142.93.102.38 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	tcp_port_scan	2019-09-10 08:23:37
attackspam	3389BruteforceIDS	2019-09-03 23:36:26
attackspam	NAME : DO-13 CIDR : 142.93.0.0/16 \| EMAIL - SPAM {Looking for resource vulnerabilities} DDoS Attack US - block certain countries :) IP: 142.93.102.38 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl	2019-08-24 06:50:48

Type

Details

Datetime

attack

tcp_port_scan

2019-09-10 08:23:37

attackspam

3389BruteforceIDS

2019-09-03 23:36:26

attackspam

NAME : DO-13 CIDR : 142.93.0.0/16 | EMAIL - SPAM {Looking for resource vulnerabilities} DDoS Attack US - block certain countries :) IP: 142.93.102.38  Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN  - data recovery https://help-dysk.pl

2019-08-24 06:50:48

Comments on same subnet:

IP	Type	Details	Datetime
142.93.102.147	attack	Wordpress Admin Login attack	2019-12-15 06:26:20

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.102.38
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12450
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.102.38.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082301 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 24 06:50:43 CST 2019
;; MSG SIZE  rcvd: 117

Host info

38.102.93.142.in-addr.arpa domain name pointer min-extra-safe-104-de-prod.binaryedge.ninja.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
38.102.93.142.in-addr.arpa	name = min-extra-safe-104-de-prod.binaryedge.ninja.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
138.68.94.142	attack	Multiport scan 32 ports : 2720 3282 4445 4836 4969 8299 8769 9207 10227 11609 14585 15385 16082 16142 16936 17633 17930 18243 18554 20440 22852 23740 24495 26075 26210 27033 29231 29900 30040 31131 31176 31864	2020-07-21 07:31:03
117.103.168.204	attackbots	Jul 20 21:41:32 ajax sshd[12400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.103.168.204 Jul 20 21:41:34 ajax sshd[12400]: Failed password for invalid user odoo from 117.103.168.204 port 33358 ssh2	2020-07-21 07:49:13
37.187.54.67	attackbots	Jul 21 00:46:21 rocket sshd[24900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.54.67 Jul 21 00:46:23 rocket sshd[24900]: Failed password for invalid user gustavo from 37.187.54.67 port 37829 ssh2 ...	2020-07-21 07:52:31
139.180.213.55	attack	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-07-20T19:27:14Z and 2020-07-20T20:41:48Z	2020-07-21 07:32:56
37.59.48.181	attackbots	$f2bV_matches	2020-07-21 07:44:59
217.61.98.62	attack	20.07.2020 22:42:03 - RDP Login Fail Detected by https://www.elinox.de/RDP-Wächter	2020-07-21 07:23:59
51.77.146.156	attackspam	Jul 20 20:47:01 *** sshd[22719]: Invalid user natasha from 51.77.146.156	2020-07-21 07:42:51
185.243.8.98	attackspambots	$f2bV_matches	2020-07-21 07:27:18
199.249.230.189	attackspam	20 attempts against mh-misbehave-ban on ice	2020-07-21 07:32:04
80.82.64.98	attackbotsspam	Jul 21 00:23:07 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.64.98, lip=185.118.197.126, session= Jul 21 00:23:25 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.64.98, lip=185.118.197.126, session=<6Z1u9OaqtJFQUkBi> Jul 21 00:23:39 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=80.82.64.98, lip=185.118.197.126, session=<32wD9eaq4j9QUkBi> Jul 21 00:23:57 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 10 secs): user=, method=PLAIN, rip=80.82.64.98, lip=185.118.197.126, session= Jul 21 00:24:23 mail.srvfarm.net dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 17 secs): user=, method=PLAIN, rip=80.82.64	2020-07-21 07:25:36
194.61.24.177	attackbots	1064. On Jul 20 2020 experienced a Brute Force SSH login attempt -> 2228 unique times by 194.61.24.177.	2020-07-21 07:27:05
182.43.165.158	attack	2020-07-20T23:05:45.292007shield sshd\[31805\]: Invalid user daniella from 182.43.165.158 port 53774 2020-07-20T23:05:45.303395shield sshd\[31805\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.43.165.158 2020-07-20T23:05:47.561879shield sshd\[31805\]: Failed password for invalid user daniella from 182.43.165.158 port 53774 ssh2 2020-07-20T23:10:10.766056shield sshd\[32211\]: Invalid user lebesgue from 182.43.165.158 port 37514 2020-07-20T23:10:10.775144shield sshd\[32211\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.43.165.158	2020-07-21 07:19:42
140.143.137.170	attackbots	Jul 20 22:41:33 ncomp sshd[10570]: Invalid user training from 140.143.137.170 Jul 20 22:41:33 ncomp sshd[10570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.137.170 Jul 20 22:41:33 ncomp sshd[10570]: Invalid user training from 140.143.137.170 Jul 20 22:41:35 ncomp sshd[10570]: Failed password for invalid user training from 140.143.137.170 port 56020 ssh2	2020-07-21 07:47:14
69.51.16.248	attackbotsspam	Jul 20 22:30:48 ns382633 sshd\[26794\]: Invalid user elasticsearch from 69.51.16.248 port 45142 Jul 20 22:30:48 ns382633 sshd\[26794\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.51.16.248 Jul 20 22:30:50 ns382633 sshd\[26794\]: Failed password for invalid user elasticsearch from 69.51.16.248 port 45142 ssh2 Jul 20 22:41:31 ns382633 sshd\[28705\]: Invalid user sunjing from 69.51.16.248 port 57092 Jul 20 22:41:31 ns382633 sshd\[28705\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.51.16.248	2020-07-21 07:50:55
111.72.196.37	attack	Jul 20 23:53:55 srv01 postfix/smtpd\[6360\]: warning: unknown\[111.72.196.37\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 20 23:57:24 srv01 postfix/smtpd\[5783\]: warning: unknown\[111.72.196.37\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 21 00:00:52 srv01 postfix/smtpd\[8728\]: warning: unknown\[111.72.196.37\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 21 00:04:21 srv01 postfix/smtpd\[8737\]: warning: unknown\[111.72.196.37\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 21 00:11:17 srv01 postfix/smtpd\[32712\]: warning: unknown\[111.72.196.37\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-07-21 07:23:14

Recently Reported IPs

156.28.148.123	230.253.42.71	41.137.117.164	233.45.122.178
112.179.204.66	217.65.216.184	105.250.150.184	63.203.197.72
97.21.6.139	151.213.230.148	120.214.88.198	203.63.192.6
165.22.212.168	123.225.164.100	253.201.222.86	47.202.211.79
146.136.0.125	137.74.152.235	212.96.79.135	179.181.4.142