城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): DigitalOcean LLC
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): Data Center/Web Hosting/Transit
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attack | proto=tcp . spt=33582 . dpt=25 . (listed on Blocklist de Jun 21) (164) |
2019-06-22 22:15:39 |
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 142.93.139.232 | attack | ... |
2020-02-02 04:06:41 |
| 142.93.139.55 | attack | Web App Attack |
2019-12-31 17:19:24 |
| 142.93.139.55 | attackbotsspam | 400 BAD REQUEST |
2019-12-31 00:05:12 |
| 142.93.139.240 | attackbotsspam | scan z |
2019-11-04 16:06:31 |
| 142.93.139.119 | attackspam | fire |
2019-08-09 13:37:11 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.139.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60564
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.139.5. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019062201 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jun 22 22:15:27 CST 2019
;; MSG SIZE rcvd: 1165.139.93.142.in-addr.arpa domain name pointer 195870.cloudwaysapps.com.Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
5.139.93.142.in-addr.arpa name = 195870.cloudwaysapps.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 165.22.144.206 | attack | Oct 28 20:11:06 venus sshd\[11690\]: Invalid user qwe1 from 165.22.144.206 port 34378 Oct 28 20:11:06 venus sshd\[11690\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.144.206 Oct 28 20:11:08 venus sshd\[11690\]: Failed password for invalid user qwe1 from 165.22.144.206 port 34378 ssh2 ... |
2019-10-29 04:57:26 |
| 95.47.200.13 | attackbots | 2019-10-28T20:42:18.101630abusebot-6.cloudsearch.cf sshd\[22841\]: Invalid user huawei!@34 from 95.47.200.13 port 50640 |
2019-10-29 04:54:17 |
| 51.38.113.45 | attackspambots | Oct 28 21:11:02 MK-Soft-VM6 sshd[3256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.113.45 Oct 28 21:11:05 MK-Soft-VM6 sshd[3256]: Failed password for invalid user qwe123 from 51.38.113.45 port 40354 ssh2 ... |
2019-10-29 05:00:07 |
| 50.2.189.106 | attackbotsspam | Oct 28 21:33:48 localhost sshd\[30704\]: Invalid user draytek from 50.2.189.106 port 41026 Oct 28 21:33:48 localhost sshd\[30704\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.2.189.106 Oct 28 21:33:49 localhost sshd\[30704\]: Failed password for invalid user draytek from 50.2.189.106 port 41026 ssh2 |
2019-10-29 04:40:25 |
| 189.124.134.58 | attack | 2019-10-28T20:11:15.073289abusebot-7.cloudsearch.cf sshd\[6110\]: Invalid user system from 189.124.134.58 port 9590 |
2019-10-29 04:53:57 |
| 189.254.33.157 | attackspam | Oct 29 01:55:18 gw1 sshd[21795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.254.33.157 Oct 29 01:55:20 gw1 sshd[21795]: Failed password for invalid user applmgr from 189.254.33.157 port 44395 ssh2 ... |
2019-10-29 04:55:36 |
| 51.77.140.244 | attack | Oct 28 22:03:10 server sshd\[4671\]: Invalid user albin from 51.77.140.244 port 36062 Oct 28 22:03:10 server sshd\[4671\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.140.244 Oct 28 22:03:12 server sshd\[4671\]: Failed password for invalid user albin from 51.77.140.244 port 36062 ssh2 Oct 28 22:11:45 server sshd\[31895\]: Invalid user september from 51.77.140.244 port 50230 Oct 28 22:11:45 server sshd\[31895\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.140.244 |
2019-10-29 04:35:08 |
| 188.162.43.8 | attackbots | 10/28/2019-21:11:57.432749 188.162.43.8 Protocol: 6 SURICATA SMTP tls rejected |
2019-10-29 04:29:40 |
| 193.218.113.164 | attackspam | slow and persistent scanner |
2019-10-29 04:56:42 |
| 139.59.82.78 | attack | Triggered by Fail2Ban at Vostok web server |
2019-10-29 04:57:09 |
| 132.232.108.149 | attack | $f2bV_matches |
2019-10-29 04:40:00 |
| 157.52.255.217 | attackbots | TCP src-port=43396 dst-port=25 Listed on dnsbl-sorbs spamcop zen-spamhaus (594) |
2019-10-29 04:48:46 |
| 138.68.106.62 | attack | Oct 28 20:26:03 hcbbdb sshd\[28332\]: Invalid user password1234 from 138.68.106.62 Oct 28 20:26:03 hcbbdb sshd\[28332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.106.62 Oct 28 20:26:06 hcbbdb sshd\[28332\]: Failed password for invalid user password1234 from 138.68.106.62 port 33472 ssh2 Oct 28 20:29:38 hcbbdb sshd\[28688\]: Invalid user lsygoodbey\$160!\#% from 138.68.106.62 Oct 28 20:29:38 hcbbdb sshd\[28688\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.106.62 |
2019-10-29 04:31:41 |
| 75.68.93.189 | attack | 75.68.93.189 - admin [28/Oct/2019:20:07:40 +0100] "POST /editBlackAndWhiteList HTTP/1.1" 404 161 "-" "ApiTool" |
2019-10-29 04:43:25 |
| 45.136.111.109 | attack | Oct 28 20:37:32 h2177944 kernel: \[5167223.380503\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=57246 PROTO=TCP SPT=44934 DPT=2121 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 28 20:37:43 h2177944 kernel: \[5167233.941085\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=13960 PROTO=TCP SPT=44934 DPT=9999 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 28 20:44:21 h2177944 kernel: \[5167632.002546\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=45334 PROTO=TCP SPT=44934 DPT=9191 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 28 21:07:26 h2177944 kernel: \[5169016.702820\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=45258 PROTO=TCP SPT=44934 DPT=9292 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 28 21:11:25 h2177944 kernel: \[5169255.636166\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214. |
2019-10-29 04:46:50 |