166.4.9.142 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 166.4.9.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34899
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;166.4.9.142.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020601 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 04:20:30 CST 2022
;; MSG SIZE  rcvd: 104

Host info

142.9.4.166.in-addr.arpa domain name pointer z-166-4-9-142.ip.fs.fed.us.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.9.4.166.in-addr.arpa	name = z-166-4-9-142.ip.fs.fed.us.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
144.217.40.3	attackbots	Dec 20 10:10:04 server sshd\[15645\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip3.ip-144-217-40.net user=root Dec 20 10:10:06 server sshd\[15645\]: Failed password for root from 144.217.40.3 port 39892 ssh2 Dec 20 10:22:21 server sshd\[18802\]: Invalid user lisa from 144.217.40.3 Dec 20 10:22:21 server sshd\[18802\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip3.ip-144-217-40.net Dec 20 10:22:22 server sshd\[18802\]: Failed password for invalid user lisa from 144.217.40.3 port 37990 ssh2 ...	2019-12-20 20:48:48
77.247.110.166	attackspam	\[2019-12-20 07:46:37\] NOTICE\[2839\] chan_sip.c: Registration from '"9" \' failed for '77.247.110.166:6119' - Wrong password \[2019-12-20 07:46:37\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-20T07:46:37.839-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="9",SessionID="0x7f0fb404d4d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.166/6119",Challenge="54568c3d",ReceivedChallenge="54568c3d",ReceivedHash="5916f48eb99b3bb3d39e74e470eb13f3" \[2019-12-20 07:46:37\] NOTICE\[2839\] chan_sip.c: Registration from '"9" \' failed for '77.247.110.166:6119' - Wrong password \[2019-12-20 07:46:37\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-20T07:46:37.932-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="9",SessionID="0x7f0fb44f0858",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.16	2019-12-20 20:51:35
41.191.218.42	attackspam	TCP Port Scanning	2019-12-20 20:40:12
117.254.186.98	attackbotsspam	Dec 20 13:13:22 vps691689 sshd[3200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.254.186.98 Dec 20 13:13:24 vps691689 sshd[3200]: Failed password for invalid user haruko from 117.254.186.98 port 34810 ssh2 Dec 20 13:22:05 vps691689 sshd[3398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.254.186.98 ...	2019-12-20 20:44:10
112.85.42.194	attack	Brute force attempt	2019-12-20 20:49:11
110.36.233.238	attackspambots	Unauthorized connection attempt detected from IP address 110.36.233.238 to port 445	2019-12-20 20:47:57
51.254.38.106	attackspam	ssh failed login	2019-12-20 20:33:58
183.99.77.161	attack	Dec 20 07:12:22 XXXXXX sshd[27012]: Invalid user napaporn from 183.99.77.161 port 13694	2019-12-20 20:56:36
136.0.0.198	attack	TCP Port Scanning	2019-12-20 21:03:32
119.123.59.81	attackspambots	Brute force SMTP login attempts.	2019-12-20 21:05:06
81.130.234.235	attackspambots	SSH Brute-Forcing (server2)	2019-12-20 20:52:15
40.92.65.69	attackbots	Dec 20 12:27:47 debian-2gb-vpn-nbg1-1 kernel: [1212426.397647] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.65.69 DST=78.46.192.101 LEN=52 TOS=0x02 PREC=0x00 TTL=111 ID=29166 DF PROTO=TCP SPT=16848 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0	2019-12-20 21:06:25
176.109.231.14	attack	" "	2019-12-20 21:01:23
77.3.135.31	attackbotsspam	TCP Port Scanning	2019-12-20 20:52:40
167.99.74.119	attackspambots	[munged]::443 167.99.74.119 - - [20/Dec/2019:07:24:55 +0100] "POST /[munged]: HTTP/1.1" 200 6188 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-12-20 20:30:06

Recently Reported IPs

123.10.19.20	19.183.179.183	108.11.15.10	216.30.0.109
11.240.163.87	108.194.54.208	127.216.22.125	218.226.26.113
211.250.40.230	109.7.21.16	90.137.1.20	146.142.138.126
90.1.14.19	90.12.0.126	90.11.2.86	90.47.73.204
8.11.137.69	136.230.76.69	137.169.98.52	6.3.121.122