142.44.246.107

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Canada

运营商(isp): OVH Hosting Inc.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	2020-05-11T11:26:13.667495mail.broermann.family sshd[3665]: Failed password for root from 142.44.246.107 port 34094 ssh2 2020-05-11T11:30:35.590548mail.broermann.family sshd[3881]: Invalid user mick from 142.44.246.107 port 40160 2020-05-11T11:30:35.594550mail.broermann.family sshd[3881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=server.plataformadocontador.com.br 2020-05-11T11:30:35.590548mail.broermann.family sshd[3881]: Invalid user mick from 142.44.246.107 port 40160 2020-05-11T11:30:37.632061mail.broermann.family sshd[3881]: Failed password for invalid user mick from 142.44.246.107 port 40160 ssh2 ...	2020-05-11 18:05:48

类型

评论内容

时间

attackspam

2020-05-11T11:26:13.667495mail.broermann.family sshd[3665]: Failed password for root from 142.44.246.107 port 34094 ssh2
2020-05-11T11:30:35.590548mail.broermann.family sshd[3881]: Invalid user mick from 142.44.246.107 port 40160
2020-05-11T11:30:35.594550mail.broermann.family sshd[3881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=server.plataformadocontador.com.br
2020-05-11T11:30:35.590548mail.broermann.family sshd[3881]: Invalid user mick from 142.44.246.107 port 40160
2020-05-11T11:30:37.632061mail.broermann.family sshd[3881]: Failed password for invalid user mick from 142.44.246.107 port 40160 ssh2
...

2020-05-11 18:05:48

相同子网IP讨论:

IP	类型	评论内容	时间
142.44.246.156	attack	2020-09-19 UTC: (21x) - root(21x)	2020-09-20 17:56:53
142.44.246.156	attackbotsspam	3 failed attempts at connecting to SSH.	2020-09-20 03:24:56
142.44.246.156	attack	(sshd) Failed SSH login from 142.44.246.156 (CA/Canada/156.ip-142-44-246.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 19 07:16:06 optimus sshd[22773]: Failed password for root from 142.44.246.156 port 54948 ssh2 Sep 19 07:16:09 optimus sshd[22773]: Failed password for root from 142.44.246.156 port 54948 ssh2 Sep 19 07:16:12 optimus sshd[22773]: Failed password for root from 142.44.246.156 port 54948 ssh2 Sep 19 07:16:14 optimus sshd[22773]: Failed password for root from 142.44.246.156 port 54948 ssh2 Sep 19 07:16:16 optimus sshd[22773]: Failed password for root from 142.44.246.156 port 54948 ssh2	2020-09-19 19:26:25
142.44.246.156	attackbots	2020-09-07T15:42[Censored Hostname] sshd[20863]: Failed password for root from 142.44.246.156 port 53626 ssh2 2020-09-07T15:42[Censored Hostname] sshd[20863]: Failed password for root from 142.44.246.156 port 53626 ssh2 2020-09-07T15:42[Censored Hostname] sshd[20863]: Failed password for root from 142.44.246.156 port 53626 ssh2[...]	2020-09-07 22:02:15
142.44.246.156	attack	$lgm	2020-09-07 13:47:04
142.44.246.156	attackspambots	Time: Sun Sep 6 22:02:28 2020 +0000 IP: 142.44.246.156 (CA/Canada/156.ip-142-44-246.net) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 6 22:02:17 ca-47-ede1 sshd[3816]: Failed password for root from 142.44.246.156 port 41060 ssh2 Sep 6 22:02:19 ca-47-ede1 sshd[3816]: Failed password for root from 142.44.246.156 port 41060 ssh2 Sep 6 22:02:22 ca-47-ede1 sshd[3816]: Failed password for root from 142.44.246.156 port 41060 ssh2 Sep 6 22:02:24 ca-47-ede1 sshd[3816]: Failed password for root from 142.44.246.156 port 41060 ssh2 Sep 6 22:02:26 ca-47-ede1 sshd[3816]: Failed password for root from 142.44.246.156 port 41060 ssh2	2020-09-07 06:21:25
142.44.246.156	attackspambots	20 attempts against mh-misbehave-ban on lake	2020-07-16 04:29:57
142.44.246.156	attackspambots	Tried sshing with brute force.	2020-07-04 17:41:10
142.44.246.156	attackspam	Jun 9 00:51:18 ws22vmsma01 sshd[159477]: Failed password for root from 142.44.246.156 port 43868 ssh2 ...	2020-06-09 17:02:43
142.44.246.156	attackbots	CMS (WordPress or Joomla) login attempt.	2020-04-18 15:24:41
142.44.246.156	attack	Brute force attempt	2020-03-31 18:33:58
142.44.246.156	attackspambots	Mar 23 15:20:15 vpn01 sshd[18167]: Failed password for root from 142.44.246.156 port 58452 ssh2 Mar 23 15:20:17 vpn01 sshd[18167]: Failed password for root from 142.44.246.156 port 58452 ssh2 ...	2020-03-23 22:45:49
142.44.246.172	attackbots	Feb 8 06:53:35 [host] sshd[25897]: Invalid user p Feb 8 06:53:35 [host] sshd[25897]: pam_unix(sshd: Feb 8 06:53:37 [host] sshd[25897]: Failed passwor	2020-02-08 14:05:20
142.44.246.156	attackspambots	Automatic report - Banned IP Access	2019-12-29 20:43:21
142.44.246.156	attackspambots	Automatic report - Banned IP Access	2019-12-04 18:34:23

