城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 142.93.193.63 | attackspam | 142.93.193.63 - - \[13/Oct/2020:12:44:47 +0200\] "POST /wp-login.php HTTP/1.0" 200 5983 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - \[13/Oct/2020:12:44:48 +0200\] "POST /wp-login.php HTTP/1.0" 200 5815 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - \[13/Oct/2020:12:44:49 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2020-10-13 20:52:16 |
| 142.93.193.63 | attack | 142.93.193.63 - - [13/Oct/2020:02:53:30 +0100] "POST /wp-login.php HTTP/1.1" 200 2548 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [13/Oct/2020:02:53:32 +0100] "POST /wp-login.php HTTP/1.1" 200 2529 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [13/Oct/2020:02:53:32 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-10-13 12:21:48 |
| 142.93.193.63 | attack | 142.93.193.63 - - [12/Oct/2020:22:49:59 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [12/Oct/2020:22:50:00 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [12/Oct/2020:22:50:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-10-13 05:11:14 |
| 142.93.193.63 | attackspambots | 142.93.193.63 - - [12/Oct/2020:00:28:27 +0100] "POST /wp-login.php HTTP/1.1" 200 2503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [12/Oct/2020:00:28:29 +0100] "POST /wp-login.php HTTP/1.1" 200 2479 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [12/Oct/2020:00:28:31 +0100] "POST /wp-login.php HTTP/1.1" 200 2519 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-10-12 07:55:49 |
| 142.93.193.63 | attackspambots | 142.93.193.63 - - [10/Oct/2020:23:36:39 +0100] "POST /wp-login.php HTTP/1.1" 200 2302 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [10/Oct/2020:23:36:41 +0100] "POST /wp-login.php HTTP/1.1" 200 2238 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [10/Oct/2020:23:36:43 +0100] "POST /wp-login.php HTTP/1.1" 200 2282 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-10-12 00:13:01 |
| 142.93.193.63 | attack | 142.93.193.63 - - [10/Oct/2020:23:36:39 +0100] "POST /wp-login.php HTTP/1.1" 200 2302 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [10/Oct/2020:23:36:41 +0100] "POST /wp-login.php HTTP/1.1" 200 2238 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [10/Oct/2020:23:36:43 +0100] "POST /wp-login.php HTTP/1.1" 200 2282 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-10-11 16:11:20 |
| 142.93.193.63 | attackspambots | 142.93.193.63 - - [10/Oct/2020:23:36:39 +0100] "POST /wp-login.php HTTP/1.1" 200 2302 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [10/Oct/2020:23:36:41 +0100] "POST /wp-login.php HTTP/1.1" 200 2238 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [10/Oct/2020:23:36:43 +0100] "POST /wp-login.php HTTP/1.1" 200 2282 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-10-11 09:30:22 |
| 142.93.193.63 | attack | Trolling for resource vulnerabilities |
2020-10-03 03:28:53 |
| 142.93.193.63 | attackbotsspam | Trolling for resource vulnerabilities |
2020-10-03 02:18:53 |
| 142.93.193.63 | attack | 142.93.193.63 - - [02/Oct/2020:09:22:58 +0100] "POST /wp-login.php HTTP/1.1" 200 2598 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [02/Oct/2020:09:23:00 +0100] "POST /wp-login.php HTTP/1.1" 200 2540 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [02/Oct/2020:09:23:01 +0100] "POST /wp-login.php HTTP/1.1" 200 2583 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-10-02 22:47:40 |
| 142.93.193.63 | attackspam | 142.93.193.63 - - [02/Oct/2020:09:22:58 +0100] "POST /wp-login.php HTTP/1.1" 200 2598 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [02/Oct/2020:09:23:00 +0100] "POST /wp-login.php HTTP/1.1" 200 2540 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [02/Oct/2020:09:23:01 +0100] "POST /wp-login.php HTTP/1.1" 200 2583 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-10-02 19:19:00 |
