必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
142.44.240.178 attackbots
Aug 26 14:24:59 vlre-nyc-1 sshd\[14468\]: Invalid user gerrit from 142.44.240.178
Aug 26 14:24:59 vlre-nyc-1 sshd\[14468\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.240.178
Aug 26 14:25:01 vlre-nyc-1 sshd\[14468\]: Failed password for invalid user gerrit from 142.44.240.178 port 39564 ssh2
Aug 26 14:28:14 vlre-nyc-1 sshd\[14502\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.240.178  user=root
Aug 26 14:28:16 vlre-nyc-1 sshd\[14502\]: Failed password for root from 142.44.240.178 port 52602 ssh2
Aug 26 14:30:14 vlre-nyc-1 sshd\[14526\]: Invalid user support from 142.44.240.178
Aug 26 14:30:14 vlre-nyc-1 sshd\[14526\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.240.178
Aug 26 14:30:16 vlre-nyc-1 sshd\[14526\]: Failed password for invalid user support from 142.44.240.178 port 54070 ssh2
Aug 26 14:32:03 vlre-nyc-1 sshd\[14547\]
...
2020-08-27 03:27:46
142.44.240.82 attackspam
142.44.240.82 - - [15/Aug/2020:14:48:15 +0100] "POST /wp-login.php HTTP/1.1" 200 2415 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.44.240.82 - - [15/Aug/2020:14:48:16 +0100] "POST /wp-login.php HTTP/1.1" 200 2364 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.44.240.82 - - [15/Aug/2020:14:48:16 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-15 22:16:21
142.44.240.82 attackbots
Automatic report generated by Wazuh
2020-08-04 06:24:03
142.44.240.82 attackspambots
142.44.240.82 - - [19/Jul/2020:20:01:23 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.44.240.82 - - [19/Jul/2020:20:01:26 +0200] "POST /wp-login.php HTTP/1.1" 200 6377 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.44.240.82 - - [19/Jul/2020:20:01:27 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-07-20 02:12:37
142.44.240.82 attackspambots
xmlrpc attack
2020-07-16 15:16:24
142.44.240.82 attackbots
12.07.2020 05:55:52 - Wordpress fail 
Detected by ELinOX-ALM
2020-07-12 12:53:08
142.44.240.82 attackbotsspam
142.44.240.82 - - [08/Jul/2020:07:16:48 +0100] "POST /wp-login.php HTTP/1.1" 200 2435 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.44.240.82 - - [08/Jul/2020:07:16:49 +0100] "POST /wp-login.php HTTP/1.1" 200 2408 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.44.240.82 - - [08/Jul/2020:07:16:50 +0100] "POST /wp-login.php HTTP/1.1" 200 2440 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-07-08 16:05:47
142.44.240.82 attackbots
142.44.240.82 - - \[26/Jun/2020:05:56:47 +0200\] "POST /wp-login.php HTTP/1.0" 200 6400 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
142.44.240.82 - - \[26/Jun/2020:05:56:49 +0200\] "POST /wp-login.php HTTP/1.0" 200 6412 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
142.44.240.82 - - \[26/Jun/2020:05:56:50 +0200\] "POST /wp-login.php HTTP/1.0" 200 6404 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-06-26 12:10:46
142.44.240.82 attackbotsspam
142.44.240.82 - - [24/Jun/2020:06:55:18 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.44.240.82 - - [24/Jun/2020:06:55:19 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.44.240.82 - - [24/Jun/2020:06:55:20 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-06-24 14:03:33
142.44.240.12 attack
12909/tcp
[2020-04-25]1pkt
2020-04-25 17:14:46
142.44.240.12 attackspam
5x Failed Password
2020-04-22 18:44:10
142.44.240.12 attack
Invalid user admin from 142.44.240.12 port 33518
2020-04-21 16:07:34
142.44.240.190 attack
Apr 19 00:47:11 Ubuntu-1404-trusty-64-minimal sshd\[27972\]: Invalid user ff from 142.44.240.190
Apr 19 00:47:12 Ubuntu-1404-trusty-64-minimal sshd\[27972\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.240.190
Apr 19 00:47:13 Ubuntu-1404-trusty-64-minimal sshd\[27972\]: Failed password for invalid user ff from 142.44.240.190 port 38786 ssh2
Apr 19 00:55:34 Ubuntu-1404-trusty-64-minimal sshd\[31509\]: Invalid user xx from 142.44.240.190
Apr 19 00:55:34 Ubuntu-1404-trusty-64-minimal sshd\[31509\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.240.190
2020-04-19 07:03:59
142.44.240.190 attackbots
Apr 18 14:59:00 firewall sshd[6187]: Failed password for invalid user userftp from 142.44.240.190 port 35616 ssh2
Apr 18 15:03:33 firewall sshd[6319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.240.190  user=root
Apr 18 15:03:35 firewall sshd[6319]: Failed password for root from 142.44.240.190 port 54230 ssh2
...
2020-04-19 02:32:37
142.44.240.12 attack
Apr 17 19:25:37 hpm sshd\[17424\]: Invalid user test from 142.44.240.12
Apr 17 19:25:37 hpm sshd\[17424\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=irc.zonenet.org
Apr 17 19:25:40 hpm sshd\[17424\]: Failed password for invalid user test from 142.44.240.12 port 60162 ssh2
Apr 17 19:28:18 hpm sshd\[17610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=irc.zonenet.org  user=root
Apr 17 19:28:19 hpm sshd\[17610\]: Failed password for root from 142.44.240.12 port 35900 ssh2
2020-04-18 15:12:22
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.44.240.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5807
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;142.44.240.74.			IN	A

