168.197.7.142 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
168.197.7.33	attackspam	Jun 4 13:51:06 mail.srvfarm.net postfix/smtps/smtpd[2498109]: warning: 168.197.7.33.lucasnet.com.br[168.197.7.33]: SASL PLAIN authentication failed: Jun 4 13:51:06 mail.srvfarm.net postfix/smtps/smtpd[2498109]: lost connection after AUTH from 168.197.7.33.lucasnet.com.br[168.197.7.33] Jun 4 13:54:24 mail.srvfarm.net postfix/smtps/smtpd[2499228]: warning: 168.197.7.33.lucasnet.com.br[168.197.7.33]: SASL PLAIN authentication failed: Jun 4 13:54:24 mail.srvfarm.net postfix/smtps/smtpd[2499228]: lost connection after AUTH from 168.197.7.33.lucasnet.com.br[168.197.7.33] Jun 4 13:55:47 mail.srvfarm.net postfix/smtps/smtpd[2499237]: warning: 168.197.7.33.lucasnet.com.br[168.197.7.33]: SASL PLAIN authentication failed:	2020-06-05 03:14:12
168.197.77.231	attackspam	" "	2019-11-23 16:36:53

Type

Details

Datetime

168.197.7.33

attackspam

Jun  4 13:51:06 mail.srvfarm.net postfix/smtps/smtpd[2498109]: warning: 168.197.7.33.lucasnet.com.br[168.197.7.33]: SASL PLAIN authentication failed: 
Jun  4 13:51:06 mail.srvfarm.net postfix/smtps/smtpd[2498109]: lost connection after AUTH from 168.197.7.33.lucasnet.com.br[168.197.7.33]
Jun  4 13:54:24 mail.srvfarm.net postfix/smtps/smtpd[2499228]: warning: 168.197.7.33.lucasnet.com.br[168.197.7.33]: SASL PLAIN authentication failed: 
Jun  4 13:54:24 mail.srvfarm.net postfix/smtps/smtpd[2499228]: lost connection after AUTH from 168.197.7.33.lucasnet.com.br[168.197.7.33]
Jun  4 13:55:47 mail.srvfarm.net postfix/smtps/smtpd[2499237]: warning: 168.197.7.33.lucasnet.com.br[168.197.7.33]: SASL PLAIN authentication failed:

2020-06-05 03:14:12

168.197.77.231

attackspam

" "

2019-11-23 16:36:53

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 168.197.7.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21382
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;168.197.7.142.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012902 1800 900 604800 86400

;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 10:22:48 CST 2025
;; MSG SIZE  rcvd: 106

Host info

142.7.197.168.in-addr.arpa domain name pointer 168.197.7-142.lucasinternet.com.br.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.7.197.168.in-addr.arpa	name = 168.197.7-142.lucasinternet.com.br.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
181.39.149.251	attackbots	sshd jail - ssh hack attempt	2019-12-06 03:41:21
194.67.90.112	attack	194.67.90.112 has been banned for [WebApp Attack] ...	2019-12-06 03:14:56
105.225.45.42	attackspam	firewall-block, port(s): 445/tcp	2019-12-06 03:39:13
113.219.83.168	attack	1575558055 - 12/05/2019 16:00:55 Host: 113.219.83.168/113.219.83.168 Port: 6667 TCP Blocked	2019-12-06 03:08:13
45.234.154.7	attackspambots	Unauthorized connection attempt from IP address 45.234.154.7 on Port 445(SMB)	2019-12-06 03:13:51
111.231.50.90	attackspambots	Dec 5 19:38:45 eventyay sshd[13412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.50.90 Dec 5 19:38:46 eventyay sshd[13412]: Failed password for invalid user nfs from 111.231.50.90 port 35472 ssh2 Dec 5 19:44:59 eventyay sshd[13568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.50.90 ...	2019-12-06 03:10:17
123.16.250.17	attackbots	Unauthorized connection attempt from IP address 123.16.250.17 on Port 445(SMB)	2019-12-06 03:08:55
190.60.75.134	attack	Dec 5 19:46:37 MK-Soft-VM7 sshd[25131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.60.75.134 Dec 5 19:46:39 MK-Soft-VM7 sshd[25131]: Failed password for invalid user owu from 190.60.75.134 port 64209 ssh2 ...	2019-12-06 03:20:55
45.141.86.122	attack	Fail2Ban Ban Triggered	2019-12-06 03:30:36
139.59.74.23	attackbotsspam	2019-12-05T15:00:42Z - RDP login failed multiple times. (139.59.74.23)	2019-12-06 03:24:47
222.186.175.154	attackspam	2019-12-05T19:13:37.792161abusebot-2.cloudsearch.cf sshd\[29865\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.154 user=root	2019-12-06 03:16:15
100.8.79.226	attackspambots	firewall-block, port(s): 1433/tcp	2019-12-06 03:42:31
179.178.192.26	attackbotsspam	Unauthorized connection attempt from IP address 179.178.192.26 on Port 445(SMB)	2019-12-06 03:41:48
62.234.131.141	attackbots	Dec 5 16:07:06 localhost sshd\[24368\]: Invalid user smmsp from 62.234.131.141 port 41856 Dec 5 16:07:06 localhost sshd\[24368\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.131.141 Dec 5 16:07:08 localhost sshd\[24368\]: Failed password for invalid user smmsp from 62.234.131.141 port 41856 ssh2	2019-12-06 03:25:52
180.124.236.112	attackbotsspam	Dec 5 16:00:42 grey postfix/smtpd\[5731\]: NOQUEUE: reject: RCPT from unknown\[180.124.236.112\]: 554 5.7.1 Service unavailable\; Client host \[180.124.236.112\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[180.124.236.112\]\; from=\ to=\ proto=ESMTP helo=\ ...	2019-12-06 03:24:24

Recently Reported IPs

84.105.206.132	168.186.212.43	59.161.69.35	84.74.171.159
164.40.80.157	245.42.224.107	52.234.36.114	36.128.250.67
65.10.234.68	214.44.25.172	107.54.104.140	65.179.0.43
187.61.103.231	160.198.64.231	16.31.146.99	187.251.128.102
61.254.221.246	23.18.175.21	255.31.252.8	79.123.196.99