必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
142.93.240.62 spamattack
PHISHING AND SPAM ATTACK
FROM "Important Notification - newsletter@app.ksinergy.biz - " : 
SUBJECT "Congrats! Open Immediately! " :
RECEIVED "from mail-02.ksinergy.biz ([142.93.240.62]:39126) " :
DATE/TIMESENT "Mon, 01 Mar 2021 10:14:52 ":
IP ADDRESS "inetnum: 142.93.0.0 - 142.93.255.255  OrgName: DigitalOcean, LLC
2021-03-01 08:16:37
142.93.240.62 spamattack
PHISHING AND SPAM ATTACK
FROM "Casino For You - newsletter@app.ksinergy.biz -" : 
SUBJECT "Join today and receive an amazing welcome bonus " :
RECEIVED "from mail-02.ksinergy.biz ([142.93.240.62]:57421) " :
DATE/TIMESENT "Tue, 23 Feb 2021 01:27:07 "
2021-02-23 04:32:24
142.93.212.91 attackbotsspam
SSH BruteForce Attack
2020-10-13 01:56:49
142.93.237.57 attack
Multiport scan 2 ports : 1583 27080
2020-10-12 21:16:28
142.93.212.91 attack
Oct 12 10:23:09 localhost sshd\[19098\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.91  user=root
Oct 12 10:23:11 localhost sshd\[19098\]: Failed password for root from 142.93.212.91 port 59394 ssh2
Oct 12 10:27:27 localhost sshd\[19552\]: Invalid user sanjeev from 142.93.212.91
Oct 12 10:27:27 localhost sshd\[19552\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.91
Oct 12 10:27:29 localhost sshd\[19552\]: Failed password for invalid user sanjeev from 142.93.212.91 port 36984 ssh2
...
2020-10-12 17:20:25
142.93.237.57 attack
1089/tcp 5984/tcp
[2020-10-11]2pkt
2020-10-12 12:46:46
142.93.211.36 attackspambots
Oct 12 00:25:27 *hidden* sshd[869]: Failed password for *hidden* from 142.93.211.36 port 56534 ssh2 Oct 12 00:28:28 *hidden* sshd[1320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.211.36 user=root Oct 12 00:28:30 *hidden* sshd[1320]: Failed password for *hidden* from 142.93.211.36 port 40212 ssh2
2020-10-12 07:11:11
142.93.209.251 attackbotsspam
Oct 11 22:07:55 v2202009116398126984 sshd[2515868]: Invalid user elke from 142.93.209.251 port 44534
...
2020-10-12 06:24:15
142.93.223.118 attackspam
SSH login attempts.
2020-10-12 04:12:31
142.93.211.36 attackspam
Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-10-11 23:23:00
142.93.209.251 attack
Oct 11 16:26:57 sso sshd[30604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.209.251
Oct 11 16:26:59 sso sshd[30604]: Failed password for invalid user chris from 142.93.209.251 port 59794 ssh2
...
2020-10-11 22:34:31
142.93.223.118 attackspam
SSH login attempts.
2020-10-11 20:11:30
142.93.211.36 attack
Fail2Ban
2020-10-11 15:21:45
142.93.209.251 attackbots
(sshd) Failed SSH login from 142.93.209.251 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 11 00:54:24 optimus sshd[28004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.209.251  user=root
Oct 11 00:54:27 optimus sshd[28004]: Failed password for root from 142.93.209.251 port 54930 ssh2
Oct 11 01:19:11 optimus sshd[6951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.209.251  user=root
Oct 11 01:19:13 optimus sshd[6951]: Failed password for root from 142.93.209.251 port 56072 ssh2
Oct 11 01:24:49 optimus sshd[11852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.209.251  user=root
2020-10-11 14:29:57
142.93.223.118 attackspam
2020-10-11T07:03:53.476597lavrinenko.info sshd[19701]: Failed password for root from 142.93.223.118 port 55582 ssh2
2020-10-11T07:07:58.292860lavrinenko.info sshd[19798]: Invalid user next from 142.93.223.118 port 33376
2020-10-11T07:07:58.302917lavrinenko.info sshd[19798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.223.118
2020-10-11T07:07:58.292860lavrinenko.info sshd[19798]: Invalid user next from 142.93.223.118 port 33376
2020-10-11T07:08:00.553715lavrinenko.info sshd[19798]: Failed password for invalid user next from 142.93.223.118 port 33376 ssh2
...
2020-10-11 12:10:33
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.2.119
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24707
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;142.93.2.119.			IN	A

