必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbots
(sshd) Failed SSH login from 142.93.56.57 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 30 09:49:45 server2 sshd[25809]: Invalid user admin from 142.93.56.57
Sep 30 09:49:45 server2 sshd[25809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57 
Sep 30 09:49:47 server2 sshd[25809]: Failed password for invalid user admin from 142.93.56.57 port 37282 ssh2
Sep 30 09:56:44 server2 sshd[32255]: Invalid user tom from 142.93.56.57
Sep 30 09:56:44 server2 sshd[32255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57
2020-10-01 05:09:32
attackspambots
Failed password for root from 142.93.56.57 port 48550 ssh2
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57 
Failed password for invalid user postgres from 142.93.56.57 port 58374 ssh2
2020-09-30 21:26:13
attack
Port scan denied
2020-09-30 13:56:15
attackspam
Sep 23 11:14:34 marvibiene sshd[16992]: Failed password for root from 142.93.56.57 port 45518 ssh2
2020-09-23 20:45:09
attackbots
Sep 23 05:55:04 pve1 sshd[4970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57 
Sep 23 05:55:06 pve1 sshd[4970]: Failed password for invalid user hadoop from 142.93.56.57 port 57504 ssh2
...
2020-09-23 13:05:32
attack
sshd jail - ssh hack attempt
2020-09-23 04:52:26
attackbotsspam
Sep 19 19:30:03 vm1 sshd[19839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57
Sep 19 19:30:06 vm1 sshd[19839]: Failed password for invalid user admin2 from 142.93.56.57 port 45438 ssh2
...
2020-09-20 03:23:44
attackspam
Sep 19 13:05:59 buvik sshd[9207]: Invalid user service from 142.93.56.57
Sep 19 13:05:59 buvik sshd[9207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57
Sep 19 13:06:01 buvik sshd[9207]: Failed password for invalid user service from 142.93.56.57 port 43794 ssh2
...
2020-09-19 19:25:18
attackbotsspam
Aug  3 23:37:36 hosting sshd[32083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57  user=root
Aug  3 23:37:38 hosting sshd[32083]: Failed password for root from 142.93.56.57 port 48378 ssh2
...
2020-08-04 05:00:26
attack
Ssh brute force
2020-08-02 08:54:41
attack
Jul  8 06:47:03 * sshd[17152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57
Jul  8 06:47:06 * sshd[17152]: Failed password for invalid user scooper from 142.93.56.57 port 42902 ssh2
2020-07-08 12:47:33
attackbotsspam
Jul  6 22:47:30 mail sshd[52215]: Failed password for root from 142.93.56.57 port 40536 ssh2
...
2020-07-07 08:59:43
attackbotsspam
20 attempts against mh-ssh on echoip
2020-06-30 02:00:36
attack
2020-06-25T21:39:22.052261sd-86998 sshd[32481]: Invalid user pl from 142.93.56.57 port 48454
2020-06-25T21:39:22.054516sd-86998 sshd[32481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57
2020-06-25T21:39:22.052261sd-86998 sshd[32481]: Invalid user pl from 142.93.56.57 port 48454
2020-06-25T21:39:24.629139sd-86998 sshd[32481]: Failed password for invalid user pl from 142.93.56.57 port 48454 ssh2
2020-06-25T21:43:30.749211sd-86998 sshd[33003]: Invalid user zhangyl from 142.93.56.57 port 47850
...
2020-06-26 03:57:29
attackspambots
$f2bV_matches
2020-06-12 07:57:37
attack
2020-06-09T00:07:11.477028afi-git.jinr.ru sshd[24492]: Failed password for admin from 142.93.56.57 port 46968 ssh2
2020-06-09T00:10:33.852448afi-git.jinr.ru sshd[25344]: Invalid user akarstein from 142.93.56.57 port 44510
2020-06-09T00:10:33.855533afi-git.jinr.ru sshd[25344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57
2020-06-09T00:10:33.852448afi-git.jinr.ru sshd[25344]: Invalid user akarstein from 142.93.56.57 port 44510
2020-06-09T00:10:36.178002afi-git.jinr.ru sshd[25344]: Failed password for invalid user akarstein from 142.93.56.57 port 44510 ssh2
...