;; AUTHORITY SECTION:
.			531	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400

;; Query time: 183 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 04:21:33 CST 2022
;; MSG SIZE  rcvd: 106
HOST信息:
74.240.44.142.in-addr.arpa domain name pointer vps-87da8f7c.vps.ovh.ca.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
74.240.44.142.in-addr.arpa	name = vps-87da8f7c.vps.ovh.ca.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
185.90.118.18 attack
10/14/2019-00:46:25.013659 185.90.118.18 Protocol: 6 ET SCAN Potential SSH Scan
2019-10-14 12:56:42
178.62.28.79 attackspam
Oct 14 07:00:28 vpn01 sshd[30963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.28.79
Oct 14 07:00:30 vpn01 sshd[30963]: Failed password for invalid user WEB@2016 from 178.62.28.79 port 56188 ssh2
...
2019-10-14 13:16:59
51.75.202.218 attack
Oct 14 05:48:28 rotator sshd\[26856\]: Invalid user 123@ABC from 51.75.202.218Oct 14 05:48:30 rotator sshd\[26856\]: Failed password for invalid user 123@ABC from 51.75.202.218 port 56288 ssh2Oct 14 05:52:30 rotator sshd\[27641\]: Invalid user 123@ABC from 51.75.202.218Oct 14 05:52:32 rotator sshd\[27641\]: Failed password for invalid user 123@ABC from 51.75.202.218 port 42852 ssh2Oct 14 05:56:33 rotator sshd\[28427\]: Invalid user Root@12345 from 51.75.202.218Oct 14 05:56:35 rotator sshd\[28427\]: Failed password for invalid user Root@12345 from 51.75.202.218 port 57726 ssh2
...
2019-10-14 13:22:10
136.243.82.137 attackspam
WordPress (CMS) attack attempts.
Date: 2019 Oct 14. 04:23:52
Source IP: 136.243.82.137

Portion of the log(s):
136.243.82.137 - [14/Oct/2019:04:23:50 +0200] "POST /wp-login.php HTTP/1.1" 200 2419 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
136.243.82.137 - [14/Oct/2019:04:23:49 +0200] "POST /wp-login.php HTTP/1.1" 200 2419 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
136.243.82.137 - [14/Oct/2019:04:23:49 +0200] "POST /wp-login.php HTTP/1.1" 200 2415 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
136.243.82.137 - [14/Oct/2019:04:23:48 +0200] "POST /wp-login.php HTTP/1.1" 200 2418 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
136.243.82.137 - [14/Oct/2019:04:23:47 +0200] "POST /wp-login.php HTTP/1.1" 200 2414 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ....
2019-10-14 12:59:51
51.91.193.116 attackspam
Oct 14 07:53:46 server sshd\[4346\]: User root from 51.91.193.116 not allowed because listed in DenyUsers
Oct 14 07:53:46 server sshd\[4346\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.193.116  user=root
Oct 14 07:53:47 server sshd\[4346\]: Failed password for invalid user root from 51.91.193.116 port 49852 ssh2
Oct 14 07:57:53 server sshd\[30279\]: User root from 51.91.193.116 not allowed because listed in DenyUsers
Oct 14 07:57:53 server sshd\[30279\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.193.116  user=root
2019-10-14 13:09:35
81.22.45.202 attack
2019-10-14T07:05:57.708758+02:00 lumpi kernel: [851969.303641] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.202 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=58323 PROTO=TCP SPT=51561 DPT=3373 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-10-14 13:27:22
203.83.170.34 attack
IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/203.83.170.34/ 
 BD - 1H : (20)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : BD 
 NAME ASN : ASN17471 
 
