必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbots
SSH Brute-force
2020-10-03 05:49:55
attack
Oct  2 14:07:24 firewall sshd[31101]: Invalid user jacky from 142.93.8.99
Oct  2 14:07:26 firewall sshd[31101]: Failed password for invalid user jacky from 142.93.8.99 port 36416 ssh2
Oct  2 14:11:00 firewall sshd[31184]: Invalid user nisec from 142.93.8.99
...
2020-10-03 01:14:46
attack
Oct  2 12:16:30 h2646465 sshd[4455]: Invalid user karen from 142.93.8.99
Oct  2 12:16:30 h2646465 sshd[4455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.8.99
Oct  2 12:16:30 h2646465 sshd[4455]: Invalid user karen from 142.93.8.99
Oct  2 12:16:32 h2646465 sshd[4455]: Failed password for invalid user karen from 142.93.8.99 port 40000 ssh2
Oct  2 12:22:38 h2646465 sshd[5093]: Invalid user devuser from 142.93.8.99
Oct  2 12:22:38 h2646465 sshd[5093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.8.99
Oct  2 12:22:38 h2646465 sshd[5093]: Invalid user devuser from 142.93.8.99
Oct  2 12:22:40 h2646465 sshd[5093]: Failed password for invalid user devuser from 142.93.8.99 port 39676 ssh2
Oct  2 12:26:45 h2646465 sshd[5664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.8.99  user=root
Oct  2 12:26:47 h2646465 sshd[5664]: Failed password for root from 142.93.8.99 port 46
2020-10-02 21:44:29
attack
Oct  2 08:05:25 haigwepa sshd[20453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.8.99 
Oct  2 08:05:27 haigwepa sshd[20453]: Failed password for invalid user weblogic from 142.93.8.99 port 37312 ssh2
...
2020-10-02 18:16:41
attack
Oct  2 08:05:25 haigwepa sshd[20453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.8.99 
Oct  2 08:05:27 haigwepa sshd[20453]: Failed password for invalid user weblogic from 142.93.8.99 port 37312 ssh2
...
2020-10-02 14:46:46
attackspambots
Sep 29 18:29:40 vlre-nyc-1 sshd\[25066\]: Invalid user book from 142.93.8.99
Sep 29 18:29:40 vlre-nyc-1 sshd\[25066\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.8.99
Sep 29 18:29:41 vlre-nyc-1 sshd\[25066\]: Failed password for invalid user book from 142.93.8.99 port 34816 ssh2
Sep 29 18:34:18 vlre-nyc-1 sshd\[25213\]: Invalid user dave from 142.93.8.99
Sep 29 18:34:18 vlre-nyc-1 sshd\[25213\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.8.99
...
2020-09-30 09:39:26
attackspam
Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-09-30 02:30:01
attack
Automatic report - Banned IP Access
2020-09-29 18:32:35
相同子网IP讨论:
IP 类型 评论内容 时间
142.93.8.59 attack
This IP is associated with RDP abuse. It was found in a paste by https://twitter.com/RdpSnitch - https://pastebin.com/4Ddmuksx  
For more information, or to report interesting/incorrect findings, contact us - bot@tines.io
2020-04-26 21:20:14
142.93.83.242 attack
Email rejected due to spam filtering
2020-04-23 01:06:53
142.93.87.64 attackspambots
WordPress login Brute force / Web App Attack on client site.
2020-04-10 13:31:28
142.93.87.64 attack
CMS (WordPress or Joomla) login attempt.
2020-03-21 18:28:05
142.93.83.218 attackbotsspam
Mar  4 09:23:31 NPSTNNYC01T sshd[28847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218
Mar  4 09:23:33 NPSTNNYC01T sshd[28847]: Failed password for invalid user spark from 142.93.83.218 port 45148 ssh2
Mar  4 09:25:23 NPSTNNYC01T sshd[29064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218
...
2020-03-05 02:03:42
142.93.83.218 attackspam
Feb 27 03:29:13 server sshd\[8030\]: Invalid user admin from 142.93.83.218
Feb 27 03:29:13 server sshd\[8030\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218 
Feb 27 03:29:15 server sshd\[8030\]: Failed password for invalid user admin from 142.93.83.218 port 40316 ssh2
Feb 27 03:31:35 server sshd\[8794\]: Invalid user test1 from 142.93.83.218
Feb 27 03:31:35 server sshd\[8794\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218 
...
2020-02-27 08:35:15
142.93.83.218 attackbotsspam
*Port Scan* detected from 142.93.83.218 (US/United States/-). 4 hits in the last 150 seconds
2020-02-12 16:14:04
142.93.83.218 attackbotsspam
Feb  8 06:04:47 srv-ubuntu-dev3 sshd[34041]: Invalid user ntz from 142.93.83.218
Feb  8 06:04:47 srv-ubuntu-dev3 sshd[34041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218
Feb  8 06:04:47 srv-ubuntu-dev3 sshd[34041]: Invalid user ntz from 142.93.83.218
Feb  8 06:04:49 srv-ubuntu-dev3 sshd[34041]: Failed password for invalid user ntz from 142.93.83.218 port 39128 ssh2
Feb  8 06:07:48 srv-ubuntu-dev3 sshd[34301]: Invalid user bxz from 142.93.83.218
Feb  8 06:07:48 srv-ubuntu-dev3 sshd[34301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218
Feb  8 06:07:48 srv-ubuntu-dev3 sshd[34301]: Invalid user bxz from 142.93.83.218
Feb  8 06:07:50 srv-ubuntu-dev3 sshd[34301]: Failed password for invalid user bxz from 142.93.83.218 port 40686 ssh2
Feb  8 06:10:47 srv-ubuntu-dev3 sshd[34751]: Invalid user km from 142.93.83.218
...
2020-02-08 18:00:05
142.93.81.77 attackbotsspam
...
2020-02-02 03:19:56
142.93.83.218 attack
detected by Fail2Ban
2020-02-02 03:19:42
142.93.83.218 attackspambots
$f2bV_matches
2020-01-11 22:57:13
142.93.83.218 attackspam
SSH Brute Force, server-1 sshd[1184]: Failed password for invalid user gkk from 142.93.83.218 port 32922 ssh2
2020-01-08 16:56:31
142.93.83.218 attack
IP blocked
2020-01-03 07:25:14
142.93.83.218 attackbotsspam
Dec 31 05:38:07 server sshd\[20070\]: Invalid user home from 142.93.83.218
Dec 31 05:38:07 server sshd\[20070\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218 
Dec 31 05:38:09 server sshd\[20070\]: Failed password for invalid user home from 142.93.83.218 port 53500 ssh2
Dec 31 12:03:00 server sshd\[13378\]: Invalid user brimo from 142.93.83.218
Dec 31 12:03:00 server sshd\[13378\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.83.218 
...
2019-12-31 18:52:25
142.93.8.226 attackbots
IP: 142.93.8.226
ASN: AS14061 DigitalOcean LLC
Port: Simple Mail Transfer 25
Found in one or more Blacklists
Date: 16/12/2019 9:52:45 AM UTC
2019-12-16 18:02:46
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.8.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15172
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.8.99.			IN	A

