142.4.14.247 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): Unified Layer

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Automatic report - XMLRPC Attack	2020-09-05 21:06:46
attackbots	Automatic report - Banned IP Access	2020-09-05 05:31:10
attackspam	142.4.14.247 - - [26/Aug/2020:05:54:39 +0200] "GET /wp-login.php HTTP/1.1" 200 1689 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.4.14.247 - - [26/Aug/2020:05:54:40 +0200] "POST /wp-login.php HTTP/1.1" 200 1811 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.4.14.247 - - [26/Aug/2020:05:54:41 +0200] "GET /wp-login.php HTTP/1.1" 200 1689 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.4.14.247 - - [26/Aug/2020:05:54:42 +0200] "POST /wp-login.php HTTP/1.1" 200 1799 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.4.14.247 - - [26/Aug/2020:05:54:47 +0200] "GET /wp-login.php HTTP/1.1" 200 1689 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.4.14.247 - - [26/Aug/2020:05:54:53 +0200] "POST /wp-login.php HTTP/1.1" 200 1798 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/6 ...	2020-08-26 13:00:28
attack	142.4.14.247 - - [08/Aug/2020:14:07:00 +0100] "POST /wp-login.php HTTP/1.1" 200 1801 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.4.14.247 - - [08/Aug/2020:14:07:07 +0100] "POST /wp-login.php HTTP/1.1" 200 1798 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.4.14.247 - - [08/Aug/2020:14:07:07 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-08 23:23:48
attackspambots	142.4.14.247 - - [07/Aug/2020:21:27:26 +0100] "POST /wp-login.php HTTP/1.1" 200 1973 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.4.14.247 - - [07/Aug/2020:21:27:30 +0100] "POST /wp-login.php HTTP/1.1" 200 1954 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.4.14.247 - - [07/Aug/2020:21:27:33 +0100] "POST /wp-login.php HTTP/1.1" 200 1953 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-08 05:18:34

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.4.14.247
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12107
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.4.14.247.			IN	A

;; AUTHORITY SECTION:
.			534	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020080701 1800 900 604800 86400

;; Query time: 28 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Aug 08 05:18:31 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

247.14.4.142.in-addr.arpa domain name pointer server.advancedcomputing.ca.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
247.14.4.142.in-addr.arpa	name = server.advancedcomputing.ca.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
154.209.8.10	attackspam	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-20 13:02:16
5.105.62.18	attackbots	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-20 12:59:59
13.71.71.97	attack	TCP (SYN) 13.71.71.97:61888 -> port 22, len 40	2020-09-20 12:55:51
45.58.104.134	attackspam	Sep 19 22:02:15 vps639187 sshd\[30850\]: Invalid user pi from 45.58.104.134 port 36394 Sep 19 22:02:15 vps639187 sshd\[30850\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.58.104.134 Sep 19 22:02:17 vps639187 sshd\[30850\]: Failed password for invalid user pi from 45.58.104.134 port 36394 ssh2 ...	2020-09-20 13:23:26
190.219.176.76	attack	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-20 13:10:46
200.29.105.12	attackspam	Sep 20 06:55:28 h2646465 sshd[7469]: Invalid user test1 from 200.29.105.12 Sep 20 06:55:28 h2646465 sshd[7469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.105.12 Sep 20 06:55:28 h2646465 sshd[7469]: Invalid user test1 from 200.29.105.12 Sep 20 06:55:30 h2646465 sshd[7469]: Failed password for invalid user test1 from 200.29.105.12 port 47041 ssh2 Sep 20 07:08:35 h2646465 sshd[9286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.105.12 user=root Sep 20 07:08:37 h2646465 sshd[9286]: Failed password for root from 200.29.105.12 port 42113 ssh2 Sep 20 07:12:58 h2646465 sshd[9956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.105.12 user=root Sep 20 07:13:00 h2646465 sshd[9956]: Failed password for root from 200.29.105.12 port 47772 ssh2 Sep 20 07:17:25 h2646465 sshd[10624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.	2020-09-20 13:22:35
51.83.134.233	attack	$f2bV_matches	2020-09-20 13:11:02
212.70.149.36	attackbotsspam	2020-09-20 08:16:02 auth_plain authenticator failed for (User) [212.70.149.36]: 535 Incorrect authentication data (set_id=coyote@lavrinenko.info) 2020-09-20 08:16:19 auth_plain authenticator failed for (User) [212.70.149.36]: 535 Incorrect authentication data (set_id=robo@lavrinenko.info) ...	2020-09-20 13:21:15
95.248.84.50	attackspambots	Automatic report - Port Scan Attack	2020-09-20 13:19:54
193.35.51.23	attack	2020-09-20 07:12:36 dovecot_login authenticator failed for $\[193.35.51.23\]$ \[193.35.51.23\]: 535 Incorrect authentication data $set_id=german@sensecell.de$ 2020-09-20 07:12:43 dovecot_login authenticator failed for $\[193.35.51.23\]$ \[193.35.51.23\]: 535 Incorrect authentication data 2020-09-20 07:12:52 dovecot_login authenticator failed for $\[193.35.51.23\]$ \[193.35.51.23\]: 535 Incorrect authentication data 2020-09-20 07:12:57 dovecot_login authenticator failed for $\[193.35.51.23\]$ \[193.35.51.23\]: 535 Incorrect authentication data 2020-09-20 07:13:09 dovecot_login authenticator failed for $\[193.35.51.23\]$ \[193.35.51.23\]: 535 Incorrect authentication data 2020-09-20 07:13:13 dovecot_login authenticator failed for $\[193.35.51.23\]$ \[193.35.51.23\]: 535 Incorrect authentication data 2020-09-20 07:13:18 dovecot_login authenticator failed for $\[193.35.51.23\]$ \[193.35.51.23\]: 535 Incorrect authentication data 2020-09-20 07:13:23 dovecot_login authenticat ...	2020-09-20 13:16:41
120.92.139.2	attack	Ssh brute force	2020-09-20 13:17:46
192.42.116.14	attackbots	2020-09-20T06:44[Censored Hostname] sshd[14792]: Failed password for root from 192.42.116.14 port 40944 ssh2 2020-09-20T06:44[Censored Hostname] sshd[14792]: Failed password for root from 192.42.116.14 port 40944 ssh2 2020-09-20T06:44[Censored Hostname] sshd[14792]: Failed password for root from 192.42.116.14 port 40944 ssh2[...]	2020-09-20 13:25:27
20.194.36.46	attack	Sep 20 11:47:14 webhost01 sshd[1145]: Failed password for root from 20.194.36.46 port 54510 ssh2 ...	2020-09-20 12:53:37
3.216.7.137	attackspam	SSH 2020-09-20 01:23:12 3.216.7.137 139.99.22.221 > POST sketsagram.com /wp-login.php HTTP/1.1 - - 2020-09-20 07:47:14 3.216.7.137 139.99.22.221 > GET presidenonline.com /wp-login.php HTTP/1.1 - - 2020-09-20 07:47:15 3.216.7.137 139.99.22.221 > POST presidenonline.com /wp-login.php HTTP/1.1 - -	2020-09-20 13:09:15
14.99.176.210	attack	$f2bV_matches	2020-09-20 13:14:33

最近上报的IP列表

49.150.2.138	111.38.22.27	88.250.124.65	2.140.77.211
84.41.37.222	220.28.36.225	109.97.35.46	250.76.189.64
86.98.200.61	86.4.103.137	69.176.104.246	234.148.150.146
210.55.101.24	40.223.75.22	148.68.208.138	75.120.11.4
77.190.252.56	209.182.232.154	50.81.111.166	189.130.202.131