JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 142.93.161.105

142.93.161.105 was found in our database!

This IP was reported 286 times. Confidence of Abuse is 9%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 142.93.161.105

Whois 142.93.161.105

IP Abuse Reports for 142.93.161.105:

This IP address has been reported a total of 286 times from 175 distinct sources. 142.93.161.105 was first reported on June 12th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-07 23:41:08 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/postfix-spam	Web App Attack Brute-Force
🇩🇪 tall1oN	2026-05-31 07:02:57 (3 weeks ago)	2026-05-31T09:02:53.513031+02:00 kenny postfix/submission/smtpd[4102540]: improper command pipelinin ... show more 2026-05-31T09:02:53.513031+02:00 kenny postfix/submission/smtpd[4102540]: improper command pipelining after CONNECT from unknown[142.93.161.105]: \026\003\001\000\356\001\000\000\352\003\003\302*\202\022\b.\251\254\0257d\257\252H\361\235\a_\311\314DW\2555\242\233\307G\3005\227\024 J\223\235\215\362Fbo\203\225\337!\234\236\264\006 \3533'\277x]I\265\303zh\004\373'\225\000&\314\250\314\251\300/\3000\300+\300,\300\023\300\t\300\024\300\n\000\234 2026-05-31T09:02:53.524610+02:00 kenny postfix/submission/smtpd[4102540]: improper command pipelining after CONNECT from unknown[142.93.161.105]: \r\n 2026-05-31T09:02:56.589994+02:00 kenny postfix/submission/smtpd[4102540]: improper command pipelining after CONNECT from unknown[142.93.161.105]: GET / HTTP/1.1\r\nHost: 195.201.95.142:587\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl ... show less	Brute-Force Email Spam
Anonymous	2026-02-04 05:49:18 (4 months ago)	$f2bV_matches	Brute-Force SSH
🇩🇪 SiyCah	2026-02-04 04:00:02 (4 months ago)	142.93.161.105 fell into Endlessh tarpit; 0/13 total connections are currently still open. Total tim ... show more 142.93.161.105 fell into Endlessh tarpit; 0/13 total connections are currently still open. Total time wasted: 1m 29s. Total bytes sent by tarpit: 9.00KiB. Report generated by Endlessh Report Generator v1.2.3 show less	Port Scan Hacking Brute-Force SSH
🇫🇷 Thaliruth	2026-02-04 02:29:40 (4 months ago)	Feb 4 03:29:33 151 dovecot: imap-login: Login aborted: Connection closed: read(size=1026) failed: C ... show more Feb 4 03:29:33 151 dovecot: imap-login: Login aborted: Connection closed: read(size=1026) failed: Connection reset by peer (disconnected during TLS handshake) (tls_handshake_not_finished): user=<>, rip=142.93.161.105, lip=46.252.194.151, TLS handshaking: read(size=1026) failed: Connection reset by peer, session=<DXqeU/ZJjZCOXaFp> Feb 4 03:29:40 151 dovecot: imap-login: Login aborted: Connection closed: SSL_accept() failed: error:0A00018C:SSL routines::version too low (disconnected during TLS handshake) (tls_handshake_not_finished): user=<>, rip=142.93.161.105, lip=46.252.194.151, TLS handshaking: SSL_accept() failed: error:0A00018C:SSL routines::version too low, session=<NnCiU/ZJn1KOXaFp> Feb 4 03:29:40 151 dovecot: imap-login: Login aborted: Connection closed (no auth attempts in 0 secs) (no_auth_attempts): user=<>, rip=142.93.161.105, lip=46.252.194.151, TLS, session=<o1X+U/ZJo0COXaFp> ... show less	Hacking Brute-Force
🇳🇱 Hobby Bob	2026-02-04 02:14:52 (4 months ago)	Feb 4 02:14:51 server dovecot: pop3-login: Disconnected: Connection closed (no auth attempts in 0 se ... show more Feb 4 02:14:51 server dovecot: pop3-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=, rip=142.93.161.105, lip=X.X.X.X session= show less	Port Scan Hacking
