Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbotsspam
Mar  4 09:23:31 NPSTNNYC01T sshd[28847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218
Mar  4 09:23:33 NPSTNNYC01T sshd[28847]: Failed password for invalid user spark from 142.93.83.218 port 45148 ssh2
Mar  4 09:25:23 NPSTNNYC01T sshd[29064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218
...
2020-03-05 02:03:42
attackspam
Feb 27 03:29:13 server sshd\[8030\]: Invalid user admin from 142.93.83.218
Feb 27 03:29:13 server sshd\[8030\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218 
Feb 27 03:29:15 server sshd\[8030\]: Failed password for invalid user admin from 142.93.83.218 port 40316 ssh2
Feb 27 03:31:35 server sshd\[8794\]: Invalid user test1 from 142.93.83.218
Feb 27 03:31:35 server sshd\[8794\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218 
...
2020-02-27 08:35:15
attackbotsspam
*Port Scan* detected from 142.93.83.218 (US/United States/-). 4 hits in the last 150 seconds
2020-02-12 16:14:04
attackbotsspam
Feb  8 06:04:47 srv-ubuntu-dev3 sshd[34041]: Invalid user ntz from 142.93.83.218
Feb  8 06:04:47 srv-ubuntu-dev3 sshd[34041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218
Feb  8 06:04:47 srv-ubuntu-dev3 sshd[34041]: Invalid user ntz from 142.93.83.218
Feb  8 06:04:49 srv-ubuntu-dev3 sshd[34041]: Failed password for invalid user ntz from 142.93.83.218 port 39128 ssh2
Feb  8 06:07:48 srv-ubuntu-dev3 sshd[34301]: Invalid user bxz from 142.93.83.218
Feb  8 06:07:48 srv-ubuntu-dev3 sshd[34301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218
Feb  8 06:07:48 srv-ubuntu-dev3 sshd[34301]: Invalid user bxz from 142.93.83.218
Feb  8 06:07:50 srv-ubuntu-dev3 sshd[34301]: Failed password for invalid user bxz from 142.93.83.218 port 40686 ssh2
Feb  8 06:10:47 srv-ubuntu-dev3 sshd[34751]: Invalid user km from 142.93.83.218
...
2020-02-08 18:00:05
attack
detected by Fail2Ban
2020-02-02 03:19:42
attackspambots
$f2bV_matches
2020-01-11 22:57:13
attackspam
SSH Brute Force, server-1 sshd[1184]: Failed password for invalid user gkk from 142.93.83.218 port 32922 ssh2
2020-01-08 16:56:31
attack
IP blocked
2020-01-03 07:25:14
attackbotsspam
Dec 31 05:38:07 server sshd\[20070\]: Invalid user home from 142.93.83.218
Dec 31 05:38:07 server sshd\[20070\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218 
Dec 31 05:38:09 server sshd\[20070\]: Failed password for invalid user home from 142.93.83.218 port 53500 ssh2
Dec 31 12:03:00 server sshd\[13378\]: Invalid user brimo from 142.93.83.218
Dec 31 12:03:00 server sshd\[13378\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218 
...
2019-12-31 18:52:25
attackbots
Dec  8 06:24:03 eddieflores sshd\[12034\]: Invalid user guest from 142.93.83.218
Dec  8 06:24:03 eddieflores sshd\[12034\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218
Dec  8 06:24:04 eddieflores sshd\[12034\]: Failed password for invalid user guest from 142.93.83.218 port 42212 ssh2
Dec  8 06:30:57 eddieflores sshd\[13585\]: Invalid user dunnett from 142.93.83.218
Dec  8 06:30:57 eddieflores sshd\[13585\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218
2019-12-09 00:42:46
attackbotsspam
SSH bruteforce (Triggered fail2ban)
2019-12-02 23:07:34
attackspambots
$f2bV_matches
2019-11-29 02:25:28
attackspam
Nov 17 17:09:12 sd-53420 sshd\[22667\]: Invalid user holbrook from 142.93.83.218
Nov 17 17:09:12 sd-53420 sshd\[22667\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218
Nov 17 17:09:14 sd-53420 sshd\[22667\]: Failed password for invalid user holbrook from 142.93.83.218 port 57924 ssh2
Nov 17 17:12:57 sd-53420 sshd\[23704\]: User root from 142.93.83.218 not allowed because none of user's groups are listed in AllowGroups
Nov 17 17:12:58 sd-53420 sshd\[23704\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218  user=root
...
