1.164.140.143 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Republic of China (ROC)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.164.140.99	attack	Jul 2 04:13:59 shadeyouvpn sshd[1105]: Invalid user ulrich from 1.164.140.99 Jul 2 04:13:59 shadeyouvpn sshd[1105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1-164-140-99.dynamic-ip.hinet.net Jul 2 04:14:02 shadeyouvpn sshd[1105]: Failed password for invalid user ulrich from 1.164.140.99 port 27699 ssh2 Jul 2 04:14:02 shadeyouvpn sshd[1105]: Received disconnect from 1.164.140.99: 11: Bye Bye [preauth] Jul 2 04:19:19 shadeyouvpn sshd[5678]: Invalid user nagios from 1.164.140.99 Jul 2 04:19:19 shadeyouvpn sshd[5678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1-164-140-99.dynamic-ip.hinet.net Jul 2 04:19:21 shadeyouvpn sshd[5678]: Failed password for invalid user nagios from 1.164.140.99 port 48995 ssh2 Jul 2 04:19:21 shadeyouvpn sshd[5678]: Received disconnect from 1.164.140.99: 11: Bye Bye [preauth] Jul 2 04:27:01 shadeyouvpn sshd[11548]: Invalid user bnjoroge from 1.16........ -------------------------------	2019-07-03 03:13:35
1.164.140.216	attack	Jun 28 01:06:40 vps200512 sshd\[9695\]: Invalid user anthony from 1.164.140.216 Jun 28 01:06:40 vps200512 sshd\[9695\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.164.140.216 Jun 28 01:06:42 vps200512 sshd\[9695\]: Failed password for invalid user anthony from 1.164.140.216 port 12946 ssh2 Jun 28 01:10:18 vps200512 sshd\[9798\]: Invalid user poll from 1.164.140.216 Jun 28 01:10:18 vps200512 sshd\[9798\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.164.140.216	2019-06-28 18:14:26

Type

Details

Datetime

1.164.140.99

attack

Jul  2 04:13:59 shadeyouvpn sshd[1105]: Invalid user ulrich from 1.164.140.99
Jul  2 04:13:59 shadeyouvpn sshd[1105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1-164-140-99.dynamic-ip.hinet.net 
Jul  2 04:14:02 shadeyouvpn sshd[1105]: Failed password for invalid user ulrich from 1.164.140.99 port 27699 ssh2
Jul  2 04:14:02 shadeyouvpn sshd[1105]: Received disconnect from 1.164.140.99: 11: Bye Bye [preauth]
Jul  2 04:19:19 shadeyouvpn sshd[5678]: Invalid user nagios from 1.164.140.99
Jul  2 04:19:19 shadeyouvpn sshd[5678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1-164-140-99.dynamic-ip.hinet.net 
Jul  2 04:19:21 shadeyouvpn sshd[5678]: Failed password for invalid user nagios from 1.164.140.99 port 48995 ssh2
Jul  2 04:19:21 shadeyouvpn sshd[5678]: Received disconnect from 1.164.140.99: 11: Bye Bye [preauth]
Jul  2 04:27:01 shadeyouvpn sshd[11548]: Invalid user bnjoroge from 1.16........
-------------------------------

2019-07-03 03:13:35

1.164.140.216

attack

Jun 28 01:06:40 vps200512 sshd\[9695\]: Invalid user anthony from 1.164.140.216
Jun 28 01:06:40 vps200512 sshd\[9695\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.164.140.216
Jun 28 01:06:42 vps200512 sshd\[9695\]: Failed password for invalid user anthony from 1.164.140.216 port 12946 ssh2
Jun 28 01:10:18 vps200512 sshd\[9798\]: Invalid user poll from 1.164.140.216
Jun 28 01:10:18 vps200512 sshd\[9798\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.164.140.216

2019-06-28 18:14:26

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.164.140.143
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49869
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.164.140.143.			IN	A

;; AUTHORITY SECTION:
.			39	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022400 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 24 13:41:09 CST 2022
;; MSG SIZE  rcvd: 106