2020-06-09 05:40:17
attack
Jun  5 22:18:29 jumpserver sshd[87262]: Failed password for root from 142.93.56.57 port 59780 ssh2
Jun  5 22:22:10 jumpserver sshd[87300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57  user=root
Jun  5 22:22:12 jumpserver sshd[87300]: Failed password for root from 142.93.56.57 port 52536 ssh2
...
2020-06-06 06:39:59
attackspam
Jun  5 14:34:14 server sshd[28692]: Failed password for root from 142.93.56.57 port 56354 ssh2
Jun  5 14:38:09 server sshd[28947]: Failed password for root from 142.93.56.57 port 55884 ssh2
...
2020-06-05 20:48:27
相同子网IP讨论:
IP 类型 评论内容 时间
142.93.56.12 attack
Jun 10 07:36:31 minden010 sshd[15230]: Failed password for root from 142.93.56.12 port 39498 ssh2
Jun 10 07:40:24 minden010 sshd[17310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.12
Jun 10 07:40:26 minden010 sshd[17310]: Failed password for invalid user fr from 142.93.56.12 port 41118 ssh2
...
2020-06-10 14:05:41
142.93.56.167 attackspambots
 TCP (SYN) 142.93.56.167:58142 -> port 32277, len 44
2020-05-29 19:59:54
142.93.56.12 attack
May 27 20:34:34 webhost01 sshd[410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.12
May 27 20:34:36 webhost01 sshd[410]: Failed password for invalid user ekp from 142.93.56.12 port 57434 ssh2
...
2020-05-27 23:22:46
142.93.56.221 attack
May 26 18:21:52 abendstille sshd\[11432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.221  user=root
May 26 18:21:54 abendstille sshd\[11432\]: Failed password for root from 142.93.56.221 port 38158 ssh2
May 26 18:25:20 abendstille sshd\[14915\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.221  user=root
May 26 18:25:22 abendstille sshd\[14915\]: Failed password for root from 142.93.56.221 port 42786 ssh2
May 26 18:28:50 abendstille sshd\[18502\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.221  user=root
...
2020-05-27 00:47:35
142.93.56.12 attackbotsspam
2020-05-25T12:37:53.588217afi-git.jinr.ru sshd[28225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.12
2020-05-25T12:37:53.584820afi-git.jinr.ru sshd[28225]: Invalid user 101 from 142.93.56.12 port 53126
2020-05-25T12:37:55.767875afi-git.jinr.ru sshd[28225]: Failed password for invalid user 101 from 142.93.56.12 port 53126 ssh2
2020-05-25T12:41:42.722750afi-git.jinr.ru sshd[29158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.12  user=root
2020-05-25T12:41:44.340238afi-git.jinr.ru sshd[29158]: Failed password for root from 142.93.56.12 port 37880 ssh2
...
2020-05-25 18:00:05
142.93.56.221 attackspambots
Invalid user bmm from 142.93.56.221 port 49610
2020-05-25 16:55:16
142.93.56.221 attackbots
SSH login attempts.
2020-05-24 19:23:09
142.93.56.12 attackbotsspam
May 21 23:06:00 vpn01 sshd[29379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.12
May 21 23:06:03 vpn01 sshd[29379]: Failed password for invalid user juq from 142.93.56.12 port 41574 ssh2
...
2020-05-22 05:31:12
142.93.56.12 attack
2020-05-20T07:56:05.565727abusebot-3.cloudsearch.cf sshd[11900]: Invalid user zyh from 142.93.56.12 port 42126
2020-05-20T07:56:05.572550abusebot-3.cloudsearch.cf sshd[11900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.12
2020-05-20T07:56:05.565727abusebot-3.cloudsearch.cf sshd[11900]: Invalid user zyh from 142.93.56.12 port 42126
2020-05-20T07:56:07.153617abusebot-3.cloudsearch.cf sshd[11900]: Failed password for invalid user zyh from 142.93.56.12 port 42126 ssh2
2020-05-20T08:02:35.645698abusebot-3.cloudsearch.cf sshd[12432]: Invalid user uv from 142.93.56.12 port 48798
2020-05-20T08:02:35.652410abusebot-3.cloudsearch.cf sshd[12432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.12
2020-05-20T08:02:35.645698abusebot-3.cloudsearch.cf sshd[12432]: Invalid user uv from 142.93.56.12 port 48798
2020-05-20T08:02:37.439451abusebot-3.cloudsearch.cf sshd[12432]: Failed password for inval
...
