142.4.18.55 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
142.4.18.106	attackbotsspam	\[2019-07-09 07:30:50\] NOTICE\[13443\] chan_sip.c: Registration from '"49" \' failed for '142.4.18.106:5078' - Wrong password \[2019-07-09 07:30:50\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-09T07:30:50.811-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="49",SessionID="0x7f02f85a4d78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/142.4.18.106/5078",Challenge="2958b01f",ReceivedChallenge="2958b01f",ReceivedHash="e04932c4f2116749447dd58ef6787be1" \[2019-07-09 07:30:50\] NOTICE\[13443\] chan_sip.c: Registration from '"49" \' failed for '142.4.18.106:5078' - Wrong password \[2019-07-09 07:30:50\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-09T07:30:50.945-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="49",SessionID="0x7f02f88cef08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/142.4.18.	2019-07-09 19:32:17
142.4.18.106	attackbotsspam	\[2019-07-08 08:11:44\] NOTICE\[13443\] chan_sip.c: Registration from '"10" \' failed for '142.4.18.106:5364' - Wrong password \[2019-07-08 08:11:44\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-08T08:11:44.313-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="10",SessionID="0x7f02f81c5a28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/142.4.18.106/5364",Challenge="7937a4a4",ReceivedChallenge="7937a4a4",ReceivedHash="0ddac5edce6f9ecf378977a9fb9698fb" \[2019-07-08 08:11:44\] NOTICE\[13443\] chan_sip.c: Registration from '"10" \' failed for '142.4.18.106:5364' - Wrong password \[2019-07-08 08:11:44\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-08T08:11:44.409-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="10",SessionID="0x7f02f867ac88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/142.4.18.	2019-07-08 20:36:46

Type

Details

Datetime

142.4.18.106

attackbotsspam

\[2019-07-09 07:30:50\] NOTICE\[13443\] chan_sip.c: Registration from '"49" \' failed for '142.4.18.106:5078' - Wrong password
\[2019-07-09 07:30:50\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-09T07:30:50.811-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="49",SessionID="0x7f02f85a4d78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/142.4.18.106/5078",Challenge="2958b01f",ReceivedChallenge="2958b01f",ReceivedHash="e04932c4f2116749447dd58ef6787be1"
\[2019-07-09 07:30:50\] NOTICE\[13443\] chan_sip.c: Registration from '"49" \' failed for '142.4.18.106:5078' - Wrong password
\[2019-07-09 07:30:50\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-09T07:30:50.945-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="49",SessionID="0x7f02f88cef08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/142.4.18.

2019-07-09 19:32:17

142.4.18.106

attackbotsspam

\[2019-07-08 08:11:44\] NOTICE\[13443\] chan_sip.c: Registration from '"10" \' failed for '142.4.18.106:5364' - Wrong password
\[2019-07-08 08:11:44\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-08T08:11:44.313-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="10",SessionID="0x7f02f81c5a28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/142.4.18.106/5364",Challenge="7937a4a4",ReceivedChallenge="7937a4a4",ReceivedHash="0ddac5edce6f9ecf378977a9fb9698fb"
\[2019-07-08 08:11:44\] NOTICE\[13443\] chan_sip.c: Registration from '"10" \' failed for '142.4.18.106:5364' - Wrong password
\[2019-07-08 08:11:44\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-08T08:11:44.409-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="10",SessionID="0x7f02f867ac88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/142.4.18.

2019-07-08 20:36:46

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.4.18.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19846
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;142.4.18.55.			IN	A

;; AUTHORITY SECTION:
.			571	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022100700 1800 900 604800 86400

;; Query time: 22 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 07 17:29:12 CST 2022
;; MSG SIZE  rcvd: 104

