必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbots
(sshd) Failed SSH login from 142.93.56.57 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 30 09:49:45 server2 sshd[25809]: Invalid user admin from 142.93.56.57
Sep 30 09:49:45 server2 sshd[25809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57 
Sep 30 09:49:47 server2 sshd[25809]: Failed password for invalid user admin from 142.93.56.57 port 37282 ssh2
Sep 30 09:56:44 server2 sshd[32255]: Invalid user tom from 142.93.56.57
Sep 30 09:56:44 server2 sshd[32255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57
2020-10-01 05:09:32
attackspambots
Failed password for root from 142.93.56.57 port 48550 ssh2
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57 
Failed password for invalid user postgres from 142.93.56.57 port 58374 ssh2
2020-09-30 21:26:13
attack
Port scan denied
2020-09-30 13:56:15
attackspam
Sep 23 11:14:34 marvibiene sshd[16992]: Failed password for root from 142.93.56.57 port 45518 ssh2
2020-09-23 20:45:09
attackbots
Sep 23 05:55:04 pve1 sshd[4970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57 
Sep 23 05:55:06 pve1 sshd[4970]: Failed password for invalid user hadoop from 142.93.56.57 port 57504 ssh2
...
2020-09-23 13:05:32
attack
sshd jail - ssh hack attempt
2020-09-23 04:52:26
attackbotsspam
Sep 19 19:30:03 vm1 sshd[19839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57
Sep 19 19:30:06 vm1 sshd[19839]: Failed password for invalid user admin2 from 142.93.56.57 port 45438 ssh2
...
2020-09-20 03:23:44
attackspam
Sep 19 13:05:59 buvik sshd[9207]: Invalid user service from 142.93.56.57
Sep 19 13:05:59 buvik sshd[9207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57
Sep 19 13:06:01 buvik sshd[9207]: Failed password for invalid user service from 142.93.56.57 port 43794 ssh2
...
2020-09-19 19:25:18
attackbotsspam
Aug  3 23:37:36 hosting sshd[32083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57  user=root
Aug  3 23:37:38 hosting sshd[32083]: Failed password for root from 142.93.56.57 port 48378 ssh2
...
2020-08-04 05:00:26
attack
Ssh brute force
2020-08-02 08:54:41
attack
Jul  8 06:47:03 * sshd[17152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57
Jul  8 06:47:06 * sshd[17152]: Failed password for invalid user scooper from 142.93.56.57 port 42902 ssh2
2020-07-08 12:47:33
attackbotsspam
Jul  6 22:47:30 mail sshd[52215]: Failed password for root from 142.93.56.57 port 40536 ssh2
...
2020-07-07 08:59:43
attackbotsspam
20 attempts against mh-ssh on echoip
2020-06-30 02:00:36
attack
2020-06-25T21:39:22.052261sd-86998 sshd[32481]: Invalid user pl from 142.93.56.57 port 48454
2020-06-25T21:39:22.054516sd-86998 sshd[32481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57
2020-06-25T21:39:22.052261sd-86998 sshd[32481]: Invalid user pl from 142.93.56.57 port 48454
2020-06-25T21:39:24.629139sd-86998 sshd[32481]: Failed password for invalid user pl from 142.93.56.57 port 48454 ssh2
2020-06-25T21:43:30.749211sd-86998 sshd[33003]: Invalid user zhangyl from 142.93.56.57 port 47850
...
2020-06-26 03:57:29
attackspambots
$f2bV_matches
2020-06-12 07:57:37
attack
2020-06-09T00:07:11.477028afi-git.jinr.ru sshd[24492]: Failed password for admin from 142.93.56.57 port 46968 ssh2
2020-06-09T00:10:33.852448afi-git.jinr.ru sshd[25344]: Invalid user akarstein from 142.93.56.57 port 44510
2020-06-09T00:10:33.855533afi-git.jinr.ru sshd[25344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57
2020-06-09T00:10:33.852448afi-git.jinr.ru sshd[25344]: Invalid user akarstein from 142.93.56.57 port 44510
2020-06-09T00:10:36.178002afi-git.jinr.ru sshd[25344]: Failed password for invalid user akarstein from 142.93.56.57 port 44510 ssh2
...
2020-06-09 05:40:17
attack
Jun  5 22:18:29 jumpserver sshd[87262]: Failed password for root from 142.93.56.57 port 59780 ssh2
Jun  5 22:22:10 jumpserver sshd[87300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57  user=root
Jun  5 22:22:12 jumpserver sshd[87300]: Failed password for root from 142.93.56.57 port 52536 ssh2
...
