142.93.106.66 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
142.93.106.166	attackspam	2020-05-13T12:34:38.107127abusebot-4.cloudsearch.cf sshd[17896]: Invalid user zzzzz from 142.93.106.166 port 36426 2020-05-13T12:34:38.115338abusebot-4.cloudsearch.cf sshd[17896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.106.166 2020-05-13T12:34:38.107127abusebot-4.cloudsearch.cf sshd[17896]: Invalid user zzzzz from 142.93.106.166 port 36426 2020-05-13T12:34:40.260269abusebot-4.cloudsearch.cf sshd[17896]: Failed password for invalid user zzzzz from 142.93.106.166 port 36426 ssh2 2020-05-13T12:37:57.578986abusebot-4.cloudsearch.cf sshd[18130]: Invalid user admin from 142.93.106.166 port 45464 2020-05-13T12:37:57.586688abusebot-4.cloudsearch.cf sshd[18130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.106.166 2020-05-13T12:37:57.578986abusebot-4.cloudsearch.cf sshd[18130]: Invalid user admin from 142.93.106.166 port 45464 2020-05-13T12:37:59.049385abusebot-4.cloudsearch.cf sshd[18130]: ...	2020-05-13 22:14:49
142.93.106.197	attackspambots	port scan and connect, tcp 5432 (postgresql)	2019-11-05 23:12:29

类型

评论内容

时间

142.93.106.166

attackspam

2020-05-13T12:34:38.107127abusebot-4.cloudsearch.cf sshd[17896]: Invalid user zzzzz from 142.93.106.166 port 36426
2020-05-13T12:34:38.115338abusebot-4.cloudsearch.cf sshd[17896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.106.166
2020-05-13T12:34:38.107127abusebot-4.cloudsearch.cf sshd[17896]: Invalid user zzzzz from 142.93.106.166 port 36426
2020-05-13T12:34:40.260269abusebot-4.cloudsearch.cf sshd[17896]: Failed password for invalid user zzzzz from 142.93.106.166 port 36426 ssh2
2020-05-13T12:37:57.578986abusebot-4.cloudsearch.cf sshd[18130]: Invalid user admin from 142.93.106.166 port 45464
2020-05-13T12:37:57.586688abusebot-4.cloudsearch.cf sshd[18130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.106.166
2020-05-13T12:37:57.578986abusebot-4.cloudsearch.cf sshd[18130]: Invalid user admin from 142.93.106.166 port 45464
2020-05-13T12:37:59.049385abusebot-4.cloudsearch.cf sshd[18130]:
...

2020-05-13 22:14:49

142.93.106.197

attackspambots

port scan and connect, tcp 5432 (postgresql)

2019-11-05 23:12:29

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.106.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45099
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;142.93.106.66.			IN	A

;; AUTHORITY SECTION:
.			261	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 09:42:13 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

