1.168.3.245 - IPInfo

Basic Info

City: Nantou City

Region: Nantou

Country: Taiwan, China

Internet Service Provider: Chunghwa

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.168.33.84	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 24-03-2020 18:30:18.	2020-03-25 04:45:40
1.168.34.38	attackspambots	Unauthorized connection attempt detected from IP address 1.168.34.38 to port 445	2020-02-01 22:32:00
1.168.33.73	attackbots	Attempt to attack host OS, exploiting network vulnerabilities, on 02-10-2019 04:50:14.	2019-10-02 15:55:56
1.168.31.125	attackspam	Sep 4 04:43:26 finnair postfix/smtpd[25961]: connect from 1-168-31-125.dynamic-ip.hinet.net[1.168.31.125] Sep 4 04:43:33 finnair postfix/smtpd[25961]: warning: 1-168-31-125.dynamic-ip.hinet.net[1.168.31.125]: SASL PLAIN authentication failed: authentication failure Sep 4 04:43:34 finnair postfix/smtpd[25961]: disconnect from 1-168-31-125.dynamic-ip.hinet.net[1.168.31.125] Sep 4 04:43:35 finnair postfix/smtpd[25961]: connect from 1-168-31-125.dynamic-ip.hinet.net[1.168.31.125] Sep 4 04:43:40 finnair postfix/smtpd[25961]: warning: 1-168-31-125.dynamic-ip.hinet.net[1.168.31.125]: SASL PLAIN authentication failed: authentication failure Sep 4 04:43:41 finnair postfix/smtpd[25961]: disconnect from 1-168-31-125.dynamic-ip.hinet.net[1.168.31.125] Sep 4 04:43:42 finnair postfix/smtpd[25961]: connect from 1-168-31-125.dynamic-ip.hinet.net[1.168.31.125] Sep 4 04:43:48 finnair postfix/smtpd[25961]: warning: 1-168-31-125.dynamic-ip.hinet.net[1.168.31.125]: SASL PLAIN authen........ -------------------------------	2019-09-04 19:24:53

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.168.3.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65159
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.168.3.245.			IN	A

;; AUTHORITY SECTION:
.			396	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022032100 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 21 17:08:25 CST 2022
;; MSG SIZE  rcvd: 104

Host info

245.3.168.1.in-addr.arpa domain name pointer 1-168-3-245.dynamic-ip.hinet.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
245.3.168.1.in-addr.arpa	name = 1-168-3-245.dynamic-ip.hinet.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
218.92.0.148	attack	2020-06-29T23:37:59.340572sd-86998 sshd[33468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.148 user=root 2020-06-29T23:38:01.816835sd-86998 sshd[33468]: Failed password for root from 218.92.0.148 port 55843 ssh2 2020-06-29T23:38:04.397579sd-86998 sshd[33468]: Failed password for root from 218.92.0.148 port 55843 ssh2 2020-06-29T23:37:59.340572sd-86998 sshd[33468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.148 user=root 2020-06-29T23:38:01.816835sd-86998 sshd[33468]: Failed password for root from 218.92.0.148 port 55843 ssh2 2020-06-29T23:38:04.397579sd-86998 sshd[33468]: Failed password for root from 218.92.0.148 port 55843 ssh2 2020-06-29T23:37:59.340572sd-86998 sshd[33468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.148 user=root 2020-06-29T23:38:01.816835sd-86998 sshd[33468]: Failed password for root from 218.92.0.148 p ...	2020-06-30 05:42:43
157.119.234.144	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-06-30 06:15:21
222.186.30.112	attack	2020-06-29T23:38:47.426624centos sshd[19492]: Failed password for root from 222.186.30.112 port 63577 ssh2 2020-06-29T23:38:51.273142centos sshd[19492]: Failed password for root from 222.186.30.112 port 63577 ssh2 2020-06-29T23:38:53.131227centos sshd[19492]: Failed password for root from 222.186.30.112 port 63577 ssh2 ...	2020-06-30 05:55:20
172.86.73.184	attack	2020-06-29 14:38:17.169801-0500 localhost smtpd[37968]: NOQUEUE: reject: RCPT from unknown[172.86.73.184]: 554 5.7.1 Service unavailable; Client host [172.86.73.184] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=	2020-06-30 06:01:08
61.132.227.25	attackbotsspam	Unauthorized SSH login attempts	2020-06-30 06:12:51
103.93.221.88	attack	Invalid user producao from 103.93.221.88 port 58912	2020-06-30 05:35:57
210.22.78.74	attackspambots	odoo8 ...	2020-06-30 05:43:20
138.68.226.175	attackspam	Jun 29 21:20:47 marvibiene sshd[30363]: Invalid user matrix from 138.68.226.175 port 51144 Jun 29 21:20:47 marvibiene sshd[30363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.226.175 Jun 29 21:20:47 marvibiene sshd[30363]: Invalid user matrix from 138.68.226.175 port 51144 Jun 29 21:20:48 marvibiene sshd[30363]: Failed password for invalid user matrix from 138.68.226.175 port 51144 ssh2 ...	2020-06-30 06:02:12
65.52.71.173	attackspambots	SSH bruteforce	2020-06-30 06:06:00
192.82.65.159	attackbotsspam	(sshd) Failed SSH login from 192.82.65.159 (MN/Mongolia/-): 5 in the last 3600 secs	2020-06-30 05:40:30
106.54.44.202	attackspambots	Jun 29 21:48:13 rancher-0 sshd[35603]: Invalid user netapp from 106.54.44.202 port 47672 ...	2020-06-30 06:02:53
192.35.168.70	attackbotsspam	Jun 29 21:48:08 debian-2gb-nbg1-2 kernel: \[15718730.008240\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=192.35.168.70 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=54321 PROTO=TCP SPT=45874 DPT=1311 WINDOW=65535 RES=0x00 SYN URGP=0	2020-06-30 06:05:11
52.151.68.75	attackbots	Jun 29 22:48:44 cdc sshd[31023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.151.68.75 user=root Jun 29 22:48:46 cdc sshd[31023]: Failed password for invalid user root from 52.151.68.75 port 45468 ssh2	2020-06-30 06:15:42
185.22.142.197	attackbotsspam	Jun 29 23:06:47 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jun 29 23:06:49 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jun 29 23:07:11 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jun 29 23:12:23 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jun 29 23:12:25 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 ...	2020-06-30 05:40:46
60.167.177.159	attackspambots	Jun 29 23:54:25 fhem-rasp sshd[24922]: Connection closed by 60.167.177.159 port 39932 [preauth] ...	2020-06-30 06:09:28

Recently Reported IPs

1.168.246.57	1.181.196.80	1.2.187.15	1.20.168.155
1.20.181.105	1.20.203.177	1.20.207.43	1.226.250.37
1.239.164.81	1.32.249.133	1.34.134.46	1.71.190.235
10.37.33.199	10.37.34.220	212.207.190.58	10.37.35.53
100.20.121.187	100.20.151.192	100.20.167.93	100.20.19.92