JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 142.93.46.42

142.93.46.42

Recent Activity

22 reports found in our database

95% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

DigitalOcean, LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS14061

Domain Name

digitalocean.com

Country

🇬🇧 United Kingdom of Great Britain and Northern Ireland

City

London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 142.93.46.42:

This IP address has been reported a total of 22 times from 20 distinct sources. 142.93.46.42 was first reported on August 9th 2022, and the most recent report was 31 minutes ago. In the last 60 days, the top reporter locations were: Germany with 4 reports; United States of America with 4 reports; Canada with 2 reports. The most common categories in these recent reports were: Brute-Force 17 times; SSH 16 times; Hacking 6 times; Exploited Host 3 times; Port Scan 3 times; Other 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇰🇷 yazzang	2026-09-11 12:00:03 (31 minutes ago)	SSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard ... show more SSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard). Read-only capture. show less	Hacking Brute-Force Exploited Host SSH
🇱🇺 SiteXL	2026-09-11 11:54:02 (37 minutes ago)	{"event":{"DateTime":"2026-09-11T11:49:32Z","RemoteAddr":"142.93.46.42:46474","Protocol":"SSH","Comm ... show more {"event":{"DateTime":"2026-09-11T11:49:32Z","RemoteAddr":"142.93.46.42:46474","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"410f96df-f1a1-4122-8356-e59e3ffa99c5","Environ":"","User":"cs2","Password":"123456","Client":"SSH-2.0-Go","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"142.93.46.42","SourcePort":"46474","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"} {"event":{"DateTime":"2026-09-11T11:49:33Z","RemoteAddr":"142.93.46.42:46474","Protocol":"SSH","Command":"nproc","CommandOutput":"16","Status":"Start","Msg":"SSH Raw Command","ID":"4bc7a396-f22a-43cd-ace6-ec6ad4b2ab0d","Environ":"","User":"cs2","Password":"","Client":"","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"142.93.4 show less	Hacking Port Scan Brute-Force SSH
🇫🇮 Birdo	2026-09-11 11:33:31 (58 minutes ago)	[Honeypot Report] Malware dropped following SSH intrusion An automated malware loader attempted mul ... show more [Honeypot Report] Malware dropped following SSH intrusion An automated malware loader attempted multiple logins against our emulated SSH service, then obtained shell access and executed commands, and finally delivered an executable payload. Observed: 2026-09-11 07:39 to 2026-09-11 11:33 UTC \| 2 sessions \| 47 events \| SSH (port 22) Attack chain: 1. 2 credential attempts: ubuntu/4kt#!_G@N5jqM+@, ansible/w+pD#Xz-_vkqCI5 2. Shell access obtained; 10 distinct commands executed: cd /dev/shm \|\| cd /tmp \|\| cd /var/run \|\| cd /mnt \|\| cd /root ; ps -eo pid,pcpu,comm --sort=-pcpu \| head -n 10 ; ps aux \| grep astats \| grep -v grep \| wc -l 3. Malicious script dropped: SHA-256 bc36e729c6463e7120677c0d59b9d793401b320520201043048577d4d94cee28, 1,421 bytes, script (#!/usr/bin/env bash) Full evidence: https://github.com/1Birdo/lyrebird-intel/blob/main/incidents/2026/09/142.93.46.42.md Reported by birdo.uk (Lyrebird honeypot lyrebird-01). Emulated service - no host was compromised. show less	Exploited Host Hacking SSH Brute-Force
🇺🇸 slish	2026-09-11 10:19:49 (2 hours ago)	SSH honeypot: ssh_auth	Brute-Force SSH
🇦🇺 wait.ac	2026-09-11 10:13:39 (2 hours ago)	SSH login: user=root after 2 attempts from 142.93.46.42	Brute-Force SSH
🇩🇪 ryzenx3d	2026-09-11 10:07:36 (2 hours ago)	Automated report from an SSH honeypot: successful password authentication	Brute-Force
🇺🇸 paradoxnetworks	2026-09-11 08:38:29 (3 hours ago)	Sep 11 08:38:27 mtrtools sshd[3803968]: Invalid user test from 142.93.46.42 port 57358 Sep 11 08:38: ... show more Sep 11 08:38:27 mtrtools sshd[3803968]: Invalid user test from 142.93.46.42 port 57358 Sep 11 08:38:28 mtrtools sshd[3804015]: Invalid user mailadmin from 142.93.46.42 port 57366 Sep 11 08:38:29 mtrtools sshd[3804021]: Invalid user deployer from 142.93.46.42 port 57380 ... show less	Brute-Force SSH
