城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 142.93.140.242 | attack | 2020-06-17T00:03:36.067695mail.standpoint.com.ua sshd[31174]: Invalid user silvio from 142.93.140.242 port 43750 2020-06-17T00:03:36.070299mail.standpoint.com.ua sshd[31174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 2020-06-17T00:03:36.067695mail.standpoint.com.ua sshd[31174]: Invalid user silvio from 142.93.140.242 port 43750 2020-06-17T00:03:37.535152mail.standpoint.com.ua sshd[31174]: Failed password for invalid user silvio from 142.93.140.242 port 43750 ssh2 2020-06-17T00:06:56.112872mail.standpoint.com.ua sshd[31629]: Invalid user teamspeak3 from 142.93.140.242 port 45070 ... |
2020-06-17 05:46:46 |
| 142.93.140.214 | attackspambots | Jun 15 18:54:18 php1 sshd\[21780\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.214 user=root Jun 15 18:54:20 php1 sshd\[21780\]: Failed password for root from 142.93.140.214 port 35010 ssh2 Jun 15 18:57:30 php1 sshd\[21985\]: Invalid user lia from 142.93.140.214 Jun 15 18:57:30 php1 sshd\[21985\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.214 Jun 15 18:57:32 php1 sshd\[21985\]: Failed password for invalid user lia from 142.93.140.214 port 36260 ssh2 |
2020-06-16 13:11:36 |
| 142.93.140.240 | attack | 142.93.140.240 - - [14/Jun/2020:14:48:50 +0200] "GET /wp-login.php HTTP/1.1" 200 6433 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.140.240 - - [14/Jun/2020:14:48:52 +0200] "POST /wp-login.php HTTP/1.1" 200 6684 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.140.240 - - [14/Jun/2020:14:48:53 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-06-14 22:55:32 |
| 142.93.140.242 | attack | $f2bV_matches |
2020-06-13 04:30:44 |
| 142.93.140.242 | attack | Jun 12 08:32:17 web1 sshd[32760]: Invalid user aogola from 142.93.140.242 port 37724 Jun 12 08:32:17 web1 sshd[32760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 Jun 12 08:32:17 web1 sshd[32760]: Invalid user aogola from 142.93.140.242 port 37724 Jun 12 08:32:19 web1 sshd[32760]: Failed password for invalid user aogola from 142.93.140.242 port 37724 ssh2 Jun 12 08:37:35 web1 sshd[1569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 user=root Jun 12 08:37:37 web1 sshd[1569]: Failed password for root from 142.93.140.242 port 51662 ssh2 Jun 12 08:39:32 web1 sshd[2032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 user=root Jun 12 08:39:34 web1 sshd[2032]: Failed password for root from 142.93.140.242 port 59994 ssh2 Jun 12 08:41:29 web1 sshd[2548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 t ... |
2020-06-12 07:37:49 |
| 142.93.140.242 | attackbots | May 22 04:46:57 gw1 sshd[10458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 May 22 04:46:59 gw1 sshd[10458]: Failed password for invalid user gtx from 142.93.140.242 port 44392 ssh2 ... |
2020-05-22 08:12:56 |
| 142.93.140.242 | attackspam | May 15 21:33:44 ws22vmsma01 sshd[5973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 May 15 21:33:46 ws22vmsma01 sshd[5973]: Failed password for invalid user test from 142.93.140.242 port 32810 ssh2 ... |
2020-05-16 20:09:41 |
| 142.93.140.242 | attackbotsspam | May 15 08:54:57 ns382633 sshd\[24679\]: Invalid user yarn from 142.93.140.242 port 54916 May 15 08:54:57 ns382633 sshd\[24679\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 May 15 08:54:58 ns382633 sshd\[24679\]: Failed password for invalid user yarn from 142.93.140.242 port 54916 ssh2 May 15 08:59:36 ns382633 sshd\[25584\]: Invalid user hang from 142.93.140.242 port 42012 May 15 08:59:36 ns382633 sshd\[25584\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 |
2020-05-15 18:39:12 |