2020-06-06 06:39:59
attackspam
Jun  5 14:34:14 server sshd[28692]: Failed password for root from 142.93.56.57 port 56354 ssh2
Jun  5 14:38:09 server sshd[28947]: Failed password for root from 142.93.56.57 port 55884 ssh2
...
2020-06-05 20:48:27
相同子网IP讨论:
IP 类型 评论内容 时间
142.93.56.12 attack
Jun 10 07:36:31 minden010 sshd[15230]: Failed password for root from 142.93.56.12 port 39498 ssh2
Jun 10 07:40:24 minden010 sshd[17310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.12
Jun 10 07:40:26 minden010 sshd[17310]: Failed password for invalid user fr from 142.93.56.12 port 41118 ssh2
...
2020-06-10 14:05:41
142.93.56.167 attackspambots
 TCP (SYN) 142.93.56.167:58142 -> port 32277, len 44
2020-05-29 19:59:54
142.93.56.12 attack
May 27 20:34:34 webhost01 sshd[410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.12
May 27 20:34:36 webhost01 sshd[410]: Failed password for invalid user ekp from 142.93.56.12 port 57434 ssh2
...
2020-05-27 23:22:46
142.93.56.221 attack
May 26 18:21:52 abendstille sshd\[11432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.221  user=root
May 26 18:21:54 abendstille sshd\[11432\]: Failed password for root from 142.93.56.221 port 38158 ssh2
May 26 18:25:20 abendstille sshd\[14915\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.221  user=root
May 26 18:25:22 abendstille sshd\[14915\]: Failed password for root from 142.93.56.221 port 42786 ssh2
May 26 18:28:50 abendstille sshd\[18502\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.221  user=root
...
2020-05-27 00:47:35
142.93.56.12 attackbotsspam
2020-05-25T12:37:53.588217afi-git.jinr.ru sshd[28225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.12
2020-05-25T12:37:53.584820afi-git.jinr.ru sshd[28225]: Invalid user 101 from 142.93.56.12 port 53126
2020-05-25T12:37:55.767875afi-git.jinr.ru sshd[28225]: Failed password for invalid user 101 from 142.93.56.12 port 53126 ssh2
2020-05-25T12:41:42.722750afi-git.jinr.ru sshd[29158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.12  user=root
2020-05-25T12:41:44.340238afi-git.jinr.ru sshd[29158]: Failed password for root from 142.93.56.12 port 37880 ssh2
...
2020-05-25 18:00:05
142.93.56.221 attackspambots
Invalid user bmm from 142.93.56.221 port 49610
2020-05-25 16:55:16
142.93.56.221 attackbots
SSH login attempts.
2020-05-24 19:23:09
142.93.56.12 attackbotsspam
May 21 23:06:00 vpn01 sshd[29379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.12
May 21 23:06:03 vpn01 sshd[29379]: Failed password for invalid user juq from 142.93.56.12 port 41574 ssh2
...
2020-05-22 05:31:12
142.93.56.12 attack
2020-05-20T07:56:05.565727abusebot-3.cloudsearch.cf sshd[11900]: Invalid user zyh from 142.93.56.12 port 42126
2020-05-20T07:56:05.572550abusebot-3.cloudsearch.cf sshd[11900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.12
2020-05-20T07:56:05.565727abusebot-3.cloudsearch.cf sshd[11900]: Invalid user zyh from 142.93.56.12 port 42126
2020-05-20T07:56:07.153617abusebot-3.cloudsearch.cf sshd[11900]: Failed password for invalid user zyh from 142.93.56.12 port 42126 ssh2
2020-05-20T08:02:35.645698abusebot-3.cloudsearch.cf sshd[12432]: Invalid user uv from 142.93.56.12 port 48798
2020-05-20T08:02:35.652410abusebot-3.cloudsearch.cf sshd[12432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.12
2020-05-20T08:02:35.645698abusebot-3.cloudsearch.cf sshd[12432]: Invalid user uv from 142.93.56.12 port 48798
2020-05-20T08:02:37.439451abusebot-3.cloudsearch.cf sshd[12432]: Failed password for inval
...
2020-05-20 17:25:18
142.93.56.12 attack
May 16 00:11:44 raspberrypi sshd\[2570\]: Invalid user user from 142.93.56.12May 16 00:11:46 raspberrypi sshd\[2570\]: Failed password for invalid user user from 142.93.56.12 port 49538 ssh2May 16 00:23:01 raspberrypi sshd\[8924\]: Failed password for root from 142.93.56.12 port 48856 ssh2
...
