必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Netherlands

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbotsspam
[munged]::443 142.93.140.192 - - [23/Oct/2019:16:04:54 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 142.93.140.192 - - [23/Oct/2019:16:04:54 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 142.93.140.192 - - [23/Oct/2019:16:04:55 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 142.93.140.192 - - [23/Oct/2019:16:04:56 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 142.93.140.192 - - [23/Oct/2019:16:04:57 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 142.93.140.192 - - [23/Oct/2019:16:04:57 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11
2019-10-24 02:07:20
attack
WordPress login Brute force / Web App Attack on client site.
2019-10-15 07:08:37
attackbots
27.08.2019 11:06:15 - Wordpress fail 
Detected by ELinOX-ALM
2019-08-27 21:24:49
attack
[munged]::443 142.93.140.192 - - [17/Aug/2019:04:53:39 +0200] "POST /[munged]: HTTP/1.1" 200 6177 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:61.0.1) Gecko/20120101 Firefox/61.0.1"
[munged]::443 142.93.140.192 - - [17/Aug/2019:04:53:41 +0200] "POST /[munged]: HTTP/1.1" 200 6183 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:61.0.1) Gecko/20120101 Firefox/61.0.1"
2019-08-17 11:17:02
相同子网IP讨论:
IP 类型 评论内容 时间
142.93.140.242 attack
2020-06-17T00:03:36.067695mail.standpoint.com.ua sshd[31174]: Invalid user silvio from 142.93.140.242 port 43750
2020-06-17T00:03:36.070299mail.standpoint.com.ua sshd[31174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242
2020-06-17T00:03:36.067695mail.standpoint.com.ua sshd[31174]: Invalid user silvio from 142.93.140.242 port 43750
2020-06-17T00:03:37.535152mail.standpoint.com.ua sshd[31174]: Failed password for invalid user silvio from 142.93.140.242 port 43750 ssh2
2020-06-17T00:06:56.112872mail.standpoint.com.ua sshd[31629]: Invalid user teamspeak3 from 142.93.140.242 port 45070
...
2020-06-17 05:46:46
142.93.140.214 attackspambots
Jun 15 18:54:18 php1 sshd\[21780\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.214  user=root
Jun 15 18:54:20 php1 sshd\[21780\]: Failed password for root from 142.93.140.214 port 35010 ssh2
Jun 15 18:57:30 php1 sshd\[21985\]: Invalid user lia from 142.93.140.214
Jun 15 18:57:30 php1 sshd\[21985\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.214
Jun 15 18:57:32 php1 sshd\[21985\]: Failed password for invalid user lia from 142.93.140.214 port 36260 ssh2
2020-06-16 13:11:36
142.93.140.240 attack
142.93.140.240 - - [14/Jun/2020:14:48:50 +0200] "GET /wp-login.php HTTP/1.1" 200 6433 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.93.140.240 - - [14/Jun/2020:14:48:52 +0200] "POST /wp-login.php HTTP/1.1" 200 6684 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.93.140.240 - - [14/Jun/2020:14:48:53 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-06-14 22:55:32
142.93.140.242 attack
$f2bV_matches
2020-06-13 04:30:44
142.93.140.242 attack
Jun 12 08:32:17 web1 sshd[32760]: Invalid user aogola from 142.93.140.242 port 37724
Jun 12 08:32:17 web1 sshd[32760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242
Jun 12 08:32:17 web1 sshd[32760]: Invalid user aogola from 142.93.140.242 port 37724
Jun 12 08:32:19 web1 sshd[32760]: Failed password for invalid user aogola from 142.93.140.242 port 37724 ssh2
Jun 12 08:37:35 web1 sshd[1569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242  user=root
Jun 12 08:37:37 web1 sshd[1569]: Failed password for root from 142.93.140.242 port 51662 ssh2
Jun 12 08:39:32 web1 sshd[2032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242  user=root
Jun 12 08:39:34 web1 sshd[2032]: Failed password for root from 142.93.140.242 port 59994 ssh2
Jun 12 08:41:29 web1 sshd[2548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 t
...
2020-06-12 07:37:49
142.93.140.242 attackbots
May 22 04:46:57 gw1 sshd[10458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242
May 22 04:46:59 gw1 sshd[10458]: Failed password for invalid user gtx from 142.93.140.242 port 44392 ssh2
...
2020-05-22 08:12:56
142.93.140.242 attackspam
May 15 21:33:44 ws22vmsma01 sshd[5973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242
May 15 21:33:46 ws22vmsma01 sshd[5973]: Failed password for invalid user test from 142.93.140.242 port 32810 ssh2
...
