必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Aug 19 19:34:04 game-panel sshd[15495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221
Aug 19 19:34:07 game-panel sshd[15495]: Failed password for invalid user kevin from 142.93.247.221 port 36064 ssh2
Aug 19 19:38:47 game-panel sshd[15722]: Failed password for root from 142.93.247.221 port 45738 ssh2
2020-08-20 03:53:34
attackspambots
1597236191 - 08/12/2020 14:43:11 Host: 142.93.247.221/142.93.247.221 Port: 353 TCP Blocked
...
2020-08-12 21:45:57
attack
*Port Scan* detected from 142.93.247.221 (US/United States/New Jersey/North Bergen/-). 4 hits in the last 30 seconds
2020-08-12 12:21:43
attack
Aug  9 07:39:50 abendstille sshd\[14525\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
Aug  9 07:39:52 abendstille sshd\[14525\]: Failed password for root from 142.93.247.221 port 45004 ssh2
Aug  9 07:44:49 abendstille sshd\[19192\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
Aug  9 07:44:51 abendstille sshd\[19192\]: Failed password for root from 142.93.247.221 port 56136 ssh2
Aug  9 07:49:39 abendstille sshd\[23640\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
...
2020-08-09 14:34:38
attack
Aug  8 00:35:03 NPSTNNYC01T sshd[13971]: Failed password for root from 142.93.247.221 port 60876 ssh2
Aug  8 00:39:34 NPSTNNYC01T sshd[14336]: Failed password for root from 142.93.247.221 port 43046 ssh2
...
2020-08-08 13:05:18
attackspambots
2020-08-02T19:10:33.535121hostname sshd[45098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
2020-08-02T19:10:35.740053hostname sshd[45098]: Failed password for root from 142.93.247.221 port 36326 ssh2
...
2020-08-02 23:21:11
attack
2020-07-28T19:52:18.994527mail.broermann.family sshd[5264]: Invalid user jiajian from 142.93.247.221 port 40088
2020-07-28T19:52:18.999740mail.broermann.family sshd[5264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221
2020-07-28T19:52:18.994527mail.broermann.family sshd[5264]: Invalid user jiajian from 142.93.247.221 port 40088
2020-07-28T19:52:21.105469mail.broermann.family sshd[5264]: Failed password for invalid user jiajian from 142.93.247.221 port 40088 ssh2
2020-07-28T19:57:29.510677mail.broermann.family sshd[5447]: Invalid user liuchao from 142.93.247.221 port 52196
...
2020-07-29 03:56:04
attackspam
Unauthorized connection attempt detected from IP address 142.93.247.221 to port 1759
2020-07-25 20:32:20
attackbotsspam
Jul 20 11:21:16 mout sshd[25809]: Invalid user viktor from 142.93.247.221 port 54218
2020-07-20 17:27:40
attackspambots
*Port Scan* detected from 142.93.247.221 (US/United States/New Jersey/North Bergen/-). 4 hits in the last 260 seconds
2020-07-19 16:56:21
attackbots
Jun  6 06:11:21 abendstille sshd\[24520\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
Jun  6 06:11:22 abendstille sshd\[24520\]: Failed password for root from 142.93.247.221 port 41542 ssh2
Jun  6 06:14:52 abendstille sshd\[27837\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
Jun  6 06:14:53 abendstille sshd\[27837\]: Failed password for root from 142.93.247.221 port 44642 ssh2
Jun  6 06:18:24 abendstille sshd\[31139\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
...
2020-06-06 14:19:39
attackbots
Jun  3 00:58:41 itv-usvr-01 sshd[17615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
Jun  3 00:58:44 itv-usvr-01 sshd[17615]: Failed password for root from 142.93.247.221 port 34070 ssh2
Jun  3 01:02:56 itv-usvr-01 sshd[17839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
Jun  3 01:02:58 itv-usvr-01 sshd[17839]: Failed password for root from 142.93.247.221 port 38782 ssh2
Jun  3 01:07:06 itv-usvr-01 sshd[18051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
Jun  3 01:07:08 itv-usvr-01 sshd[18051]: Failed password for root from 142.93.247.221 port 43494 ssh2
2020-06-03 02:26:32
attackbotsspam
May 30 15:16:23 localhost sshd\[10786\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
May 30 15:16:25 localhost sshd\[10786\]: Failed password for root from 142.93.247.221 port 38196 ssh2
May 30 15:19:30 localhost sshd\[10883\]: Invalid user zimbra from 142.93.247.221
May 30 15:19:30 localhost sshd\[10883\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221
May 30 15:19:32 localhost sshd\[10883\]: Failed password for invalid user zimbra from 142.93.247.221 port 33902 ssh2
...
