必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Aug 19 19:34:04 game-panel sshd[15495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221
Aug 19 19:34:07 game-panel sshd[15495]: Failed password for invalid user kevin from 142.93.247.221 port 36064 ssh2
Aug 19 19:38:47 game-panel sshd[15722]: Failed password for root from 142.93.247.221 port 45738 ssh2
2020-08-20 03:53:34
attackspambots
1597236191 - 08/12/2020 14:43:11 Host: 142.93.247.221/142.93.247.221 Port: 353 TCP Blocked
...
2020-08-12 21:45:57
attack
*Port Scan* detected from 142.93.247.221 (US/United States/New Jersey/North Bergen/-). 4 hits in the last 30 seconds
2020-08-12 12:21:43
attack
Aug  9 07:39:50 abendstille sshd\[14525\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
Aug  9 07:39:52 abendstille sshd\[14525\]: Failed password for root from 142.93.247.221 port 45004 ssh2
Aug  9 07:44:49 abendstille sshd\[19192\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
Aug  9 07:44:51 abendstille sshd\[19192\]: Failed password for root from 142.93.247.221 port 56136 ssh2
Aug  9 07:49:39 abendstille sshd\[23640\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
...
2020-08-09 14:34:38
attack
Aug  8 00:35:03 NPSTNNYC01T sshd[13971]: Failed password for root from 142.93.247.221 port 60876 ssh2
Aug  8 00:39:34 NPSTNNYC01T sshd[14336]: Failed password for root from 142.93.247.221 port 43046 ssh2
...
2020-08-08 13:05:18
attackspambots
2020-08-02T19:10:33.535121hostname sshd[45098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
2020-08-02T19:10:35.740053hostname sshd[45098]: Failed password for root from 142.93.247.221 port 36326 ssh2
...
2020-08-02 23:21:11
attack
2020-07-28T19:52:18.994527mail.broermann.family sshd[5264]: Invalid user jiajian from 142.93.247.221 port 40088
2020-07-28T19:52:18.999740mail.broermann.family sshd[5264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221
2020-07-28T19:52:18.994527mail.broermann.family sshd[5264]: Invalid user jiajian from 142.93.247.221 port 40088
2020-07-28T19:52:21.105469mail.broermann.family sshd[5264]: Failed password for invalid user jiajian from 142.93.247.221 port 40088 ssh2
2020-07-28T19:57:29.510677mail.broermann.family sshd[5447]: Invalid user liuchao from 142.93.247.221 port 52196
...
2020-07-29 03:56:04
attackspam
Unauthorized connection attempt detected from IP address 142.93.247.221 to port 1759
2020-07-25 20:32:20
attackbotsspam
Jul 20 11:21:16 mout sshd[25809]: Invalid user viktor from 142.93.247.221 port 54218
2020-07-20 17:27:40
attackspambots
*Port Scan* detected from 142.93.247.221 (US/United States/New Jersey/North Bergen/-). 4 hits in the last 260 seconds
2020-07-19 16:56:21
attackbots
Jun  6 06:11:21 abendstille sshd\[24520\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
Jun  6 06:11:22 abendstille sshd\[24520\]: Failed password for root from 142.93.247.221 port 41542 ssh2
Jun  6 06:14:52 abendstille sshd\[27837\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
Jun  6 06:14:53 abendstille sshd\[27837\]: Failed password for root from 142.93.247.221 port 44642 ssh2
Jun  6 06:18:24 abendstille sshd\[31139\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
...
2020-06-06 14:19:39
attackbots
Jun  3 00:58:41 itv-usvr-01 sshd[17615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
Jun  3 00:58:44 itv-usvr-01 sshd[17615]: Failed password for root from 142.93.247.221 port 34070 ssh2
Jun  3 01:02:56 itv-usvr-01 sshd[17839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
Jun  3 01:02:58 itv-usvr-01 sshd[17839]: Failed password for root from 142.93.247.221 port 38782 ssh2
Jun  3 01:07:06 itv-usvr-01 sshd[18051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
Jun  3 01:07:08 itv-usvr-01 sshd[18051]: Failed password for root from 142.93.247.221 port 43494 ssh2
2020-06-03 02:26:32
attackbotsspam
May 30 15:16:23 localhost sshd\[10786\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
May 30 15:16:25 localhost sshd\[10786\]: Failed password for root from 142.93.247.221 port 38196 ssh2
May 30 15:19:30 localhost sshd\[10883\]: Invalid user zimbra from 142.93.247.221
May 30 15:19:30 localhost sshd\[10883\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221
May 30 15:19:32 localhost sshd\[10883\]: Failed password for invalid user zimbra from 142.93.247.221 port 33902 ssh2
...
