必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): Quebec

国家(country): Canada

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
142.44.161.132 attackspam
Oct 13 22:53:06 rocket sshd[4736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.161.132
Oct 13 22:53:08 rocket sshd[4736]: Failed password for invalid user christopher from 142.44.161.132 port 39000 ssh2
...
2020-10-14 07:18:16
142.44.161.132 attackspam
2020-10-01T11:05:35.096962hostname sshd[127565]: Failed password for invalid user keith from 142.44.161.132 port 40676 ssh2
...
2020-10-02 03:43:59
142.44.161.132 attackbots
2020-10-01T12:46:26+0200 Failed SSH Authentication/Brute Force Attack. (Server 5)
2020-10-01 19:56:38
142.44.161.132 attackspambots
Oct  1 00:04:30 cp sshd[30449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.161.132
2020-10-01 12:05:05
142.44.161.132 attack
IP blocked
2020-09-24 00:30:17
142.44.161.132 attackspambots
Sep 23 01:54:52 piServer sshd[7411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.161.132 
Sep 23 01:54:54 piServer sshd[7411]: Failed password for invalid user roberto from 142.44.161.132 port 33434 ssh2
Sep 23 01:59:19 piServer sshd[7885]: Failed password for root from 142.44.161.132 port 42582 ssh2
...
2020-09-23 08:35:10
142.44.161.132 attackspambots
Invalid user gmodserver from 142.44.161.132 port 39502
2020-09-22 02:12:00
142.44.161.132 attackspambots
Sep 21 06:23:29 ws12vmsma01 sshd[56639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.ip-142-44-161.net 
Sep 21 06:23:29 ws12vmsma01 sshd[56639]: Invalid user user from 142.44.161.132
Sep 21 06:23:31 ws12vmsma01 sshd[56639]: Failed password for invalid user user from 142.44.161.132 port 40676 ssh2
...
2020-09-21 17:56:45
142.44.161.132 attack
2020-08-26T02:17:20.453179hostname sshd[27508]: Failed password for root from 142.44.161.132 port 49972 ssh2
...
2020-08-27 04:07:49
142.44.161.132 attackspambots
"$f2bV_matches"
2020-08-23 17:17:16
142.44.161.132 attackbotsspam
Invalid user wur from 142.44.161.132 port 59106
2020-08-19 05:06:28
142.44.161.132 attackbots
Aug 14 21:01:24 php1 sshd\[13526\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.161.132  user=root
Aug 14 21:01:27 php1 sshd\[13526\]: Failed password for root from 142.44.161.132 port 45916 ssh2
Aug 14 21:05:36 php1 sshd\[13887\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.161.132  user=root
Aug 14 21:05:38 php1 sshd\[13887\]: Failed password for root from 142.44.161.132 port 56376 ssh2
Aug 14 21:09:48 php1 sshd\[14417\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.161.132  user=root
2020-08-15 15:39:26
142.44.161.132 attack
Aug  9 18:37:34 hanapaa sshd\[2088\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.161.132  user=root
Aug  9 18:37:36 hanapaa sshd\[2088\]: Failed password for root from 142.44.161.132 port 48602 ssh2
Aug  9 18:42:03 hanapaa sshd\[2516\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.161.132  user=root
Aug  9 18:42:05 hanapaa sshd\[2516\]: Failed password for root from 142.44.161.132 port 58804 ssh2
Aug  9 18:46:15 hanapaa sshd\[2814\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.161.132  user=root
2020-08-10 13:51:29
142.44.161.132 attack
Bruteforce detected by fail2ban
2020-08-01 23:55:54
142.44.161.132 attackbots
Invalid user admin1 from 142.44.161.132 port 42842
2020-08-01 07:40:30
WHOIS信息:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#



# start

NetRange:       142.44.128.0 - 142.44.255.255
CIDR:           142.44.128.0/17
NetName:        HO-2
NetHandle:      NET-142-44-128-0-1
Parent:         NET142 (NET-142-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   OVH Hosting, Inc. (HO-2)
RegDate:        2017-06-21
Updated:        2017-06-21
Ref:            https://rdap.arin.net/registry/ip/142.44.128.0



