Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: Microsoft Corporation

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
Unauthorized connection attempt detected from IP address 104.47.142.2 to port 1433
2020-07-22 16:44:51
attack
Jul 18 08:40:31 localhost sshd\[12593\]: Invalid user admin from 104.47.142.2 port 37196
Jul 18 08:40:31 localhost sshd\[12593\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.47.142.2
Jul 18 08:40:33 localhost sshd\[12593\]: Failed password for invalid user admin from 104.47.142.2 port 37196 ssh2
...
2020-07-18 19:54:22
attack
Jul 15 12:48:42 mout sshd[5974]: Invalid user admin from 104.47.142.2 port 27559
Jul 15 12:48:44 mout sshd[5974]: Failed password for invalid user admin from 104.47.142.2 port 27559 ssh2
Jul 15 12:48:45 mout sshd[5974]: Disconnected from invalid user admin 104.47.142.2 port 27559 [preauth]
2020-07-15 18:51:09
attack
Jul 14 21:05:15 mailman sshd[10717]: Invalid user admin from 104.47.142.2
2020-07-15 10:11:06
attack
Jun 30 07:21:44 vmd48417 sshd[18521]: Failed password for root from 104.47.142.2 port 13774 ssh2
2020-06-30 14:20:01
attackspam
SSH brute-force attempt
2020-06-26 14:27:53
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.47.142.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19999
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.47.142.2.			IN	A

;; AUTHORITY SECTION:
.			273	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020062600 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jun 26 14:27:41 CST 2020
;; MSG SIZE  rcvd: 116
Host info
Host 2.142.47.104.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		100.100.2.138
Address:	100.100.2.138#53

** server can't find 2.142.47.104.in-addr.arpa.: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
154.206.62.95 attack
 TCP (SYN) 154.206.62.95:45168 -> port 6875, len 44
2020-09-05 17:49:13
111.67.206.115 attack
Sep  5 09:26:25 sxvn sshd[126255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.67.206.115
2020-09-05 17:21:25
68.183.156.140 attackbotsspam
Lines containing failures of 68.183.156.140 (max 1000)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=68.183.156.140
2020-09-05 17:54:58
202.137.155.160 attack
Dovecot Invalid User Login Attempt.
2020-09-05 17:14:26
110.81.102.116 attack
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: 116.102.81.110.broad.qz.fj.dynamic.163data.com.cn.
2020-09-05 17:52:47
110.49.70.248 attackbots
110.49.70.248 (TH/Thailand/-), 12 distributed sshd attacks on account [root] in the last 3600 secs
2020-09-05 17:27:17
41.46.130.137 attackspambots
Port probing on unauthorized port 23
2020-09-05 17:32:31
119.45.112.28 attack
20 attempts against mh-ssh on echoip
2020-09-05 17:39:30
49.51.160.139 attackbots
Time:     Sat Sep  5 08:07:22 2020 +0000
IP:       49.51.160.139 (-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep  5 07:40:14 ca-16-ede1 sshd[78257]: Invalid user nexthink from 49.51.160.139 port 52316
Sep  5 07:40:16 ca-16-ede1 sshd[78257]: Failed password for invalid user nexthink from 49.51.160.139 port 52316 ssh2
Sep  5 07:53:09 ca-16-ede1 sshd[79899]: Invalid user dongwei from 49.51.160.139 port 36616
Sep  5 07:53:11 ca-16-ede1 sshd[79899]: Failed password for invalid user dongwei from 49.51.160.139 port 36616 ssh2
Sep  5 08:07:21 ca-16-ede1 sshd[81762]: Invalid user stats from 49.51.160.139 port 58818
2020-09-05 17:36:05
84.65.225.214 attackbots
Honeypot attack, port: 445, PTR: PTR record not found
2020-09-05 17:11:06
107.170.227.141 attack
SSH Brute-Force. Ports scanning.
2020-09-05 17:17:25
182.189.141.134 attackspambots
Sep  4 18:47:10 mellenthin postfix/smtpd[29055]: NOQUEUE: reject: RCPT from unknown[182.189.141.134]: 554 5.7.1 Service unavailable; Client host [182.189.141.134] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/182.189.141.134; from= to= proto=ESMTP helo=<[182.189.141.134]>
2020-09-05 17:39:56
80.157.192.53 attack
ET CINS Active Threat Intelligence Poor Reputation IP group 66 - port: 8693 proto: tcp cat: Misc Attackbytes: 60
2020-09-05 17:15:55
218.92.0.246 attackspam
Sep  5 05:33:55 NPSTNNYC01T sshd[8507]: Failed password for root from 218.92.0.246 port 46316 ssh2
Sep  5 05:34:07 NPSTNNYC01T sshd[8507]: error: maximum authentication attempts exceeded for root from 218.92.0.246 port 46316 ssh2 [preauth]
Sep  5 05:34:13 NPSTNNYC01T sshd[8537]: Failed password for root from 218.92.0.246 port 4878 ssh2
...
2020-09-05 17:50:30
78.30.48.193 attack
Sep  4 18:47:39 mellenthin postfix/smtpd[32402]: NOQUEUE: reject: RCPT from unknown[78.30.48.193]: 554 5.7.1 Service unavailable; Client host [78.30.48.193] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/78.30.48.193; from= to= proto=ESMTP helo=
2020-09-05 17:18:11

Recently Reported IPs

128.14.181.170 183.111.96.20 94.25.181.60 190.103.178.13
51.91.157.255 150.129.8.34 171.231.19.86 106.53.219.82
49.151.13.208 114.67.110.48 69.168.97.50 49.232.115.165
173.61.211.192 180.182.78.31 180.253.27.245 187.36.177.111
84.235.40.97 52.187.76.241 36.75.15.26 192.241.233.235