JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 142.93.206.115

142.93.206.115 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	North Bergen, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 142.93.206.115

Whois 142.93.206.115

IP Abuse Reports for 142.93.206.115:

This IP address has been reported a total of 45 times from 39 distinct sources. 142.93.206.115 was first reported on April 11th 2026, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇰 Harold Wong	2026-06-14 20:23:11 (16 hours ago)	$f2bV_matches	Brute-Force
🇷🇴 abuse_IP_reporter	2026-06-13 11:45:03 (2 days ago)	Jun 13 14:44:33 server UFW BLOCK SRC=142.93.206.115 PROTO=TCP SPT=50232 DPT=9090	Port Scan
🇵🇱 TheWojtek	2026-06-13 11:37:33 (2 days ago)	[Sat Jun 13 13:37:32.884644 2026] [access_compat:error] [pid 1805325:tid 1805344] [client 142.93.206 ... show more [Sat Jun 13 13:37:32.884644 2026] [access_compat:error] [pid 1805325:tid 1805344] [client 142.93.206.115:54330] AH01797: client denied by server configuration: /var/www/nextcloud/config/database.yaml ... show less	Brute-Force Web App Attack
🇵🇱 dzpk	2026-06-13 11:19:20 (2 days ago)	[13/Jun/2026:13:19:15 +0200] 178134955520.074690 142.93.206.115 37992 HOST 80 [13/Jun/2026:13:19:17 ... show more [13/Jun/2026:13:19:15 +0200] 178134955520.074690 142.93.206.115 37992 HOST 80 [13/Jun/2026:13:19:17 +0200] 178134955794.564542 142.93.206.115 37992 HOST 80 [13/Jun/2026:13:19:19 +0200] 178134955969.570436 142.93.206.115 37992 HOST 80 show less	Web App Attack
🇫🇷 zulzeen	2026-06-13 09:25:22 (2 days ago)	[incypit-web] Blocked by SysWarden Firewall [BLOCK] (Infra/DevOps Attack)	Hacking Web App Attack
🇳🇴 Abuse Buster	2026-06-13 08:44:32 (2 days ago)	142.93.206.115 - - [13/Jun/2026:10:44:28 +0200] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compa ... show more 142.93.206.115 - - [13/Jun/2026:10:44:28 +0200] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible)" 142.93.206.115 - - [13/Jun/2026:10:44:31 +0200] "GET /.env HTTP/1.1" 404 22 "-" "Mozilla/5.0 (compatible)" ... show less	Web App Attack
🇺🇸 ISPLtd	2026-06-13 08:28:01 (2 days ago)	Jun 13 05:27:41 142.93.206.115 TCP SPT=59253 DPT=8443 SYN Jun 13 05:27:48 142.93.206.115 TCP SPT=592 ... show more Jun 13 05:27:41 142.93.206.115 TCP SPT=59253 DPT=8443 SYN Jun 13 05:27:48 142.93.206.115 TCP SPT=59253 DPT=8983 SYN Jun 13 05:28:00 142.93.206.115 TCP SPT=59253 DPT=8080 SYN ... show less	Port Scan
🇬🇧 prime_fusion_ld	2026-06-13 07:35:39 (2 days ago)	Blocked by CSF/LFD on vps.primefusion.co.uk. Trigger: 3600 Ports: *	Port Scan
🇩🇪 kingjan1999	2026-06-13 07:16:22 (2 days ago)	Blocked by UFW [8000/tcp] \| SPT: 54070 \| TTL: 248 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/se ... show more Blocked by UFW [8000/tcp] \| SPT: 54070 \| TTL: 248 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 london2038.com	2026-06-13 07:16:03 (2 days ago)	Connection atttempts against closed TCP ports Jun 13 09:04:07 BLOCK SRC=142.93.206.115 LEN=40 TOS=0x ... show more Connection atttempts against closed TCP ports Jun 13 09:04:07 BLOCK SRC=142.93.206.115 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=24635 PROTO=TCP SPT=54070 DPT=5000 WINDOW=1024 RES=0x00 SYN Jun 13 09:15:34 BLOCK SRC=142.93.206.115 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=23664 PROTO=TCP SPT=54070 DPT=7001 WINDOW=1024 RES=0x00 SYN Jun 13 09:16:02 BLOCK SRC=142.93.206.115 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=28940 PROTO=TCP SPT=54070 DPT=8443 WINDOW=1024 RES=0x00 SYN show less	Port Scan