🇹🇷 neron	2026-09-11 08:33:31 (3 hours ago)	CrowdSec blocked: crowdsecurity/ssh-bf detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 mc4bbs	2026-09-11 08:15:13 (4 hours ago)	Sep 11 04:15:11 ChazTelPlex sshd[1365773]: pam_unix(sshd:auth): authentication failure; logname= uid ... show more Sep 11 04:15:11 ChazTelPlex sshd[1365773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.46.42 Sep 11 04:15:13 ChazTelPlex sshd[1365773]: Failed password for invalid user test from 142.93.46.42 port 43278 ssh2 ... show less	Brute-Force SSH
🇬🇧 lumi	2026-09-11 08:14:57 (4 hours ago)	2026-09-11T08:14:53.927044+00:00 habibi.infra.lumis.moe sshd-session[1223082]: pam_unix(sshd:auth): ... show more 2026-09-11T08:14:53.927044+00:00 habibi.infra.lumis.moe sshd-session[1223082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.46.42 2026-09-11T08:14:55.765379+00:00 habibi.infra.lumis.moe sshd-session[1223082]: Failed password for invalid user test from 142.93.46.42 port 60036 ssh2 2026-09-11T08:14:57.086341+00:00 habibi.infra.lumis.moe sshd-session[1223084]: Invalid user mailadmin from 142.93.46.42 port 60042 ... show less	Brute-Force SSH
🇩🇪 Click-Networks	2026-09-11 07:10:57 (5 hours ago)	2026-09-11T07:51:04.927393+02:00 pve sshd-session[3448097]: Connection closed by 142.93.46.42 port 5 ... show more 2026-09-11T07:51:04.927393+02:00 pve sshd-session[3448097]: Connection closed by 142.93.46.42 port 54086 2026-09-11T09:05:44.531678+02:00 pve sshd-session[158859]: Connection closed by authenticating user root 142.93.46.42 port 53500 [preauth] 2026-09-11T09:05:44.616248+02:00 pve sshd-session[158861]: Invalid user kali from 142.93.46.42 port 53512 2026-09-11T09:05:44.631674+02:00 pve sshd-session[158861]: Connection closed by invalid user kali 142.93.46.42 port 53512 [preauth] 2026-09-11T09:05:44.714199+02:00 pve sshd-session[158866]: Invalid user postgres from 142.93.46.42 port 53520 2026-09-11T09:05:44.729859+02:00 pve sshd-session[158866]: Connection closed by invalid user postgres 142.93.46.42 port 53520 [preauth] 2026-09-11T09:05:44.807641+02:00 pve sshd-session[158870]: Invalid user nexus from 142.93.46.42 port 53532 2026-09-11T09:05:44.820630+02:00 pve sshd-session[158870]: Connection closed by invalid user nexus 142.93.46.42 port 53532 [preauth] 2026-09-11T09:05:44.916100+02:00 show less	Brute-Force Exploited Host SSH
Anonymous	2026-09-11 06:56:05 (5 hours ago)	ssh bruteforce	Brute-Force SSH
🇸🇬 paradoxnetworks	2026-09-11 04:52:27 (7 hours ago)	2026-09-11T04:52:24.492800+00:00 edge-eqx-sin03.int.pdx.net.uk sshd-session[631034]: Invalid user cr ... show more 2026-09-11T04:52:24.492800+00:00 edge-eqx-sin03.int.pdx.net.uk sshd-session[631034]: Invalid user craft from 142.93.46.42 port 59314 2026-09-11T04:52:26.214929+00:00 edge-eqx-sin03.int.pdx.net.uk sshd-session[631050]: Invalid user kali from 142.93.46.42 port 59342 2026-09-11T04:52:27.107896+00:00 edge-eqx-sin03.int.pdx.net.uk sshd-session[631053]: Invalid user postgres from 142.93.46.42 port 59346 ... show less	Brute-Force SSH
🇫🇷 EvoX	2026-09-11 04:29:56 (8 hours ago)	🛡️ Honeypot [bsts-tpot-hive]: Brute-force attack detected on 22/SSH • Credentials: craft:craft, root ... show more 🛡️ Honeypot [bsts-tpot-hive]: Brute-force attack detected on 22/SSH • Credentials: craft:craft, root:root123, kali:kali, postgres:postgres, nexus:nexus • Number of login attempts: 5 • 1 command(s) were executed during the session • Client: SSH-2.0-Go show less	Brute-Force SSH Hacking
🇩🇪 ghostwarriors	2026-09-11 04:20:13 (8 hours ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.44.248.101

🇳🇱 195.178.110.218

🇲🇽 187.175.23.192

🇺🇸 162.216.149.14

🇺🇸 154.16.115.33

🇻🇳 123.17.196.1

🇮🇩 103.142.240.142

🇳🇱 45.148.10.141

🇲🇼 41.216.228.244

🇺🇸 34.174.175.223

🇺🇸 171.22.217.3

🇿🇦 160.119.220.2

🇳🇬 102.204.76.119

🇯🇵 101.36.104.239

🇺🇸 52.180.141.109

🇺🇸 44.204.183.176

🇪🇸 34.175.126.67

🇧🇷 200.150.115.228

🇧🇷 179.48.18.42

🇺🇸 70.35.206.54