66.106.93.142.in-addr.arpa domain name pointer nginx.euroant.com-1551543836688-s-1vcpu-2gb-fra1-01.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
66.106.93.142.in-addr.arpa	name = nginx.euroant.com-1551543836688-s-1vcpu-2gb-fra1-01.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
85.172.13.206	attack	Mar 9 19:47:32 server sshd\[23698\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.172.13.206 user=root Mar 9 19:47:33 server sshd\[23698\]: Failed password for root from 85.172.13.206 port 54824 ssh2 Mar 9 19:47:41 server sshd\[23716\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.172.13.206 user=root Mar 9 19:47:43 server sshd\[23716\]: Failed password for root from 85.172.13.206 port 43465 ssh2 Mar 9 20:06:37 server sshd\[28879\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.172.13.206 user=root ...	2020-03-10 01:17:58
45.13.28.207	attackspam	Chat Spam	2020-03-10 00:43:47
175.24.107.68	attackbotsspam	2020-03-09T14:26:54.044759randservbullet-proofcloud-66.localdomain sshd[30645]: Invalid user hadoop from 175.24.107.68 port 57948 2020-03-09T14:26:54.052074randservbullet-proofcloud-66.localdomain sshd[30645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.107.68 2020-03-09T14:26:54.044759randservbullet-proofcloud-66.localdomain sshd[30645]: Invalid user hadoop from 175.24.107.68 port 57948 2020-03-09T14:26:56.277443randservbullet-proofcloud-66.localdomain sshd[30645]: Failed password for invalid user hadoop from 175.24.107.68 port 57948 ssh2 ...	2020-03-10 01:03:01
177.47.227.95	attackspambots	$f2bV_matches	2020-03-10 01:10:33
5.106.36.61	attackbots	Email rejected due to spam filtering	2020-03-10 00:47:01
99.185.76.161	attackbotsspam	Mar 9 15:20:17 server sshd\[21379\]: Invalid user zhuhan from 99.185.76.161 Mar 9 15:20:17 server sshd\[21379\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=99-185-76-161.lightspeed.clmasc.sbcglobal.net Mar 9 15:20:19 server sshd\[21379\]: Failed password for invalid user zhuhan from 99.185.76.161 port 51956 ssh2 Mar 9 15:27:29 server sshd\[22823\]: Invalid user zhuhan from 99.185.76.161 Mar 9 15:27:29 server sshd\[22823\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=99-185-76-161.lightspeed.clmasc.sbcglobal.net ...	2020-03-10 01:01:33
192.3.143.147	attackbotsspam	9,23-07/07 [bc04/m182] PostRequest-Spammer scoring: Durban01	2020-03-10 01:24:49
223.71.167.164	attackspambots	09.03.2020 16:55:22 SMTPs access blocked by firewall	2020-03-10 00:54:47
68.183.102.117	attackspambots	[2020-03-09 13:01:47] NOTICE[1148][C-0001046e] chan_sip.c: Call from '' (68.183.102.117:64279) to extension '97446812420995' rejected because extension not found in context 'public'. [2020-03-09 13:01:47] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-09T13:01:47.090-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="97446812420995",SessionID="0x7fd82c3f03d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/68.183.102.117/64279",ACLName="no_extension_match" [2020-03-09 13:05:05] NOTICE[1148][C-0001046f] chan_sip.c: Call from '' (68.183.102.117:55007) to extension '97546812420995' rejected because extension not found in context 'public'. [2020-03-09 13:05:05] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-09T13:05:05.979-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="97546812420995",SessionID="0x7fd82c530768",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/6 ...	2020-03-10 01:12:01
49.231.17.107	attackbots	$f2bV_matches	2020-03-10 00:51:41
113.116.90.39	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-03-10 01:26:06
218.161.111.67	attackbots	Port probing on unauthorized port 23	2020-03-10 01:11:11
179.107.97.102	attackspam	Wordpress Admin Login attack	2020-03-10 01:23:59
45.82.32.227	attack	Mar 9 14:31:31 mail.srvfarm.net postfix/smtpd[4074765]: NOQUEUE: reject: RCPT from distinct.oliviertylczak.com[45.82.32.227]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 9 14:32:17 mail.srvfarm.net postfix/smtpd[4073565]: NOQUEUE: reject: RCPT from distinct.oliviertylczak.com[45.82.32.227]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 9 14:33:33 mail.srvfarm.net postfix/smtpd[4074822]: NOQUEUE: reject: RCPT from distinct.oliviertylczak.com[45.82.32.227]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 9 1	2020-03-10 00:48:16
144.22.98.225	attack	SSH authentication failure x 6 reported by Fail2Ban ...	2020-03-10 01:03:17

最近上报的IP列表

142.93.106.92	142.93.107.176	142.93.107.16	118.96.95.137
142.93.107.4	142.93.108.123	142.93.108.221	142.93.107.220
142.93.108.194	142.93.108.191	142.93.107.33	142.93.108.251
142.93.107.211	142.93.108.72	142.93.109.158	142.93.109.225
142.93.11.150	142.93.11.154	142.93.109.170	142.93.109.92