必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
142.44.243.190 attack
Exploited Host.
2020-07-25 23:23:07
142.44.243.160 attackspambots
<6 unauthorized SSH connections
2020-05-08 15:34:15
142.44.243.160 attackbotsspam
May  4 00:49:21 meumeu sshd[26299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.243.160 
May  4 00:49:22 meumeu sshd[26299]: Failed password for invalid user marcio from 142.44.243.160 port 43208 ssh2
May  4 00:53:52 meumeu sshd[30460]: Failed password for root from 142.44.243.160 port 48750 ssh2
...
2020-05-04 07:10:26
142.44.243.160 attack
20 attempts against mh-ssh on cloud
2020-04-23 17:22:14
142.44.243.160 attack
Fail2Ban - SSH Bruteforce Attempt
2020-04-23 12:26:57
142.44.243.190 attack
2020-04-06T02:38:13.238478struts4.enskede.local sshd\[25312\]: Invalid user user3 from 142.44.243.190 port 37770
2020-04-06T02:38:13.246079struts4.enskede.local sshd\[25312\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.ip-142-44-243.net
2020-04-06T02:38:17.011930struts4.enskede.local sshd\[25312\]: Failed password for invalid user user3 from 142.44.243.190 port 37770 ssh2
2020-04-06T02:40:02.642733struts4.enskede.local sshd\[25367\]: Invalid user ubuntu from 142.44.243.190 port 57770
2020-04-06T02:40:02.650424struts4.enskede.local sshd\[25367\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.ip-142-44-243.net
...
2020-04-06 09:00:29
142.44.243.190 attackspambots
Tried sshing with brute force.
2020-04-02 06:29:04
142.44.243.190 attackbots
Mar 28 10:08:54 server sshd\[27528\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.ip-142-44-243.net  user=root
Mar 28 10:08:56 server sshd\[27528\]: Failed password for root from 142.44.243.190 port 34966 ssh2
Mar 28 10:10:39 server sshd\[28317\]: Invalid user test from 142.44.243.190
Mar 28 10:10:39 server sshd\[28317\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.ip-142-44-243.net 
Mar 28 10:10:41 server sshd\[28317\]: Failed password for invalid user test from 142.44.243.190 port 48964 ssh2
...
2020-03-28 16:11:53
142.44.243.190 attackbotsspam
Mar 27 21:00:53 jane sshd[3937]: Failed password for root from 142.44.243.190 port 43702 ssh2
Mar 27 21:02:35 jane sshd[6190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.243.190 
...
2020-03-28 05:07:23
142.44.243.190 attackbotsspam
Mar 24 21:46:17  sshd\[17456\]: User root from 190.ip-142-44-243.net not allowed because not listed in AllowUsersMar 24 21:46:19  sshd\[17456\]: Failed password for invalid user root from 142.44.243.190 port 55782 ssh2
...
2020-03-25 06:49:38
142.44.243.190 attackbots
$f2bV_matches_ltvn
2020-03-18 09:36:56
142.44.243.126 attack
fail2ban
2020-03-07 17:26:00
142.44.243.160 attackbots
Unauthorized connection attempt detected from IP address 142.44.243.160 to port 2220 [J]
2020-02-02 04:15:09
142.44.243.160 attackspambots
Unauthorized connection attempt detected from IP address 142.44.243.160 to port 2220 [J]
2020-01-11 23:07:14
142.44.243.160 attackbots
2019-12-31T16:47:52.524173vps751288.ovh.net sshd\[7650\]: Invalid user kiltz from 142.44.243.160 port 45144
2019-12-31T16:47:52.532969vps751288.ovh.net sshd\[7650\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.ip-142-44-243.net
2019-12-31T16:47:54.834720vps751288.ovh.net sshd\[7650\]: Failed password for invalid user kiltz from 142.44.243.160 port 45144 ssh2
2019-12-31T16:50:55.103610vps751288.ovh.net sshd\[7654\]: Invalid user eskedal from 142.44.243.160 port 60289
2019-12-31T16:50:55.113652vps751288.ovh.net sshd\[7654\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.ip-142-44-243.net
2020-01-01 06:14:17
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.44.243.113
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50759
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;142.44.243.113.			IN	A

