必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Santa Clara

省份(region): California

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): DigitalOcean, LLC

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
142.93.94.49 attack
scan
2020-08-26 17:58:47
142.93.94.49 attackspam
Blocked for port scanning.
Time: Fri Aug 21. 02:19:10 2020 +0200
IP: 142.93.94.49 (US/United States/-)

Sample of block hits:
Aug 21 02:16:11 vserv kernel: [6028936.526246] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=142.93.94.49 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=9060 PROTO=TCP SPT=22 DPT=143 WINDOW=8192 RES=0x00 SYN URGP=0
Aug 21 02:16:30 vserv kernel: [6028956.067268] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=142.93.94.49 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=9060 PROTO=TCP SPT=22 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0
Aug 21 02:16:59 vserv kernel: [6028984.864573] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=142.93.94.49 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=9060 PROTO=TCP SPT=22 DPT=143 WINDOW=8192 RES=0x00 SYN URGP=0
Aug 21 02:17:12 vserv kernel: [6028998.347248] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=142.93.94.49 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=9060 PROTO=TCP SPT=22 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0
2020-08-21 16:35:05
142.93.94.86 attackbots
SSH brute-force: detected 6 distinct usernames within a 24-hour window.
2019-12-24 02:13:13
142.93.94.86 attackspam
Dec 22 23:27:42 wbs sshd\[26653\]: Invalid user piranha from 142.93.94.86
Dec 22 23:27:42 wbs sshd\[26653\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.94.86
Dec 22 23:27:44 wbs sshd\[26653\]: Failed password for invalid user piranha from 142.93.94.86 port 49156 ssh2
Dec 22 23:33:38 wbs sshd\[27212\]: Invalid user root3333 from 142.93.94.86
Dec 22 23:33:38 wbs sshd\[27212\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.94.86
2019-12-23 17:36:15
142.93.94.86 attackspambots
Dec 20 06:21:54 hcbbdb sshd\[19835\]: Invalid user ans from 142.93.94.86
Dec 20 06:21:54 hcbbdb sshd\[19835\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.94.86
Dec 20 06:21:56 hcbbdb sshd\[19835\]: Failed password for invalid user ans from 142.93.94.86 port 39584 ssh2
Dec 20 06:27:34 hcbbdb sshd\[21274\]: Invalid user nobody3333 from 142.93.94.86
Dec 20 06:27:34 hcbbdb sshd\[21274\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.94.86
2019-12-20 17:44:31
142.93.94.86 attack
Dec 18 21:54:45 gw1 sshd[1888]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.94.86
Dec 18 21:54:48 gw1 sshd[1888]: Failed password for invalid user abcdg from 142.93.94.86 port 35098 ssh2
...
2019-12-19 01:11:37
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.93.94.223
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12788
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.93.94.223.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019050400 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sat May 04 22:19:10 +08 2019
;; MSG SIZE  rcvd: 117