🇦🇹 Pingger Shikkoken	2026-06-13 07:04:18 (2 days ago)	2026-06-13T07:04:18+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-06-13T07:04:18+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=142.93.206.115 DST=152.53.50.28 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=45431 PROTO=TCP SPT=54070 DPT=3000 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-13T07:06:28+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=142.93.206.115 DST=152.53.50.28 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=2165 PROTO=TCP SPT=54070 DPT=8983 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-13T07:07:48+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=142.93.206.115 DST=10.1.1.11 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=27670 PROTO=TCP SPT=54070 DPT=8443 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot Port Scan
🇮🇹 NonOggiCaroMio	2026-06-13 06:06:12 (2 days ago)	Arruso ca si: crowdsecurity/http-sensitive-files	Brute-Force
🇫🇷 TheHoneyPotter	2026-06-13 04:05:01 (2 days ago)	Honeypot [fc-honeypot]: Empty payload (likely service probe); 4000 [24] TCP Reported by: https://git ... show more Honeypot [fc-honeypot]: Empty payload (likely service probe); 4000 [24] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇳🇱 knock	2026-06-13 01:28:26 (2 days ago)	Knock-Knock honeypot brute-force: proto8 (2 total hits)	Brute-Force
🇳🇱 DrLex0	2026-06-13 00:13:27 (2 days ago)	Probing for various exploits at high rate 142.93.206.115 443 - [13/Jun/2026:00:13:27 +0000] "GET /w ... show more Probing for various exploits at high rate 142.93.206.115 443 - [13/Jun/2026:00:13:27 +0000] "GET /web/.env HTTP/1.1" 404 5962 "-" "Mozilla/5.0 (compatible)" 142.93.206.115 443 - [13/Jun/2026:00:13:27 +0000] "GET /config/database.yml HTTP/1.1" 404 5962 "-" "Mozilla/5.0 (compatible)" 142.93.206.115 443 - [13/Jun/2026:00:13:27 +0000] "GET /.env.production.local HTTP/1.1" 404 5962 "-" "Mozilla/5.0 (compatible)" 142.93.206.115 443 - [13/Jun/2026:00:13:27 +0000] "GET /backup/.env HTTP/1.1" 404 5962 "-" "Mozilla/5.0 (compatible)" 142.93.206.115 443 - [13/Jun/2026:00:13:27 +0000] "GET /api/.env HTTP/1.1" 404 5962 "-" "Mozilla/5.0 (compatible)" 142.93.206.115 443 - [13/Jun/2026:00:13:27 +0000] "GET /config/secrets.yml HTTP/1.1" 404 5962 "-" "Mozilla/5.0 (compatible)" 142.93.206.115 443 - [13/Jun/2026:00:13:27 +0000] "GET /config/database.yaml HTTP/1.1" 404 5962 "-" "Mozilla/5.0 (compatible)" 142.93.206.115 443 - [13/Jun/2026:00:13:27 +0000] "GET /.env.docker HTTP/1.1" 404 5962 "-" "Mozilla/5.0 (compatible)" show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇴 181.188.187.140

🇩🇪 118.193.58.120

🇬🇪 2.57.217.229

🇬🇧 213.166.84.40

🇷🇴 193.46.255.86

🇫🇷 173.249.9.210

🇩🇪 167.94.146.48

🇩🇪 167.94.146.47

🇮🇩 163.7.9.84

🇨🇳 123.173.90.177

🇳🇱 91.92.40.24

🇷🇸 77.105.37.221

🇺🇸 74.114.29.16

🇧🇪 34.53.214.77

🇨🇦 20.151.108.150

🇦🇱 185.89.157.150

🇧🇦 185.65.107.14

🇻🇳 171.225.8.164

🇮🇳 116.193.128.26

🇸🇬 95.111.199.201