| 142.93.193.63 | attackbots | 142.93.193.63 - - [02/Oct/2020:06:06:25 +0100] "POST /wp-login.php HTTP/1.1" 200 2426 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [02/Oct/2020:06:06:26 +0100] "POST /wp-login.php HTTP/1.1" 200 2443 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [02/Oct/2020:06:06:27 +0100] "POST /wp-login.php HTTP/1.1" 200 2441 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-10-02 15:54:41 |
| 142.93.193.63 | attack | 142.93.193.63 - - [02/Oct/2020:02:38:46 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [02/Oct/2020:02:38:47 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [02/Oct/2020:02:38:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-10-02 12:09:24 |
| 142.93.193.63 | attack | 142.93.193.63 - - [19/Sep/2020:17:35:57 +0200] "POST /xmlrpc.php HTTP/1.1" 403 613 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [19/Sep/2020:17:42:16 +0200] "POST /xmlrpc.php HTTP/1.1" 403 15713 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-20 01:54:01 |
| 142.93.193.63 | attackspambots | 142.93.193.63 - - [19/Sep/2020:07:59:14 +0000] "POST /wp-login.php HTTP/1.1" 200 2075 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 142.93.193.63 - - [19/Sep/2020:07:59:16 +0000] "POST /wp-login.php HTTP/1.1" 200 2052 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 142.93.193.63 - - [19/Sep/2020:07:59:19 +0000] "POST /wp-login.php HTTP/1.1" 200 2049 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 142.93.193.63 - - [19/Sep/2020:07:59:21 +0000] "POST /wp-login.php HTTP/1.1" 200 2049 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 142.93.193.63 - - [19/Sep/2020:07:59:22 +0000] "POST /xmlrpc.php HTTP/1.1" 200 236 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" |
2020-09-19 17:44:54 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.193.93
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27695
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;142.93.193.93. IN A
;; AUTHORITY SECTION:
. 542 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 12:23:40 CST 2022
;; MSG SIZE rcvd: 106Host 93.193.93.142.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 93.193.93.142.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 139.59.84.55 | attackbots | Dec 15 12:49:28 gw1 sshd[7119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.84.55 Dec 15 12:49:30 gw1 sshd[7119]: Failed password for invalid user test from 139.59.84.55 port 48864 ssh2 ... |
2019-12-15 17:29:23 |
| 51.91.96.113 | attackspambots | Dec 15 09:51:03 loxhost sshd\[18269\]: Invalid user mongo from 51.91.96.113 port 43018 Dec 15 09:51:03 loxhost sshd\[18269\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.96.113 Dec 15 09:51:04 loxhost sshd\[18269\]: Failed password for invalid user mongo from 51.91.96.113 port 43018 ssh2 Dec 15 09:51:40 loxhost sshd\[18271\]: Invalid user mongo from 51.91.96.113 port 47202 Dec 15 09:51:40 loxhost sshd\[18271\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.96.113 ... |
2019-12-15 17:06:02 |
| 186.31.37.203 | attackbotsspam | --- report --- Dec 15 04:23:55 sshd: Connection from 186.31.37.203 port 59048 Dec 15 04:23:56 sshd: Address 186.31.37.203 maps to ingettel.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 04:23:56 sshd: Invalid user 12345 from 186.31.37.203 Dec 15 04:23:56 sshd: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.31.37.203 Dec 15 04:23:58 sshd: Failed password for invalid user 12345 from 186.31.37.203 port 59048 ssh2 Dec 15 04:23:58 sshd: Received disconnect from 186.31.37.203: 11: Bye Bye [preauth] |
2019-12-15 17:42:18 |