Host info

55.18.4.142.in-addr.arpa domain name pointer 142-4-18-55.unifiedlayer.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
55.18.4.142.in-addr.arpa	name = 142-4-18-55.unifiedlayer.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
162.243.133.48	attack	" "	2020-04-14 07:56:15
51.158.71.65	attack	Apr 13 19:07:44 eventyay sshd[393]: Failed password for root from 51.158.71.65 port 42426 ssh2 Apr 13 19:09:33 eventyay sshd[484]: Failed password for root from 51.158.71.65 port 43640 ssh2 ...	2020-04-14 08:30:24
106.13.52.209	attack	Lines containing failures of 106.13.52.209 Apr 13 00:38:36 kmh-vmh-003-fsn07 sshd[17788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.52.209 user=r.r Apr 13 00:38:38 kmh-vmh-003-fsn07 sshd[17788]: Failed password for r.r from 106.13.52.209 port 54306 ssh2 Apr 13 00:38:39 kmh-vmh-003-fsn07 sshd[17788]: Received disconnect from 106.13.52.209 port 54306:11: Bye Bye [preauth] Apr 13 00:38:39 kmh-vmh-003-fsn07 sshd[17788]: Disconnected from authenticating user r.r 106.13.52.209 port 54306 [preauth] Apr 13 00:47:00 kmh-vmh-003-fsn07 sshd[19250]: Invalid user annie from 106.13.52.209 port 33526 Apr 13 00:47:00 kmh-vmh-003-fsn07 sshd[19250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.52.209 Apr 13 00:47:02 kmh-vmh-003-fsn07 sshd[19250]: Failed password for invalid user annie from 106.13.52.209 port 33526 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=106.13	2020-04-14 08:11:00
122.55.190.12	attack	2020-04-13T23:16:47.326566abusebot-6.cloudsearch.cf sshd[9907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.55.190.12 user=root 2020-04-13T23:16:49.377850abusebot-6.cloudsearch.cf sshd[9907]: Failed password for root from 122.55.190.12 port 39705 ssh2 2020-04-13T23:21:01.106904abusebot-6.cloudsearch.cf sshd[10125]: Invalid user deploy from 122.55.190.12 port 46173 2020-04-13T23:21:01.113655abusebot-6.cloudsearch.cf sshd[10125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.55.190.12 2020-04-13T23:21:01.106904abusebot-6.cloudsearch.cf sshd[10125]: Invalid user deploy from 122.55.190.12 port 46173 2020-04-13T23:21:03.034337abusebot-6.cloudsearch.cf sshd[10125]: Failed password for invalid user deploy from 122.55.190.12 port 46173 ssh2 2020-04-13T23:25:15.306802abusebot-6.cloudsearch.cf sshd[10399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.55.19 ...	2020-04-14 08:25:28
139.59.65.8	attackspambots	WordPress login Brute force / Web App Attack on client site.	2020-04-14 08:18:40
202.43.146.107	attackbots	SSH Invalid Login	2020-04-14 07:50:19
103.1.209.245	attackspam	Apr 14 01:18:19 h2779839 sshd[9825]: Invalid user ord from 103.1.209.245 port 56224 Apr 14 01:18:22 h2779839 sshd[9825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.1.209.245 Apr 14 01:18:19 h2779839 sshd[9825]: Invalid user ord from 103.1.209.245 port 56224 Apr 14 01:18:22 h2779839 sshd[9825]: Failed password for invalid user ord from 103.1.209.245 port 56224 ssh2 Apr 14 01:22:33 h2779839 sshd[10006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.1.209.245 user=root Apr 14 01:22:42 h2779839 sshd[10006]: Failed password for root from 103.1.209.245 port 38688 ssh2 Apr 14 01:26:55 h2779839 sshd[10144]: Invalid user www from 103.1.209.245 port 49366 Apr 14 01:26:58 h2779839 sshd[10144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.1.209.245 Apr 14 01:26:55 h2779839 sshd[10144]: Invalid user www from 103.1.209.245 port 49366 Apr 14 01:27:00 h2779839 ...	2020-04-14 07:56:40
119.198.85.191	attackspam	2020-04-14T02:08:26.347328librenms sshd[21015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.198.85.191 user=root 2020-04-14T02:08:28.503782librenms sshd[21015]: Failed password for root from 119.198.85.191 port 52028 ssh2 2020-04-14T02:10:41.296562librenms sshd[21450]: Invalid user d from 119.198.85.191 port 58064 ...	2020-04-14 08:25:54
200.192.209.245	attack	(eximsyntax) Exim syntax errors from 200.192.209.245 (BR/Brazil/ip-200-192-209-245.novafibratelecom.com.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-04-13 21:42:22 SMTP call from [200.192.209.245] dropped: too many syntax or protocol errors (last command was "?\034?\032?\027?\031?\034?\033?\030?\032?\026?\016?\r?\v?\f? ?")	2020-04-14 07:54:54
128.199.169.102	attack	Invalid user spravce from 128.199.169.102 port 34241	2020-04-14 08:13:09
80.227.12.38	attackspambots	2020-04-13T19:41:08.383756abusebot-3.cloudsearch.cf sshd[7795]: Invalid user flansburg from 80.227.12.38 port 55226 2020-04-13T19:41:08.390309abusebot-3.cloudsearch.cf sshd[7795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.227.12.38 2020-04-13T19:41:08.383756abusebot-3.cloudsearch.cf sshd[7795]: Invalid user flansburg from 80.227.12.38 port 55226 2020-04-13T19:41:10.473633abusebot-3.cloudsearch.cf sshd[7795]: Failed password for invalid user flansburg from 80.227.12.38 port 55226 ssh2 2020-04-13T19:45:27.765204abusebot-3.cloudsearch.cf sshd[8027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.227.12.38 user=root 2020-04-13T19:45:29.406674abusebot-3.cloudsearch.cf sshd[8027]: Failed password for root from 80.227.12.38 port 33218 ssh2 2020-04-13T19:48:47.120641abusebot-3.cloudsearch.cf sshd[8397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.227.12.3 ...	2020-04-14 07:53:32
117.48.209.210	attack	Apr 13 01:41:58 XXX sshd[7050]: Invalid user uucp from 117.48.209.210 port 57148	2020-04-14 08:03:45
106.13.34.173	attack	Automatic report BANNED IP	2020-04-14 08:16:18
106.12.199.143	attack	SSH Invalid Login	2020-04-14 08:06:12
185.164.30.198	attack	ssh intrusion attempt	2020-04-14 08:04:27

Recently Reported IPs

38.15.152.193	45.72.54.173	43.154.216.109	177.234.142.238
146.190.27.68	188.124.47.89	149.102.144.122	38.242.129.34
46.246.80.7	187.209.0.244	177.11.24.250	177.212.170.35
38.107.182.10	38.15.153.215	189.85.112.20	186.129.178.99
154.49.216.94	185.164.59.132	45.93.16.169	43.251.164.73