2020-05-16 23:52:49
142.93.56.12 attackspam
May 11 04:21:36 marvibiene sshd[43921]: Invalid user box from 142.93.56.12 port 39950
May 11 04:21:36 marvibiene sshd[43921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.12
May 11 04:21:36 marvibiene sshd[43921]: Invalid user box from 142.93.56.12 port 39950
May 11 04:21:39 marvibiene sshd[43921]: Failed password for invalid user box from 142.93.56.12 port 39950 ssh2
...
2020-05-11 12:30:56
142.93.56.221 attackspambots
May 11 03:54:12 vlre-nyc-1 sshd\[10396\]: Invalid user vnc from 142.93.56.221
May 11 03:54:12 vlre-nyc-1 sshd\[10396\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.221
May 11 03:54:15 vlre-nyc-1 sshd\[10396\]: Failed password for invalid user vnc from 142.93.56.221 port 50546 ssh2
May 11 03:59:03 vlre-nyc-1 sshd\[10484\]: Invalid user oy from 142.93.56.221
May 11 03:59:03 vlre-nyc-1 sshd\[10484\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.221
...
2020-05-11 12:04:17
142.93.56.221 attack
May  8 23:40:51 localhost sshd\[30873\]: Invalid user ehsan from 142.93.56.221
May  8 23:40:51 localhost sshd\[30873\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.221
May  8 23:40:53 localhost sshd\[30873\]: Failed password for invalid user ehsan from 142.93.56.221 port 36036 ssh2
May  8 23:45:32 localhost sshd\[31141\]: Invalid user oracle from 142.93.56.221
May  8 23:45:32 localhost sshd\[31141\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.221
...
2020-05-09 07:07:24
142.93.56.12 attackbots
May  7 08:01:30 lukav-desktop sshd\[10422\]: Invalid user hadoop1 from 142.93.56.12
May  7 08:01:30 lukav-desktop sshd\[10422\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.12
May  7 08:01:31 lukav-desktop sshd\[10422\]: Failed password for invalid user hadoop1 from 142.93.56.12 port 54044 ssh2
May  7 08:08:56 lukav-desktop sshd\[2904\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.12  user=root
May  7 08:08:58 lukav-desktop sshd\[2904\]: Failed password for root from 142.93.56.12 port 35800 ssh2
2020-05-07 14:01:31
142.93.56.167 attack
firewall-block, port(s): 32227/tcp
2020-05-07 06:52:25
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.56.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54220
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.56.57.			IN	A

;; AUTHORITY SECTION:
.			338	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060500 1800 900 604800 86400

;; Query time: 97 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jun 05 20:48:23 CST 2020
;; MSG SIZE  rcvd: 116
HOST信息:
Host 57.56.93.142.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 57.56.93.142.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
123.252.218.62 attackbotsspam
Invalid user git from 123.252.218.62 port 42310
2020-10-02 02:33:53
163.172.178.167 attack
Invalid user joao from 163.172.178.167 port 55402
2020-10-02 02:31:44
220.186.145.9 attackbots
Oct  1 14:04:49 ajax sshd[4284]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.186.145.9 
Oct  1 14:04:51 ajax sshd[4284]: Failed password for invalid user user from 220.186.145.9 port 35732 ssh2
2020-10-02 02:27:21
45.170.133.36 attackbotsspam
Port Scan
...
2020-10-02 02:55:57
137.74.41.119 attackspambots
(sshd) Failed SSH login from 137.74.41.119 (FR/France/119.ip-137-74-41.eu): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  1 12:23:10 optimus sshd[23384]: Invalid user el from 137.74.41.119
Oct  1 12:23:12 optimus sshd[23384]: Failed password for invalid user el from 137.74.41.119 port 38710 ssh2
Oct  1 12:35:01 optimus sshd[27231]: Invalid user Test from 137.74.41.119
Oct  1 12:35:03 optimus sshd[27231]: Failed password for invalid user Test from 137.74.41.119 port 43122 ssh2
Oct  1 12:39:12 optimus sshd[28564]: Invalid user terry from 137.74.41.119
2020-10-02 03:00:31
180.76.150.238 attackbotsspam
Automatic report BANNED IP
2020-10-02 02:58:40
178.46.163.201 attack
Dovecot Invalid User Login Attempt.
2020-10-02 02:27:51
140.143.30.191 attackbotsspam
Oct  1 09:48:45 vps647732 sshd[6921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.30.191
Oct  1 09:48:47 vps647732 sshd[6921]: Failed password for invalid user hms from 140.143.30.191 port 45620 ssh2
...
