142.93.42.92 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	WordPress login Brute force / Web App Attack on client site.	2019-07-17 22:20:57

Comments on same subnet:

IP	Type	Details	Datetime
142.93.42.177	attackspambots	2020-04-04T02:21:49.277758linuxbox-skyline sshd[44769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.42.177 user=root 2020-04-04T02:21:51.255638linuxbox-skyline sshd[44769]: Failed password for root from 142.93.42.177 port 46495 ssh2 ...	2020-04-04 16:36:26
142.93.42.177	attack	detected by Fail2Ban	2020-04-01 09:34:29
142.93.42.177	attack	Mar 29 19:32:47 firewall sshd[28503]: Invalid user user from 142.93.42.177 Mar 29 19:32:48 firewall sshd[28503]: Failed password for invalid user user from 142.93.42.177 port 37671 ssh2 Mar 29 19:36:51 firewall sshd[28741]: Invalid user ircbot from 142.93.42.177 ...	2020-03-30 07:30:54
142.93.42.177	attack	Brute force attempt	2020-03-30 02:24:14
142.93.42.177	attack	2020-03-26T01:28:35.732140vps751288.ovh.net sshd\[17612\]: Invalid user kevin from 142.93.42.177 port 56422 2020-03-26T01:28:35.747306vps751288.ovh.net sshd\[17612\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.42.177 2020-03-26T01:28:37.788630vps751288.ovh.net sshd\[17612\]: Failed password for invalid user kevin from 142.93.42.177 port 56422 ssh2 2020-03-26T01:37:19.838841vps751288.ovh.net sshd\[17673\]: Invalid user telnetd from 142.93.42.177 port 50708 2020-03-26T01:37:19.849580vps751288.ovh.net sshd\[17673\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.42.177	2020-03-26 09:02:41
142.93.42.177	attackbots	Invalid user md from 142.93.42.177 port 45599	2020-03-22 02:31:04
142.93.42.24	attack	Automatic report - XMLRPC Attack	2020-01-30 09:50:37

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.42.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38941
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.42.92.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019060600 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jun 06 16:50:33 CST 2019
;; MSG SIZE  rcvd: 116

Host info

92.42.93.142.in-addr.arpa domain name pointer galkayouniversity.net.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
92.42.93.142.in-addr.arpa	name = galkayouniversity.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
206.189.36.182	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-07-27 20:31:20
178.128.92.109	attack	Jul 27 13:57:45 ip106 sshd[3083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.92.109 Jul 27 13:57:47 ip106 sshd[3083]: Failed password for invalid user testuser from 178.128.92.109 port 40432 ssh2 ...	2020-07-27 20:18:57
185.153.199.145	attackspam	07/27/2020-07:57:46.369867 185.153.199.145 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-07-27 20:19:48
45.176.40.169	attack	Automatic report - Port Scan Attack	2020-07-27 20:14:21
139.155.20.146	attackbotsspam	Jul 27 11:57:51 scw-6657dc sshd[14322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.20.146 Jul 27 11:57:51 scw-6657dc sshd[14322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.20.146 Jul 27 11:57:54 scw-6657dc sshd[14322]: Failed password for invalid user mahendra from 139.155.20.146 port 51766 ssh2 ...	2020-07-27 20:13:48
140.143.244.31	attackspam	Jul 27 13:54:45 buvik sshd[11185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.244.31 Jul 27 13:54:47 buvik sshd[11185]: Failed password for invalid user un from 140.143.244.31 port 36140 ssh2 Jul 27 13:57:38 buvik sshd[11618]: Invalid user test2 from 140.143.244.31 ...	2020-07-27 20:26:13
193.112.93.2	attackbots	Jul 27 07:45:47 finn sshd[24975]: Invalid user virtual from 193.112.93.2 port 33448 Jul 27 07:45:47 finn sshd[24975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.93.2 Jul 27 07:45:49 finn sshd[24975]: Failed password for invalid user virtual from 193.112.93.2 port 33448 ssh2 Jul 27 07:45:49 finn sshd[24975]: Received disconnect from 193.112.93.2 port 33448:11: Bye Bye [preauth] Jul 27 07:45:49 finn sshd[24975]: Disconnected from 193.112.93.2 port 33448 [preauth] Jul 27 07:53:30 finn sshd[26447]: Invalid user sdtdserver from 193.112.93.2 port 54916 Jul 27 07:53:30 finn sshd[26447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.93.2 Jul 27 07:53:31 finn sshd[26447]: Failed password for invalid user sdtdserver from 193.112.93.2 port 54916 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=193.112.93.2	2020-07-27 20:21:01
121.238.147.149	attackspambots	Jul 27 13:54:35 abendstille sshd\[3025\]: Invalid user arnab from 121.238.147.149 Jul 27 13:54:35 abendstille sshd\[3025\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.238.147.149 Jul 27 13:54:37 abendstille sshd\[3025\]: Failed password for invalid user arnab from 121.238.147.149 port 18556 ssh2 Jul 27 13:57:29 abendstille sshd\[5680\]: Invalid user asam from 121.238.147.149 Jul 27 13:57:29 abendstille sshd\[5680\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.238.147.149 ...	2020-07-27 20:32:09
218.92.0.220	attackbotsspam	Jul 27 12:28:00 rush sshd[16142]: Failed password for root from 218.92.0.220 port 44252 ssh2 Jul 27 12:28:16 rush sshd[16144]: Failed password for root from 218.92.0.220 port 52744 ssh2 ...	2020-07-27 20:34:47
95.252.216.156	attack	TCP (SYN) 95.252.216.156:59242 -> port 23, len 44	2020-07-27 20:43:17
185.97.116.165	attack	Jul 27 14:02:00 buvik sshd[12687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.97.116.165 Jul 27 14:02:02 buvik sshd[12687]: Failed password for invalid user k from 185.97.116.165 port 51204 ssh2 Jul 27 14:06:27 buvik sshd[13380]: Invalid user uu from 185.97.116.165 ...	2020-07-27 20:37:37
72.167.224.135	attackspambots	Jul 27 12:04:27 django-0 sshd[17291]: Invalid user support from 72.167.224.135 ...	2020-07-27 20:44:19
83.97.20.31	attackbots	Jul 27 13:57:29 debian-2gb-nbg1-2 kernel: \[18109555.155805\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=83.97.20.31 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=54506 DPT=7547 WINDOW=65535 RES=0x00 SYN URGP=0	2020-07-27 20:32:41
77.121.100.14	attackspam	20/7/27@07:57:16: FAIL: Alarm-Telnet address from=77.121.100.14 ...	2020-07-27 20:46:36
47.245.4.87	attack	Jul 27 14:53:07 journals sshd\[111348\]: Invalid user shiying from 47.245.4.87 Jul 27 14:53:07 journals sshd\[111348\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.245.4.87 Jul 27 14:53:08 journals sshd\[111348\]: Failed password for invalid user shiying from 47.245.4.87 port 59282 ssh2 Jul 27 14:57:30 journals sshd\[111950\]: Invalid user admin from 47.245.4.87 Jul 27 14:57:30 journals sshd\[111950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.245.4.87 ...	2020-07-27 20:30:52

Recently Reported IPs

142.93.162.178	213.22.125.38	112.10.238.12	134.209.180.4
241.74.119.194	13.57.219.63	223.132.26.214	13.234.64.194
240.169.91.227	8.230.151.136	122.11.95.106	48.50.49.186
3.7.33.69	97.145.152.64	42.20.22.58	98.177.178.1
101.124.34.248	182.71.119.170	51.255.30.118	198.199.94.14