OrgName:        OVH Hosting, Inc.
OrgId:          HO-2
Address:        800-1801 McGill College
City:           Montreal
StateProv:      QC
PostalCode:     H3A 2N4
Country:        CA
RegDate:        2011-06-22
Updated:        2025-09-04
Ref:            https://rdap.arin.net/registry/entity/HO-2


OrgTechHandle: NOC11876-ARIN
OrgTechName:   NOC
OrgTechPhone:  +1-855-684-5463 
OrgTechEmail:  noc@ovh.net
OrgTechRef:    https://rdap.arin.net/registry/entity/NOC11876-ARIN

OrgAbuseHandle: ABUSE3956-ARIN
OrgAbuseName:   Abuse
OrgAbusePhone:  +1-855-684-5463 
OrgAbuseEmail:  abuse@ovh.ca
OrgAbuseRef:    https://rdap.arin.net/registry/entity/ABUSE3956-ARIN

# end


# start

NetRange:       142.44.160.0 - 142.44.163.255
CIDR:           142.44.160.0/22
NetName:        OVH-VPS-142-44-160
NetHandle:      NET-142-44-160-0-1
Parent:         HO-2 (NET-142-44-128-0-1)
NetType:        Reassigned
OriginAS:       
Organization:   OVH Hosting, Inc. (HO-2)
RegDate:        2017-07-21
Updated:        2017-07-21
Ref:            https://rdap.arin.net/registry/ip/142.44.160.0



OrgName:        OVH Hosting, Inc.
OrgId:          HO-2
Address:        800-1801 McGill College
City:           Montreal
StateProv:      QC
PostalCode:     H3A 2N4
Country:        CA
RegDate:        2011-06-22
Updated:        2025-09-04
Ref:            https://rdap.arin.net/registry/entity/HO-2


OrgTechHandle: NOC11876-ARIN
OrgTechName:   NOC
OrgTechPhone:  +1-855-684-5463 
OrgTechEmail:  noc@ovh.net
OrgTechRef:    https://rdap.arin.net/registry/entity/NOC11876-ARIN

OrgAbuseHandle: ABUSE3956-ARIN
OrgAbuseName:   Abuse
OrgAbusePhone:  +1-855-684-5463 
OrgAbuseEmail:  abuse@ovh.ca
OrgAbuseRef:    https://rdap.arin.net/registry/entity/ABUSE3956-ARIN

# end



#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.44.161.179
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 905
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;142.44.161.179.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026012801 1800 900 604800 86400