2020-05-20 17:25:18
142.93.56.12 attack
May 16 00:11:44 raspberrypi sshd\[2570\]: Invalid user user from 142.93.56.12May 16 00:11:46 raspberrypi sshd\[2570\]: Failed password for invalid user user from 142.93.56.12 port 49538 ssh2May 16 00:23:01 raspberrypi sshd\[8924\]: Failed password for root from 142.93.56.12 port 48856 ssh2
...
2020-05-16 23:52:49
142.93.56.12 attackspam
May 11 04:21:36 marvibiene sshd[43921]: Invalid user box from 142.93.56.12 port 39950
May 11 04:21:36 marvibiene sshd[43921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.12
May 11 04:21:36 marvibiene sshd[43921]: Invalid user box from 142.93.56.12 port 39950
May 11 04:21:39 marvibiene sshd[43921]: Failed password for invalid user box from 142.93.56.12 port 39950 ssh2
...
2020-05-11 12:30:56
142.93.56.221 attackspambots
May 11 03:54:12 vlre-nyc-1 sshd\[10396\]: Invalid user vnc from 142.93.56.221
May 11 03:54:12 vlre-nyc-1 sshd\[10396\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.221
May 11 03:54:15 vlre-nyc-1 sshd\[10396\]: Failed password for invalid user vnc from 142.93.56.221 port 50546 ssh2
May 11 03:59:03 vlre-nyc-1 sshd\[10484\]: Invalid user oy from 142.93.56.221
May 11 03:59:03 vlre-nyc-1 sshd\[10484\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.221
...
2020-05-11 12:04:17
142.93.56.221 attack
May  8 23:40:51 localhost sshd\[30873\]: Invalid user ehsan from 142.93.56.221
May  8 23:40:51 localhost sshd\[30873\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.221
May  8 23:40:53 localhost sshd\[30873\]: Failed password for invalid user ehsan from 142.93.56.221 port 36036 ssh2
May  8 23:45:32 localhost sshd\[31141\]: Invalid user oracle from 142.93.56.221
May  8 23:45:32 localhost sshd\[31141\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.221
...
2020-05-09 07:07:24
142.93.56.12 attackbots
May  7 08:01:30 lukav-desktop sshd\[10422\]: Invalid user hadoop1 from 142.93.56.12
May  7 08:01:30 lukav-desktop sshd\[10422\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.12
May  7 08:01:31 lukav-desktop sshd\[10422\]: Failed password for invalid user hadoop1 from 142.93.56.12 port 54044 ssh2
May  7 08:08:56 lukav-desktop sshd\[2904\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.12  user=root
May  7 08:08:58 lukav-desktop sshd\[2904\]: Failed password for root from 142.93.56.12 port 35800 ssh2
2020-05-07 14:01:31
142.93.56.167 attack
firewall-block, port(s): 32227/tcp
2020-05-07 06:52:25
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.56.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54220
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.56.57.			IN	A

;; AUTHORITY SECTION:
.			338	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060500 1800 900 604800 86400

;; Query time: 97 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jun 05 20:48:23 CST 2020
;; MSG SIZE  rcvd: 116
HOST信息:
Host 57.56.93.142.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 57.56.93.142.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
14.181.174.146 attackbots
Automatic report - Port Scan Attack
2020-02-25 10:27:07
62.46.161.21 attackbots
Feb 25 00:59:43 host sshd[35071]: Invalid user moodle from 62.46.161.21 port 57504
...
