86400

;; Query time: 951 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Sep 22 20:32:22 CST 2019
;; MSG SIZE  rcvd: 115

Host info

Host 5.69.93.142.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 5.69.93.142.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
79.137.163.43	attackspam	" "	2020-07-01 21:38:59
111.93.175.214	attackbots	Jun 30 20:15:37 zulu412 sshd\[1175\]: Invalid user c from 111.93.175.214 port 60176 Jun 30 20:15:37 zulu412 sshd\[1175\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.175.214 Jun 30 20:15:39 zulu412 sshd\[1175\]: Failed password for invalid user c from 111.93.175.214 port 60176 ssh2 ...	2020-07-01 21:46:34
23.101.79.179	attackbotsspam	2020-06-30 21:39:36 dovecot_login authenticator failed for $ADMIN$ \[23.101.79.179\]: 535 Incorrect authentication data $set_id=support@opso.it$ 2020-06-30 21:40:56 dovecot_login authenticator failed for $ADMIN$ \[23.101.79.179\]: 535 Incorrect authentication data $set_id=support@opso.it$ 2020-06-30 21:42:24 dovecot_login authenticator failed for $ADMIN$ \[23.101.79.179\]: 535 Incorrect authentication data $set_id=support@opso.it$ 2020-06-30 21:43:52 dovecot_login authenticator failed for $ADMIN$ \[23.101.79.179\]: 535 Incorrect authentication data $set_id=support@opso.it$ 2020-06-30 21:45:20 dovecot_login authenticator failed for $ADMIN$ \[23.101.79.179\]: 535 Incorrect authentication data $set_id=support@opso.it$	2020-07-01 21:31:54
51.91.123.119	attackspambots	Jun 30 22:36:41 ift sshd\[39407\]: Invalid user wx from 51.91.123.119Jun 30 22:36:43 ift sshd\[39407\]: Failed password for invalid user wx from 51.91.123.119 port 49902 ssh2Jun 30 22:40:29 ift sshd\[39984\]: Invalid user steven from 51.91.123.119Jun 30 22:40:31 ift sshd\[39984\]: Failed password for invalid user steven from 51.91.123.119 port 48510 ssh2Jun 30 22:44:28 ift sshd\[40293\]: Failed password for root from 51.91.123.119 port 47090 ssh2 ...	2020-07-01 21:26:45
104.196.243.176	attackspambots	Automatic report - XMLRPC Attack	2020-07-01 21:51:56
193.56.28.250	attack	Spam detected 2020.06.30 18:42:04 blocked until 2020.08.19 11:44:51 by HoneyPot	2020-07-01 21:04:29
178.238.235.73	attackspambots	TCP Port: 25 invalid blocked s5h-net (179)	2020-07-01 21:37:35
185.33.172.223	attackbots	Unauthorized connection attempt from IP address 185.33.172.223 on Port 445(SMB)	2020-07-01 21:05:44
116.241.94.65	attackbotsspam	TCP (SYN) 116.241.94.65:51699 -> port 23, len 44	2020-07-01 21:49:11
178.128.86.188	attackspam	Jun 30 21:42:01 server sshd[33360]: Failed password for root from 178.128.86.188 port 39636 ssh2 Jun 30 21:45:24 server sshd[36183]: User postgres from 178.128.86.188 not allowed because not listed in AllowUsers Jun 30 21:45:26 server sshd[36183]: Failed password for invalid user postgres from 178.128.86.188 port 37800 ssh2	2020-07-01 21:37:50
83.240.242.218	attackspam	2020-06-30T17:20:39.319490mail.broermann.family sshd[21334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.240.242.218 2020-06-30T17:20:39.311411mail.broermann.family sshd[21334]: Invalid user git from 83.240.242.218 port 44536 2020-06-30T17:20:41.597253mail.broermann.family sshd[21334]: Failed password for invalid user git from 83.240.242.218 port 44536 ssh2 2020-06-30T17:23:58.031421mail.broermann.family sshd[21590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.240.242.218 user=root 2020-06-30T17:23:59.963194mail.broermann.family sshd[21590]: Failed password for root from 83.240.242.218 port 44466 ssh2 ...	2020-07-01 21:11:47
211.208.225.110	attack	Jun 30 19:40:46 rotator sshd\[28711\]: Invalid user tomcat from 211.208.225.110Jun 30 19:40:48 rotator sshd\[28711\]: Failed password for invalid user tomcat from 211.208.225.110 port 56116 ssh2Jun 30 19:44:00 rotator sshd\[28730\]: Failed password for root from 211.208.225.110 port 51690 ssh2Jun 30 19:47:19 rotator sshd\[29508\]: Failed password for root from 211.208.225.110 port 47260 ssh2Jun 30 19:50:35 rotator sshd\[30277\]: Invalid user debug from 211.208.225.110Jun 30 19:50:36 rotator sshd\[30277\]: Failed password for invalid user debug from 211.208.225.110 port 42844 ssh2 ...	2020-07-01 21:16:36
106.12.113.155	attack	Jun 30 07:20:58 sip sshd[21401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.113.155 Jun 30 07:21:00 sip sshd[21401]: Failed password for invalid user tracker from 106.12.113.155 port 47260 ssh2 Jun 30 07:29:19 sip sshd[24535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.113.155	2020-07-01 21:50:10
151.106.54.34	attackspambots	Illegal actions on webapp	2020-07-01 20:59:04
198.71.240.7	attackspambots	SQL Injection in QueryString parameter: 241111111111111' UNION SELECT CHAR(45,120,49,45,81,45),CHAR(45,120,50,45,81,45),CHAR(45,120,51,45,81,45),CHAR(45,120,52,45,81,45),CHAR(45,120,53,45,81,45)--	2020-07-01 21:12:51

Recently Reported IPs

210.18.156.75	212.80.147.71	55.149.192.20	159.65.168.203
63.180.33.155	3.16.78.108	119.203.240.76	122.70.153.230
52.194.225.203	172.184.253.244	103.253.42.44	177.205.234.212
52.163.93.31	109.38.136.91	117.60.18.199	180.183.140.155
39.42.143.66	196.20.229.59	14.139.120.78	220.134.171.29