;; AUTHORITY SECTION:
.			372	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020092900 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Sep 29 18:32:32 CST 2020
;; MSG SIZE  rcvd: 115
HOST信息:
Host 99.8.93.142.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 99.8.93.142.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
13.78.32.148 attackspam
Microsoft-Windows-Security-Auditing
2019-08-09 04:59:36
119.132.88.49 attackbots
Aug  8 13:14:00 georgia postfix/smtpd[6208]: connect from unknown[119.132.88.49]
Aug  8 13:14:01 georgia postfix/smtpd[6208]: warning: unknown[119.132.88.49]: SASL LOGIN authentication failed: authentication failure
Aug  8 13:14:01 georgia postfix/smtpd[6208]: lost connection after AUTH from unknown[119.132.88.49]
Aug  8 13:14:01 georgia postfix/smtpd[6208]: disconnect from unknown[119.132.88.49] ehlo=1 auth=0/1 commands=1/2
Aug  8 13:14:02 georgia postfix/smtpd[6208]: connect from unknown[119.132.88.49]
Aug  8 13:14:03 georgia postfix/smtpd[6208]: warning: unknown[119.132.88.49]: SASL LOGIN authentication failed: authentication failure
Aug  8 13:14:03 georgia postfix/smtpd[6208]: lost connection after AUTH from unknown[119.132.88.49]
Aug  8 13:14:03 georgia postfix/smtpd[6208]: disconnect from unknown[119.132.88.49] ehlo=1 auth=0/1 commands=1/2
Aug  8 13:14:03 georgia postfix/smtpd[6208]: connect from unknown[119.132.88.49]
Aug  8 13:14:04 georgia postfix/smtpd[6208]: ........
-------------------------------
2019-08-09 04:59:10
210.120.63.89 attackbotsspam
Automatic report - Banned IP Access
2019-08-09 05:11:04
125.22.3.114 attackspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-08 15:47:50,502 INFO [amun_request_handler] PortScan Detected on Port: 445 (125.22.3.114)
2019-08-09 04:36:33
58.27.210.66 attackbots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-08 10:48:59,829 INFO [amun_request_handler] PortScan Detected on Port: 445 (58.27.210.66)
2019-08-09 05:05:25
14.231.173.16 attackspambots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-08 16:37:42,619 INFO [amun_request_handler] PortScan Detected on Port: 445 (14.231.173.16)
2019-08-09 04:35:27
157.230.243.126 attackbotsspam
Aug  8 06:27:44 srv1 sshd[11762]: Invalid user nicolas from 157.230.243.126
Aug  8 06:27:44 srv1 sshd[11762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.243.126 
Aug  8 06:27:46 srv1 sshd[11762]: Failed password for invalid user nicolas from 157.230.243.126 port 56028 ssh2
Aug  8 06:27:47 srv1 sshd[11762]: Received disconnect from 157.230.243.126: 11: Bye Bye [preauth]
Aug  8 06:34:09 srv1 sshd[12302]: Invalid user tempuser from 157.230.243.126
Aug  8 06:34:09 srv1 sshd[12302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.243.126 
Aug  8 06:34:11 srv1 sshd[12302]: Failed password for invalid user tempuser from 157.230.243.126 port 37350 ssh2
Aug  8 06:34:12 srv1 sshd[12302]: Received disconnect from 157.230.243.126: 11: Bye Bye [preaut
.... truncated .... 