2020-02-25 10:31:48
197.253.124.65 attack
firewall-block, port(s): 445/tcp
2020-02-25 10:16:21
152.136.23.178 attackspambots
$f2bV_matches
2020-02-25 10:28:17
54.36.106.204 attack
[2020-02-24 20:33:05] NOTICE[1148] chan_sip.c: Registration from '' failed for '54.36.106.204:53024' - Wrong password
[2020-02-24 20:33:05] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-24T20:33:05.676-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="900",SessionID="0x7fd82c6cd778",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/54.36.106.204/53024",Challenge="399d833e",ReceivedChallenge="399d833e",ReceivedHash="d8f9717d6d48490c0c83b2d81070682a"
[2020-02-24 20:33:34] NOTICE[1148] chan_sip.c: Registration from '' failed for '54.36.106.204:60086' - Wrong password
[2020-02-24 20:33:34] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-24T20:33:34.160-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1000",SessionID="0x7fd82c7af4d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/54.36.106.204/6
...
2020-02-25 10:57:08
180.232.9.55 attack
Invalid user test from 180.232.9.55 port 46832
2020-02-25 10:54:13
222.186.52.86 attackbots
Feb 24 21:16:19 ny01 sshd[5316]: Failed password for root from 222.186.52.86 port 55331 ssh2
Feb 24 21:17:20 ny01 sshd[5721]: Failed password for root from 222.186.52.86 port 15012 ssh2
2020-02-25 10:44:36
54.37.157.88 attack
Feb 25 00:46:35 srv01 sshd[31287]: Invalid user www from 54.37.157.88 port 44819
Feb 25 00:46:35 srv01 sshd[31287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.157.88
Feb 25 00:46:35 srv01 sshd[31287]: Invalid user www from 54.37.157.88 port 44819
Feb 25 00:46:37 srv01 sshd[31287]: Failed password for invalid user www from 54.37.157.88 port 44819 ssh2
Feb 25 00:51:15 srv01 sshd[31614]: Invalid user magda from 54.37.157.88 port 55038
...
2020-02-25 10:55:23
171.244.51.119 attackspambots
Feb 25 03:09:47 sd-53420 sshd\[8955\]: Invalid user ubuntu from 171.244.51.119
Feb 25 03:09:47 sd-53420 sshd\[8955\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.51.119
Feb 25 03:09:49 sd-53420 sshd\[8955\]: Failed password for invalid user ubuntu from 171.244.51.119 port 48438 ssh2
Feb 25 03:15:57 sd-53420 sshd\[9513\]: User proxy from 171.244.51.119 not allowed because none of user's groups are listed in AllowGroups
Feb 25 03:15:57 sd-53420 sshd\[9513\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.51.119  user=proxy
...
2020-02-25 10:31:08
120.132.124.237 attackbotsspam
Feb 24 16:14:01 php1 sshd\[26308\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.132.124.237  user=mysql
Feb 24 16:14:02 php1 sshd\[26308\]: Failed password for mysql from 120.132.124.237 port 52762 ssh2
Feb 24 16:18:19 php1 sshd\[26740\]: Invalid user oracle from 120.132.124.237
Feb 24 16:18:19 php1 sshd\[26740\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.132.124.237
Feb 24 16:18:21 php1 sshd\[26740\]: Failed password for invalid user oracle from 120.132.124.237 port 54596 ssh2
2020-02-25 10:22:32
131.100.216.208 attackspambots
Honeypot attack, port: 4567, PTR: PTR record not found
2020-02-25 10:42:32
180.188.16.60 attackbots
Honeypot attack, port: 445, PTR: PTR record not found
2020-02-25 10:19:55
51.91.100.109 attack
SSH brute force
2020-02-25 10:21:03
185.175.93.19 attackbotsspam
VNC
2020-02-25 10:47:21
156.200.110.74 attackspam
Honeypot attack, port: 445, PTR: host-156.200.110.74.tedata.net.
2020-02-25 10:45:04

最近上报的IP列表

157.46.253.10 195.210.36.110 42.116.242.165 61.1.235.239
205.16.237.234 189.254.21.6 23.95.89.200 153.96.76.178
131.56.255.145 107.158.163.142 143.125.7.137 119.147.151.212
198.84.90.15 103.113.90.226 133.136.41.86 232.0.132.235
126.204.223.159 46.105.41.101 94.182.186.80 177.200.68.107