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.44.246.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25682
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.44.246.107.			IN	A

;; AUTHORITY SECTION:
.			257	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051100 1800 900 604800 86400

;; Query time: 114 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 11 18:05:45 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

107.246.44.142.in-addr.arpa domain name pointer server.plataformadocontador.com.br.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
107.246.44.142.in-addr.arpa	name = server.plataformadocontador.com.br.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
78.192.6.4	attackbotsspam	Dec 4 19:52:19 kapalua sshd\[18428\]: Invalid user channing from 78.192.6.4 Dec 4 19:52:19 kapalua sshd\[18428\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.192.6.4 Dec 4 19:52:21 kapalua sshd\[18428\]: Failed password for invalid user channing from 78.192.6.4 port 52618 ssh2 Dec 4 19:57:51 kapalua sshd\[19084\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.192.6.4 user=root Dec 4 19:57:53 kapalua sshd\[19084\]: Failed password for root from 78.192.6.4 port 35342 ssh2	2019-12-05 14:01:19
222.186.175.163	attackspam	Dec 5 06:21:59 dedicated sshd[4683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.163 user=root Dec 5 06:22:01 dedicated sshd[4683]: Failed password for root from 222.186.175.163 port 45090 ssh2	2019-12-05 13:30:46
218.92.0.171	attack	Dec 5 02:48:27 server sshd\[30916\]: Failed password for root from 218.92.0.171 port 15141 ssh2 Dec 5 09:05:16 server sshd\[12193\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.171 user=root Dec 5 09:05:17 server sshd\[12193\]: Failed password for root from 218.92.0.171 port 1076 ssh2 Dec 5 09:05:21 server sshd\[12193\]: Failed password for root from 218.92.0.171 port 1076 ssh2 Dec 5 09:05:25 server sshd\[12193\]: Failed password for root from 218.92.0.171 port 1076 ssh2 ...	2019-12-05 14:09:05
222.252.30.117	attackbotsspam	Dec 5 06:35:56 vps691689 sshd[16636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.252.30.117 Dec 5 06:35:57 vps691689 sshd[16636]: Failed password for invalid user operator from 222.252.30.117 port 56284 ssh2 ...	2019-12-05 14:03:29
120.29.73.97	attackspam	firewall-block, port(s): 26/tcp	2019-12-05 13:59:46
186.84.172.7	attack	Dec 5 05:56:58 exim[13468]: [1\36] 1icjCD-0003VE-Ls H=(dynamic-ip-186841727.cable.net.co) [186.84.172.7] F= rejected after DATA: This message scored 103.5 spam points.	2019-12-05 13:34:35
159.65.144.233	attackspam	2019-12-05T04:56:38.751839abusebot-7.cloudsearch.cf sshd\[20225\]: Invalid user ftpuser from 159.65.144.233 port 34890	2019-12-05 13:54:05
144.217.243.216	attackbotsspam	Dec 5 06:29:00 ns381471 sshd[16341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.243.216 Dec 5 06:29:03 ns381471 sshd[16341]: Failed password for invalid user hamsa from 144.217.243.216 port 37370 ssh2	2019-12-05 13:42:48
