AbuseIPDB » 142.93.194.227

142.93.194.227 was found in our database!

This IP was reported 14,139 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	United States of America
City	North Bergen, New Jersey

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 142.93.194.227

Whois 142.93.194.227

IP Abuse Reports for 142.93.194.227:

This IP address has been reported a total of 14,139 times from 1,247 distinct sources. 142.93.194.227 was first reported on January 26th 2023, and the most recent report was 46 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp	Comment	Categories
URAN Publishing Service	2023-12-11 11:45:55 (46 minutes ago)	142.93.194.227 - - [11/Dec/2023:13:45:19 +0200] "GET /.env HTTP/1.1" 404 274 "-" "Mozilla/5.0 (Windo ... show more142.93.194.227 - - [11/Dec/2023:13:45:19 +0200] "GET /.env HTTP/1.1" 404 274 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1866.237 Safari/537.36" 142.93.194.227 - - [11/Dec/2023:13:45:54 +0200] "GET /api/.env HTTP/1.1" 404 335 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2866.71 Safari/537.36" ... show less	Web App Attack
Smel	2023-12-11 06:52:02 (5 hours ago)	HTTP/80/443/8080 Unauthorized Probe, Hack -	Hacking Web App Attack
Clapper	2023-12-11 06:32:59 (5 hours ago)	(mod_security) mod_security (id:949110) triggered by 142.93.194.227 (US/United States/-): 5 in the l ... show more(mod_security) mod_security (id:949110) triggered by 142.93.194.227 (US/United States/-): 5 in the last 3600 secs; ID: luc show less	Brute-Force Bad Web Bot
Clapper	2023-12-11 03:08:45 (9 hours ago)	(mod_security) mod_security (id:949110) triggered by 142.93.194.227 (US/United States/-): 5 in the l ... show more(mod_security) mod_security (id:949110) triggered by 142.93.194.227 (US/United States/-): 5 in the last 3600 secs; ID: rub show less	Brute-Force Bad Web Bot
tjs	2023-12-10 19:55:00 (16 hours ago)	web attack	Hacking Web App Attack
WebWizards.NZ	2023-12-10 16:15:02 (20 hours ago)	Trolling for resource vulnerabilities	Web App Attack
Jim Keir	2023-12-10 15:16:45 (21 hours ago)	2023-12-10 15:16:44 142.93.194.227 File scanning, blocking 142.93.194.227 for 5 minutes	Web App Attack
openstrike.co.uk	2023-12-09 06:12:18 (2 days ago)	23 attacks on VC URLs, env grabbing URLs, password grabbing URLs: GET /.git/config HTTP/1.1<br ... show more23 attacks on VC URLs, env grabbing URLs, password grabbing URLs: GET /.git/config HTTP/1.1 GET /api/.env HTTP/1.1 GET /.vscode/sftp.json HTTP/1.1 show less	Hacking
Burayot	2023-12-08 18:38:26 (2 days ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 142.93.194.227 (US/United States/-): ... show moreLF_MODSEC: (mod_security) mod_security (id:949110) triggered by 142.93.194.227 (US/United States/-): 2 in the last 3600 secs show less	Web App Attack
URAN Publishing Service	2023-12-08 17:47:32 (2 days ago)	142.93.194.227 - - [08/Dec/2023:19:47:03 +0200] "GET /.env HTTP/1.1" 404 4992 "-" "Mozilla/5.0 (Maci ... show more142.93.194.227 - - [08/Dec/2023:19:47:03 +0200] "GET /.env HTTP/1.1" 404 4992 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2656.18 Safari/537.36" 142.93.194.227 - - [08/Dec/2023:19:47:31 +0200] "GET /api/.env HTTP/1.1" 404 5054 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2023-12-07 20:52:33 (3 days ago)	$f2bV_matches	Brute-Force SSH
jimble	2023-12-07 17:38:36 (3 days ago)	Brute force; probing for vulnerable URLs	Brute-Force Web App Attack
thedreamer.nl	2023-12-07 04:58:18 (4 days ago)	142.93.194.227 - - [07/Dec/2023:05:58:16 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin ... show more142.93.194.227 - - [07/Dec/2023:05:58:16 +0100] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.3319.102 Safari/537.36" "US" "North Bergen" "40.79300" "-74.02470" 142.93.194.227 - - [07/Dec/2023:05:58:16 +0100] "POST /_ignition/execute-solution HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36" "US" "North Bergen" "40.79300" "-74.02470" 142.93.194.227 - - [07/Dec/2023:05:58:17 +0100] "POST /_ignition/execute-solution HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" "US" "North Bergen" "40.79300" "-74.02470" 142.93.194.227 - - [07/Dec/2023:05:58:17 +0100] "GET /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1866.23 ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
RoboSOC	2023-12-06 19:29:09 (4 days ago)	Laravel Ignition Remote Code Execution Vulnerability, PTR: PTR record not found	Hacking
Incidents Response Neptus Team	2023-12-06 19:19:26 (4 days ago)	Report Abuse IP	DDoS Attack Hacking Exploited Host Web App Attack