142.93.43.11 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	fail2ban/Jun 3 13:50:34 h1962932 sshd[17058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.43.11 user=root Jun 3 13:50:36 h1962932 sshd[17058]: Failed password for root from 142.93.43.11 port 34904 ssh2 Jun 3 13:54:00 h1962932 sshd[17140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.43.11 user=root Jun 3 13:54:03 h1962932 sshd[17140]: Failed password for root from 142.93.43.11 port 40170 ssh2 Jun 3 13:57:28 h1962932 sshd[17230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.43.11 user=root Jun 3 13:57:30 h1962932 sshd[17230]: Failed password for root from 142.93.43.11 port 45450 ssh2	2020-06-03 20:20:49

类型

评论内容

时间

attackbotsspam

fail2ban/Jun  3 13:50:34 h1962932 sshd[17058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.43.11  user=root
Jun  3 13:50:36 h1962932 sshd[17058]: Failed password for root from 142.93.43.11 port 34904 ssh2
Jun  3 13:54:00 h1962932 sshd[17140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.43.11  user=root
Jun  3 13:54:03 h1962932 sshd[17140]: Failed password for root from 142.93.43.11 port 40170 ssh2
Jun  3 13:57:28 h1962932 sshd[17230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.43.11  user=root
Jun  3 13:57:30 h1962932 sshd[17230]: Failed password for root from 142.93.43.11 port 45450 ssh2

2020-06-03 20:20:49

相同子网IP讨论:

IP	类型	评论内容	时间
142.93.43.63	attackbots	Oct 3 03:13:12 web9 sshd\[18394\]: Invalid user wa from 142.93.43.63 Oct 3 03:13:12 web9 sshd\[18394\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.43.63 Oct 3 03:13:13 web9 sshd\[18394\]: Failed password for invalid user wa from 142.93.43.63 port 37040 ssh2 Oct 3 03:17:21 web9 sshd\[19076\]: Invalid user tillid from 142.93.43.63 Oct 3 03:17:21 web9 sshd\[19076\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.43.63	2019-10-03 21:30:08

类型

评论内容

时间

142.93.43.63

attackbots

Oct  3 03:13:12 web9 sshd\[18394\]: Invalid user wa from 142.93.43.63
Oct  3 03:13:12 web9 sshd\[18394\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.43.63
Oct  3 03:13:13 web9 sshd\[18394\]: Failed password for invalid user wa from 142.93.43.63 port 37040 ssh2
Oct  3 03:17:21 web9 sshd\[19076\]: Invalid user tillid from 142.93.43.63
Oct  3 03:17:21 web9 sshd\[19076\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.43.63

2019-10-03 21:30:08

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.43.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51131
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.43.11.			IN	A

;; AUTHORITY SECTION:
.			586	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060300 1800 900 604800 86400

;; Query time: 111 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 03 20:20:45 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 11.43.93.142.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 11.43.93.142.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
106.12.48.138	attack	2020-01-10T05:48:55.141531 sshd[23540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.138 user=root 2020-01-10T05:48:56.846944 sshd[23540]: Failed password for root from 106.12.48.138 port 60068 ssh2 2020-01-10T05:52:04.826107 sshd[23581]: Invalid user tzs from 106.12.48.138 port 54878 2020-01-10T05:52:04.841887 sshd[23581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.138 2020-01-10T05:52:04.826107 sshd[23581]: Invalid user tzs from 106.12.48.138 port 54878 2020-01-10T05:52:06.828187 sshd[23581]: Failed password for invalid user tzs from 106.12.48.138 port 54878 ssh2 ...	2020-01-10 17:09:48
14.186.79.79	attackspambots	Jan 10 05:52:26 grey postfix/smtpd\[821\]: NOQUEUE: reject: RCPT from unknown\[14.186.79.79\]: 554 5.7.1 Service unavailable\; Client host \[14.186.79.79\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[14.186.79.79\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-01-10 16:58:04
122.225.60.250	attackspam	Multiple failed FTP logins	2020-01-10 17:24:05
90.105.198.100	attack	Jan 10 01:51:53 vps46666688 sshd[2652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=90.105.198.100 Jan 10 01:51:55 vps46666688 sshd[2652]: Failed password for invalid user gru from 90.105.198.100 port 52366 ssh2 ...	2020-01-10 17:16:04
123.131.165.10	attackspam	2020/01/10 05:51:50 \[error\] 30677\#30677: \*9105 limiting requests, excess: 0.391 by zone "one", client: 123.131.165.10, server: default_server, request: "GET /TP/index.php HTTP/1.1", host: "81.32.231.108" ...	2020-01-10 17:18:03
14.232.121.199	attackspambots	1578631892 - 01/10/2020 05:51:32 Host: 14.232.121.199/14.232.121.199 Port: 445 TCP Blocked	2020-01-10 17:29:29
218.92.0.168	attack	SSH Brute-Force attacks	2020-01-10 17:14:47
80.211.231.224	attackspambots	Jan 10 06:56:21 legacy sshd[26361]: Failed password for root from 80.211.231.224 port 34030 ssh2 Jan 10 06:59:35 legacy sshd[26550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.231.224 Jan 10 06:59:36 legacy sshd[26550]: Failed password for invalid user smc from 80.211.231.224 port 37032 ssh2 ...	2020-01-10 17:07:20
196.52.43.93	attackspambots	Unauthorized connection attempt detected from IP address 196.52.43.93 to port 9443	2020-01-10 17:09:31
134.209.165.41	attackspam	Unauthorized connection attempt detected from IP address 134.209.165.41 to port 25	2020-01-10 17:28:21
222.186.30.35	attackbotsspam	Jan 10 06:03:34 firewall sshd[25858]: Failed password for root from 222.186.30.35 port 41428 ssh2 Jan 10 06:03:35 firewall sshd[25858]: Failed password for root from 222.186.30.35 port 41428 ssh2 Jan 10 06:03:38 firewall sshd[25858]: Failed password for root from 222.186.30.35 port 41428 ssh2 ...	2020-01-10 17:16:33
212.64.6.121	attackspambots	WordPress login Brute force / Web App Attack on client site.	2020-01-10 17:18:45
202.131.236.170	attackbots	1578631900 - 01/10/2020 05:51:40 Host: 202.131.236.170/202.131.236.170 Port: 445 TCP Blocked	2020-01-10 17:27:08
159.203.201.80	attackbots	01/10/2020-09:23:38.366622 159.203.201.80 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-01-10 17:03:50
92.118.37.86	attackbots	Jan 10 10:02:53 debian-2gb-nbg1-2 kernel: \[906284.332903\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=92.118.37.86 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=14033 PROTO=TCP SPT=52979 DPT=4979 WINDOW=1024 RES=0x00 SYN URGP=0	2020-01-10 17:08:32

最近上报的IP列表

114.34.173.220	111.50.1.149	45.226.50.245	162.243.136.91
184.168.193.71	115.192.190.22	172.16.16.33	213.172.176.146
178.125.135.184	166.62.88.81	220.133.232.206	92.223.109.146
49.235.245.183	188.166.37.57	185.153.197.101	176.120.51.211
82.60.208.152	177.85.98.19	190.15.51.198	153.127.44.210