142.93.232.193

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Netherlands

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	2019-11-15T14:42:30.308047shield sshd\[29151\]: Invalid user ubuntu from 142.93.232.193 port 51488 2019-11-15T14:42:30.312510shield sshd\[29151\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.232.193 2019-11-15T14:42:32.621019shield sshd\[29151\]: Failed password for invalid user ubuntu from 142.93.232.193 port 51488 ssh2 2019-11-15T14:42:55.111170shield sshd\[29284\]: Invalid user ubuntu from 142.93.232.193 port 50082 2019-11-15T14:42:55.115582shield sshd\[29284\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.232.193	2019-11-16 01:28:58

类型

评论内容

时间

attackspam

2019-11-15T14:42:30.308047shield sshd\[29151\]: Invalid user ubuntu from 142.93.232.193 port 51488
2019-11-15T14:42:30.312510shield sshd\[29151\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.232.193
2019-11-15T14:42:32.621019shield sshd\[29151\]: Failed password for invalid user ubuntu from 142.93.232.193 port 51488 ssh2
2019-11-15T14:42:55.111170shield sshd\[29284\]: Invalid user ubuntu from 142.93.232.193 port 50082
2019-11-15T14:42:55.115582shield sshd\[29284\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.232.193

2019-11-16 01:28:58

相同子网IP讨论:

IP	类型	评论内容	时间
142.93.232.102	attackbots	Sep 14 07:20:08 Tower sshd[35556]: Connection from 142.93.232.102 port 34858 on 192.168.10.220 port 22 rdomain "" Sep 14 07:20:08 Tower sshd[35556]: Failed password for root from 142.93.232.102 port 34858 ssh2 Sep 14 07:20:09 Tower sshd[35556]: Received disconnect from 142.93.232.102 port 34858:11: Bye Bye [preauth] Sep 14 07:20:09 Tower sshd[35556]: Disconnected from authenticating user root 142.93.232.102 port 34858 [preauth]	2020-09-14 20:50:37
142.93.232.102	attackspam	Sep 14 00:51:44 django-0 sshd[23185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.232.102 user=root Sep 14 00:51:46 django-0 sshd[23185]: Failed password for root from 142.93.232.102 port 39144 ssh2 ...	2020-09-14 12:43:17
142.93.232.102	attack	$f2bV_matches	2020-09-14 04:45:03
142.93.232.102	attackspambots	Aug 25 22:26:47 eventyay sshd[24701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.232.102 Aug 25 22:26:48 eventyay sshd[24701]: Failed password for invalid user admin from 142.93.232.102 port 37974 ssh2 Aug 25 22:30:28 eventyay sshd[24805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.232.102 ...	2020-08-26 04:49:08
142.93.232.102	attack	Port Scan detected from 142.93.232.102 (NL/Netherlands/North Holland/Amsterdam/-). 4 hits in the last 66 seconds	2020-08-24 14:24:58
142.93.232.102	attackspambots	Aug 19 15:59:24 PorscheCustomer sshd[3884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.232.102 Aug 19 15:59:27 PorscheCustomer sshd[3884]: Failed password for invalid user yyb from 142.93.232.102 port 57318 ssh2 Aug 19 16:03:24 PorscheCustomer sshd[4015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.232.102 ...	2020-08-19 22:13:08
142.93.232.102	attackbots	Aug 11 22:31:54 piServer sshd[6240]: Failed password for root from 142.93.232.102 port 38008 ssh2 Aug 11 22:38:29 piServer sshd[6910]: Failed password for root from 142.93.232.102 port 46504 ssh2 ...	2020-08-12 04:54:21
142.93.232.102	attackspam	Aug 5 05:47:49 ns382633 sshd\[16625\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.232.102 user=root Aug 5 05:47:50 ns382633 sshd\[16625\]: Failed password for root from 142.93.232.102 port 49168 ssh2 Aug 5 05:55:51 ns382633 sshd\[18222\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.232.102 user=root Aug 5 05:55:53 ns382633 sshd\[18222\]: Failed password for root from 142.93.232.102 port 56396 ssh2 Aug 5 05:59:27 ns382633 sshd\[18574\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.232.102 user=root	2020-08-05 12:04:33
142.93.232.102	attackbotsspam	SSH Brute Force	2020-08-03 21:40:19
142.93.232.102	attackspam	SSH invalid-user multiple login attempts	2020-07-28 22:04:15
142.93.232.102	attackbots	2020-07-20T16:59:51.399490shield sshd\[15154\]: Invalid user hm from 142.93.232.102 port 39852 2020-07-20T16:59:51.407989shield sshd\[15154\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.232.102 2020-07-20T16:59:53.428539shield sshd\[15154\]: Failed password for invalid user hm from 142.93.232.102 port 39852 ssh2 2020-07-20T17:03:49.829410shield sshd\[15933\]: Invalid user ftpuser from 142.93.232.102 port 53674 2020-07-20T17:03:49.838386shield sshd\[15933\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.232.102	2020-07-21 02:08:12
142.93.232.102	attackspam	Invalid user surendar from 142.93.232.102 port 60090	2020-07-14 20:59:33
142.93.232.102	attackbotsspam	2020-07-11T18:23:12.281768ks3355764 sshd[10663]: Invalid user smatsuda from 142.93.232.102 port 42812 2020-07-11T18:23:14.834293ks3355764 sshd[10663]: Failed password for invalid user smatsuda from 142.93.232.102 port 42812 ssh2 ...	2020-07-12 00:46:33
142.93.232.102	attackbots	$f2bV_matches	2020-07-11 01:28:46
142.93.232.102	attackspam	Jul 8 05:26:05 nas sshd[10351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.232.102 Jul 8 05:26:07 nas sshd[10351]: Failed password for invalid user karl from 142.93.232.102 port 44914 ssh2 Jul 8 05:42:54 nas sshd[11118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.232.102 ...	2020-07-08 16:51:53