132.248.204.99	attackbots	Dec 5 06:24:34 OPSO sshd\[27794\]: Invalid user test from 132.248.204.99 port 56192 Dec 5 06:24:34 OPSO sshd\[27794\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.248.204.99 Dec 5 06:24:36 OPSO sshd\[27794\]: Failed password for invalid user test from 132.248.204.99 port 56192 ssh2 Dec 5 06:31:42 OPSO sshd\[29739\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.248.204.99 user=root Dec 5 06:31:44 OPSO sshd\[29739\]: Failed password for root from 132.248.204.99 port 36666 ssh2	2019-12-05 13:49:56
176.67.218.45	attack	Automatic report - Port Scan Attack	2019-12-05 13:39:38
185.232.67.8	attackbots	Dec 5 06:30:39 mail sshd[18232]: Invalid user admin from 185.232.67.8 ...	2019-12-05 13:32:48
49.88.112.71	attackspam	Dec 5 05:20:01 zeus sshd[23486]: Failed password for root from 49.88.112.71 port 43655 ssh2 Dec 5 05:20:05 zeus sshd[23486]: Failed password for root from 49.88.112.71 port 43655 ssh2 Dec 5 05:20:09 zeus sshd[23486]: Failed password for root from 49.88.112.71 port 43655 ssh2 Dec 5 05:21:02 zeus sshd[23528]: Failed password for root from 49.88.112.71 port 57219 ssh2	2019-12-05 13:32:13
176.175.110.238	attackspambots	Dec 4 19:14:34 auw2 sshd\[13688\]: Invalid user ftp from 176.175.110.238 Dec 4 19:14:34 auw2 sshd\[13688\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static-176-175-110-238.ftth.abo.bbox.fr Dec 4 19:14:37 auw2 sshd\[13688\]: Failed password for invalid user ftp from 176.175.110.238 port 56562 ssh2 Dec 4 19:23:19 auw2 sshd\[14551\]: Invalid user test from 176.175.110.238 Dec 4 19:23:19 auw2 sshd\[14551\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static-176-175-110-238.ftth.abo.bbox.fr	2019-12-05 13:42:22
181.116.50.170	attack	Dec 5 01:49:49 firewall sshd[3986]: Invalid user jayne from 181.116.50.170 Dec 5 01:49:51 firewall sshd[3986]: Failed password for invalid user jayne from 181.116.50.170 port 28030 ssh2 Dec 5 01:57:00 firewall sshd[4152]: Invalid user server from 181.116.50.170 ...	2019-12-05 13:35:05
37.49.230.74	attack	\[2019-12-05 00:39:44\] NOTICE\[2754\] chan_sip.c: Registration from '"49" \' failed for '37.49.230.74:5469' - Wrong password \[2019-12-05 00:39:44\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-05T00:39:44.901-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="49",SessionID="0x7f26c445f668",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.230.74/5469",Challenge="7fced407",ReceivedChallenge="7fced407",ReceivedHash="9efb857ee32acfc040380bb59a6d01ab" \[2019-12-05 00:39:44\] NOTICE\[2754\] chan_sip.c: Registration from '"49" \' failed for '37.49.230.74:5469' - Wrong password \[2019-12-05 00:39:44\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-05T00:39:44.996-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="49",SessionID="0x7f26c4a2db78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.230.74/	2019-12-05 13:41:06

最近上报的IP列表

158.219.35.109	118.172.227.209	196.77.206.131	12.171.4.3
177.157.112.242	154.246.114.59	224.89.219.140	74.194.221.83
133.166.217.105	45.153.248.107	77.55.209.34	185.179.202.149
123.19.234.106	186.212.214.103	129.204.38.234	168.194.13.24
1.20.145.245	212.64.85.214	142.93.212.177	53.143.59.118