;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 29 09:00:46 CST 2026
;; MSG SIZE  rcvd: 107
HOST信息:
179.161.44.142.in-addr.arpa domain name pointer vps-ff2d2c09.vps.ovh.ca.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
179.161.44.142.in-addr.arpa	name = vps-ff2d2c09.vps.ovh.ca.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
68.99.85.62 attackbotsspam
Jun 11 13:19:42 ns37 sshd[22145]: Failed password for root from 68.99.85.62 port 45392 ssh2
Jun 11 13:19:42 ns37 sshd[22145]: Failed password for root from 68.99.85.62 port 45392 ssh2
2020-06-11 19:37:00
106.12.189.89 attackspambots
$f2bV_matches
2020-06-11 19:14:20
91.214.114.7 attackspambots
Automatic report BANNED IP
2020-06-11 19:31:37
49.235.133.208 attackbotsspam
Tried sshing with brute force.
2020-06-11 19:24:08
103.77.160.107 attackbots
103.77.160.107 - - [11/Jun/2020:05:30:55 +0200] "POST /xmlrpc.php HTTP/1.1" 403 461 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
103.77.160.107 - - [11/Jun/2020:05:48:48 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-06-11 19:39:05
2a02:a03f:3ea0:9200:8d13:1a7b:2b2b:9762 attackbots
Jun 11 06:34:26 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=2a02:a03f:3ea0:9200:8d13:1a7b:2b2b:9762, lip=2a01:7e01:e001:164::, session=
Jun 11 06:34:32 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=2a02:a03f:3ea0:9200:8d13:1a7b:2b2b:9762, lip=2a01:7e01:e001:164::, session=
Jun 11 06:34:32 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=2a02:a03f:3ea0:9200:8d13:1a7b:2b2b:9762, lip=2a01:7e01:e001:164::, session=
Jun 11 06:34:38 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=2a02:a03f:3ea0:9200:8d13:1a7b:2b2b:9762, lip=2a01:7e01:e001:164::, session=
2020-06-11 19:33:05
185.234.216.87 attackspambots
Jun 11 11:16:36 mail postfix/smtpd\[13011\]: warning: unknown\[185.234.216.87\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jun 11 11:28:47 mail postfix/smtpd\[12993\]: warning: unknown\[185.234.216.87\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jun 11 11:40:58 mail postfix/smtpd\[13767\]: warning: unknown\[185.234.216.87\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jun 11 12:18:01 mail postfix/smtpd\[15617\]: warning: unknown\[185.234.216.87\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
2020-06-11 19:13:52
132.148.29.143 attackspambots
Probing for vulnerable PHP code
2020-06-11 19:07:44
1.52.237.9 attackspambots
 TCP (SYN) 1.52.237.9:22590 -> port 80, len 44
2020-06-11 19:33:31
125.94.74.243 attack
Icarus honeypot on github
2020-06-11 19:25:18
74.82.47.35 attack
 TCP (SYN) 74.82.47.35:39893 -> port 27017, len 44
2020-06-11 19:23:48
191.209.82.106 attackspambots
SSH/22 MH Probe, BF, Hack -
2020-06-11 19:31:14
111.231.215.55 attackbotsspam
Jun 11 04:33:00 Tower sshd[5865]: Connection from 111.231.215.55 port 60634 on 192.168.10.220 port 22 rdomain ""
Jun 11 04:33:03 Tower sshd[5865]: Invalid user starbound from 111.231.215.55 port 60634
Jun 11 04:33:03 Tower sshd[5865]: error: Could not get shadow information for NOUSER
Jun 11 04:33:03 Tower sshd[5865]: Failed password for invalid user starbound from 111.231.215.55 port 60634 ssh2
Jun 11 04:33:03 Tower sshd[5865]: Received disconnect from 111.231.215.55 port 60634:11: Bye Bye [preauth]
Jun 11 04:33:03 Tower sshd[5865]: Disconnected from invalid user starbound 111.231.215.55 port 60634 [preauth]
2020-06-11 19:30:45
142.93.240.192 attack
Jun 10 16:54:29 finn sshd[25000]: Invalid user vbox from 142.93.240.192 port 50490
Jun 10 16:54:29 finn sshd[25000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.240.192
Jun 10 16:54:30 finn sshd[25000]: Failed password for invalid user vbox from 142.93.240.192 port 50490 ssh2
Jun 10 16:54:31 finn sshd[25000]: Received disconnect from 142.93.240.192 port 50490:11: Bye Bye [preauth]
Jun 10 16:54:31 finn sshd[25000]: Disconnected from 142.93.240.192 port 50490 [preauth]
Jun 10 17:05:46 finn sshd[28796]: Invalid user hades from 142.93.240.192 port 53530
Jun 10 17:05:46 finn sshd[28796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.240.192
Jun 10 17:05:48 finn sshd[28796]: Failed password for invalid user hades from 142.93.240.192 port 53530 ssh2
Jun 10 17:05:48 finn sshd[28796]: Received disconnect from 142.93.240.192 port 53530:11: Bye Bye [preauth]
Jun 10 17:05:48 finn ssh........
-------------------------------
2020-06-11 19:36:12
213.100.216.156 attackbotsspam
 TCP (SYN) 213.100.216.156:50871 -> port 22, len 44
2020-06-11 19:27:06

最近上报的IP列表

39.98.44.220 182.40.104.255 52.201.219.92 91.231.89.69
91.231.89.170 47.92.247.130 198.235.24.85 152.42.232.64
192.109.200.205 78.157.32.202 35.203.210.181 159.223.230.166
183.82.109.218 95.188.83.225 138.197.186.56 14.212.103.215
112.13.112.20 10.34.76.169 223.104.85.137 44.220.185.15