2020-05-30 23:41:17
attackspambots
May 15 09:48:07 nextcloud sshd\[26947\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
May 15 09:48:09 nextcloud sshd\[26947\]: Failed password for root from 142.93.247.221 port 34012 ssh2
May 15 09:52:05 nextcloud sshd\[32701\]: Invalid user webmaster from 142.93.247.221
May 15 09:52:05 nextcloud sshd\[32701\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221
2020-05-15 15:58:35
attackspam
2020-05-13T09:30:11.587256abusebot-8.cloudsearch.cf sshd[3446]: Invalid user helpdesk1 from 142.93.247.221 port 38168
2020-05-13T09:30:11.595441abusebot-8.cloudsearch.cf sshd[3446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221
2020-05-13T09:30:11.587256abusebot-8.cloudsearch.cf sshd[3446]: Invalid user helpdesk1 from 142.93.247.221 port 38168
2020-05-13T09:30:13.435616abusebot-8.cloudsearch.cf sshd[3446]: Failed password for invalid user helpdesk1 from 142.93.247.221 port 38168 ssh2
2020-05-13T09:34:47.475401abusebot-8.cloudsearch.cf sshd[3872]: Invalid user deploy from 142.93.247.221 port 48404
2020-05-13T09:34:47.485045abusebot-8.cloudsearch.cf sshd[3872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221
2020-05-13T09:34:47.475401abusebot-8.cloudsearch.cf sshd[3872]: Invalid user deploy from 142.93.247.221 port 48404
2020-05-13T09:34:49.214708abusebot-8.cloudsearch.cf sshd[
...
2020-05-13 19:38:32
attack
2020-05-11T21:22:46.296712shield sshd\[27296\]: Invalid user jeff from 142.93.247.221 port 34908
2020-05-11T21:22:46.300567shield sshd\[27296\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221
2020-05-11T21:22:48.226706shield sshd\[27296\]: Failed password for invalid user jeff from 142.93.247.221 port 34908 ssh2
2020-05-11T21:26:59.025957shield sshd\[28550\]: Invalid user vic from 142.93.247.221 port 43146
2020-05-11T21:26:59.028762shield sshd\[28550\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221
2020-05-12 05:47:12
attackbots
k+ssh-bruteforce
2020-05-05 15:49:17
attackbotsspam
Invalid user ark from 142.93.247.221 port 48686
2020-05-01 06:25:09
attackbots
$f2bV_matches | Triggered by Fail2Ban at Vostok web server
2020-04-30 08:16:34
attackbotsspam
Invalid user ark from 142.93.247.221 port 48686
2020-04-27 07:42:10
attackspam
Apr 23 07:01:29 v22018086721571380 sshd[19395]: Failed password for invalid user sr from 142.93.247.221 port 60116 ssh2
2020-04-23 13:56:46
attackbots
Apr 19 20:10:54 124388 sshd[6625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221
Apr 19 20:10:54 124388 sshd[6625]: Invalid user admin from 142.93.247.221 port 36974
Apr 19 20:10:56 124388 sshd[6625]: Failed password for invalid user admin from 142.93.247.221 port 36974 ssh2
Apr 19 20:15:25 124388 sshd[6689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
Apr 19 20:15:28 124388 sshd[6689]: Failed password for root from 142.93.247.221 port 55908 ssh2
2020-04-20 05:10:58
相同子网IP讨论:
IP 类型 评论内容 时间
142.93.247.238 attackspambots
$f2bV_matches
2020-10-01 06:35:04
142.93.247.238 attackspam
Time:     Wed Sep 30 14:01:06 2020 +0000
IP:       142.93.247.238 (-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 30 13:43:03 16-1 sshd[73385]: Invalid user edu from 142.93.247.238 port 53456
Sep 30 13:43:05 16-1 sshd[73385]: Failed password for invalid user edu from 142.93.247.238 port 53456 ssh2
