93.174.95.42 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: Incrediserve Ltd

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	ET CINS Active Threat Intelligence Poor Reputation IP group 88 - port: 5060 proto: UDP cat: Misc Attack	2020-04-02 02:14:00
attackbotsspam	ET CINS Active Threat Intelligence Poor Reputation IP group 89 - port: 5353 proto: UDP cat: Misc Attack	2020-04-01 02:38:21
attackbots	IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.	2020-03-25 05:53:42

Type

Details

Datetime

attackbotsspam

ET CINS Active Threat Intelligence Poor Reputation IP group 88 - port: 5060 proto: UDP cat: Misc Attack

2020-04-02 02:14:00

attackbotsspam

ET CINS Active Threat Intelligence Poor Reputation IP group 89 - port: 5353 proto: UDP cat: Misc Attack

2020-04-01 02:38:21

attackbots

IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.

2020-03-25 05:53:42

Comments on same subnet:

IP	Type	Details	Datetime
93.174.95.106	botsattackproxy	Botnet DB Scanner	2024-06-27 01:07:44
93.174.95.106	proxy	VPN	2023-01-19 13:48:50
93.174.95.106	attackproxy	VPN	2022-12-22 13:57:50
93.174.95.106	botsattackproxynormal	Log	2021-11-08 19:39:57
93.174.95.106	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 85 - port: 81 proto: tcp cat: Misc Attackbytes: 60	2020-10-14 05:00:41
93.174.95.106	attackspambots	Port scan: Attack repeated for 24 hours	2020-10-08 03:25:09
93.174.95.106	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 83 - port: 1099 proto: tcp cat: Misc Attackbytes: 60	2020-10-07 19:40:28
93.174.95.106	attack	scans once in preceeding hours on the ports (in chronological order) 9530 resulting in total of 13 scans from 93.174.88.0/21 block.	2020-10-01 07:10:17
93.174.95.106	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 81 - port: 27015 proto: udp cat: Misc Attackbytes: 67	2020-09-30 23:36:28
93.174.95.106	attack	Thu Aug 27 05:46:55 2020 93.174.95.106:26876 TLS Error: TLS handshake failed	2020-08-27 16:21:23
93.174.95.106	attack	TCP (SYN) 93.174.95.106:24858 -> port 902, len 44	2020-08-21 06:48:10
93.174.95.106	attackbotsspam	TCP (SYN) 93.174.95.106:31667 -> port 5432, len 44	2020-08-17 15:03:23
93.174.95.106	attackspambots	Icarus honeypot on github	2020-08-16 07:58:45
93.174.95.106	attack	1597503127 - 08/15/2020 16:52:07 Host: 93.174.95.106/93.174.95.106 Port: 143 TCP Blocked ...	2020-08-16 02:28:46
93.174.95.106	attackbots	Aug 3 17:07:57 debian-2gb-nbg1-2 kernel: \[18725747.601092\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=93.174.95.106 DST=195.201.40.59 LEN=44 TOS=0x10 PREC=0x00 TTL=120 ID=41006 PROTO=TCP SPT=28693 DPT=70 WINDOW=25229 RES=0x00 SYN URGP=0	2020-08-03 23:29:33

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 93.174.95.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39277
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;93.174.95.42.			IN	A

;; AUTHORITY SECTION:
.			168	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020032402 1800 900 604800 86400

;; Query time: 173 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 25 05:53:39 CST 2020
;; MSG SIZE  rcvd: 116