Aug  8 06:27:44 srv1 sshd[11762]: Invalid user nicolas from 157.230.243.126
Aug  8 06:27:44 srv1 sshd[11762]: pa........
-------------------------------
2019-08-09 04:58:10
120.28.86.202 attack
Automatic report - Port Scan Attack
2019-08-09 04:53:44
110.138.150.246 attackbots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-08 10:45:23,405 INFO [amun_request_handler] PortScan Detected on Port: 445 (110.138.150.246)
2019-08-09 05:11:54
121.46.93.141 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-08 11:39:24,717 INFO [amun_request_handler] PortScan Detected on Port: 445 (121.46.93.141)
2019-08-09 04:44:44
122.194.186.124 attack
Aug  8 11:14:26 elenin sshd[22004]: Invalid user admin from 122.194.186.124
Aug  8 11:14:26 elenin sshd[22004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.194.186.124 
Aug  8 11:14:29 elenin sshd[22004]: Failed password for invalid user admin from 122.194.186.124 port 37083 ssh2
Aug  8 11:14:31 elenin sshd[22004]: Failed password for invalid user admin from 122.194.186.124 port 37083 ssh2
Aug  8 11:14:33 elenin sshd[22004]: Failed password for invalid user admin from 122.194.186.124 port 37083 ssh2
Aug  8 11:14:33 elenin sshd[22004]: error: maximum authentication attempts exceeded for invalid user admin from 122.194.186.124 port 37083 ssh2 [preauth]
Aug  8 11:14:33 elenin sshd[22004]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.194.186.124 


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=122.194.186.124
2019-08-09 05:02:21
106.51.52.53 attackspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-08 11:38:11,653 INFO [amun_request_handler] PortScan Detected on Port: 445 (106.51.52.53)
2019-08-09 04:37:56
96.1.105.126 attackbots
Aug  8 20:57:53 apollo sshd\[21522\]: Invalid user puppet from 96.1.105.126Aug  8 20:57:55 apollo sshd\[21522\]: Failed password for invalid user puppet from 96.1.105.126 port 51556 ssh2Aug  8 21:26:18 apollo sshd\[21599\]: Invalid user admin from 96.1.105.126
...
2019-08-09 05:13:45
49.207.9.142 attackbots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-08 11:40:24,863 INFO [amun_request_handler] PortScan Detected on Port: 445 (49.207.9.142)
2019-08-09 04:40:59
106.12.47.122 attackbots
SSH authentication failure x 6 reported by Fail2Ban
...
2019-08-09 05:16:30

最近上报的IP列表

208.186.113.106 1.55.223.64 189.120.77.252 117.6.211.161
174.219.3.42 156.96.47.42 154.221.30.212 63.80.187.50
165.232.47.193 134.90.253.126 115.78.3.43 191.73.138.181
177.72.74.74 111.72.194.164 136.232.239.86 112.85.42.121
174.219.21.74 142.249.153.13 39.89.220.112 94.191.93.211