Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Canada

Internet Service Provider: Prorms LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Jun 23 22:10:46 tux-35-217 sshd\[9771\]: Invalid user ts3server from 142.44.158.48 port 55728
Jun 23 22:10:46 tux-35-217 sshd\[9771\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.158.48
Jun 23 22:10:48 tux-35-217 sshd\[9771\]: Failed password for invalid user ts3server from 142.44.158.48 port 55728 ssh2
Jun 23 22:11:04 tux-35-217 sshd\[9773\]: Invalid user teamspeak from 142.44.158.48 port 43860
Jun 23 22:11:04 tux-35-217 sshd\[9773\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.158.48
...
2019-06-24 04:47:19
Comments on same subnet:
IP Type Details Datetime
142.44.158.32 attack
Repeated RDP login failures. Last user: Temp1
2020-06-11 20:55:10
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.44.158.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43821
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;142.44.158.48.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062001 1800 900 604800 86400

;; Query time: 236 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jun 21 08:08:03 CST 2019
;; MSG SIZE  rcvd: 117
Host info
48.158.44.142.in-addr.arpa domain name pointer cl01np1.vanttech.com.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
48.158.44.142.in-addr.arpa	name = cl01np1.vanttech.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
45.143.220.125 attackbotsspam
Port Scan
2020-04-29 15:34:13
47.205.162.158 attackbotsspam
DATE:2020-04-29 05:57:31, IP:47.205.162.158, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)
2020-04-29 15:13:52
178.128.144.14 attack
Apr 29 08:27:37 v22019038103785759 sshd\[32691\]: Invalid user andrei from 178.128.144.14 port 56980
Apr 29 08:27:37 v22019038103785759 sshd\[32691\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.144.14
Apr 29 08:27:39 v22019038103785759 sshd\[32691\]: Failed password for invalid user andrei from 178.128.144.14 port 56980 ssh2
Apr 29 08:34:45 v22019038103785759 sshd\[683\]: Invalid user zha from 178.128.144.14 port 55028
Apr 29 08:34:45 v22019038103785759 sshd\[683\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.144.14
...
2020-04-29 15:33:56
178.62.238.54 attackbots
$f2bV_matches
2020-04-29 15:22:53
177.55.157.82 attackspambots
Automatic report - Port Scan Attack
2020-04-29 15:40:56
171.231.168.45 attackspambots
Automatic report - Port Scan Attack
2020-04-29 15:52:17
219.250.188.106 attackbots
SSH/22 MH Probe, BF, Hack -
2020-04-29 15:48:28
14.169.100.208 attackspambots
2020-04-2905:57:251jTdqe-0008A0-Le\<=info@whatsup2013.chH=\(localhost\)[77.123.229.207]:58138P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3211id=a62d651c173ce91a39c7316269bd84a88b616830e9@whatsup2013.chT="Shouldtrytobeyourclosefriend"foradamsekinghonest@gmail.comdjhamersma@gmail.com2020-04-2905:54:301jTdno-0007p1-BX\<=info@whatsup2013.chH=\(localhost\)[14.169.100.208]:36667P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3066id=0d2fd4878ca7727e591caaf90dcac0ccff0d14bc@whatsup2013.chT="Ireallylikeyourpics"formmapatrick67@gmail.comtw62661@gmail.com2020-04-2905:53:581jTdnK-0007nY-5r\<=info@whatsup2013.chH=\(localhost\)[123.24.108.251]:43289P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3219id=2d9f56050e25f0fcdb9e287b8f48424e7dc2ed91@whatsup2013.chT="fromAnabeltomattm8331"formattm8331@gmail.comgerryechols5@gmail.com2020-04-2905:54:021jTdnN-0007nx-Uz\<=info@whatsup2013.chH=net-9
2020-04-29 15:17:18
222.186.42.7 attackbotsspam
Apr 29 09:46:18 eventyay sshd[26076]: Failed password for root from 222.186.42.7 port 41865 ssh2
Apr 29 09:46:20 eventyay sshd[26076]: Failed password for root from 222.186.42.7 port 41865 ssh2
Apr 29 09:46:22 eventyay sshd[26076]: Failed password for root from 222.186.42.7 port 41865 ssh2
...
2020-04-29 15:47:56
14.232.243.231 attack
Brute force attack to crack SMTP password (port 25 / 587)
2020-04-29 15:18:12
207.248.62.98 attackspambots
Invalid user ubuntu from 207.248.62.98 port 35872
2020-04-29 15:11:40
51.15.152.61 attack
[MK-Root1] Blocked by UFW
2020-04-29 15:23:38
45.254.25.135 attack
20/4/28@23:57:00: FAIL: Alarm-Intrusion address from=45.254.25.135
...
2020-04-29 15:43:11
222.186.52.86 attackbotsspam
Apr 29 09:34:53 v22018053744266470 sshd[3526]: Failed password for root from 222.186.52.86 port 38074 ssh2
Apr 29 09:43:12 v22018053744266470 sshd[4228]: Failed password for root from 222.186.52.86 port 16786 ssh2
Apr 29 09:43:15 v22018053744266470 sshd[4228]: Failed password for root from 222.186.52.86 port 16786 ssh2
...
2020-04-29 15:51:10
193.70.36.161 attackspam
Invalid user seymour from 193.70.36.161 port 53674
2020-04-29 15:48:55

Recently Reported IPs

66.57.55.210 80.251.246.137 103.229.72.39 148.255.12.249
167.98.135.186 198.55.123.235 91.191.223.229 224.245.230.98
99.8.0.206 71.63.63.56 17.162.149.138 13.66.230.46
23.101.169.3 191.205.98.157 115.139.218.1 46.12.162.60
60.143.201.130 5.237.59.243 56.36.25.141 122.168.39.112