Sep 30 13:57:04 16-1 sshd[75172]: Invalid user samba from 142.93.247.238 port 54508
Sep 30 13:57:06 16-1 sshd[75172]: Failed password for invalid user samba from 142.93.247.238 port 54508 ssh2
Sep 30 14:01:04 16-1 sshd[75752]: Invalid user pgsql from 142.93.247.238 port 34488
2020-09-30 22:57:17
142.93.247.238 attack
Sep 30 09:55:48 pkdns2 sshd\[12307\]: Invalid user shoutcast from 142.93.247.238Sep 30 09:55:50 pkdns2 sshd\[12307\]: Failed password for invalid user shoutcast from 142.93.247.238 port 50328 ssh2Sep 30 09:59:55 pkdns2 sshd\[12460\]: Invalid user webmaster1 from 142.93.247.238Sep 30 09:59:57 pkdns2 sshd\[12460\]: Failed password for invalid user webmaster1 from 142.93.247.238 port 60148 ssh2Sep 30 10:03:59 pkdns2 sshd\[12670\]: Invalid user newsletter from 142.93.247.238Sep 30 10:04:00 pkdns2 sshd\[12670\]: Failed password for invalid user newsletter from 142.93.247.238 port 41736 ssh2
...
2020-09-30 15:31:01
142.93.247.238 attack
Brute force attempt
2020-09-22 20:45:36
142.93.247.238 attackbots
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-09-22T03:52:31Z and 2020-09-22T04:24:06Z
2020-09-22 12:44:13
142.93.247.238 attackbotsspam
2020-09-21T22:22:36+0200 Failed SSH Authentication/Brute Force Attack. (Server 4)
2020-09-22 04:53:37
142.93.247.238 attackspam
IP blocked
2020-09-16 12:43:46
142.93.247.238 attackbots
Sep 15 19:02:48 master sshd[23018]: Failed password for root from 142.93.247.238 port 35158 ssh2
Sep 15 19:08:01 master sshd[23028]: Failed password for root from 142.93.247.238 port 50154 ssh2
Sep 15 19:13:03 master sshd[23037]: Failed password for root from 142.93.247.238 port 34968 ssh2
Sep 15 19:17:46 master sshd[23077]: Failed password for root from 142.93.247.238 port 48012 ssh2
Sep 15 19:22:23 master sshd[23107]: Failed password for root from 142.93.247.238 port 32822 ssh2
Sep 15 19:26:46 master sshd[23132]: Failed password for root from 142.93.247.238 port 45864 ssh2
Sep 15 19:31:20 master sshd[23179]: Failed password for invalid user ftpuser from 142.93.247.238 port 58928 ssh2
Sep 15 19:35:51 master sshd[23208]: Failed password for invalid user dead from 142.93.247.238 port 43754 ssh2
Sep 15 19:40:37 master sshd[23244]: Failed password for root from 142.93.247.238 port 56798 ssh2
Sep 15 19:44:43 master sshd[23277]: Failed password for root from 142.93.247.238 port 41608 ssh2
2020-09-16 04:29:44
142.93.247.238 attack
fail2ban
2020-09-13 22:13:49
142.93.247.238 attackspam
ssh intrusion attempt
2020-09-13 14:09:05
142.93.247.238 attackspam
Sep 12 17:48:44 game-panel sshd[23279]: Failed password for root from 142.93.247.238 port 52830 ssh2
Sep 12 17:52:47 game-panel sshd[23432]: Failed password for root from 142.93.247.238 port 36974 ssh2
2020-09-13 05:54:30
142.93.247.238 attack
Sep  1 11:53:57 server sshd[5657]: User root from 142.93.247.238 not allowed because listed in DenyUsers
Sep  1 11:53:58 server sshd[5657]: Failed password for invalid user root from 142.93.247.238 port 49122 ssh2
Sep  1 11:53:57 server sshd[5657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.238  user=root
Sep  1 11:53:57 server sshd[5657]: User root from 142.93.247.238 not allowed because listed in DenyUsers
Sep  1 11:53:58 server sshd[5657]: Failed password for invalid user root from 142.93.247.238 port 49122 ssh2
...