2020-05-16 20:09:41
142.93.140.242 attackbotsspam
May 15 08:54:57 ns382633 sshd\[24679\]: Invalid user yarn from 142.93.140.242 port 54916
May 15 08:54:57 ns382633 sshd\[24679\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242
May 15 08:54:58 ns382633 sshd\[24679\]: Failed password for invalid user yarn from 142.93.140.242 port 54916 ssh2
May 15 08:59:36 ns382633 sshd\[25584\]: Invalid user hang from 142.93.140.242 port 42012
May 15 08:59:36 ns382633 sshd\[25584\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242
2020-05-15 18:39:12
142.93.140.242 attack
May 13 08:10:04 OPSO sshd\[9009\]: Invalid user weblogic from 142.93.140.242 port 45790
May 13 08:10:04 OPSO sshd\[9009\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242
May 13 08:10:06 OPSO sshd\[9009\]: Failed password for invalid user weblogic from 142.93.140.242 port 45790 ssh2
May 13 08:13:37 OPSO sshd\[9825\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242  user=admin
May 13 08:13:38 OPSO sshd\[9825\]: Failed password for admin from 142.93.140.242 port 53730 ssh2
2020-05-13 19:03:38
142.93.140.242 attack
May 11 09:21:42 onepixel sshd[2975521]: Invalid user student02 from 142.93.140.242 port 33052
May 11 09:21:42 onepixel sshd[2975521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 
May 11 09:21:42 onepixel sshd[2975521]: Invalid user student02 from 142.93.140.242 port 33052
May 11 09:21:44 onepixel sshd[2975521]: Failed password for invalid user student02 from 142.93.140.242 port 33052 ssh2
May 11 09:25:21 onepixel sshd[2975940]: Invalid user jeremy from 142.93.140.242 port 41636
2020-05-11 19:12:59
142.93.140.240 attackbots
Automatic report - XMLRPC Attack
2020-05-09 05:56:23
142.93.140.242 attackbotsspam
May  8 14:12:08 electroncash sshd[33246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 
May  8 14:12:08 electroncash sshd[33246]: Invalid user asd from 142.93.140.242 port 54534
May  8 14:12:10 electroncash sshd[33246]: Failed password for invalid user asd from 142.93.140.242 port 54534 ssh2
May  8 14:15:53 electroncash sshd[34290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242  user=root
May  8 14:15:55 electroncash sshd[34290]: Failed password for root from 142.93.140.242 port 35814 ssh2
...
2020-05-08 20:26:23
142.93.140.240 attackbots
Attempt to hack Wordpress Login, XMLRPC or other login
2020-05-04 01:48:07
142.93.140.242 attackspam
Apr 29 13:57:10 ns382633 sshd\[19948\]: Invalid user regina from 142.93.140.242 port 37402
Apr 29 13:57:10 ns382633 sshd\[19948\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242
Apr 29 13:57:12 ns382633 sshd\[19948\]: Failed password for invalid user regina from 142.93.140.242 port 37402 ssh2
Apr 29 14:07:45 ns382633 sshd\[21935\]: Invalid user email from 142.93.140.242 port 54264
Apr 29 14:07:45 ns382633 sshd\[21935\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242
2020-04-29 22:18:07
142.93.140.242 attack
no
2020-04-24 21:51:20
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.140.192
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9666
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.140.192.			IN	A

;; AUTHORITY SECTION:
.			3514	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081601 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 17 11:16:57 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
Host 192.140.93.142.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 192.140.93.142.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
2607:5300:60:14f::1 attackspam
2607:5300:60:14f::1 - - [17/Aug/2020:14:00:15 +0200] "blog.ruhnke.cloud" "POST /xmlrpc.php HTTP/1.1" 500 5 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 7.020
2607:5300:60:14f::1 - - [17/Aug/2020:18:29:29 +0200] "blog.ruhnke.cloud" "POST /wp-login.php HTTP/1.1" 200 3621 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 2.264
2607:5300:60:14f::1 - - [17/Aug/2020:18:29:29 +0200] "blog.ruhnke.cloud" "POST /wp-login.php HTTP/1.1" 200 3621 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 2.264
2607:5300:60:14f::1 - - [17/Aug/2020:18:29:33 +0200] "blog.ruhnke.cloud" "POST /xmlrpc.php HTTP/1.1" 500 5 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 1.928
...
2020-08-18 04:22:02
35.195.238.142 attackspambots
2020-08-17T20:26:48.034964shield sshd\[858\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.238.195.35.bc.googleusercontent.com  user=root
2020-08-17T20:26:49.927323shield sshd\[858\]: Failed password for root from 35.195.238.142 port 39410 ssh2
2020-08-17T20:28:45.531132shield sshd\[1339\]: Invalid user postgres from 35.195.238.142 port 43216
2020-08-17T20:28:45.537251shield sshd\[1339\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.238.195.35.bc.googleusercontent.com
2020-08-17T20:28:47.637005shield sshd\[1339\]: Failed password for invalid user postgres from 35.195.238.142 port 43216 ssh2
2020-08-18 04:39:05
81.152.188.76 attackspambots
Probing for vulnerable services
2020-08-18 04:31:27
201.234.243.62 attack
Unauthorized connection attempt from IP address 201.234.243.62 on Port 445(SMB)
2020-08-18 04:26:21
212.70.149.4 attackspambots
Aug 17 20:44:06 mail postfix/smtpd[18021]: warning: unknown[212.70.149.4]: SASL LOGIN authentication failed: generic failure
Aug 17 20:46:46 mail postfix/smtpd[18043]: warning: unknown[212.70.149.4]: SASL LOGIN authentication failed: generic failure
Aug 17 20:47:29 mail postfix/smtpd[18043]: warning: unknown[212.70.149.4]: SASL LOGIN authentication failed: generic failure
...