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.232.193
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61822
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.232.193.			IN	A

;; AUTHORITY SECTION:
.			125	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111500 1800 900 604800 86400

;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 16 01:28:53 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 193.232.93.142.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 193.232.93.142.in-addr.arpa: NXDOMAIN

IP	类型	评论内容	时间
217.138.221.92	attackspambots	Repeated RDP login failures. Last user: Test	2020-10-04 19:51:02
213.108.134.121	attackspambots	Repeated RDP login failures. Last user: Test	2020-10-04 19:51:19
101.89.216.223	attackbots	2020-10-03 22:42:47.654670-0500 localhost screensharingd[19774]: Authentication: FAILED :: User Name: N/A :: Viewer Address: 101.89.216.223 :: Type: VNC DES	2020-10-04 19:39:14
172.104.108.109	attackbotsspam	Use Brute-Force	2020-10-04 19:43:17
52.251.39.67	attackbots	[2020-10-04 07:31:50] NOTICE[1182] chan_sip.c: Registration from '"1008" ' failed for '52.251.39.67:5318' - Wrong password [2020-10-04 07:31:50] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-04T07:31:50.971-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1008",SessionID="0x7f22f8418138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/52.251.39.67/5318",Challenge="18c81d57",ReceivedChallenge="18c81d57",ReceivedHash="023f6d78e8e1612f34a7682fc6358d77" [2020-10-04 07:31:51] NOTICE[1182] chan_sip.c: Registration from '"1008" ' failed for '52.251.39.67:5318' - Wrong password [2020-10-04 07:31:51] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-04T07:31:51.001-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1008",SessionID="0x7f22f83b6678",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/52.25 ...	2020-10-04 19:37:28
185.202.1.104	attackspam	Repeated RDP login failures. Last user: Administrator	2020-10-04 19:52:51
178.128.45.173	attackbotsspam	Port Scan ...	2020-10-04 19:43:05
164.90.190.224	attack	Invalid user otrs from 164.90.190.224 port 45464	2020-10-04 19:36:17
106.52.20.167	attackbots	Invalid user confluence from 106.52.20.167 port 33322	2020-10-04 19:33:06
112.47.57.80	attackspambots	Brute force attempt	2020-10-04 19:32:48
125.124.254.31	attack	Invalid user tt from 125.124.254.31 port 58260	2020-10-04 19:54:38
49.234.213.237	attackspam	$f2bV_matches	2020-10-04 19:56:21
193.27.228.151	attackspam	Repeated RDP login failures. Last user: server01	2020-10-04 19:52:22
185.202.1.148	attackspambots	Repeated RDP login failures. Last user: Administrator	2020-10-04 19:47:35
45.134.26.250	attackspambots	Repeated RDP login failures. Last user: sqlservice	2020-10-04 19:53:38

最近上报的IP列表

40.68.208.132	46.71.98.151	204.101.119.75	101.228.121.116
165.91.13.47	186.154.237.247	180.109.35.73	192.115.76.18
5.253.18.69	178.129.20.143	85.128.142.120	99.155.232.76
201.182.198.11	101.78.211.80	104.200.29.254	182.50.135.78
104.168.168.20	45.58.142.13	187.18.115.25	95.85.68.138