142.93.143.112

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Netherlands

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Unauthorized connection attempt detected from IP address 142.93.143.112 to port 8278	2020-05-13 02:47:27
attackspambots	Port scan(s) denied	2020-05-01 22:04:24

相同子网IP讨论:

IP	类型	评论内容	时间
142.93.143.85	attack	Trolling for resource vulnerabilities	2020-08-02 22:17:05
142.93.143.85	attackbots	142.93.143.85 - - [30/Jul/2020:12:29:59 +0200] "POST /xmlrpc.php HTTP/1.1" 403 21861 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.143.85 - - [30/Jul/2020:12:46:22 +0200] "POST /xmlrpc.php HTTP/1.1" 403 31 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-30 19:09:59
142.93.143.85	attack	142.93.143.85 - - [11/Jul/2020:15:50:31 +0200] "GET /wp-login.php HTTP/1.1" 200 6310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.143.85 - - [11/Jul/2020:15:50:31 +0200] "POST /wp-login.php HTTP/1.1" 200 6561 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.143.85 - - [11/Jul/2020:15:50:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-07-11 22:01:26
142.93.143.85	attackspambots	142.93.143.85 has been banned for [WebApp Attack] ...	2020-07-05 16:37:18
142.93.143.85	attackbots	142.93.143.85 - - [21/May/2020:05:55:31 +0200] "GET /wp-login.php HTTP/1.1" 200 6614 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.143.85 - - [21/May/2020:05:55:33 +0200] "POST /wp-login.php HTTP/1.1" 200 6865 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.143.85 - - [21/May/2020:05:55:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-05-21 15:02:52

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.143.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31786
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.143.112.			IN	A

;; AUTHORITY SECTION:
.			214	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050101 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 01 22:04:16 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

112.143.93.142.in-addr.arpa domain name pointer vps1.yukon.lk.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
112.143.93.142.in-addr.arpa	name = vps1.yukon.lk.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
40.74.180.56	attack	Port scan on 1 port(s): 111	2019-07-16 14:38:49
122.176.77.79	attackbotsspam	Jul 16 07:08:40 s64-1 sshd[13053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.176.77.79 Jul 16 07:08:41 s64-1 sshd[13053]: Failed password for invalid user usuario from 122.176.77.79 port 32644 ssh2 Jul 16 07:15:21 s64-1 sshd[13190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.176.77.79 ...	2019-07-16 14:48:10
66.70.188.25	attackbotsspam	" "	2019-07-16 14:49:13
137.74.194.226	attackbots	Jul 16 07:17:28 localhost sshd\[58818\]: Invalid user store from 137.74.194.226 port 52732 Jul 16 07:17:28 localhost sshd\[58818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.194.226 ...	2019-07-16 14:19:15
116.226.29.103	attackspam	Helo	2019-07-16 14:26:57
157.55.39.94	attackbots	Automatic report - Banned IP Access	2019-07-16 14:23:48
185.220.101.49	attackspam	2019-07-16T06:03:05.931077abusebot-4.cloudsearch.cf sshd\[27394\]: Invalid user guest from 185.220.101.49 port 33509	2019-07-16 14:21:34
93.95.197.21	attackbotsspam	[portscan] Port scan	2019-07-16 14:48:41
159.65.164.133	attack	2019-07-16T06:16:42.717538abusebot-5.cloudsearch.cf sshd\[28614\]: Invalid user mysql from 159.65.164.133 port 44930	2019-07-16 14:30:23
151.236.32.126	attackspambots	Invalid user nothing from 151.236.32.126 port 58598	2019-07-16 14:22:43
2607:f8b0:4000:812::2013	attack	http://aaappstoresidd06.ikanl.biz/ 216.58.194.147 2607:f8b0:4000:812::2013 redirecting to http://128.199.129.239/kopet 128.199.129.239 redirecting to https://paypal-logins.org/repository1.php 138.68.247.144 Received: from source:[209.85.166.68] helo:mail-io1-f68.google.com Return-Path: Message-ID: <5_____@mx.google.com> From: Apple X-Google-Original-From: Apple <26412607@54668840.97510204.it> Date: Mon, 15 Jul 2019 22:55:23 +0200 To: undisclosed-recipients:; Subject: 支払いの問題でAppleIDがロックされました。【報告】	2019-07-16 14:16:31
222.186.15.28	attack	SSH Bruteforce Attack	2019-07-16 14:08:48
222.252.17.193	attack	Unauthorised access (Jul 16) SRC=222.252.17.193 LEN=52 TTL=116 ID=23525 DF TCP DPT=445 WINDOW=8192 SYN	2019-07-16 14:28:33
200.33.90.106	attackspambots	Automatic report - Port Scan Attack	2019-07-16 14:41:40
185.132.127.134	attack	email spam	2019-07-16 13:55:28

最近上报的IP列表

132.221.55.209	53.197.250.80	145.222.32.58	138.183.70.77
91.228.203.2	189.74.129.13	61.36.254.122	36.242.28.240
103.130.218.95	220.141.100.134	42.200.137.178	145.17.158.252
114.113.112.92	58.22.218.108	221.220.148.167	59.110.217.182
153.135.105.130	210.3.120.10	72.14.199.32	169.38.8.205