;; AUTHORITY SECTION:
.			592	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 09:44:53 CST 2022
;; MSG SIZE  rcvd: 105
HOST信息:
Host 119.2.93.142.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 119.2.93.142.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
211.250.72.142 attackspambots
Jun 17 14:05:05 tor-proxy-08 sshd\[14047\]: Invalid user pi from 211.250.72.142 port 57052
Jun 17 14:05:05 tor-proxy-08 sshd\[14048\]: Invalid user pi from 211.250.72.142 port 57064
Jun 17 14:05:05 tor-proxy-08 sshd\[14047\]: Connection closed by 211.250.72.142 port 57052 \[preauth\]
...
2020-06-17 20:49:29
120.131.3.144 attack
Jun 17 14:50:18 server sshd[14774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.131.3.144
Jun 17 14:50:19 server sshd[14774]: Failed password for invalid user sinus from 120.131.3.144 port 30604 ssh2
Jun 17 14:54:29 server sshd[15087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.131.3.144
...
2020-06-17 21:08:48
92.246.84.185 attackspam
[2020-06-17 08:52:52] NOTICE[1273][C-00001e38] chan_sip.c: Call from '' (92.246.84.185:56533) to extension '2246462607509' rejected because extension not found in context 'public'.
[2020-06-17 08:52:52] SECURITY[1288] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-06-17T08:52:52.800-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="2246462607509",SessionID="0x7f31c02f7128",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/92.246.84.185/56533",ACLName="no_extension_match"
[2020-06-17 08:56:44] NOTICE[1273][C-00001e43] chan_sip.c: Call from '' (92.246.84.185:57134) to extension '8008046313113308' rejected because extension not found in context 'public'.
[2020-06-17 08:56:44] SECURITY[1288] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-06-17T08:56:44.739-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="8008046313113308",SessionID="0x7f31c02f97a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/92
...
2020-06-17 21:05:31
195.122.25.180 attackspam
18 Login Attempts
2020-06-17 20:35:52
104.248.147.78 attackspambots
Jun 17 13:48:25 nas sshd[26692]: Failed password for root from 104.248.147.78 port 58196 ssh2
Jun 17 14:04:48 nas sshd[27598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.147.78 
Jun 17 14:04:50 nas sshd[27598]: Failed password for invalid user ulia from 104.248.147.78 port 32870 ssh2
...
2020-06-17 21:04:58
111.67.204.249 attack
Bruteforce detected by fail2ban
2020-06-17 20:47:46
165.227.45.249 attack
Jun 17 14:32:02 legacy sshd[13702]: Failed password for root from 165.227.45.249 port 41054 ssh2
Jun 17 14:36:43 legacy sshd[13830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.45.249
Jun 17 14:36:45 legacy sshd[13830]: Failed password for invalid user dyy from 165.227.45.249 port 42468 ssh2
...
2020-06-17 20:48:59
128.1.34.12 attackbots
Jun 17 14:00:26 mxgate1 postfix/postscreen[9373]: CONNECT from [128.1.34.12]:63893 to [176.31.12.44]:25
Jun 17 14:00:26 mxgate1 postfix/dnsblog[9423]: addr 128.1.34.12 listed by domain zen.spamhaus.org as 127.0.0.4
Jun 17 14:00:26 mxgate1 postfix/dnsblog[9424]: addr 128.1.34.12 listed by domain cbl.abuseat.org as 127.0.0.2
Jun 17 14:00:32 mxgate1 postfix/postscreen[9373]: DNSBL rank 3 for [128.1.34.12]:63893
Jun 17 14:00:32 mxgate1 postfix/postscreen[9373]: NOQUEUE: reject: RCPT from [128.1.34.12]:63893: 550 5.7.1 Service unavailable; client [128.1.34.12] blocked using zen.spamhaus.org; from=x@x helo=
Jun 17 14:00:32 mxgate1 postfix/postscreen[9373]: DISCONNECT [128.1.34.12]:63893


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=128.1.34.12
2020-06-17 20:25:56
122.51.31.60 attackbots
$f2bV_matches
2020-06-17 20:26:18
51.15.207.74 attackspam
SSH Bruteforce attack
2020-06-17 21:06:12
45.44.10.76 attackbotsspam
20/6/17@08:04:54: FAIL: Alarm-Telnet address from=45.44.10.76
20/6/17@08:04:54: FAIL: Alarm-Telnet address from=45.44.10.76
20/6/17@08:04:54: FAIL: Alarm-Telnet address from=45.44.10.76
20/6/17@08:04:54: FAIL: Alarm-Telnet address from=45.44.10.76
...
2020-06-17 20:59:34
112.85.42.195 attack
Jun 17 12:29:26 onepixel sshd[1581748]: Failed password for root from 112.85.42.195 port 55375 ssh2
Jun 17 12:30:30 onepixel sshd[1581926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.195  user=root
Jun 17 12:30:32 onepixel sshd[1581926]: Failed password for root from 112.85.42.195 port 51582 ssh2
Jun 17 12:31:51 onepixel sshd[1582104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.195  user=root
Jun 17 12:31:53 onepixel sshd[1582104]: Failed password for root from 112.85.42.195 port 49240 ssh2
2020-06-17 20:53:03
106.13.160.127 attackbotsspam
Jun 17 14:04:46 ns3164893 sshd[12442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.160.127
Jun 17 14:04:48 ns3164893 sshd[12442]: Failed password for invalid user ansible from 106.13.160.127 port 49596 ssh2
...
2020-06-17 21:07:21
139.59.116.115 attackspambots
TCP ports : 774 / 10271 / 10749 / 14821 / 15994 / 23960 / 24230 / 28311 / 28492 / 30948
2020-06-17 20:43:44
217.29.222.36 attack
Configuration snooping (/cgi-bin/ViewLog.asp): "POST 127.0.0.1:80/cgi-bin/ViewLog.asp"
2020-06-17 20:51:47

最近上报的IP列表

142.93.199.194 142.93.2.12 142.93.199.247 118.97.113.238
142.93.2.202 142.93.20.172 142.93.20.137 142.93.20.14
142.93.20.20 142.93.20.181 142.93.20.59 142.93.200.103
142.93.20.81 142.93.2.170 142.93.20.204 142.93.200.152
142.93.20.212 142.93.200.161 118.97.114.122 118.97.114.243