142.93.140.214

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Jun 15 18:54:18 php1 sshd\[21780\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.214 user=root Jun 15 18:54:20 php1 sshd\[21780\]: Failed password for root from 142.93.140.214 port 35010 ssh2 Jun 15 18:57:30 php1 sshd\[21985\]: Invalid user lia from 142.93.140.214 Jun 15 18:57:30 php1 sshd\[21985\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.214 Jun 15 18:57:32 php1 sshd\[21985\]: Failed password for invalid user lia from 142.93.140.214 port 36260 ssh2	2020-06-16 13:11:36

类型

评论内容

时间

attackspambots

Jun 15 18:54:18 php1 sshd\[21780\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.214  user=root
Jun 15 18:54:20 php1 sshd\[21780\]: Failed password for root from 142.93.140.214 port 35010 ssh2
Jun 15 18:57:30 php1 sshd\[21985\]: Invalid user lia from 142.93.140.214
Jun 15 18:57:30 php1 sshd\[21985\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.214
Jun 15 18:57:32 php1 sshd\[21985\]: Failed password for invalid user lia from 142.93.140.214 port 36260 ssh2

2020-06-16 13:11:36

相同子网IP讨论:

IP	类型	评论内容	时间
142.93.140.242	attack	2020-06-17T00:03:36.067695mail.standpoint.com.ua sshd[31174]: Invalid user silvio from 142.93.140.242 port 43750 2020-06-17T00:03:36.070299mail.standpoint.com.ua sshd[31174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 2020-06-17T00:03:36.067695mail.standpoint.com.ua sshd[31174]: Invalid user silvio from 142.93.140.242 port 43750 2020-06-17T00:03:37.535152mail.standpoint.com.ua sshd[31174]: Failed password for invalid user silvio from 142.93.140.242 port 43750 ssh2 2020-06-17T00:06:56.112872mail.standpoint.com.ua sshd[31629]: Invalid user teamspeak3 from 142.93.140.242 port 45070 ...	2020-06-17 05:46:46
142.93.140.240	attack	142.93.140.240 - - [14/Jun/2020:14:48:50 +0200] "GET /wp-login.php HTTP/1.1" 200 6433 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.140.240 - - [14/Jun/2020:14:48:52 +0200] "POST /wp-login.php HTTP/1.1" 200 6684 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.140.240 - - [14/Jun/2020:14:48:53 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-06-14 22:55:32
142.93.140.242	attack	$f2bV_matches	2020-06-13 04:30:44
142.93.140.242	attack	Jun 12 08:32:17 web1 sshd[32760]: Invalid user aogola from 142.93.140.242 port 37724 Jun 12 08:32:17 web1 sshd[32760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 Jun 12 08:32:17 web1 sshd[32760]: Invalid user aogola from 142.93.140.242 port 37724 Jun 12 08:32:19 web1 sshd[32760]: Failed password for invalid user aogola from 142.93.140.242 port 37724 ssh2 Jun 12 08:37:35 web1 sshd[1569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 user=root Jun 12 08:37:37 web1 sshd[1569]: Failed password for root from 142.93.140.242 port 51662 ssh2 Jun 12 08:39:32 web1 sshd[2032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 user=root Jun 12 08:39:34 web1 sshd[2032]: Failed password for root from 142.93.140.242 port 59994 ssh2 Jun 12 08:41:29 web1 sshd[2548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 t ...	2020-06-12 07:37:49
142.93.140.242	attackbots	May 22 04:46:57 gw1 sshd[10458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 May 22 04:46:59 gw1 sshd[10458]: Failed password for invalid user gtx from 142.93.140.242 port 44392 ssh2 ...	2020-05-22 08:12:56
142.93.140.242	attackspam	May 15 21:33:44 ws22vmsma01 sshd[5973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 May 15 21:33:46 ws22vmsma01 sshd[5973]: Failed password for invalid user test from 142.93.140.242 port 32810 ssh2 ...	2020-05-16 20:09:41
142.93.140.242	attackbotsspam	May 15 08:54:57 ns382633 sshd\[24679\]: Invalid user yarn from 142.93.140.242 port 54916 May 15 08:54:57 ns382633 sshd\[24679\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 May 15 08:54:58 ns382633 sshd\[24679\]: Failed password for invalid user yarn from 142.93.140.242 port 54916 ssh2 May 15 08:59:36 ns382633 sshd\[25584\]: Invalid user hang from 142.93.140.242 port 42012 May 15 08:59:36 ns382633 sshd\[25584\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242	2020-05-15 18:39:12
142.93.140.242	attack	May 13 08:10:04 OPSO sshd\[9009\]: Invalid user weblogic from 142.93.140.242 port 45790 May 13 08:10:04 OPSO sshd\[9009\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 May 13 08:10:06 OPSO sshd\[9009\]: Failed password for invalid user weblogic from 142.93.140.242 port 45790 ssh2 May 13 08:13:37 OPSO sshd\[9825\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 user=admin May 13 08:13:38 OPSO sshd\[9825\]: Failed password for admin from 142.93.140.242 port 53730 ssh2	2020-05-13 19:03:38
142.93.140.242	attack	May 11 09:21:42 onepixel sshd[2975521]: Invalid user student02 from 142.93.140.242 port 33052 May 11 09:21:42 onepixel sshd[2975521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 May 11 09:21:42 onepixel sshd[2975521]: Invalid user student02 from 142.93.140.242 port 33052 May 11 09:21:44 onepixel sshd[2975521]: Failed password for invalid user student02 from 142.93.140.242 port 33052 ssh2 May 11 09:25:21 onepixel sshd[2975940]: Invalid user jeremy from 142.93.140.242 port 41636	2020-05-11 19:12:59
142.93.140.240	attackbots	Automatic report - XMLRPC Attack	2020-05-09 05:56:23
142.93.140.242	attackbotsspam	May 8 14:12:08 electroncash sshd[33246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 May 8 14:12:08 electroncash sshd[33246]: Invalid user asd from 142.93.140.242 port 54534 May 8 14:12:10 electroncash sshd[33246]: Failed password for invalid user asd from 142.93.140.242 port 54534 ssh2 May 8 14:15:53 electroncash sshd[34290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 user=root May 8 14:15:55 electroncash sshd[34290]: Failed password for root from 142.93.140.242 port 35814 ssh2 ...	2020-05-08 20:26:23
142.93.140.240	attackbots	Attempt to hack Wordpress Login, XMLRPC or other login	2020-05-04 01:48:07
142.93.140.242	attackspam	Apr 29 13:57:10 ns382633 sshd\[19948\]: Invalid user regina from 142.93.140.242 port 37402 Apr 29 13:57:10 ns382633 sshd\[19948\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 Apr 29 13:57:12 ns382633 sshd\[19948\]: Failed password for invalid user regina from 142.93.140.242 port 37402 ssh2 Apr 29 14:07:45 ns382633 sshd\[21935\]: Invalid user email from 142.93.140.242 port 54264 Apr 29 14:07:45 ns382633 sshd\[21935\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242	2020-04-29 22:18:07
142.93.140.242	attack	no	2020-04-24 21:51:20
142.93.140.242	attackbotsspam	Apr 20 03:41:19 XXX sshd[17298]: Invalid user by from 142.93.140.242 port 37598	2020-04-20 12:12:24

