142.93.23.196 - IPInfo

基本信息:

城市(city): Santa Clara

省份(region): California

国家(country): United States

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): DigitalOcean, LLC

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	xmlrpc attack	2019-07-29 11:11:30

相同子网IP讨论:

IP	类型	评论内容	时间
142.93.237.57	attack	Multiport scan 2 ports : 1583 27080	2020-10-12 21:16:28
142.93.237.57	attack	1089/tcp 5984/tcp [2020-10-11]2pkt	2020-10-12 12:46:46
142.93.235.47	attack	2020-10-02T15:21:19.088603server.mjenks.net sshd[97696]: Failed password for invalid user cesar from 142.93.235.47 port 34040 ssh2 2020-10-02T15:24:36.424633server.mjenks.net sshd[98116]: Invalid user vincent from 142.93.235.47 port 43584 2020-10-02T15:24:36.430533server.mjenks.net sshd[98116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47 2020-10-02T15:24:36.424633server.mjenks.net sshd[98116]: Invalid user vincent from 142.93.235.47 port 43584 2020-10-02T15:24:38.227538server.mjenks.net sshd[98116]: Failed password for invalid user vincent from 142.93.235.47 port 43584 ssh2 ...	2020-10-03 04:58:24
142.93.235.47	attackbots	Oct 2 09:26:13 NPSTNNYC01T sshd[6309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47 Oct 2 09:26:15 NPSTNNYC01T sshd[6309]: Failed password for invalid user teamspeak from 142.93.235.47 port 41724 ssh2 Oct 2 09:29:50 NPSTNNYC01T sshd[6423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47 ...	2020-10-03 00:21:06
142.93.235.47	attackbots	Oct 2 08:29:52 NPSTNNYC01T sshd[2744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47 Oct 2 08:29:54 NPSTNNYC01T sshd[2744]: Failed password for invalid user oracle from 142.93.235.47 port 43022 ssh2 Oct 2 08:33:25 NPSTNNYC01T sshd[2951]: Failed password for root from 142.93.235.47 port 49996 ssh2 ...	2020-10-02 20:52:04
142.93.235.47	attackbotsspam	2020-10-02T08:06:08.925177abusebot-4.cloudsearch.cf sshd[455]: Invalid user test from 142.93.235.47 port 47348 2020-10-02T08:06:08.931647abusebot-4.cloudsearch.cf sshd[455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47 2020-10-02T08:06:08.925177abusebot-4.cloudsearch.cf sshd[455]: Invalid user test from 142.93.235.47 port 47348 2020-10-02T08:06:10.678886abusebot-4.cloudsearch.cf sshd[455]: Failed password for invalid user test from 142.93.235.47 port 47348 ssh2 2020-10-02T08:09:31.934480abusebot-4.cloudsearch.cf sshd[565]: Invalid user user from 142.93.235.47 port 53400 2020-10-02T08:09:31.942004abusebot-4.cloudsearch.cf sshd[565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47 2020-10-02T08:09:31.934480abusebot-4.cloudsearch.cf sshd[565]: Invalid user user from 142.93.235.47 port 53400 2020-10-02T08:09:34.225961abusebot-4.cloudsearch.cf sshd[565]: Failed password for invalid ...	2020-10-02 17:24:21
142.93.235.47	attackbotsspam	Invalid user buero from 142.93.235.47 port 40720	2020-10-02 13:46:44
142.93.235.47	attack	Oct 1 20:57:04 vps-51d81928 sshd[502875]: Failed password for root from 142.93.235.47 port 49712 ssh2 Oct 1 21:00:21 vps-51d81928 sshd[502917]: Invalid user raquel from 142.93.235.47 port 57052 Oct 1 21:00:21 vps-51d81928 sshd[502917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47 Oct 1 21:00:21 vps-51d81928 sshd[502917]: Invalid user raquel from 142.93.235.47 port 57052 Oct 1 21:00:23 vps-51d81928 sshd[502917]: Failed password for invalid user raquel from 142.93.235.47 port 57052 ssh2 ...	2020-10-02 05:12:06
142.93.235.47	attack	Oct 1 15:08:46 buvik sshd[8732]: Failed password for root from 142.93.235.47 port 49588 ssh2 Oct 1 15:12:20 buvik sshd[9380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47 user=root Oct 1 15:12:22 buvik sshd[9380]: Failed password for root from 142.93.235.47 port 55420 ssh2 ...	2020-10-01 21:30:19
142.93.235.47	attackspambots	Invalid user buero from 142.93.235.47 port 40720	2020-10-01 13:45:51
142.93.238.233	attack	TCP (SYN) 142.93.238.233:41151 -> port 3032, len 44	2020-09-30 06:46:44
142.93.235.47	attack	Sep 29 20:21:14 roki-contabo sshd\[23220\]: Invalid user kay from 142.93.235.47 Sep 29 20:21:14 roki-contabo sshd\[23220\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47 Sep 29 20:21:15 roki-contabo sshd\[23220\]: Failed password for invalid user kay from 142.93.235.47 port 39810 ssh2 Sep 29 20:30:26 roki-contabo sshd\[23460\]: Invalid user admin from 142.93.235.47 Sep 29 20:30:26 roki-contabo sshd\[23460\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47 ...	2020-09-30 04:30:02
142.93.238.233	attackbotsspam	TCP (SYN) 142.93.238.233:41151 -> port 3032, len 44	2020-09-29 23:02:43
142.93.235.47	attackbots	2020-09-29T16:31:11.987059paragon sshd[507041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47 2020-09-29T16:31:11.983182paragon sshd[507041]: Invalid user nexus from 142.93.235.47 port 44158 2020-09-29T16:31:13.960919paragon sshd[507041]: Failed password for invalid user nexus from 142.93.235.47 port 44158 ssh2 2020-09-29T16:32:21.373722paragon sshd[507060]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47 user=root 2020-09-29T16:32:23.291594paragon sshd[507060]: Failed password for root from 142.93.235.47 port 34876 ssh2 ...	2020-09-29 20:38:11
142.93.238.233	attackspam	Port scan denied	2020-09-29 15:21:39