Host info

42.95.174.93.in-addr.arpa domain name pointer scanner8.openportstats.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
42.95.174.93.in-addr.arpa	name = scanner8.openportstats.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
93.241.77.57	attack	Unauthorised access (Jul 20) SRC=93.241.77.57 LEN=52 TTL=113 ID=13840 DF TCP DPT=445 WINDOW=8192 SYN	2020-07-21 03:07:41
117.37.124.212	attack	[portscan] Port scan	2020-07-21 03:31:39
178.54.153.210	attackbots	Unauthorised access (Jul 20) SRC=178.54.153.210 LEN=52 TTL=121 ID=12362 DF TCP DPT=445 WINDOW=8192 SYN	2020-07-21 03:38:35
192.144.226.142	attackbotsspam	Jul 20 14:29:48 rush sshd[27936]: Failed password for mail from 192.144.226.142 port 49728 ssh2 Jul 20 14:33:00 rush sshd[28021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.226.142 Jul 20 14:33:02 rush sshd[28021]: Failed password for invalid user cameo from 192.144.226.142 port 53488 ssh2 ...	2020-07-21 03:16:06
189.91.231.252	attackspam	Jul 20 15:21:46 vps sshd[109991]: Failed password for invalid user bgs from 189.91.231.252 port 46086 ssh2 Jul 20 15:26:44 vps sshd[133119]: Invalid user postgres from 189.91.231.252 port 60360 Jul 20 15:26:44 vps sshd[133119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189-91-231-252-wlan.lpnet.com.br Jul 20 15:26:47 vps sshd[133119]: Failed password for invalid user postgres from 189.91.231.252 port 60360 ssh2 Jul 20 15:31:44 vps sshd[155491]: Invalid user tui from 189.91.231.252 port 46400 ...	2020-07-21 03:02:50
39.98.244.128	attackspambots	Jul 20 14:08:12 alice sshd[5898]: Invalid user logadmin from 39.98.244.128 port 39862 Jul 20 14:08:14 alice sshd[5898]: Failed password for invalid user logadmin from 39.98.244.128 port 39862 ssh2 Jul 20 14:11:17 alice sshd[6196]: Invalid user ob from 39.98.244.128 port 48332 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=39.98.244.128	2020-07-21 03:01:38
180.76.111.242	attackbotsspam	Invalid user teste from 180.76.111.242 port 59352	2020-07-21 03:34:08
50.238.150.158	attack	Jul 20 14:08:10 venus sshd[20943]: Invalid user admin from 50.238.150.158 port 38726 Jul 20 14:08:10 venus sshd[20943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.238.150.158 Jul 20 14:08:12 venus sshd[20943]: Failed password for invalid user admin from 50.238.150.158 port 38726 ssh2 Jul 20 14:08:13 venus sshd[20955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.238.150.158 user=r.r Jul 20 14:08:15 venus sshd[20955]: Failed password for r.r from 50.238.150.158 port 38787 ssh2 Jul 20 14:08:16 venus sshd[20962]: Invalid user admin from 50.238.150.158 port 38857 Jul 20 14:08:16 venus sshd[20962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.238.150.158 Jul 20 14:08:18 venus sshd[20962]: Failed password for invalid user admin from 50.238.150.158 port 38857 ssh2 Jul 20 14:08:19 venus sshd[20973]: Invalid user admin from 50.238.150.158 po........ ------------------------------	2020-07-21 03:05:49
94.191.119.31	attackspam	Invalid user zzw from 94.191.119.31 port 33536	2020-07-21 03:25:12
106.12.110.2	attackbots	2020-07-20T07:23:28.232071hostname sshd[55666]: Failed password for invalid user tester from 106.12.110.2 port 48094 ssh2 ...	2020-07-21 03:31:03
103.31.232.173	attackbots	Automatic report - XMLRPC Attack	2020-07-21 03:35:59
178.128.29.196	attackspambots	37777/tcp [2020-07-20]1pkt	2020-07-21 03:08:52
103.75.101.59	attackbotsspam	Jul 20 13:01:13 XXXXXX sshd[57202]: Invalid user jesa from 103.75.101.59 port 44676	2020-07-21 03:19:10
176.67.80.9	attackbotsspam	[2020-07-20 13:12:13] NOTICE[1277] chan_sip.c: Registration from '' failed for '176.67.80.9:59669' - Wrong password [2020-07-20 13:12:13] SECURITY[1295] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-20T13:12:13.235-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3609",SessionID="0x7f1754188e58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/176.67.80.9/59669",Challenge="66babd0c",ReceivedChallenge="66babd0c",ReceivedHash="296ddafa1c2724c0487fe86dea312694" [2020-07-20 13:14:30] NOTICE[1277] chan_sip.c: Registration from '' failed for '176.67.80.9:57542' - Wrong password [2020-07-20 13:14:30] SECURITY[1295] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-20T13:14:30.961-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3514",SessionID="0x7f175455b408",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/176.67.80.9/57542", ...	2020-07-21 03:00:56
49.233.169.219	attack	2020-07-17 18:25:53 server sshd[85070]: Failed password for invalid user testuser from 49.233.169.219 port 24477 ssh2	2020-07-21 03:03:31

Recently Reported IPs

196.110.109.14	76.191.56.151	186.59.106.186	2.202.72.238
100.183.115.171	82.225.198.173	125.61.7.177	115.208.87.38
39.233.94.156	157.51.222.241	142.27.194.130	62.95.14.240
158.109.2.85	93.246.19.140	206.64.254.156	102.82.48.117
180.103.183.25	177.58.253.203	199.154.212.106	194.26.145.67