142.44.164.166

Basic Info

City: unknown

Region: unknown

Country: Canada

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
142.44.164.251	attack	joshuajohannes.de 142.44.164.251 \[13/Jul/2019:01:12:04 +0200\] "POST /wp-login.php HTTP/1.1" 200 5606 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" joshuajohannes.de 142.44.164.251 \[13/Jul/2019:01:12:05 +0200\] "POST /wp-login.php HTTP/1.1" 200 5572 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" joshuajohannes.de 142.44.164.251 \[13/Jul/2019:01:12:06 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4098 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-07-13 11:18:08
142.44.164.251	attack	WordPress XMLRPC scan :: 142.44.164.251 0.372 BYPASS [05/Jul/2019:02:00:46 1000] [censored_1] "POST /xmlrpc.php HTTP/1.1" 503 21359 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-07-05 01:58:37
142.44.164.251	attackbotsspam	fail2ban honeypot	2019-07-03 05:38:26
142.44.164.251	attackbots	jannisjulius.de 142.44.164.251 \[25/Jun/2019:16:45:26 +0200\] "POST /wp-login.php HTTP/1.1" 200 6117 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" jannisjulius.de 142.44.164.251 \[25/Jun/2019:16:45:26 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4090 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-06-26 01:02:39

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.44.164.166
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53364
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;142.44.164.166.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400

;; Query time: 80 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 14:04:48 CST 2022
;; MSG SIZE  rcvd: 107

Host info

166.164.44.142.in-addr.arpa domain name pointer ip-142-44-164.eu.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
166.164.44.142.in-addr.arpa	name = ip-142-44-164.eu.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
119.160.135.166	attackspam	failed_logins	2020-08-06 12:28:23
96.125.168.246	attack	96.125.168.246 - - \[06/Aug/2020:05:54:31 +0200\] "POST /wp-login.php HTTP/1.0" 200 6524 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 96.125.168.246 - - \[06/Aug/2020:05:54:35 +0200\] "POST /wp-login.php HTTP/1.0" 200 6526 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 96.125.168.246 - - \[06/Aug/2020:05:54:41 +0200\] "POST /wp-login.php HTTP/1.0" 200 6382 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2020-08-06 12:58:32
183.111.96.20	attackspam	Aug 6 05:55:20 mout sshd[28253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.111.96.20 user=root Aug 6 05:55:23 mout sshd[28253]: Failed password for root from 183.111.96.20 port 43852 ssh2	2020-08-06 12:25:20
106.12.15.56	attackbotsspam	ssh brute force	2020-08-06 12:59:53
222.186.175.150	attackspam	Aug 6 06:37:10 vps1 sshd[25376]: Failed none for invalid user root from 222.186.175.150 port 22794 ssh2 Aug 6 06:37:10 vps1 sshd[25376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.150 user=root Aug 6 06:37:12 vps1 sshd[25376]: Failed password for invalid user root from 222.186.175.150 port 22794 ssh2 Aug 6 06:37:17 vps1 sshd[25376]: Failed password for invalid user root from 222.186.175.150 port 22794 ssh2 Aug 6 06:37:22 vps1 sshd[25376]: Failed password for invalid user root from 222.186.175.150 port 22794 ssh2 Aug 6 06:37:24 vps1 sshd[25376]: Failed password for invalid user root from 222.186.175.150 port 22794 ssh2 Aug 6 06:37:28 vps1 sshd[25376]: Failed password for invalid user root from 222.186.175.150 port 22794 ssh2 Aug 6 06:37:29 vps1 sshd[25376]: error: maximum authentication attempts exceeded for invalid user root from 222.186.175.150 port 22794 ssh2 [preauth] ...	2020-08-06 12:39:51
91.83.231.237	attackspambots	91.83.231.237 - - [06/Aug/2020:04:54:35 +0100] "POST /wp-login.php HTTP/1.1" 200 2006 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 91.83.231.237 - - [06/Aug/2020:04:54:39 +0100] "POST /wp-login.php HTTP/1.1" 200 1973 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 91.83.231.237 - - [06/Aug/2020:04:54:39 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-06 13:03:40
182.77.90.44	attack	Aug 6 06:25:13 ip106 sshd[1641]: Failed password for root from 182.77.90.44 port 52804 ssh2 ...	2020-08-06 12:55:57
35.234.28.121	attackspambots	Automatic report - Banned IP Access	2020-08-06 13:00:38
159.89.53.92	attackspam	Aug 5 21:10:25 mockhub sshd[720]: Failed password for root from 159.89.53.92 port 54020 ssh2 ...	2020-08-06 13:04:43
36.92.138.113	attackspambots	20/8/5@23:55:22: FAIL: Alarm-Network address from=36.92.138.113 ...	2020-08-06 12:27:29
209.17.96.154	attack	port scan and connect, tcp 8081 (blackice-icecap)	2020-08-06 12:47:05
82.103.122.122	attackbotsspam	Aug 6 05:54:57 zeus dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=82.103.122.122, lip=51.75.195.184, session= Aug 6 05:55:03 zeus dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=82.103.122.122, lip=51.75.195.184, session= Aug 6 05:55:06 zeus dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=82.103.122.122, lip=51.75.195.184, session= ...	2020-08-06 12:38:25
182.92.160.8	attackspam	$f2bV_matches	2020-08-06 13:06:16
103.86.130.43	attackbots	Aug 6 05:50:36 santamaria sshd\[24225\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.86.130.43 user=root Aug 6 05:50:38 santamaria sshd\[24225\]: Failed password for root from 103.86.130.43 port 48363 ssh2 Aug 6 05:54:59 santamaria sshd\[24286\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.86.130.43 user=root ...	2020-08-06 12:45:57
159.203.60.236	attackbots	Port Scan detected from 159.203.60.236 (CA/Canada/Ontario/Toronto (Old Toronto)/-). 4 hits in the last 245 seconds	2020-08-06 12:42:06

Recently Reported IPs

142.44.156.111	142.44.166.13	142.44.169.236	142.44.179.41
142.44.187.202	142.44.166.226	142.44.191.175	142.44.188.79
142.44.168.84	142.44.191.95	142.44.199.248	142.44.206.88
142.44.211.192	142.44.212.186	142.44.197.158	142.44.215.134
142.44.214.157	142.44.211.225	142.44.213.77	142.44.218.51