2020-09-01 19:32:21
142.93.247.238 attackbotsspam
Brute-force attempt banned
2020-08-30 23:38:08
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.247.221
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50573
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.247.221.			IN	A

;; AUTHORITY SECTION:
.			303	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020040202 1800 900 604800 86400

;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 03 11:19:57 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
Host 221.247.93.142.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 221.247.93.142.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
27.72.59.228 attackspam
Unauthorized connection attempt from IP address 27.72.59.228 on Port 445(SMB)
2020-06-01 18:04:29
142.93.35.169 attack
kidness.family 142.93.35.169 [01/Jun/2020:11:50:07 +0200] "POST /wp-login.php HTTP/1.1" 200 5961 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
kidness.family 142.93.35.169 [01/Jun/2020:11:50:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4055 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-06-01 17:55:36
54.71.115.235 attackbotsspam
Automatic report - Banned IP Access
2020-06-01 18:01:04
74.82.47.47 attackbots
 TCP (SYN) 74.82.47.47:58812 -> port 7547, len 44
2020-06-01 18:02:20
58.19.0.3 attack
CPHulk brute force detection (a)
2020-06-01 18:08:12
173.242.182.42 attackbotsspam
Unauthorized connection attempt detected from IP address 173.242.182.42 to port 23
2020-06-01 18:07:37
113.160.226.91 attackbots
Unauthorized connection attempt from IP address 113.160.226.91 on Port 445(SMB)
2020-06-01 18:09:36
190.190.230.159 attackbotsspam
port 23
2020-06-01 17:53:14
103.233.86.106 attackspam
Trolling for resource vulnerabilities
2020-06-01 17:46:28
194.26.29.116 attackbotsspam
06/01/2020-04:12:52.319623 194.26.29.116 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-06-01 18:07:22
223.255.28.203 attackbots
prod6
...
2020-06-01 17:43:16
49.232.5.122 attackspam
Jun  1 09:19:43 jumpserver sshd[29220]: Failed password for root from 49.232.5.122 port 60632 ssh2
Jun  1 09:24:08 jumpserver sshd[29265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.5.122  user=root
Jun  1 09:24:11 jumpserver sshd[29265]: Failed password for root from 49.232.5.122 port 53768 ssh2
...
2020-06-01 18:18:03
151.252.105.132 attackbotsspam
2020-05-31 20:13:09 server sshd[77495]: Failed password for invalid user root from 151.252.105.132 port 40746 ssh2
2020-06-01 17:54:58
103.147.185.13 attack
Brute Force attack - banned by Fail2Ban
2020-06-01 18:19:38
202.147.182.243 attack
2020-06-0105:45:501jfbOR-0003zF-Gc\<=info@whatsup2013.chH=\(localhost\)[123.21.229.100]:47000P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3016id=2acd7b282308222ab6b305a94e3a100ca24d16@whatsup2013.chT="totony.flores9"fortony.flores9@yahoo.comwilliamg70@gmail.comrsayago60@gmail.com2020-06-0105:46:261jfbP6-00044N-Rc\<=info@whatsup2013.chH=\(localhost\)[113.172.165.239]:56435P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2980id=a58440131833e6eacd883e6d995ed4d8eb9a73ab@whatsup2013.chT="toalbertoperez67"foralbertoperez67@icloud.comdmt3@gmx.commikebrewer@497gmail.com2020-06-0105:46:371jfbPI-00046e-HD\<=info@whatsup2013.chH=\(localhost\)[123.21.232.192]:41139P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3035id=2af64013183319118d883e9275012b37218d97@whatsup2013.chT="tocristianponce"forcristianponce@hotmail.comjimmywint14@gmail.comaskew.terence@yahoo.com2020-06-0105:46:231jfbP4-00
2020-06-01 17:47:21

最近上报的IP列表

51.161.96.104 82.194.208.168 2002:b9ea:d8ce::b9ea:d8ce 232.153.34.148
169.201.105.220 91.127.192.115 15.38.222.16 33.209.86.20
31.135.16.21 245.242.58.3 148.80.1.203 49.218.109.104
126.137.197.53 136.220.92.215 60.153.152.3 167.91.246.181
124.119.240.144 183.152.113.186 109.18.21.195 157.33.39.196