2019-11-18 00:35:48
attackspambots
Nov 17 07:41:45 legacy sshd[5322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218
Nov 17 07:41:48 legacy sshd[5322]: Failed password for invalid user squid from 142.93.83.218 port 46744 ssh2
Nov 17 07:45:51 legacy sshd[5425]: Failed password for bin from 142.93.83.218 port 55336 ssh2
...
2019-11-17 14:50:32
attack
Nov 12 00:10:42 eventyay sshd[11256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218
Nov 12 00:10:44 eventyay sshd[11256]: Failed password for invalid user 123456 from 142.93.83.218 port 38234 ssh2
Nov 12 00:14:34 eventyay sshd[11355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218
...
2019-11-12 07:32:36
attack
Nov 11 06:14:04 auw2 sshd\[7087\]: Invalid user schipper from 142.93.83.218
Nov 11 06:14:04 auw2 sshd\[7087\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218
Nov 11 06:14:06 auw2 sshd\[7087\]: Failed password for invalid user schipper from 142.93.83.218 port 39162 ssh2
Nov 11 06:18:02 auw2 sshd\[7430\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218  user=lp
Nov 11 06:18:04 auw2 sshd\[7430\]: Failed password for lp from 142.93.83.218 port 48230 ssh2
2019-11-12 00:29:58
attackbotsspam
*Port Scan* detected from 142.93.83.218 (US/United States/-). 4 hits in the last 260 seconds
2019-11-11 18:18:56
attackspambots
2019-11-04T07:25:08.2289051240 sshd\[17077\]: Invalid user alcaraz from 142.93.83.218 port 35266
2019-11-04T07:25:08.2315631240 sshd\[17077\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218
2019-11-04T07:25:10.0524771240 sshd\[17077\]: Failed password for invalid user alcaraz from 142.93.83.218 port 35266 ssh2
...
2019-11-04 18:56:47
attackspam
Oct 31 04:09:44 hcbbdb sshd\[29045\]: Invalid user just4now from 142.93.83.218
Oct 31 04:09:44 hcbbdb sshd\[29045\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218
Oct 31 04:09:47 hcbbdb sshd\[29045\]: Failed password for invalid user just4now from 142.93.83.218 port 54340 ssh2
Oct 31 04:14:01 hcbbdb sshd\[29517\]: Invalid user Dubai@123 from 142.93.83.218
Oct 31 04:14:01 hcbbdb sshd\[29517\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218
2019-10-31 12:35:38
attackbots
Oct 30 12:53:30 sso sshd[6340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218
Oct 30 12:53:32 sso sshd[6340]: Failed password for invalid user cloudtest from 142.93.83.218 port 58780 ssh2
...
2019-10-30 21:53:00
attackbotsspam
Oct 28 11:11:15 server sshd\[6428\]: Invalid user mc from 142.93.83.218
Oct 28 11:11:15 server sshd\[6428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218 
Oct 28 11:11:16 server sshd\[6428\]: Failed password for invalid user mc from 142.93.83.218 port 52848 ssh2
Oct 28 11:24:34 server sshd\[9193\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218  user=root
Oct 28 11:24:36 server sshd\[9193\]: Failed password for root from 142.93.83.218 port 58594 ssh2
...
2019-10-28 17:57:59
attackspam
Oct 10 01:13:27 host2 sshd[31453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218  user=r.r
Oct 10 01:13:29 host2 sshd[31453]: Failed password for r.r from 142.93.83.218 port 41578 ssh2
Oct 10 01:13:29 host2 sshd[31453]: Received disconnect from 142.93.83.218: 11: Bye Bye [preauth]
Oct 10 01:33:01 host2 sshd[13546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218  user=r.r
Oct 10 01:33:03 host2 sshd[13546]: Failed password for r.r from 142.93.83.218 port 56574 ssh2
Oct 10 01:33:03 host2 sshd[13546]: Received disconnect from 142.93.83.218: 11: Bye Bye [preauth]
Oct 10 01:36:55 host2 sshd[28153]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218  user=r.r
Oct 10 01:36:57 host2 sshd[28153]: Failed password for r.r from 142.93.83.218 port 42228 ssh2
Oct 10 01:36:57 host2 sshd[28153]: Received disconnect from 142.93.........