| 142.93.140.242 | attack | May 13 08:10:04 OPSO sshd\[9009\]: Invalid user weblogic from 142.93.140.242 port 45790 May 13 08:10:04 OPSO sshd\[9009\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 May 13 08:10:06 OPSO sshd\[9009\]: Failed password for invalid user weblogic from 142.93.140.242 port 45790 ssh2 May 13 08:13:37 OPSO sshd\[9825\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 user=admin May 13 08:13:38 OPSO sshd\[9825\]: Failed password for admin from 142.93.140.242 port 53730 ssh2 |
2020-05-13 19:03:38 |
| 142.93.140.242 | attack | May 11 09:21:42 onepixel sshd[2975521]: Invalid user student02 from 142.93.140.242 port 33052 May 11 09:21:42 onepixel sshd[2975521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 May 11 09:21:42 onepixel sshd[2975521]: Invalid user student02 from 142.93.140.242 port 33052 May 11 09:21:44 onepixel sshd[2975521]: Failed password for invalid user student02 from 142.93.140.242 port 33052 ssh2 May 11 09:25:21 onepixel sshd[2975940]: Invalid user jeremy from 142.93.140.242 port 41636 |
2020-05-11 19:12:59 |
| 142.93.140.240 | attackbots | Automatic report - XMLRPC Attack |
2020-05-09 05:56:23 |
| 142.93.140.242 | attackbotsspam | May 8 14:12:08 electroncash sshd[33246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 May 8 14:12:08 electroncash sshd[33246]: Invalid user asd from 142.93.140.242 port 54534 May 8 14:12:10 electroncash sshd[33246]: Failed password for invalid user asd from 142.93.140.242 port 54534 ssh2 May 8 14:15:53 electroncash sshd[34290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 user=root May 8 14:15:55 electroncash sshd[34290]: Failed password for root from 142.93.140.242 port 35814 ssh2 ... |
2020-05-08 20:26:23 |
| 142.93.140.240 | attackbots | Attempt to hack Wordpress Login, XMLRPC or other login |
2020-05-04 01:48:07 |
| 142.93.140.242 | attackspam | Apr 29 13:57:10 ns382633 sshd\[19948\]: Invalid user regina from 142.93.140.242 port 37402 Apr 29 13:57:10 ns382633 sshd\[19948\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 Apr 29 13:57:12 ns382633 sshd\[19948\]: Failed password for invalid user regina from 142.93.140.242 port 37402 ssh2 Apr 29 14:07:45 ns382633 sshd\[21935\]: Invalid user email from 142.93.140.242 port 54264 Apr 29 14:07:45 ns382633 sshd\[21935\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.140.242 |
2020-04-29 22:18:07 |
| 142.93.140.242 | attack | no |
2020-04-24 21:51:20 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.140.73
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27440
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;142.93.140.73. IN A
;; AUTHORITY SECTION:
. 350 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 14:05:20 CST 2022
;; MSG SIZE rcvd: 106
73.140.93.142.in-addr.arpa domain name pointer srv02.wowmedia.nl.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
73.140.93.142.in-addr.arpa name = srv02.wowmedia.nl.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 218.92.0.203 | attackbots | Sep 1 05:50:54 kh-dev-server sshd[4274]: Failed password for root from 218.92.0.203 port 19508 ssh2 ... |
2020-09-01 16:16:56 |
| 51.83.69.84 | attackspambots | Sep 1 07:09:37 ssh2 sshd[82292]: User root from welcome-europe.website not allowed because not listed in AllowUsers Sep 1 07:09:37 ssh2 sshd[82292]: Failed password for invalid user root from 51.83.69.84 port 41774 ssh2 Sep 1 07:09:37 ssh2 sshd[82292]: Failed password for invalid user root from 51.83.69.84 port 41774 ssh2 ... |
2020-09-01 16:08:18 |
| 198.27.81.188 | attackspam | 198.27.81.188 - - [01/Sep/2020:09:07:25 +0100] "POST /wp-login.php HTTP/1.1" 200 5249 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 198.27.81.188 - - [01/Sep/2020:09:08:05 +0100] "POST /wp-login.php HTTP/1.1" 200 6632 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 198.27.81.188 - - [01/Sep/2020:09:10:26 +0100] "POST /wp-login.php HTTP/1.1" 200 5249 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" ... |