| 200.89.178.214 | attack | 2019-12-15T08:03:02.330327shield sshd\[10624\]: Invalid user gills from 200.89.178.214 port 47892 2019-12-15T08:03:02.334923shield sshd\[10624\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=214-178-89-200.fibertel.com.ar 2019-12-15T08:03:04.377924shield sshd\[10624\]: Failed password for invalid user gills from 200.89.178.214 port 47892 ssh2 2019-12-15T08:09:49.709741shield sshd\[12441\]: Invalid user lexluthe from 200.89.178.214 port 56156 2019-12-15T08:09:49.714703shield sshd\[12441\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=214-178-89-200.fibertel.com.ar |
2019-12-15 17:19:15 |
| 36.92.98.181 | attack | Unauthorised access (Dec 15) SRC=36.92.98.181 LEN=52 TTL=248 ID=16732 DF TCP DPT=445 WINDOW=8192 SYN |
2019-12-15 17:33:31 |
| 74.208.230.149 | attackspam | Dec 15 10:29:18 markkoudstaal sshd[2607]: Failed password for root from 74.208.230.149 port 39008 ssh2 Dec 15 10:35:00 markkoudstaal sshd[3298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.230.149 Dec 15 10:35:02 markkoudstaal sshd[3298]: Failed password for invalid user gutcher from 74.208.230.149 port 47008 ssh2 |
2019-12-15 17:40:00 |
| 37.49.227.109 | attack | 161/udp 5353/udp 17/udp... [2019-10-14/12-15]297pkt,2pt.(tcp),25pt.(udp) |
2019-12-15 17:04:24 |
| 58.33.31.82 | attackbots | Dec 15 03:52:15 linuxvps sshd\[13260\]: Invalid user webmaster from 58.33.31.82 Dec 15 03:52:15 linuxvps sshd\[13260\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.33.31.82 Dec 15 03:52:17 linuxvps sshd\[13260\]: Failed password for invalid user webmaster from 58.33.31.82 port 58938 ssh2 Dec 15 03:58:12 linuxvps sshd\[17248\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.33.31.82 user=root Dec 15 03:58:14 linuxvps sshd\[17248\]: Failed password for root from 58.33.31.82 port 33697 ssh2 |
2019-12-15 17:03:53 |
| 69.17.153.139 | attackspambots | 2019-12-15T10:17:10.262506scmdmz1 sshd\[2151\]: Invalid user kt from 69.17.153.139 port 37769 2019-12-15T10:17:10.266081scmdmz1 sshd\[2151\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.17.153.139 2019-12-15T10:17:12.274398scmdmz1 sshd\[2151\]: Failed password for invalid user kt from 69.17.153.139 port 37769 ssh2 ... |
2019-12-15 17:33:09 |
| 138.68.82.220 | attack | Dec 15 10:07:45 markkoudstaal sshd[32069]: Failed password for root from 138.68.82.220 port 49690 ssh2 Dec 15 10:13:14 markkoudstaal sshd[457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220 Dec 15 10:13:16 markkoudstaal sshd[457]: Failed password for invalid user dovecot from 138.68.82.220 port 58050 ssh2 |
2019-12-15 17:16:48 |
| 52.178.134.11 | attackbotsspam | <6 unauthorized SSH connections |
2019-12-15 17:30:39 |
| 118.24.108.196 | attackspam | Dec 15 09:19:38 MK-Soft-VM8 sshd[9986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.108.196 Dec 15 09:19:39 MK-Soft-VM8 sshd[9986]: Failed password for invalid user had from 118.24.108.196 port 34134 ssh2 ... |
2019-12-15 17:15:52 |
| 203.156.125.195 | attackspambots | Dec 15 10:18:20 icinga sshd[3667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.156.125.195 Dec 15 10:18:21 icinga sshd[3667]: Failed password for invalid user westerheim from 203.156.125.195 port 34991 ssh2 ... |
2019-12-15 17:33:56 |
| 113.251.37.89 | attack | Scanning |
2019-12-15 17:25:34 |
| 148.72.65.10 | attackspambots | Dec 15 09:09:48 server sshd\[25310\]: Invalid user news from 148.72.65.10 Dec 15 09:09:48 server sshd\[25310\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-148-72-65-10.ip.secureserver.net Dec 15 09:09:49 server sshd\[25310\]: Failed password for invalid user news from 148.72.65.10 port 48642 ssh2 Dec 15 09:27:46 server sshd\[30965\]: Invalid user brychcy from 148.72.65.10 Dec 15 09:27:46 server sshd\[30965\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-148-72-65-10.ip.secureserver.net ... |
2019-12-15 17:34:56 |