2020-05-30 23:41:17
attackspambots
May 15 09:48:07 nextcloud sshd\[26947\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
May 15 09:48:09 nextcloud sshd\[26947\]: Failed password for root from 142.93.247.221 port 34012 ssh2
May 15 09:52:05 nextcloud sshd\[32701\]: Invalid user webmaster from 142.93.247.221
May 15 09:52:05 nextcloud sshd\[32701\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221
2020-05-15 15:58:35
attackspam
2020-05-13T09:30:11.587256abusebot-8.cloudsearch.cf sshd[3446]: Invalid user helpdesk1 from 142.93.247.221 port 38168
2020-05-13T09:30:11.595441abusebot-8.cloudsearch.cf sshd[3446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221
2020-05-13T09:30:11.587256abusebot-8.cloudsearch.cf sshd[3446]: Invalid user helpdesk1 from 142.93.247.221 port 38168
2020-05-13T09:30:13.435616abusebot-8.cloudsearch.cf sshd[3446]: Failed password for invalid user helpdesk1 from 142.93.247.221 port 38168 ssh2
2020-05-13T09:34:47.475401abusebot-8.cloudsearch.cf sshd[3872]: Invalid user deploy from 142.93.247.221 port 48404
2020-05-13T09:34:47.485045abusebot-8.cloudsearch.cf sshd[3872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221
2020-05-13T09:34:47.475401abusebot-8.cloudsearch.cf sshd[3872]: Invalid user deploy from 142.93.247.221 port 48404
2020-05-13T09:34:49.214708abusebot-8.cloudsearch.cf sshd[
...
2020-05-13 19:38:32
attack
2020-05-11T21:22:46.296712shield sshd\[27296\]: Invalid user jeff from 142.93.247.221 port 34908
2020-05-11T21:22:46.300567shield sshd\[27296\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221
2020-05-11T21:22:48.226706shield sshd\[27296\]: Failed password for invalid user jeff from 142.93.247.221 port 34908 ssh2
2020-05-11T21:26:59.025957shield sshd\[28550\]: Invalid user vic from 142.93.247.221 port 43146
2020-05-11T21:26:59.028762shield sshd\[28550\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221
2020-05-12 05:47:12
attackbots
k+ssh-bruteforce
2020-05-05 15:49:17
attackbotsspam
Invalid user ark from 142.93.247.221 port 48686
2020-05-01 06:25:09
attackbots
$f2bV_matches | Triggered by Fail2Ban at Vostok web server
2020-04-30 08:16:34
attackbotsspam
Invalid user ark from 142.93.247.221 port 48686
2020-04-27 07:42:10
attackspam
Apr 23 07:01:29 v22018086721571380 sshd[19395]: Failed password for invalid user sr from 142.93.247.221 port 60116 ssh2
2020-04-23 13:56:46
attackbots
Apr 19 20:10:54 124388 sshd[6625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221
Apr 19 20:10:54 124388 sshd[6625]: Invalid user admin from 142.93.247.221 port 36974
Apr 19 20:10:56 124388 sshd[6625]: Failed password for invalid user admin from 142.93.247.221 port 36974 ssh2
Apr 19 20:15:25 124388 sshd[6689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.221  user=root
Apr 19 20:15:28 124388 sshd[6689]: Failed password for root from 142.93.247.221 port 55908 ssh2
2020-04-20 05:10:58
相同子网IP讨论:
IP 类型 评论内容 时间
142.93.247.238 attackspambots
$f2bV_matches
2020-10-01 06:35:04
142.93.247.238 attackspam
Time:     Wed Sep 30 14:01:06 2020 +0000
IP:       142.93.247.238 (-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 30 13:43:03 16-1 sshd[73385]: Invalid user edu from 142.93.247.238 port 53456
Sep 30 13:43:05 16-1 sshd[73385]: Failed password for invalid user edu from 142.93.247.238 port 53456 ssh2
Sep 30 13:57:04 16-1 sshd[75172]: Invalid user samba from 142.93.247.238 port 54508
Sep 30 13:57:06 16-1 sshd[75172]: Failed password for invalid user samba from 142.93.247.238 port 54508 ssh2
Sep 30 14:01:04 16-1 sshd[75752]: Invalid user pgsql from 142.93.247.238 port 34488
2020-09-30 22:57:17
142.93.247.238 attack
Sep 30 09:55:48 pkdns2 sshd\[12307\]: Invalid user shoutcast from 142.93.247.238Sep 30 09:55:50 pkdns2 sshd\[12307\]: Failed password for invalid user shoutcast from 142.93.247.238 port 50328 ssh2Sep 30 09:59:55 pkdns2 sshd\[12460\]: Invalid user webmaster1 from 142.93.247.238Sep 30 09:59:57 pkdns2 sshd\[12460\]: Failed password for invalid user webmaster1 from 142.93.247.238 port 60148 ssh2Sep 30 10:03:59 pkdns2 sshd\[12670\]: Invalid user newsletter from 142.93.247.238Sep 30 10:04:00 pkdns2 sshd\[12670\]: Failed password for invalid user newsletter from 142.93.247.238 port 41736 ssh2
...