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.140.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13106
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.140.214.			IN	A

;; AUTHORITY SECTION:
.			284	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020061503 1800 900 604800 86400

;; Query time: 87 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 16 13:11:26 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 214.140.93.142.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 214.140.93.142.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
183.88.234.143	attackbotsspam	Dovecot Invalid User Login Attempt.	2020-05-10 21:23:59
192.95.4.5	attack	DIS,DEF GET /w00tw00t.at.ISC.SANS.DFind:)	2020-05-10 21:11:29
71.6.158.166	attack	Unauthorized connection attempt detected from IP address 71.6.158.166 to port 8500	2020-05-10 21:10:28
188.166.232.29	attack	SSH invalid-user multiple login try	2020-05-10 21:26:54
220.129.146.23	attack	Port probing on unauthorized port 23	2020-05-10 20:59:20
51.77.150.203	attack	May 10 14:21:17 ArkNodeAT sshd\[17455\]: Invalid user joshua from 51.77.150.203 May 10 14:21:17 ArkNodeAT sshd\[17455\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.150.203 May 10 14:21:19 ArkNodeAT sshd\[17455\]: Failed password for invalid user joshua from 51.77.150.203 port 57868 ssh2	2020-05-10 21:16:22
125.21.227.181	attackbots	Unauthorized access or intrusion attempt detected from Thor banned IP	2020-05-10 21:19:54
35.228.113.90	attackbotsspam	[2020-05-10 08:50:08] NOTICE[1157] chan_sip.c: Registration from '303 ' failed for '35.228.113.90:5060' - Wrong password [2020-05-10 08:50:08] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-10T08:50:08.925-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="303",SessionID="0x7f5f106f5588",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/35.228.113.90/5060",Challenge="5491dd4e",ReceivedChallenge="5491dd4e",ReceivedHash="82bec2db03f63d09f68669ee806143fc" [2020-05-10 08:50:32] NOTICE[1157] chan_sip.c: Registration from '205 ' failed for '35.228.113.90:5060' - Wrong password [2020-05-10 08:50:32] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-10T08:50:32.210-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="205",SessionID="0x7f5f10905838",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/35.228.113.9 ...	2020-05-10 21:06:50
181.40.73.86	attackspambots	$f2bV_matches \| Triggered by Fail2Ban at Vostok web server	2020-05-10 21:03:56
183.89.214.184	attackspambots	Dovecot Invalid User Login Attempt.	2020-05-10 20:45:21
223.182.227.249	attack	Unauthorized connection attempt from IP address 223.182.227.249 on Port 445(SMB)	2020-05-10 21:08:25
180.76.103.63	attack	May 10 15:10:42 vps647732 sshd[15766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.103.63 May 10 15:10:45 vps647732 sshd[15766]: Failed password for invalid user ryan from 180.76.103.63 port 55582 ssh2 ...	2020-05-10 21:30:38
35.200.161.135	attackspambots	2020-05-10 07:12:37.533682-0500 localhost sshd[50366]: Failed password for invalid user postgres from 35.200.161.135 port 39004 ssh2	2020-05-10 21:22:07
2.62.34.178	attackbotsspam	Unauthorized connection attempt from IP address 2.62.34.178 on Port 445(SMB)	2020-05-10 21:06:11
195.231.11.101	attack	(sshd) Failed SSH login from 195.231.11.101 (IT/Italy/host101-11-231-195.serverdedicati.aruba.it): 5 in the last 3600 secs	2020-05-10 21:09:25

最近上报的IP列表

106.52.6.77	35.231.148.183	195.142.68.65	185.171.0.43
24.143.131.205	102.39.151.220	162.243.138.177	134.119.192.227
27.13.98.80	44.37.9.54	18.213.4.5	23.136.218.93
157.245.100.56	108.235.51.190	219.113.135.216	63.31.139.72
49.144.183.128	108.53.0.150	43.64.244.162	242.32.64.35