2020-08-18 04:47:40
185.175.93.4 attackbotsspam
Fail2Ban Ban Triggered
2020-08-18 04:58:42
51.91.157.101 attackbots
Aug 17 22:21:26 Ubuntu-1404-trusty-64-minimal sshd\[21381\]: Invalid user martha from 51.91.157.101
Aug 17 22:21:26 Ubuntu-1404-trusty-64-minimal sshd\[21381\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.157.101
Aug 17 22:21:28 Ubuntu-1404-trusty-64-minimal sshd\[21381\]: Failed password for invalid user martha from 51.91.157.101 port 47322 ssh2
Aug 17 22:28:53 Ubuntu-1404-trusty-64-minimal sshd\[25166\]: Invalid user jan from 51.91.157.101
Aug 17 22:28:53 Ubuntu-1404-trusty-64-minimal sshd\[25166\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.157.101
2020-08-18 04:33:08
27.128.187.131 attack
Aug 17 14:53:13 pkdns2 sshd\[24719\]: Failed password for root from 27.128.187.131 port 43926 ssh2Aug 17 14:55:27 pkdns2 sshd\[24835\]: Invalid user steam from 27.128.187.131Aug 17 14:55:30 pkdns2 sshd\[24835\]: Failed password for invalid user steam from 27.128.187.131 port 41488 ssh2Aug 17 14:57:41 pkdns2 sshd\[24905\]: Invalid user public from 27.128.187.131Aug 17 14:57:44 pkdns2 sshd\[24905\]: Failed password for invalid user public from 27.128.187.131 port 39034 ssh2Aug 17 15:00:04 pkdns2 sshd\[24977\]: Invalid user scl from 27.128.187.131
...
2020-08-18 04:28:56
192.81.208.44 attack
Aug 18 01:56:11 dhoomketu sshd[2438062]: Invalid user dowon from 192.81.208.44 port 40504
Aug 18 01:56:11 dhoomketu sshd[2438062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.81.208.44 
Aug 18 01:56:11 dhoomketu sshd[2438062]: Invalid user dowon from 192.81.208.44 port 40504
Aug 18 01:56:13 dhoomketu sshd[2438062]: Failed password for invalid user dowon from 192.81.208.44 port 40504 ssh2
Aug 18 01:58:53 dhoomketu sshd[2438119]: Invalid user ls from 192.81.208.44 port 35166
...
2020-08-18 04:34:42
223.223.194.101 attackbotsspam
$f2bV_matches
2020-08-18 05:00:46
173.255.224.244 attackbots
4782/tcp 110/tcp...
[2020-08-04/17]5pkt,3pt.(tcp)
2020-08-18 04:27:10
45.169.140.34 attackspam
1597696097 - 08/17/2020 22:28:17 Host: 45.169.140.34/45.169.140.34 Port: 445 TCP Blocked
2020-08-18 05:00:29
14.192.48.47 attackspam
SSH Brute-Forcing (server2)
2020-08-18 04:39:32
179.107.34.178 attackbotsspam
Aug 17 22:28:01 buvik sshd[8987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.107.34.178
Aug 17 22:28:04 buvik sshd[8987]: Failed password for invalid user liyuan from 179.107.34.178 port 48722 ssh2
Aug 17 22:31:38 buvik sshd[9580]: Invalid user amol from 179.107.34.178
...
2020-08-18 04:48:09
106.13.9.153 attackspambots
2020-08-17T20:27:04.133166vps1033 sshd[3428]: Failed password for invalid user rakhi from 106.13.9.153 port 54238 ssh2
2020-08-17T20:28:26.385909vps1033 sshd[6358]: Invalid user hsl from 106.13.9.153 port 46428
2020-08-17T20:28:26.399557vps1033 sshd[6358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.9.153
2020-08-17T20:28:26.385909vps1033 sshd[6358]: Invalid user hsl from 106.13.9.153 port 46428
2020-08-17T20:28:28.873198vps1033 sshd[6358]: Failed password for invalid user hsl from 106.13.9.153 port 46428 ssh2
...
2020-08-18 04:52:30

最近上报的IP列表

172.15.70.216 165.157.222.83 248.99.101.86 211.1.217.171
185.228.82.92 224.3.17.195 122.2.112.101 235.201.237.162
121.43.180.99 117.221.70.6 200.233.138.102 189.164.172.36
112.27.93.110 108.179.224.77 92.46.125.30 201.217.58.136
104.199.174.103 103.16.199.56 111.37.171.159 221.110.94.150