142.93.38.174 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt detected from IP address 142.93.38.174 to port 9092	2020-03-17 18:40:23

Comments on same subnet:

IP	Type	Details	Datetime
142.93.38.61	attack	2020-10-04T22:17:03.096869ollin.zadara.org sshd[228319]: User root from 142.93.38.61 not allowed because not listed in AllowUsers 2020-10-04T22:17:04.630811ollin.zadara.org sshd[228319]: Failed password for invalid user root from 142.93.38.61 port 35560 ssh2 ...	2020-10-05 03:31:22
142.93.38.61	attackspam	Oct 4 05:53:17 serwer sshd\[12235\]: Invalid user carlos from 142.93.38.61 port 35074 Oct 4 05:53:17 serwer sshd\[12235\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.38.61 Oct 4 05:53:19 serwer sshd\[12235\]: Failed password for invalid user carlos from 142.93.38.61 port 35074 ssh2 ...	2020-10-04 19:18:49

Type

Details

Datetime

142.93.38.61

attack

2020-10-04T22:17:03.096869ollin.zadara.org sshd[228319]: User root from 142.93.38.61 not allowed because not listed in AllowUsers
2020-10-04T22:17:04.630811ollin.zadara.org sshd[228319]: Failed password for invalid user root from 142.93.38.61 port 35560 ssh2
...

2020-10-05 03:31:22

142.93.38.61

attackspam

Oct  4 05:53:17 serwer sshd\[12235\]: Invalid user carlos from 142.93.38.61 port 35074
Oct  4 05:53:17 serwer sshd\[12235\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.38.61
Oct  4 05:53:19 serwer sshd\[12235\]: Failed password for invalid user carlos from 142.93.38.61 port 35074 ssh2
...

2020-10-04 19:18:49

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.38.174
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62678
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.38.174.			IN	A

;; AUTHORITY SECTION:
.			168	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031700 1800 900 604800 86400

;; Query time: 98 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 17 18:40:17 CST 2020
;; MSG SIZE  rcvd: 117

Host info

174.38.93.142.in-addr.arpa domain name pointer scan01.bigdata.re.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
174.38.93.142.in-addr.arpa	name = scan01.bigdata.re.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
35.200.161.138	attackbots	Automatc Report - XMLRPC Attack	2019-09-30 08:44:23
212.194.101.249	attack	Sep 30 00:32:08 vmd17057 sshd\[19401\]: Invalid user user from 212.194.101.249 port 45252 Sep 30 00:32:08 vmd17057 sshd\[19401\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.194.101.249 Sep 30 00:32:10 vmd17057 sshd\[19401\]: Failed password for invalid user user from 212.194.101.249 port 45252 ssh2 ...	2019-09-30 08:50:47
191.81.242.201	attackspam	Unauthorised access (Sep 30) SRC=191.81.242.201 LEN=40 TOS=0x10 PREC=0x40 TTL=53 ID=4044 TCP DPT=8080 WINDOW=63686 SYN	2019-09-30 12:07:30
35.201.215.136	attackbots	Automatc Report - XMLRPC Attack	2019-09-30 08:43:35
77.247.110.202	attack	\[2019-09-29 20:59:18\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '77.247.110.202:65146' - Wrong password \[2019-09-29 20:59:18\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-29T20:59:18.065-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3047",SessionID="0x7f1e1d0b85d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.202/65146",Challenge="075478fd",ReceivedChallenge="075478fd",ReceivedHash="e1bd1ee1a58bef8a12f216cf8d2bdc21" \[2019-09-29 20:59:18\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '77.247.110.202:65144' - Wrong password \[2019-09-29 20:59:18\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-29T20:59:18.066-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3047",SessionID="0x7f1e1c02d9c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.202/65144",	2019-09-30 09:11:07
213.32.67.160	attack	Sep 30 02:52:06 ArkNodeAT sshd\[3644\]: Invalid user lab from 213.32.67.160 Sep 30 02:52:06 ArkNodeAT sshd\[3644\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.67.160 Sep 30 02:52:08 ArkNodeAT sshd\[3644\]: Failed password for invalid user lab from 213.32.67.160 port 42827 ssh2	2019-09-30 09:06:53
188.241.39.220	attackbots	WordPress brute force	2019-09-30 09:11:25
35.184.12.224	attack	WordPress brute force	2019-09-30 08:46:30
192.154.231.187	attackbotsspam	WordPress brute force	2019-09-30 09:09:28
51.77.137.211	attack	Sep 30 05:55:35 SilenceServices sshd[24718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.137.211 Sep 30 05:55:38 SilenceServices sshd[24718]: Failed password for invalid user kerine from 51.77.137.211 port 60200 ssh2 Sep 30 05:59:08 SilenceServices sshd[25663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.137.211	2019-09-30 12:02:56
206.189.106.149	attack	WordPress brute force	2019-09-30 08:52:02
46.166.143.111	attackbotsspam	[SunSep2922:47:54.7475642019][:error][pid7554:tid47845837178624][client46.166.143.111:65132][client46.166.143.111]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:silver[-_.\,\\\\"\\\\\\\\'\\\\\\\\\\|]foxes\\|sex[-_.\,\\\\"\\\\\\\\'\\\\\\\\\\|]\?toys\?[-_.\,\\\\"\\\\\\\\'\\\\\\\\\\|]\?\(\?:for[-_.\,\\\\"\\\\\\\\'\\\\\\\\\\|]\?sale\\|online\\|store\)\\|free[-_.\,\\\\"\\\\\\\\'\\\\\\\\\\|]\?adult\\|sex-position\\|fake[-_.\,\\\\"\\\\\\\\'\\\\\\\\\\|]\?vagina\\|lovehoney\?sex\\|adult[-_.\,\\\\"\\\\\\\\'\\\\\\\\\\|]\?\(\?:shop\\|store\)\\|anal[-_.\,\\\\"\\\\\\\\'\\\\\\\\\\|]\?\(\?:s..."atARGS:Textarea.[file"/etc/apache2/conf.d/modsec_rules/30_asl_antispam.conf"][line"306"][id"300068"][rev"9"][msg"Atomicorp.comWAFAntiSpamRules:PossibleSpam:AdultContentDetected"][data"385foundwithinARGS:Textarea:freeadultdating\	2019-09-30 08:55:01
92.222.88.22	attackbots	Sep 30 05:59:16 vps01 sshd[4064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.88.22 Sep 30 05:59:18 vps01 sshd[4064]: Failed password for invalid user rfielding from 92.222.88.22 port 41640 ssh2	2019-09-30 12:01:58
31.220.104.205	attack	Automatc Report - XMLRPC Attack	2019-09-30 12:09:36
156.196.24.53	attackspambots	Unauthorised access (Sep 29) SRC=156.196.24.53 LEN=40 TOS=0x10 PREC=0x40 TTL=52 ID=50522 TCP DPT=8080 WINDOW=45248 SYN	2019-09-30 09:06:34

Recently Reported IPs

79.124.124.184	78.166.139.154	78.130.247.162	73.78.35.145
71.216.192.38	49.146.35.154	45.83.66.231	45.83.66.117
45.83.65.37	45.83.64.34	41.233.223.252	41.232.172.145
41.228.175.30	41.65.119.72	5.74.30.233	218.150.145.29
218.53.175.245	203.212.101.130	201.1.191.251	197.62.208.20