2020-09-01 16:11:02 |
| 110.175.173.142 | attackspambots | (sshd) Failed SSH login from 110.175.173.142 (AU/Australia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 1 02:10:53 server2 sshd[29300]: Invalid user liyan from 110.175.173.142 Sep 1 02:10:55 server2 sshd[29300]: Failed password for invalid user liyan from 110.175.173.142 port 32882 ssh2 Sep 1 02:23:27 server2 sshd[8235]: Invalid user www from 110.175.173.142 Sep 1 02:23:29 server2 sshd[8235]: Failed password for invalid user www from 110.175.173.142 port 46437 ssh2 Sep 1 02:28:10 server2 sshd[13129]: Invalid user teresa from 110.175.173.142 |
2020-09-01 16:25:18 |
| 177.191.252.213 | attackbotsspam | 177.191.252.213 - - \[01/Sep/2020:06:51:15 +0300\] "POST /xmlrpc.php HTTP/1.1" 200 428 "-" "Mozilla/5.0 \(Windows NT 6.1\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/59.0.3071.109 Safari/537.36" "-" 177.191.252.213 - - \[01/Sep/2020:06:51:19 +0300\] "POST /xmlrpc.php HTTP/1.1" 200 428 "-" "Mozilla/5.0 \(Windows NT 6.1\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/59.0.3071.109 Safari/537.36" "-" ... |
2020-09-01 16:02:34 |
| 149.34.0.67 | attackspambots | Sep 1 05:50:19 daisy sshd[770846]: Invalid user admin from 149.34.0.67 port 36250 Sep 1 05:50:28 daisy sshd[770903]: Invalid user support from 149.34.0.67 port 37420 ... |
2020-09-01 16:25:56 |
| 111.72.195.181 | attackbotsspam | Sep 1 09:11:20 srv01 postfix/smtpd\[32190\]: warning: unknown\[111.72.195.181\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 1 09:11:31 srv01 postfix/smtpd\[32190\]: warning: unknown\[111.72.195.181\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 1 09:11:49 srv01 postfix/smtpd\[32190\]: warning: unknown\[111.72.195.181\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 1 09:12:07 srv01 postfix/smtpd\[32190\]: warning: unknown\[111.72.195.181\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 1 09:12:19 srv01 postfix/smtpd\[32190\]: warning: unknown\[111.72.195.181\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-09-01 16:28:57 |
| 87.246.7.145 | attackspam | spam (f2b h2) |
2020-09-01 16:29:43 |
| 5.255.253.5 | attackspambots | (mod_security) mod_security (id:210740) triggered by 5.255.253.5 (RU/Russia/5-255-253-5.spider.yandex.com): 5 in the last 3600 secs |
2020-09-01 16:34:26 |
| 118.89.229.84 | attackbotsspam | 2020-09-01T11:35:36.017361lavrinenko.info sshd[20382]: Invalid user wangqiang from 118.89.229.84 port 50346 2020-09-01T11:35:36.028254lavrinenko.info sshd[20382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.229.84 2020-09-01T11:35:36.017361lavrinenko.info sshd[20382]: Invalid user wangqiang from 118.89.229.84 port 50346 2020-09-01T11:35:37.486463lavrinenko.info sshd[20382]: Failed password for invalid user wangqiang from 118.89.229.84 port 50346 ssh2 2020-09-01T11:38:50.351054lavrinenko.info sshd[20570]: Invalid user ljq from 118.89.229.84 port 58560 ... |
2020-09-01 16:39:19 |
| 119.6.105.3 | attackspam | Icarus honeypot on github |
2020-09-01 16:21:18 |
| 138.91.10.195 | attackbots | SASL LOGIN authentication failed: authentication failure |
2020-09-01 16:22:48 |
| 109.236.89.61 | attack | Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-09-01T05:43:40Z and 2020-09-01T06:13:48Z |
2020-09-01 16:21:32 |
| 125.35.92.130 | attackbotsspam | Sep 1 10:38:42 server sshd[1137]: User root from 125.35.92.130 not allowed because listed in DenyUsers ... |
2020-09-01 16:13:38 |
| 111.26.172.222 | attack | 2020-09-01T01:15:49.505472linuxbox-skyline auth[11186]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=info rhost=111.26.172.222 ... |
2020-09-01 16:29:16 |