-------------------------------
2019-10-11 06:46:58
Comments on same subnet:
IP Type Details Datetime
142.93.83.242 attack
Email rejected due to spam filtering
2020-04-23 01:06:53
142.93.83.205 attackbotsspam
Scanning random ports - tries to find possible vulnerable services
2019-07-09 17:51:36
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.83.218
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51287
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.83.218.			IN	A

;; AUTHORITY SECTION:
.			584	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101001 1800 900 604800 86400

;; Query time: 326 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 11 06:46:52 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 218.83.93.142.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 218.83.93.142.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
222.186.30.167 attackspambots
Aug 12 14:52:20 vps sshd[179152]: Failed password for root from 222.186.30.167 port 10603 ssh2
Aug 12 14:52:22 vps sshd[179152]: Failed password for root from 222.186.30.167 port 10603 ssh2
Aug 12 14:56:54 vps sshd[201125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.167  user=root
Aug 12 14:56:57 vps sshd[201125]: Failed password for root from 222.186.30.167 port 49765 ssh2
Aug 12 14:56:59 vps sshd[201125]: Failed password for root from 222.186.30.167 port 49765 ssh2
...
2020-08-12 21:05:32
103.25.200.185 attackspam
Attempted connection to port 23.
2020-08-12 20:41:16
40.77.31.240 attackbots
Password spray, open RDP ports
2020-08-12 21:02:38
161.35.109.11 attackbotsspam
Aug 12 14:42:22 PorscheCustomer sshd[10018]: Failed password for root from 161.35.109.11 port 54628 ssh2
Aug 12 14:43:22 PorscheCustomer sshd[10050]: Failed password for root from 161.35.109.11 port 38532 ssh2
...
2020-08-12 21:03:02
117.51.145.81 attackbots
Multiple SSH authentication failures from 117.51.145.81
2020-08-12 20:56:02
157.245.106.153 attackbots
157.245.106.153 - - [12/Aug/2020:14:21:44 +0200] "POST /xmlrpc.php HTTP/1.1" 403 613 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.245.106.153 - - [12/Aug/2020:14:47:55 +0200] "POST /xmlrpc.php HTTP/1.1" 403 613 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-12 21:10:35
42.112.211.52 attackspambots
Aug 12 14:39:24 ip106 sshd[30954]: Failed password for root from 42.112.211.52 port 31125 ssh2
...
2020-08-12 20:53:18
213.55.89.95 attack
Port probing on unauthorized port 445
2020-08-12 21:10:14
5.188.211.14 attack
Automatic report - Banned IP Access
2020-08-12 20:40:22
114.219.133.7 attackbots
Aug 12 14:37:52 vpn01 sshd[31735]: Failed password for root from 114.219.133.7 port 4715 ssh2
...
2020-08-12 21:07:50
185.181.102.18 attackspam
SIP/5060 Probe, BF, Hack -
2020-08-12 20:35:40
119.36.201.51 attack
Telnet/23 MH Probe, Scan, BF, Hack -
2020-08-12 20:23:53
174.219.1.118 attackbotsspam
Brute forcing email accounts
2020-08-12 20:57:35
201.97.114.101 attackbotsspam
Attempted connection to port 23.
2020-08-12 20:31:25
152.89.154.177 attackspam
Attempted connection to port 8080.
2020-08-12 20:35:59

Recently Reported IPs

50.117.106.29 92.111.13.246 135.184.163.101 137.98.156.147
82.46.204.14 3.231.248.137 208.122.121.1 84.183.97.109
117.92.16.54 183.48.33.61 118.69.238.10 54.36.150.66
203.129.224.86 96.234.72.26 178.19.179.241 139.99.157.106
193.70.2.50 218.127.227.0 91.108.156.30 51.75.165.119