107.189.2.144 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
107.189.2.136	attackspam	107.189.2.136 - - [17/Sep/2020:06:32:20 +0200] "POST /wp-login.php HTTP/1.0" 200 4793 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-17 13:47:21
107.189.2.136	attack	SSH 2020-09-17 00:28:12 107.189.2.136 139.99.64.133 > POST tokorohani.com /wp-login.php HTTP/1.1 - - 2020-09-17 02:43:27 107.189.2.136 139.99.64.133 > GET meganisfa.com /wp-login.php HTTP/1.1 - - 2020-09-17 02:43:28 107.189.2.136 139.99.64.133 > POST meganisfa.com /wp-login.php HTTP/1.1 - -	2020-09-17 04:53:31
107.189.2.3	attackbotsspam	WordPress brute force	2020-06-07 05:56:02
107.189.2.3	attackspambots	107.189.2.3 - - [05/Jun/2020:05:54:44 +0200] "GET /wp-login.php HTTP/1.1" 200 6702 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 107.189.2.3 - - [05/Jun/2020:05:54:46 +0200] "POST /wp-login.php HTTP/1.1" 200 6953 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 107.189.2.3 - - [05/Jun/2020:05:54:47 +0200] "GET /wp-login.php HTTP/1.1" 200 6702 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-06-05 15:27:58
107.189.2.5	attackbotsspam	REQUESTED PAGE: /wp-login.php	2020-01-13 16:16:01
107.189.2.5	attack	Automatic report - XMLRPC Attack	2019-11-10 00:42:24
107.189.2.90	attackbots	Automatic report - Banned IP Access	2019-10-26 23:24:02
107.189.2.90	attack	www.handydirektreparatur.de 107.189.2.90 \[10/Oct/2019:13:58:40 +0200\] "POST /wp-login.php HTTP/1.1" 200 5665 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" www.handydirektreparatur.de 107.189.2.90 \[10/Oct/2019:13:58:40 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4114 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-10-10 21:17:21
107.189.2.139	attack	WordPress wp-login brute force :: 107.189.2.139 0.116 BYPASS [07/Oct/2019:22:40:19 1100] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-10-08 01:28:10
107.189.2.3	attackbots	Automatic report generated by Wazuh	2019-10-05 23:15:48
107.189.2.90	attackspam	masters-of-media.de 107.189.2.90 \[30/Sep/2019:22:56:33 +0200\] "POST /wp-login.php HTTP/1.1" 200 5856 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" masters-of-media.de 107.189.2.90 \[30/Sep/2019:22:56:33 +0200\] "POST /wp-login.php HTTP/1.1" 200 5811 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-10-01 07:32:36
107.189.2.90	attackspam	B: zzZZzz blocked content access	2019-09-29 14:29:43
107.189.2.3	attackbots	php WP PHPmyadamin ABUSE blocked for 12h	2019-09-28 18:54:57
107.189.2.90	attack	marleenrecords.breidenba.ch 107.189.2.90 \[07/Sep/2019:02:41:02 +0200\] "POST /wp-login.php HTTP/1.1" 200 5808 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" marleenrecords.breidenba.ch 107.189.2.90 \[07/Sep/2019:02:41:02 +0200\] "POST /wp-login.php HTTP/1.1" 200 5807 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-09-07 12:32:04
107.189.2.5	attackbotsspam	Automatic report - Banned IP Access	2019-08-14 20:38:04

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 107.189.2.144
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43086
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;107.189.2.144.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022031603 1800 900 604800 86400