 IP : 203.83.170.34 
 
 CIDR : 203.83.170.0/24 
 
 PREFIX COUNT : 62 
 
 UNIQUE IP COUNT : 15872 
 
 
 WYKRYTE ATAKI Z ASN17471 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-10-14 05:56:41 
 
 INFO : Port SERVER 80 Scan Detected and Blocked by ADMIN  - data recovery
2019-10-14 13:20:34
37.229.253.219 attack
WEB SPAM: Obeliva 5mg (Обетихолевая кислота)- Обелива (Obeticholic Acid) - аналог Ocaliva 
представляет собой лекарство на основе компонентов, 
эффективно воздействующих на организм. 
Если употреблять таблетки правильно, можно справиться с опасной болезнью: 
Биллинарным циррозом печени. 
Сходите в больницу и пообщайтесь с доктором, 
который назначит индивидуальную схему приема таблеток. 
Можно Ob
2019-10-14 13:07:37
45.76.91.219 attackspambots
*Port Scan* detected from 45.76.91.219 (DE/Germany/45.76.91.219.vultr.com). 4 hits in the last 291 seconds
2019-10-14 13:01:35
49.235.139.216 attack
Oct 14 06:57:32 tux-35-217 sshd\[25849\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.139.216  user=root
Oct 14 06:57:35 tux-35-217 sshd\[25849\]: Failed password for root from 49.235.139.216 port 57610 ssh2
Oct 14 07:02:26 tux-35-217 sshd\[25867\]: Invalid user 123 from 49.235.139.216 port 36156
Oct 14 07:02:26 tux-35-217 sshd\[25867\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.139.216
...
2019-10-14 13:20:15
81.30.212.14 attackbotsspam
DATE:2019-10-14 05:56:56, IP:81.30.212.14, PORT:ssh SSH brute force auth on honeypot server (honey-neo-dc)
2019-10-14 13:12:28
79.106.225.164 attackspam
2019-10-13 22:56:37 dovecot_plain authenticator failed for (thebighonker.lerctr.org) [79.106.225.164]:50636 I=[192.147.25.65]:587: 535 Incorrect authentication data (set_id=rosebud@lerctr.org)
2019-10-13 22:56:45 dovecot_plain authenticator failed for (thebighonker.lerctr.org) [79.106.225.164]:50654 I=[192.147.25.65]:587: 535 Incorrect authentication data (set_id=rosebud@lerctr.org)
2019-10-13 22:56:56 dovecot_plain authenticator failed for (thebighonker.lerctr.org) [79.106.225.164]:50688 I=[192.147.25.65]:587: 535 Incorrect authentication data (set_id=rosebud@lerctr.org)
...
2019-10-14 13:13:19
209.85.167.65 attackspam
Same person from U.S.A. Google LLC  1600 Amphitheatre Parkway 94403 Mountain View Californie using a VPN
2019-10-14 13:15:21
93.30.221.166 attack
Oct 14 05:57:03 MainVPS sshd[24944]: Invalid user pi from 93.30.221.166 port 35418
Oct 14 05:57:03 MainVPS sshd[24945]: Invalid user pi from 93.30.221.166 port 35420
Oct 14 05:57:03 MainVPS sshd[24944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.30.221.166
Oct 14 05:57:03 MainVPS sshd[24944]: Invalid user pi from 93.30.221.166 port 35418
Oct 14 05:57:06 MainVPS sshd[24944]: Failed password for invalid user pi from 93.30.221.166 port 35418 ssh2
Oct 14 05:57:03 MainVPS sshd[24945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.30.221.166
Oct 14 05:57:03 MainVPS sshd[24945]: Invalid user pi from 93.30.221.166 port 35420
Oct 14 05:57:06 MainVPS sshd[24945]: Failed password for invalid user pi from 93.30.221.166 port 35420 ssh2
...
2019-10-14 13:07:15
196.38.70.24 attack
Oct 14 06:56:51 bouncer sshd\[9040\]: Invalid user Bruce2017 from 196.38.70.24 port 29256
Oct 14 06:56:51 bouncer sshd\[9040\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.38.70.24 
Oct 14 06:56:52 bouncer sshd\[9040\]: Failed password for invalid user Bruce2017 from 196.38.70.24 port 29256 ssh2
...
2019-10-14 13:26:39

最近上报的IP列表

142.54.166.99 142.44.255.113 142.54.174.179 142.54.174.222
142.54.176.243 142.54.176.244 142.54.178.10 142.54.177.234
142.54.182.122 142.54.182.106 142.54.185.186 142.54.224.230
142.54.184.236 142.54.189.122 142.54.228.135 142.54.233.185
142.54.244.100 142.75.67.212 142.74.2.16 142.78.200.66