2020-09-30 15:31:01
142.93.247.238 attack
Brute force attempt
2020-09-22 20:45:36
142.93.247.238 attackbots
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-09-22T03:52:31Z and 2020-09-22T04:24:06Z
2020-09-22 12:44:13
142.93.247.238 attackbotsspam
2020-09-21T22:22:36+0200 Failed SSH Authentication/Brute Force Attack. (Server 4)
2020-09-22 04:53:37
142.93.247.238 attackspam
IP blocked
2020-09-16 12:43:46
142.93.247.238 attackbots
Sep 15 19:02:48 master sshd[23018]: Failed password for root from 142.93.247.238 port 35158 ssh2
Sep 15 19:08:01 master sshd[23028]: Failed password for root from 142.93.247.238 port 50154 ssh2
Sep 15 19:13:03 master sshd[23037]: Failed password for root from 142.93.247.238 port 34968 ssh2
Sep 15 19:17:46 master sshd[23077]: Failed password for root from 142.93.247.238 port 48012 ssh2
Sep 15 19:22:23 master sshd[23107]: Failed password for root from 142.93.247.238 port 32822 ssh2
Sep 15 19:26:46 master sshd[23132]: Failed password for root from 142.93.247.238 port 45864 ssh2
Sep 15 19:31:20 master sshd[23179]: Failed password for invalid user ftpuser from 142.93.247.238 port 58928 ssh2
Sep 15 19:35:51 master sshd[23208]: Failed password for invalid user dead from 142.93.247.238 port 43754 ssh2
Sep 15 19:40:37 master sshd[23244]: Failed password for root from 142.93.247.238 port 56798 ssh2
Sep 15 19:44:43 master sshd[23277]: Failed password for root from 142.93.247.238 port 41608 ssh2
2020-09-16 04:29:44
142.93.247.238 attack
fail2ban
2020-09-13 22:13:49
142.93.247.238 attackspam
ssh intrusion attempt
2020-09-13 14:09:05
142.93.247.238 attackspam
Sep 12 17:48:44 game-panel sshd[23279]: Failed password for root from 142.93.247.238 port 52830 ssh2
Sep 12 17:52:47 game-panel sshd[23432]: Failed password for root from 142.93.247.238 port 36974 ssh2
2020-09-13 05:54:30
142.93.247.238 attack
Sep  1 11:53:57 server sshd[5657]: User root from 142.93.247.238 not allowed because listed in DenyUsers
Sep  1 11:53:58 server sshd[5657]: Failed password for invalid user root from 142.93.247.238 port 49122 ssh2
Sep  1 11:53:57 server sshd[5657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.247.238  user=root
Sep  1 11:53:57 server sshd[5657]: User root from 142.93.247.238 not allowed because listed in DenyUsers
Sep  1 11:53:58 server sshd[5657]: Failed password for invalid user root from 142.93.247.238 port 49122 ssh2
...
2020-09-01 19:32:21
142.93.247.238 attackbotsspam
Brute-force attempt banned
2020-08-30 23:38:08
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.247.221
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50573
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.247.221.			IN	A

;; AUTHORITY SECTION:
.			303	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020040202 1800 900 604800 86400

;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 03 11:19:57 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
Host 221.247.93.142.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 221.247.93.142.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
132.232.40.86 attack
Dec 13 08:53:44 ns381471 sshd[32735]: Failed password for root from 132.232.40.86 port 50066 ssh2
2019-12-13 16:27:57
78.188.222.90 attackbots
Sent mail to target address hacked/leaked from abandonia in 2016
2019-12-13 16:42:05
89.183.64.40 attackbotsspam
Scanning
2019-12-13 16:18:24
129.204.79.131 attackbotsspam
Dec 13 09:11:46 srv01 sshd[30816]: Invalid user annise from 129.204.79.131 port 52618
Dec 13 09:11:46 srv01 sshd[30816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.79.131
Dec 13 09:11:46 srv01 sshd[30816]: Invalid user annise from 129.204.79.131 port 52618
Dec 13 09:11:48 srv01 sshd[30816]: Failed password for invalid user annise from 129.204.79.131 port 52618 ssh2
Dec 13 09:19:45 srv01 sshd[31362]: Invalid user domain from 129.204.79.131 port 60692
...
