1.1.164.39 - IPInfo

Basic Info

City: Chiang Mai

Region: Chiang Mai

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.1.164.101	attackspambots	SSH bruteforce more then 50 syn to 22 port per 10 seconds.	2020-05-20 18:42:55
1.1.164.51	attackbots	Unauthorized connection attempt from IP address 1.1.164.51 on Port 445(SMB)	2020-01-15 20:25:01
1.1.164.50	attackspam	Chat Spam	2019-11-07 01:44:40

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.1.164.39
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38829
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.1.164.39.			IN	A

;; AUTHORITY SECTION:
.			177	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022302 1800 900 604800 86400

;; Query time: 83 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 24 08:55:52 CST 2022
;; MSG SIZE  rcvd: 103

Host info

39.164.1.1.in-addr.arpa domain name pointer node-753.pool-1-1.dynamic.totinternet.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
39.164.1.1.in-addr.arpa	name = node-753.pool-1-1.dynamic.totinternet.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
118.194.132.112	attackbotsspam	Invalid user appuser from 118.194.132.112 port 37722	2020-08-23 04:05:23
113.119.132.23	attackspambots	Aug 21 06:43:45 ovpn sshd[27778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.119.132.23 user=r.r Aug 21 06:43:48 ovpn sshd[27778]: Failed password for r.r from 113.119.132.23 port 18226 ssh2 Aug 21 06:43:48 ovpn sshd[27778]: Received disconnect from 113.119.132.23 port 18226:11: Bye Bye [preauth] Aug 21 06:43:48 ovpn sshd[27778]: Disconnected from 113.119.132.23 port 18226 [preauth] Aug 21 06:52:55 ovpn sshd[30013]: Invalid user phpuser from 113.119.132.23 Aug 21 06:52:55 ovpn sshd[30013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.119.132.23 Aug 21 06:52:57 ovpn sshd[30013]: Failed password for invalid user phpuser from 113.119.132.23 port 18227 ssh2 Aug 21 06:52:57 ovpn sshd[30013]: Received disconnect from 113.119.132.23 port 18227:11: Bye Bye [preauth] Aug 21 06:52:57 ovpn sshd[30013]: Disconnected from 113.119.132.23 port 18227 [preauth] ........ ----------------------------------------------- https://www.	2020-08-23 03:57:32
159.69.54.215	attackspam	TCP (SYN,ACK) 159.69.54.215:80 -> port 44877, len 44	2020-08-23 03:59:48
222.186.173.201	attack	TCP (SYN) 222.186.173.201:46671 -> port 22, len 44	2020-08-23 03:46:15
94.102.54.244	attackspambots	MAIL: User Login Brute Force Attempt	2020-08-23 04:06:29
210.91.184.184	attackbots	SSH login attempts.	2020-08-23 04:14:48
111.231.89.140	attackbots	Banned for a week because repeated abuses, for example SSH, but not only	2020-08-23 04:00:17
217.24.66.199	attack	Aug 22 19:13:15 mailrelay sshd[3005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.24.66.199 user=r.r Aug 22 19:13:18 mailrelay sshd[3005]: Failed password for r.r from 217.24.66.199 port 46446 ssh2 Aug 22 19:13:18 mailrelay sshd[3005]: Connection closed by 217.24.66.199 port 46446 [preauth] Aug 22 19:13:20 mailrelay sshd[3058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.24.66.199 user=r.r Aug 22 19:13:21 mailrelay sshd[3068]: Invalid user user from 217.24.66.199 port 46590 Aug 22 19:13:22 mailrelay sshd[3068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.24.66.199 Aug 22 19:13:22 mailrelay sshd[3058]: Failed password for r.r from 217.24.66.199 port 46526 ssh2 Aug 22 19:13:22 mailrelay sshd[3058]: Connection closed by 217.24.66.199 port 46526 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=217.24.66.199	2020-08-23 03:44:52
120.53.24.160	attack	2020-08-21 19:17:14 server sshd[32539]: Failed password for invalid user ansible from 120.53.24.160 port 41614 ssh2	2020-08-23 04:17:04
211.252.87.97	attackspam	Aug 22 21:44:45 home sshd[3358242]: Failed password for invalid user app from 211.252.87.97 port 51260 ssh2 Aug 22 21:48:53 home sshd[3359643]: Invalid user client1 from 211.252.87.97 port 54648 Aug 22 21:48:53 home sshd[3359643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.252.87.97 Aug 22 21:48:53 home sshd[3359643]: Invalid user client1 from 211.252.87.97 port 54648 Aug 22 21:48:54 home sshd[3359643]: Failed password for invalid user client1 from 211.252.87.97 port 54648 ssh2 ...	2020-08-23 04:06:04
106.53.220.103	attackspambots	Aug 22 18:25:20 124388 sshd[5059]: Failed password for root from 106.53.220.103 port 51418 ssh2 Aug 22 18:28:50 124388 sshd[5196]: Invalid user romeo from 106.53.220.103 port 36062 Aug 22 18:28:50 124388 sshd[5196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.220.103 Aug 22 18:28:50 124388 sshd[5196]: Invalid user romeo from 106.53.220.103 port 36062 Aug 22 18:28:52 124388 sshd[5196]: Failed password for invalid user romeo from 106.53.220.103 port 36062 ssh2	2020-08-23 04:00:05
201.209.109.220	attackspam	Unauthorised access (Aug 22) SRC=201.209.109.220 LEN=52 TTL=116 ID=23534 DF TCP DPT=445 WINDOW=8192 SYN	2020-08-23 04:01:00
111.231.231.22	attack	$f2bV_matches	2020-08-23 03:43:20
102.133.225.114	attackbotsspam	2020-08-22 21:33:49 dovecot_login authenticator failed for $ADMIN$ \[102.133.225.114\]: 535 Incorrect authentication data $set_id=support@opso.it$ 2020-08-22 21:36:06 dovecot_login authenticator failed for $ADMIN$ \[102.133.225.114\]: 535 Incorrect authentication data $set_id=support@opso.it$ 2020-08-22 21:38:24 dovecot_login authenticator failed for $ADMIN$ \[102.133.225.114\]: 535 Incorrect authentication data $set_id=support@opso.it$ 2020-08-22 21:40:42 dovecot_login authenticator failed for $ADMIN$ \[102.133.225.114\]: 535 Incorrect authentication data $set_id=support@opso.it$ 2020-08-22 21:43:00 dovecot_login authenticator failed for $ADMIN$ \[102.133.225.114\]: 535 Incorrect authentication data $set_id=support@opso.it$	2020-08-23 03:52:54
118.89.234.161	attack	2020-08-22T01:01:12.761394hostname sshd[58458]: Failed password for root from 118.89.234.161 port 40454 ssh2 ...	2020-08-23 03:44:24

Recently Reported IPs

1.1.164.37	1.1.164.44	1.1.164.47	1.1.164.49
1.1.164.5	1.1.164.56	1.1.164.61	1.1.164.62
1.1.164.70	1.1.164.73	1.1.164.83	1.1.164.84
1.1.164.88	1.1.167.12	1.1.167.120	1.1.167.122
1.1.167.128	1.1.167.133	1.1.167.139	1.1.167.140