HOST信息:
Host 223.94.93.142.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 223.94.93.142.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
14.247.176.216 attackbotsspam
20/8/8@08:17:49: FAIL: Alarm-Network address from=14.247.176.216
20/8/8@08:17:49: FAIL: Alarm-Network address from=14.247.176.216
...
2020-08-08 20:41:32
192.99.57.32 attackspambots
2020-08-08T07:36:54.549714abusebot-6.cloudsearch.cf sshd[23517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=32.ip-192-99-57.net  user=root
2020-08-08T07:36:55.668004abusebot-6.cloudsearch.cf sshd[23517]: Failed password for root from 192.99.57.32 port 44474 ssh2
2020-08-08T07:40:15.533230abusebot-6.cloudsearch.cf sshd[23593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=32.ip-192-99-57.net  user=root
2020-08-08T07:40:17.248156abusebot-6.cloudsearch.cf sshd[23593]: Failed password for root from 192.99.57.32 port 37226 ssh2
2020-08-08T07:43:21.048323abusebot-6.cloudsearch.cf sshd[23619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=32.ip-192-99-57.net  user=root
2020-08-08T07:43:22.964021abusebot-6.cloudsearch.cf sshd[23619]: Failed password for root from 192.99.57.32 port 58226 ssh2
2020-08-08T07:46:25.574192abusebot-6.cloudsearch.cf sshd[23649]: pam_unix(ss
...
2020-08-08 20:05:29
36.37.177.73 attackbots
Unauthorized IMAP connection attempt
2020-08-08 20:10:48
121.22.99.235 attack
Aug  8 15:17:49 venus kernel: [80173.647891] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:66:8f:ed:d2:74:7f:6e:37:e3:08:00 SRC=121.22.99.235 DST=78.47.70.226 LEN=40 TOS=0x00 PREC=0x00 TTL=230 ID=55881 PROTO=TCP SPT=64247 DPT=13433 WINDOW=1024 RES=0x00 SYN URGP=0
2020-08-08 20:41:54
202.100.223.42 attack
Port scan denied
2020-08-08 20:11:07
118.24.2.59 attackspambots
Aug  8 12:15:30 jumpserver sshd[67725]: Failed password for root from 118.24.2.59 port 59050 ssh2
Aug  8 12:17:54 jumpserver sshd[67744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.2.59  user=root
Aug  8 12:17:55 jumpserver sshd[67744]: Failed password for root from 118.24.2.59 port 55286 ssh2
...
2020-08-08 20:36:12
145.239.11.166 attack
[2020-08-08 08:17:11] NOTICE[1248][C-00004d77] chan_sip.c: Call from '' (145.239.11.166:36046) to extension '00447441399590' rejected because extension not found in context 'public'.
[2020-08-08 08:17:11] SECURITY[1275] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-08T08:17:11.083-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00447441399590",SessionID="0x7f27204f0348",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/145.239.11.166/5060",ACLName="no_extension_match"
[2020-08-08 08:17:53] NOTICE[1248][C-00004d79] chan_sip.c: Call from '' (145.239.11.166:26764) to extension '00447441399590' rejected because extension not found in context 'public'.
[2020-08-08 08:17:53] SECURITY[1275] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-08T08:17:53.292-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00447441399590",SessionID="0x7f27204f0348",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/14
...
2020-08-08 20:38:28
5.124.14.77 attackbots
(imapd) Failed IMAP login from 5.124.14.77 (IR/Iran/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug  8 16:48:12 ir1 dovecot[3110802]: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=5.124.14.77, lip=5.63.12.44, session=
2020-08-08 20:23:42
154.28.188.169 attack
want to loggin to my nas
2020-08-08 20:07:23
177.159.116.210 attackbotsspam
Aug  8 12:16:17 jumpserver sshd[67731]: Failed password for root from 177.159.116.210 port 35658 ssh2
Aug  8 12:18:12 jumpserver sshd[67757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.159.116.210  user=root
Aug  8 12:18:14 jumpserver sshd[67757]: Failed password for root from 177.159.116.210 port 33320 ssh2
...
2020-08-08 20:24:56
218.92.0.133 attack
Aug  8 14:17:55 * sshd[461]: Failed password for root from 218.92.0.133 port 46236 ssh2
Aug  8 14:18:08 * sshd[461]: error: maximum authentication attempts exceeded for root from 218.92.0.133 port 46236 ssh2 [preauth]
2020-08-08 20:27:41
218.28.99.248 attackbots
Aug  8 14:18:07 cp sshd[4064]: Failed password for root from 218.28.99.248 port 38336 ssh2
Aug  8 14:18:07 cp sshd[4064]: Failed password for root from 218.28.99.248 port 38336 ssh2
2020-08-08 20:28:46
109.96.127.90 attackbots
Automatic report - Banned IP Access
2020-08-08 20:10:01
85.93.20.149 attackspam
port scan and connect, tcp 3306 (mysql)
2020-08-08 20:44:28
88.129.250.205 attackbotsspam
SSH break in attempt
...
2020-08-08 20:30:49

最近上报的IP列表

104.218.62.253 177.246.4.123 82.90.106.11 222.138.51.217
179.225.100.162 197.254.7.86 70.197.67.202 185.10.57.134
94.231.80.100 187.112.179.50 91.237.182.62 202.46.62.14
185.156.177.139 59.18.254.5 31.201.23.164 157.230.245.204
109.242.210.88 187.235.0.32 93.47.216.89 2.87.45.225