;; Query time: 29 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 17 05:47:05 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 144.2.189.107.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 144.2.189.107.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
139.99.98.248	attackbotsspam	SSH Brute Force	2020-06-02 01:06:41
37.252.65.68	attackbotsspam	Honeypot attack, port: 445, PTR: host-68.65.252.37.ucom.am.	2020-06-02 01:35:12
176.194.249.179	attack	SMB Server BruteForce Attack	2020-06-02 01:06:11
43.240.247.234	attackspam	SSH Brute Force	2020-06-02 01:05:27
13.76.154.111	attackspam	3389BruteforceStormFW21	2020-06-02 01:12:58
45.142.152.131	attack	IP 45.142.152.131 attacked honeypot on port: 1433 at 6/1/2020 1:05:05 PM	2020-06-02 01:25:43
51.254.143.96	attack	Jun 1 14:05:15 vpn01 sshd[10611]: Failed password for sshd from 51.254.143.96 port 41230 ssh2 Jun 1 14:05:26 vpn01 sshd[10611]: error: maximum authentication attempts exceeded for sshd from 51.254.143.96 port 41230 ssh2 [preauth] ...	2020-06-02 01:08:27
146.185.218.202	attackspambots	Jun 1 13:43:35 web01.agentur-b-2.de postfix/smtpd[591656]: NOQUEUE: reject: RCPT from unknown[146.185.218.202]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Jun 1 13:44:11 web01.agentur-b-2.de postfix/smtpd[592715]: NOQUEUE: reject: RCPT from unknown[146.185.218.202]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Jun 1 13:44:11 web01.agentur-b-2.de postfix/smtpd[592715]: NOQUEUE: reject: RCPT from unknown[146.185.218.202]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Jun 1 13:44:12 web01.agentur-b-2.de postfix/smtpd[592715]: NOQUEUE: reject: RCPT from unknown[146.185.218.202]: 450 4.7.1 : Helo command rejected: Host not found; from= to=	2020-06-02 01:03:05
201.24.3.66	attack	1591013120 - 06/01/2020 14:05:20 Host: 201.24.3.66/201.24.3.66 Port: 445 TCP Blocked	2020-06-02 01:14:33
218.219.125.157	attackspambots	Automatic report - Port Scan	2020-06-02 01:16:51
103.15.51.199	attack	Jun 1 16:50:46 ns3042688 courier-pop3d: LOGIN FAILED, user=test@alycotools.biz, ip=\[::ffff:103.15.51.199\] ...	2020-06-02 01:03:35
123.206.59.235	attackbots	$f2bV_matches	2020-06-02 01:27:03
134.209.148.107	attackbotsspam	" "	2020-06-02 01:37:48
91.219.58.160	attackspambots	Lines containing failures of 91.219.58.160 May 31 21:31:13 penfold sshd[1671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.219.58.160 user=r.r May 31 21:31:14 penfold sshd[1671]: Failed password for r.r from 91.219.58.160 port 58390 ssh2 May 31 21:31:15 penfold sshd[1671]: Received disconnect from 91.219.58.160 port 58390:11: Bye Bye [preauth] May 31 21:31:15 penfold sshd[1671]: Disconnected from authenticating user r.r 91.219.58.160 port 58390 [preauth] May 31 21:38:51 penfold sshd[1973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.219.58.160 user=r.r May 31 21:38:52 penfold sshd[1973]: Failed password for r.r from 91.219.58.160 port 40010 ssh2 May 31 21:38:53 penfold sshd[1973]: Received disconnect from 91.219.58.160 port 40010:11: Bye Bye [preauth] May 31 21:38:53 penfold sshd[1973]: Disconnected from authenticating user r.r 91.219.58.160 port 40010 [preauth] May 31 21:41:3........ ------------------------------	2020-06-02 01:20:55
179.108.126.114	attack	2020-06-01 06:19:38 server sshd[99516]: Failed password for invalid user root from 179.108.126.114 port 40670 ssh2	2020-06-02 00:58:51

Recently Reported IPs

107.189.2.133	107.189.2.171	107.189.2.216	107.189.2.34
107.189.2.47	107.189.2.87	107.189.3.109	250.73.14.63
252.21.70.115	107.6.141.53	107.6.150.213	107.6.182.101
107.6.182.18	107.6.21.24	107.6.27.137	108.128.15.137
108.128.150.197	108.128.16.246	108.128.189.131	108.128.190.248