1.199.158.38 - IPInfo

Basic Info

City: Dongsheng

Region: Heilongjiang

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.199.158.31	attack	Unauthorized connection attempt detected from IP address 1.199.158.31 to port 139 [T]	2020-05-20 09:05:26
1.199.158.90	attackspam	Unauthorized connection attempt detected from IP address 1.199.158.90 to port 139 [T]	2020-05-20 09:04:52
1.199.158.147	attack	Unauthorized connection attempt detected from IP address 1.199.158.147 to port 139 [T]	2020-05-20 09:04:23

Type

Details

Datetime

1.199.158.31

attack

Unauthorized connection attempt detected from IP address 1.199.158.31 to port 139 [T]

2020-05-20 09:05:26

1.199.158.90

attackspam

Unauthorized connection attempt detected from IP address 1.199.158.90 to port 139 [T]

2020-05-20 09:04:52

1.199.158.147

attack

Unauthorized connection attempt detected from IP address 1.199.158.147 to port 139 [T]

2020-05-20 09:04:23

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.199.158.38
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40182
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.199.158.38.			IN	A

;; AUTHORITY SECTION:
.			531	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022040201 1800 900 604800 86400

;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 03 03:55:13 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 38.158.199.1.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

server can't find 1.199.158.38.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
152.249.245.68	attackbots	fail2ban	2019-12-01 02:44:28
118.172.76.225	attackbotsspam	26/tcp [2019-11-30]1pkt	2019-12-01 02:39:01
157.55.39.39	attackspambots	Automatic report - Banned IP Access	2019-12-01 02:23:47
54.38.33.178	attackbotsspam	Nov 30 19:33:41 server sshd\[30288\]: Invalid user lucasb from 54.38.33.178 Nov 30 19:33:41 server sshd\[30288\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.ip-54-38-33.eu Nov 30 19:33:43 server sshd\[30288\]: Failed password for invalid user lucasb from 54.38.33.178 port 48472 ssh2 Nov 30 19:41:27 server sshd\[32382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.ip-54-38-33.eu user=mysql Nov 30 19:41:29 server sshd\[32382\]: Failed password for mysql from 54.38.33.178 port 57184 ssh2 ...	2019-12-01 02:14:02
46.38.144.17	attack	Nov 30 13:36:13 web1 postfix/smtpd[25337]: warning: unknown[46.38.144.17]: SASL LOGIN authentication failed: authentication failure ...	2019-12-01 02:46:23
181.40.122.2	attackspambots	Nov 30 19:19:57 MainVPS sshd[26367]: Invalid user web from 181.40.122.2 port 6535 Nov 30 19:19:57 MainVPS sshd[26367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.40.122.2 Nov 30 19:19:57 MainVPS sshd[26367]: Invalid user web from 181.40.122.2 port 6535 Nov 30 19:20:00 MainVPS sshd[26367]: Failed password for invalid user web from 181.40.122.2 port 6535 ssh2 Nov 30 19:23:38 MainVPS sshd[639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.40.122.2 user=root Nov 30 19:23:40 MainVPS sshd[639]: Failed password for root from 181.40.122.2 port 24110 ssh2 ...	2019-12-01 02:51:35
77.247.109.62	attackbots	\[2019-11-30 13:25:55\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-30T13:25:55.371-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="6297901148413828004",SessionID="0x7f26c4276ea8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.62/62092",ACLName="no_extension_match" \[2019-11-30 13:26:25\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-30T13:26:25.389-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="5344401148323235001",SessionID="0x7f26c40e0438",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.62/58303",ACLName="no_extension_match" \[2019-11-30 13:26:41\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-30T13:26:41.520-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="4390201148585359005",SessionID="0x7f26c4276ea8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.62/58603",ACL	2019-12-01 02:27:40
60.26.201.78	attackspam	Lines containing failures of 60.26.201.78 Nov 30 12:38:31 nxxxxxxx sshd[32310]: Invalid user Immo from 60.26.201.78 port 47728 Nov 30 12:38:31 nxxxxxxx sshd[32310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.26.201.78 Nov 30 12:38:33 nxxxxxxx sshd[32310]: Failed password for invalid user Immo from 60.26.201.78 port 47728 ssh2 Nov 30 12:38:33 nxxxxxxx sshd[32310]: Received disconnect from 60.26.201.78 port 47728:11: Bye Bye [preauth] Nov 30 12:38:33 nxxxxxxx sshd[32310]: Disconnected from invalid user Immo 60.26.201.78 port 47728 [preauth] Nov 30 13:09:57 nxxxxxxx sshd[4011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.26.201.78 user=uucp Nov 30 13:09:59 nxxxxxxx sshd[4011]: Failed password for uucp from 60.26.201.78 port 59788 ssh2 Nov 30 13:09:59 nxxxxxxx sshd[4011]: Received disconnect from 60.26.201.78 port 59788:11: Bye Bye [preauth] Nov 30 13:09:59 nxxxxxxx sshd[4011]: Di........ ------------------------------	2019-12-01 02:31:02
200.57.195.19	attack	Automatic report - Port Scan Attack	2019-12-01 02:24:20
198.108.67.108	attackbots	firewall-block, port(s): 3221/tcp	2019-12-01 02:51:12
80.173.177.132	attackbots	Nov 30 08:12:04 php1 sshd\[19551\]: Invalid user lingdu521 from 80.173.177.132 Nov 30 08:12:04 php1 sshd\[19551\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.173.177.132 Nov 30 08:12:06 php1 sshd\[19551\]: Failed password for invalid user lingdu521 from 80.173.177.132 port 40808 ssh2 Nov 30 08:18:26 php1 sshd\[19997\]: Invalid user 123456 from 80.173.177.132 Nov 30 08:18:26 php1 sshd\[19997\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.173.177.132	2019-12-01 02:32:44
103.1.154.92	attackspambots	Nov 30 17:27:59 OPSO sshd\[26873\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.1.154.92 user=root Nov 30 17:28:01 OPSO sshd\[26873\]: Failed password for root from 103.1.154.92 port 51436 ssh2 Nov 30 17:31:45 OPSO sshd\[27656\]: Invalid user user01 from 103.1.154.92 port 57942 Nov 30 17:31:45 OPSO sshd\[27656\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.1.154.92 Nov 30 17:31:48 OPSO sshd\[27656\]: Failed password for invalid user user01 from 103.1.154.92 port 57942 ssh2	2019-12-01 02:37:39
37.212.229.45	attackspambots	2019-11-30T14:33:48.756955abusebot-2.cloudsearch.cf sshd\[13071\]: Invalid user admin from 37.212.229.45 port 60227	2019-12-01 02:16:49
177.220.135.10	attackspambots	F2B jail: sshd. Time: 2019-11-30 16:37:17, Reported by: VKReport	2019-12-01 02:41:05
63.81.87.112	attackbotsspam	Nov 30 15:32:04 exim[20414]: [1\53] 1ib3n0-0005JG-HF H=curtain.vidyad.com (curtain.ahangac.com) [63.81.87.112] F= rejected after DATA: This message scored 102.8 spam points.	2019-12-01 02:48:55

Recently Reported IPs

1.199.154.86	1.199.159.30	1.199.179.96	1.199.194.137
1.199.194.198	1.199.194.205	1.199.194.75	1.199.30.45
5.217.231.200	1.199.30.51	1.199.31.49	203.229.230.107
1.199.77.105	1.2.164.194	1.2.164.2	1.2.165.138
1.2.170.88	1.36.163.22	1.36.186.43	1.36.195.244