2019-12-13 16:40:42
78.152.245.6 attackbots
Scanning
2019-12-13 16:32:41
114.67.90.149 attackspam
Dec 13 02:40:34 TORMINT sshd\[13435\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.90.149  user=root
Dec 13 02:40:36 TORMINT sshd\[13435\]: Failed password for root from 114.67.90.149 port 45964 ssh2
Dec 13 02:47:43 TORMINT sshd\[13830\]: Invalid user aamaas from 114.67.90.149
Dec 13 02:47:43 TORMINT sshd\[13830\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.90.149
...
2019-12-13 16:03:28
103.82.241.36 attackbots
Automatic report - XMLRPC Attack
2019-12-13 16:20:08
123.194.65.58 attack
Unauthorized connection attempt from IP address 123.194.65.58 on Port 445(SMB)
2019-12-13 16:39:28
190.75.194.17 attackbotsspam
Unauthorized connection attempt detected from IP address 190.75.194.17 to port 445
2019-12-13 16:31:18
193.198.183.15 attackbotsspam
Trying ports that it shouldn't be.
2019-12-13 16:37:35
206.72.193.222 attackbots
Dec 12 22:25:14 php1 sshd\[14706\]: Invalid user suseela from 206.72.193.222
Dec 12 22:25:14 php1 sshd\[14706\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.72.193.222
Dec 12 22:25:16 php1 sshd\[14706\]: Failed password for invalid user suseela from 206.72.193.222 port 40790 ssh2
Dec 12 22:30:51 php1 sshd\[15375\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.72.193.222  user=root
Dec 12 22:30:53 php1 sshd\[15375\]: Failed password for root from 206.72.193.222 port 56842 ssh2
2019-12-13 16:33:07
58.227.54.120 attackspam
" "
2019-12-13 16:05:52
106.75.26.52 attack
Dec 13 08:40:27 MK-Soft-VM6 sshd[30929]: Failed password for root from 106.75.26.52 port 59902 ssh2
Dec 13 08:47:38 MK-Soft-VM6 sshd[31005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.26.52 
...
2019-12-13 16:13:01
118.24.23.196 attack
Nov 27 18:00:12 vtv3 sshd[10838]: Failed password for invalid user dbus from 118.24.23.196 port 60626 ssh2
Nov 27 18:09:49 vtv3 sshd[15454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.23.196 
Nov 27 18:28:51 vtv3 sshd[24913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.23.196 
Nov 27 18:28:54 vtv3 sshd[24913]: Failed password for invalid user recruit from 118.24.23.196 port 54120 ssh2
Nov 27 18:38:31 vtv3 sshd[30129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.23.196 
Dec 13 06:59:04 vtv3 sshd[17000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.23.196 
Dec 13 06:59:05 vtv3 sshd[17000]: Failed password for invalid user tanchi from 118.24.23.196 port 37832 ssh2
Dec 13 07:04:52 vtv3 sshd[19649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.23.196 
Dec 13 07:16:
2019-12-13 16:36:34
106.12.91.209 attackspam
Dec 13 09:00:59 legacy sshd[23735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.91.209
Dec 13 09:01:02 legacy sshd[23735]: Failed password for invalid user Shrimp@123 from 106.12.91.209 port 49926 ssh2
Dec 13 09:08:52 legacy sshd[24189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.91.209
...
2019-12-13 16:19:45

最近上报的IP列表

51.161.96.104 82.194.208.168 2002:b9ea:d8ce::b9ea:d8ce 232.153.34.148
169.201.105.220 91.127.192.115 15.38.222.16 33.209.86.20
31.135.16.21 245.242.58.3 148.80.1.203 49.218.109.104
126.137.197.53 136.220.92.215 60.153.152.3 167.91.246.181
124.119.240.144 183.152.113.186 109.18.21.195 157.33.39.196