Host info

143.140.164.1.in-addr.arpa domain name pointer 1-164-140-143.dynamic-ip.hinet.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
143.140.164.1.in-addr.arpa	name = 1-164-140-143.dynamic-ip.hinet.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
190.233.166.225	attackspam	2019-10-21 x@x 2019-10-21 20:50:22 unexpected disconnection while reading SMTP command from ([190.233.166.225]) [190.233.166.225]:26420 I=[10.100.18.20]:25 (error: Connection reset by peer) 2019-10-21 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=190.233.166.225	2019-10-22 06:24:42
222.186.175.151	attackbots	Oct 22 00:20:14 tux-35-217 sshd\[20497\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.151 user=root Oct 22 00:20:16 tux-35-217 sshd\[20497\]: Failed password for root from 222.186.175.151 port 17750 ssh2 Oct 22 00:20:20 tux-35-217 sshd\[20497\]: Failed password for root from 222.186.175.151 port 17750 ssh2 Oct 22 00:20:24 tux-35-217 sshd\[20497\]: Failed password for root from 222.186.175.151 port 17750 ssh2 ...	2019-10-22 06:34:11
49.231.222.7	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2019-10-22 06:46:48
192.241.249.53	attack	Oct 21 18:04:16 TORMINT sshd\[11361\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.249.53 user=root Oct 21 18:04:18 TORMINT sshd\[11361\]: Failed password for root from 192.241.249.53 port 52479 ssh2 Oct 21 18:09:01 TORMINT sshd\[11983\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.249.53 user=root ...	2019-10-22 06:37:35
203.130.192.242	attackbots	2019-10-22T05:08:34.811537enmeeting.mahidol.ac.th sshd\[30570\]: Invalid user leticia from 203.130.192.242 port 34186 2019-10-22T05:08:34.825585enmeeting.mahidol.ac.th sshd\[30570\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.130.192.242 2019-10-22T05:08:36.317462enmeeting.mahidol.ac.th sshd\[30570\]: Failed password for invalid user leticia from 203.130.192.242 port 34186 ssh2 ...	2019-10-22 06:45:29
106.52.236.249	attackspambots	2019-10-21 21:20:00 auth_login authenticator failed for (…) [106.52.236.249]: 535 Incorrect authentication data (set_id=nologin@…)	2019-10-22 06:12:37
2.177.228.74	attackbotsspam	Honeypot attack, port: 23, PTR: PTR record not found	2019-10-22 06:26:15
193.200.74.219	attack	wp bruteforce	2019-10-22 06:24:19
79.173.205.166	attackspam	Honeypot attack, port: 445, PTR: 79.173.x.166.go.com.jo.	2019-10-22 06:12:56
186.224.238.32	attack	2019-10-21 15:04:14 H=186-224-238-32.omni.net.br [186.224.238.32]:56266 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-10-21 15:04:15 H=186-224-238-32.omni.net.br [186.224.238.32]:56266 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-10-21 15:04:16 H=186-224-238-32.omni.net.br [186.224.238.32]:56266 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/186.224.238.32) ...	2019-10-22 06:23:38
222.186.180.41	attack	Oct 22 03:08:35 gw1 sshd[3800]: Failed password for root from 222.186.180.41 port 14128 ssh2 Oct 22 03:08:51 gw1 sshd[3800]: error: maximum authentication attempts exceeded for root from 222.186.180.41 port 14128 ssh2 [preauth] ...	2019-10-22 06:16:59
106.248.41.245	attackbots	Oct 22 01:15:17 sauna sshd[121562]: Failed password for root from 106.248.41.245 port 49994 ssh2 ...	2019-10-22 06:25:24
114.34.101.37	attackbots	" "	2019-10-22 06:09:13
188.131.179.87	attackspam	Oct 21 20:04:11 venus sshd\[8853\]: Invalid user Admin@1@3 from 188.131.179.87 port 23741 Oct 21 20:04:11 venus sshd\[8853\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.179.87 Oct 21 20:04:14 venus sshd\[8853\]: Failed password for invalid user Admin@1@3 from 188.131.179.87 port 23741 ssh2 ...	2019-10-22 06:24:54
139.59.38.246	attackspambots	Automatic report - XMLRPC Attack	2019-10-22 06:44:00

Recently Reported IPs

1.164.139.232	1.164.140.225	1.164.141.16	47.246.163.70
1.164.141.161	1.164.141.174	209.22.77.23	1.164.141.54
1.164.141.62	1.164.142.171	1.164.142.234	1.164.142.87
1.164.142.99	112.30.117.132	1.164.143.141	1.164.143.149
1.164.143.44	1.164.143.50	67.24.147.254	1.164.144.116