;; AUTHORITY SECTION:
.			274	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 14:04:55 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
113.243.44.142.in-addr.arpa domain name pointer vps-28fe9c9e.vps.ovh.ca.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
113.243.44.142.in-addr.arpa	name = vps-28fe9c9e.vps.ovh.ca.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
210.14.69.76 attackspam
Invalid user admin from 210.14.69.76 port 34017
2020-04-01 14:18:50
182.86.227.240 attackspambots
Apr  1 06:24:07 host proftpd[31133]: 0.0.0.0 (182.86.227.240[182.86.227.240]) - USER anonymous: no such user found from 182.86.227.240 [182.86.227.240] to 163.172.107.87:21
...
2020-04-01 14:55:30
134.73.51.62 attackspambots
Apr  1 05:35:30 mail.srvfarm.net postfix/smtpd[1068652]: NOQUEUE: reject: RCPT from unknown[134.73.51.62]: 554 5.7.1 Service unavailable; Client host [134.73.51.62] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=
Apr  1 05:35:30 mail.srvfarm.net postfix/smtpd[1071960]: NOQUEUE: reject: RCPT from unknown[134.73.51.62]: 554 5.7.1 Service unavailable; Client host [134.73.51.62] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=
Apr  1 05:35:30 mail.srvfarm.net postfix/smtpd[1069650]: NOQUEUE: reject: RCPT from unknown[134.73.51.62]: 554 5.7.1 Service unavailable; Client host [134.73.51.62] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=
2020-04-01 14:26:51
222.186.42.137 attackspambots
SSH brute-force attempt
2020-04-01 14:52:23
185.156.73.52 attackspam
04/01/2020-02:21:49.205948 185.156.73.52 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-04-01 14:30:22
51.83.2.148 attack
51.83.2.148 - - \[01/Apr/2020:04:10:11 +0200\] "POST /wp-login.php HTTP/1.1" 200 9691 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
51.83.2.148 - - \[01/Apr/2020:05:53:21 +0200\] "POST /wp-login.php HTTP/1.1" 200 9691 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
...
2020-04-01 14:47:03
206.214.2.12 attackbots
(eximsyntax) Exim syntax errors from 206.214.2.12 (AG/Antigua and Barbuda/206-214-2-12.candw.ag): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-04-01 08:23:05 SMTP call from [206.214.2.12] dropped: too many syntax or protocol errors (last command was "?\034?\032?\027?\031?\034?\033?\030?\032?\026?\016?\r?\v?\f?	?")
2020-04-01 14:53:01
189.186.129.153 attackspambots
trying to access non-authorized port
2020-04-01 14:37:46
5.89.112.6 attackbots
Port probing on unauthorized port 23
2020-04-01 14:33:16
195.154.170.245 attackspambots
(mod_security) mod_security (id:225170) triggered by 195.154.170.245 (FR/France/195-154-170-245.rev.poneytelecom.eu): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Mar 31 23:53:36.475554 2020] [:error] [pid 7312:tid 47018766657280] [client 195.154.170.245:52160] [client 195.154.170.245] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cjthedj97.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cjthedj97.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "XoQQQDAU0kaR6cW5LXIU1AAAARg"]
2020-04-01 14:35:34
182.53.96.206 attackbotsspam
20/3/31@23:53:49: FAIL: Alarm-Intrusion address from=182.53.96.206
...
2020-04-01 14:25:35
222.186.52.39 attack
auto-add
2020-04-01 14:23:23
45.133.99.8 attackbotsspam
2020-04-01 08:08:44 dovecot_login authenticator failed for \(\[45.133.99.8\]\) \[45.133.99.8\]: 535 Incorrect authentication data \(set_id=support@nopcommerce.it\)
2020-04-01 08:08:54 dovecot_login authenticator failed for \(\[45.133.99.8\]\) \[45.133.99.8\]: 535 Incorrect authentication data
2020-04-01 08:09:05 dovecot_login authenticator failed for \(\[45.133.99.8\]\) \[45.133.99.8\]: 535 Incorrect authentication data
2020-04-01 08:09:12 dovecot_login authenticator failed for \(\[45.133.99.8\]\) \[45.133.99.8\]: 535 Incorrect authentication data
2020-04-01 08:09:26 dovecot_login authenticator failed for \(\[45.133.99.8\]\) \[45.133.99.8\]: 535 Incorrect authentication data
2020-04-01 14:14:52
178.128.20.9 attack
Apr  1 05:53:32 debian-2gb-nbg1-2 kernel: \[7972262.196830\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=178.128.20.9 DST=195.201.40.59 LEN=30 TOS=0x00 PREC=0x40 TTL=51 ID=11328 DF PROTO=UDP SPT=39465 DPT=33848 LEN=10
2020-04-01 14:38:51
89.248.168.217 attack
89.248.168.217 was recorded 7 times by 7 hosts attempting to connect to the following ports: 1053,1046. Incident counter (4h, 24h, all-time): 7, 25, 19178
2020-04-01 14:21:07

最近上报的IP列表

142.44.240.238 142.44.240.70 142.44.255.217 142.44.254.107
142.44.235.148 142.44.244.84 142.47.104.50 142.54.166.100
142.44.246.164 142.54.166.101 33.159.21.8 142.93.101.239
142.93.119.71 142.93.124.125 142.93.119.125 142.93.100.187
142.93.115.176 142.93.113.138 142.93.112.229 142.93.107.166