2020-10-02 02:56:24
51.178.81.106 attackbots
51.178.81.106 - - [01/Oct/2020:19:43:45 +0200] "GET /wp-login.php HTTP/1.1" 200 8558 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
51.178.81.106 - - [01/Oct/2020:19:43:46 +0200] "POST /wp-login.php HTTP/1.1" 200 8809 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
51.178.81.106 - - [01/Oct/2020:19:43:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-10-02 02:44:22
188.166.78.16 attack
(sshd) Failed SSH login from 188.166.78.16 (NL/Netherlands/suppilo.fi): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  1 09:33:59 optimus sshd[6053]: Invalid user benoit from 188.166.78.16
Oct  1 09:33:59 optimus sshd[6053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.78.16 
Oct  1 09:34:01 optimus sshd[6053]: Failed password for invalid user benoit from 188.166.78.16 port 55086 ssh2
Oct  1 09:37:38 optimus sshd[9633]: Invalid user appadmin from 188.166.78.16
Oct  1 09:37:38 optimus sshd[9633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.78.16
2020-10-02 02:50:16
122.51.41.109 attackbots
2020-10-01T15:34:25.087739vps-d63064a2 sshd[28933]: Invalid user test from 122.51.41.109 port 35160
2020-10-01T15:34:27.455538vps-d63064a2 sshd[28933]: Failed password for invalid user test from 122.51.41.109 port 35160 ssh2
2020-10-01T15:38:05.887058vps-d63064a2 sshd[28943]: Invalid user docker from 122.51.41.109 port 33372
2020-10-01T15:38:05.895949vps-d63064a2 sshd[28943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.41.109
2020-10-01T15:38:05.887058vps-d63064a2 sshd[28943]: Invalid user docker from 122.51.41.109 port 33372
2020-10-01T15:38:07.786787vps-d63064a2 sshd[28943]: Failed password for invalid user docker from 122.51.41.109 port 33372 ssh2
...
2020-10-02 02:28:51
197.5.145.75 attackspam
Oct  1 20:16:58 h1745522 sshd[11441]: Invalid user pos from 197.5.145.75 port 10898
Oct  1 20:16:58 h1745522 sshd[11441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.5.145.75
Oct  1 20:16:58 h1745522 sshd[11441]: Invalid user pos from 197.5.145.75 port 10898
Oct  1 20:17:01 h1745522 sshd[11441]: Failed password for invalid user pos from 197.5.145.75 port 10898 ssh2
Oct  1 20:20:28 h1745522 sshd[11620]: Invalid user ec2-user from 197.5.145.75 port 10899
Oct  1 20:20:28 h1745522 sshd[11620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.5.145.75
Oct  1 20:20:28 h1745522 sshd[11620]: Invalid user ec2-user from 197.5.145.75 port 10899
Oct  1 20:20:30 h1745522 sshd[11620]: Failed password for invalid user ec2-user from 197.5.145.75 port 10899 ssh2
Oct  1 20:24:04 h1745522 sshd[11758]: Invalid user prueba from 197.5.145.75 port 10900
...
2020-10-02 03:00:09
74.120.14.34 attackspam
Icarus honeypot on github
2020-10-02 02:46:53
106.13.47.10 attackbots
2020-10-01T12:39:07.938360lavrinenko.info sshd[29553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.47.10
2020-10-01T12:39:07.928428lavrinenko.info sshd[29553]: Invalid user joyce from 106.13.47.10 port 59596
2020-10-01T12:39:10.036203lavrinenko.info sshd[29553]: Failed password for invalid user joyce from 106.13.47.10 port 59596 ssh2
2020-10-01T12:43:09.381100lavrinenko.info sshd[29794]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.47.10  user=root
2020-10-01T12:43:11.704859lavrinenko.info sshd[29794]: Failed password for root from 106.13.47.10 port 54278 ssh2
...
2020-10-02 02:40:26
70.95.75.25 attackspambots
fail2ban - Attack against Apache (too many 404s)
2020-10-02 02:53:45

最近上报的IP列表

157.46.253.10 195.210.36.110 42.116.242.165 61.1.235.239
205.16.237.234 189.254.21.6 23.95.89.200 153.96.76.178
131.56.255.145 107.158.163.142 143.125.7.137 119.147.151.212
198.84.90.15 103.113.90.226 133.136.41.86 232.0.132.235
126.204.223.159 46.105.41.101 94.182.186.80 177.200.68.107