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.23.196
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36602
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.23.196.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019041200 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Fri Apr 12 18:04:35 +08 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 196.23.93.142.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 196.23.93.142.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
89.165.200.34	attackbots	trying to access non-authorized port	2020-08-04 06:29:28
179.191.68.86	attackspambots	Aug 3 16:35:11 Host-KEWR-E sshd[21074]: Disconnected from invalid user root 179.191.68.86 port 57143 [preauth] ...	2020-08-04 06:38:45
80.211.177.143	attack	$f2bV_matches	2020-08-04 06:44:03
120.92.34.203	attack	2020-08-03T16:17:16.299799linuxbox-skyline sshd[54149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.34.203 user=root 2020-08-03T16:17:18.880462linuxbox-skyline sshd[54149]: Failed password for root from 120.92.34.203 port 37236 ssh2 ...	2020-08-04 06:39:31
183.134.65.197	attackspam	Aug 3 23:34:50 pve1 sshd[15553]: Failed password for root from 183.134.65.197 port 57872 ssh2 ...	2020-08-04 06:19:57
107.170.254.146	attackspam	Brute-force attempt banned	2020-08-04 06:36:30
116.203.53.103	attackbotsspam	Aug 3 23:04:24 karger wordpress(buerg)[457]: Authentication attempt for unknown user domi from 116.203.53.103 Aug 3 23:04:24 karger wordpress(buerg)[457]: XML-RPC authentication attempt for unknown user [login] from 116.203.53.103 ...	2020-08-04 06:25:27
46.14.173.2	attack	Brute-force attempt banned	2020-08-04 06:38:25
112.82.188.237	attackbotsspam	2020-08-03T16:35:34.342731devel sshd[13235]: Failed password for root from 112.82.188.237 port 46400 ssh2 2020-08-03T16:35:36.451374devel sshd[13251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.82.188.237 user=root 2020-08-03T16:35:38.278392devel sshd[13251]: Failed password for root from 112.82.188.237 port 49406 ssh2	2020-08-04 06:20:45
194.158.197.121	attackbotsspam	Jul 31 17:02:34 rtr postfix/smtpd[12710]: connect from unknown[194.158.197.121] Jul 31 17:02:34 rtr postfix/smtpd[12710]: Anonymous TLS connection established from unknown[194.158.197.121]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) Jul 31 17:02:34 rtr postfix/smtpd[12710]: NOQUEUE: reject_warning: RCPT from unknown[194.158.197.121]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [194.158.197.121]; from= to= proto=ESMTP helo= Jul 31 17:02:34 rtr postfix/smtpd[12710]: NOQUEUE: reject_warning: RCPT from unknown[194.158.197.121]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Jul 31 17:02:34 rtr postfix/smtpd[12710]: NOQUEUE: reject: RCPT from unknown[194.158.197.121]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=	2020-08-04 06:28:12
36.111.181.248	attack	Aug 3 22:20:04 hidden sshd[2928]: Failed password for hidden from 36.111.181.248 port 57708 ssh2 Aug 3 22:35:13 hidden sshd[6300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.111.181.248 user=root Aug 3 22:35:15 hidden sshd[6300]: Failed password for hidden from 36.111.181.248 port 44154 ssh2	2020-08-04 06:35:44
111.229.196.144	attackspam	Brute-force attempt banned	2020-08-04 06:43:03
167.71.196.176	attackbots	Aug 3 18:23:59 ny01 sshd[24393]: Failed password for root from 167.71.196.176 port 54872 ssh2 Aug 3 18:26:44 ny01 sshd[25090]: Failed password for root from 167.71.196.176 port 41044 ssh2	2020-08-04 06:42:23
211.43.13.243	attackbotsspam	web-1 [ssh] SSH Attack	2020-08-04 06:23:42
138.68.82.194	attack	Aug 3 22:30:52 sshgateway sshd\[1875\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194 user=root Aug 3 22:30:54 sshgateway sshd\[1875\]: Failed password for root from 138.68.82.194 port 34182 ssh2 Aug 3 22:35:27 sshgateway sshd\[1950\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194 user=root	2020-08-04 06:27:21

最近上报的IP列表

121.233.34.130	78.188.152.134	18.217.126.58	185.152.104.23
176.110.130.139	124.123.40.44	54.95.82.64	71.74.180.199
218.95.124.89	122.238.167.242	125.212.180.216	5.37.206.155
117.215.51.151	41.221.91.210	103.97.47.112	91.236.74.5
201.92.74.212	180.253.192.41	93.87.134.24	31.17.38.40