🇩🇪 psauxit	2026-02-04 01:15:03 (4 months ago)	Fail2Ban - DOVECOT IMAP server attack	Brute-Force
🇩🇪 Progetto1	2026-02-03 10:56:01 (4 months ago)	Detected via HAProxyScanner at 2026-02-03 10:56:01 UTC on destination port WEB (80/443). Repeated sc ... show more Detected via HAProxyScanner at 2026-02-03 10:56:01 UTC on destination port WEB (80/443). Repeated scan / connection. show less	Port Scan Hacking Brute-Force
🇧🇷 diego	2026-02-03 04:25:50 (4 months ago)	[probe-68-69] 2026-02-03 04:07:12, Client: 142.93.161.105, Protocol: 6, Unauthorized activity to HTT ... show more [probe-68-69] 2026-02-03 04:07:12, Client: 142.93.161.105, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇨🇦 Axel	2026-02-03 02:27:47 (4 months ago)	SSH login attempts (endlessh): 2026-02-03T00:52:53.997Z ACCEPT host=::ffff:142.93.161.105 port=15661 ... show more SSH login attempts (endlessh): 2026-02-03T00:52:53.997Z ACCEPT host=::ffff:142.93.161.105 port=15661 fd=4 n=2/4096 show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-02-03 01:47:05 (4 months ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/142.93.161.105 2 ... show more ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/142.93.161.105 2026-02-02 04:06:37 / 2026-02-02 04:06:38 / 2026-02-02 04:06:39 /nice%20ports%2C/Tri%6Eity.txt%2ebak show less	Web App Attack
Anonymous	2026-02-03 00:20:53 (4 months ago)	142.93.161.105 - - [03/Feb/2026:00:20:52 +0000] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x036\xA3p( ... show more 142.93.161.105 - - [03/Feb/2026:00:20:52 +0000] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x036\xA3p(U\xAA]h\xB8\xEE:\xE8T\xD5\x91\x14\xBA\xD9\x9F\x0E\x06\xCE\x17\x8D\x9CB\x82r\xA0$\x5CO \xE4\x8E,\xF3\xCA\xFA\x02\xA4\x06\x95f<\x81a\x0F\xD6~" 400 150 "-" "-" "-" 142.93.161.105 - - [03/Feb/2026:00:20:52 +0000] "\x16\x03\x01\x02\x00\x01\x00\x01\xFC\x03\x03\xA9Zi\x0Eie\xE3\x05\x86`\xA8Q\x9F[P\xB6\x12\xE6\xD1\x03(\xC8}E$]\x7F\x05\xA5\xF5,* i\x19\xBEFN\x91#\x06\xE4\x95\xB7\xCC\xCA\x08\xDEj+\xECP5y0\xF0 y\x9AY\x97/\xA4\xD0`\x00\x96\x13\x02\x13\x03\x13\x01\x003\x009\x005\x00/\xC0,\xC00\x00\xA3\x00\x9F\xCC\xA9\xCC\xA8\xCC\xAA\xC0\xAF\xC0\xAD\xC0\xA3\xC0\x9F\xC0]\xC0a\xC0W\xC0S\xC0+\xC0/\x00\xA2\x00\x9E\xC0\xAE\xC0\xAC\xC0\xA2\xC0\x9E\xC0\x5C\xC0`\xC0V\xC0R\xC0$\xC0(\x00k\x00j\xC0s\xC0w\x00\xC4\x00\xC3\xC0#\xC0'\x00g\x00@\xC0r\xC0v\x00\xBE\x00\xBD\xC0" 400 150 "-" "-" "-" ... show less	Port Scan Brute-Force
Anonymous	2026-02-02 19:11:03 (4 months ago)	142.93.161.105 - - [02/Feb/2026:20:11:02 +0100] "GET / HTTP/1.0" 403 5026 "-" "-" 142.93.161.105 - - ... show more 142.93.161.105 - - [02/Feb/2026:20:11:02 +0100] "GET / HTTP/1.0" 403 5026 "-" "-" 142.93.161.105 - - [02/Feb/2026:20:11:02 +0100] "GET / HTTP/1.0" 403 5026 "-" "-" ... show less	Web App Attack
🇳🇴 Bots.go.to.hell	2026-02-02 14:05:44 (4 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Hacking Web App Attack
🇦🇪 abusiveIntelligence	2026-02-02 09:50:00 (4 months ago)	RDP connect attempt: Nmap Scanner	Brute-Force

Showing 1 to 15 of 286 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 223.123.32.154

🇲🇽 177.232.7.238

🇨🇳 112.94.253.215

🇬🇧 35.203.211.228

🇺🇸 205.210.31.100

🇳🇱 185.103.254.206

🇸🇬 167.172.93.203

🇰🇷 110.15.180.165

🇳🇱 93.123.109.152

🇫🇷 91.231.89.196

🇺🇸 91.230.168.175

🇺🇸 91.230.168.171

🇲🇾 49.124.153.14

🇩🇪 46.223.48.105

🇳🇱 45.148.10.240

🇵🇱 37.225.30.177

🇬🇧 35.203.211.243

🇵🇱 23.27.225.30

🇸🇬 8.219.82.137

🇩🇪 2.26.49.39