140.115.145.140

Basic Info

City: unknown

Region: unknown

Country: Taiwan, Province of China

Internet Service Provider: Taiwan Academic Network

Hostname: unknown

Organization: unknown

Usage Type: University/College/School

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Nov 4 04:43:41 PiServer sshd[19569]: Failed password for r.r from 140.115.145.140 port 42676 ssh2 Nov 4 04:50:27 PiServer sshd[19985]: Failed password for r.r from 140.115.145.140 port 38368 ssh2 Nov 4 04:55:00 PiServer sshd[20266]: Failed password for r.r from 140.115.145.140 port 50150 ssh2 Nov 4 04:59:24 PiServer sshd[20510]: Invalid user ghm from 140.115.145.140 Nov 4 04:59:26 PiServer sshd[20510]: Failed password for invalid user ghm from 140.115.145.140 port 33700 ssh2 Nov 4 05:03:41 PiServer sshd[20747]: Failed password for r.r from 140.115.145.140 port 45468 ssh2 Nov 4 05:34:30 PiServer sshd[22433]: Failed password for r.r from 140.115.145.140 port 43250 ssh2 Nov 4 05:39:02 PiServer sshd[22742]: Failed password for r.r from 140.115.145.140 port 55014 ssh2 Nov 4 05:43:17 PiServer sshd[23027]: Invalid user aplusbiz from 140.115.145.140 Nov 4 05:43:18 PiServer sshd[23027]: Failed password for invalid user aplusbiz from 140.115.145.140 port 38566 ssh2 Nov ........ ------------------------------	2019-11-06 16:21:29
attackbotsspam	$f2bV_matches	2019-10-30 04:54:23
attackbotsspam	Oct 27 05:06:05 meumeu sshd[11866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.115.145.140 Oct 27 05:06:07 meumeu sshd[11866]: Failed password for invalid user alfons from 140.115.145.140 port 39684 ssh2 Oct 27 05:10:49 meumeu sshd[12707]: Failed password for root from 140.115.145.140 port 50452 ssh2 ...	2019-10-27 15:51:48

Type

Details

Datetime

attackspam

Nov  4 04:43:41 PiServer sshd[19569]: Failed password for r.r from 140.115.145.140 port 42676 ssh2
Nov  4 04:50:27 PiServer sshd[19985]: Failed password for r.r from 140.115.145.140 port 38368 ssh2
Nov  4 04:55:00 PiServer sshd[20266]: Failed password for r.r from 140.115.145.140 port 50150 ssh2
Nov  4 04:59:24 PiServer sshd[20510]: Invalid user ghm from 140.115.145.140
Nov  4 04:59:26 PiServer sshd[20510]: Failed password for invalid user ghm from 140.115.145.140 port 33700 ssh2
Nov  4 05:03:41 PiServer sshd[20747]: Failed password for r.r from 140.115.145.140 port 45468 ssh2
Nov  4 05:34:30 PiServer sshd[22433]: Failed password for r.r from 140.115.145.140 port 43250 ssh2
Nov  4 05:39:02 PiServer sshd[22742]: Failed password for r.r from 140.115.145.140 port 55014 ssh2
Nov  4 05:43:17 PiServer sshd[23027]: Invalid user aplusbiz from 140.115.145.140
Nov  4 05:43:18 PiServer sshd[23027]: Failed password for invalid user aplusbiz from 140.115.145.140 port 38566 ssh2
Nov  ........
------------------------------

2019-11-06 16:21:29

attackbotsspam

$f2bV_matches

2019-10-30 04:54:23

attackbotsspam

Oct 27 05:06:05 meumeu sshd[11866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.115.145.140 
Oct 27 05:06:07 meumeu sshd[11866]: Failed password for invalid user alfons from 140.115.145.140 port 39684 ssh2
Oct 27 05:10:49 meumeu sshd[12707]: Failed password for root from 140.115.145.140 port 50452 ssh2
...

2019-10-27 15:51:48

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.115.145.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22052
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;140.115.145.140.		IN	A

;; AUTHORITY SECTION:
.			501	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102700 1800 900 604800 86400

;; Query time: 108 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 27 15:51:44 CST 2019
;; MSG SIZE  rcvd: 119

Host info

Host 140.145.115.140.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 140.145.115.140.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
211.119.65.75	attackbotsspam	Oct 3 01:11:17 ift sshd\[44959\]: Invalid user vmuser from 211.119.65.75Oct 3 01:11:18 ift sshd\[44959\]: Failed password for invalid user vmuser from 211.119.65.75 port 38486 ssh2Oct 3 01:14:12 ift sshd\[45413\]: Failed password for root from 211.119.65.75 port 45486 ssh2Oct 3 01:16:33 ift sshd\[45799\]: Invalid user sc from 211.119.65.75Oct 3 01:16:34 ift sshd\[45799\]: Failed password for invalid user sc from 211.119.65.75 port 52480 ssh2 ...	2020-10-03 06:32:16
187.188.107.115	attackspam	Oct 3 00:45:33 pornomens sshd\[8500\]: Invalid user admin from 187.188.107.115 port 58337 Oct 3 00:45:33 pornomens sshd\[8500\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.188.107.115 Oct 3 00:45:35 pornomens sshd\[8500\]: Failed password for invalid user admin from 187.188.107.115 port 58337 ssh2 ...	2020-10-03 06:50:50
122.155.93.23	attackbotsspam	TCP (SYN) 122.155.93.23:41967 -> port 1433, len 40	2020-10-03 06:36:27
199.187.211.101	attackbotsspam	3,78-01/02 [bc00/m27] PostRequest-Spammer scoring: zurich	2020-10-03 06:45:37
176.109.184.235	attackbotsspam	Automated report (2020-10-03T00:30:09+02:00). Spambot detected.	2020-10-03 06:52:08
37.49.230.126	attack	"AmooT";tag=3533393765393339313363340132313832313335333935	2020-10-03 06:39:01
84.208.227.60	attack	Invalid user mininet from 84.208.227.60 port 58162	2020-10-03 07:03:15
158.140.112.58	attackspam	Icarus honeypot on github	2020-10-03 06:51:25
41.38.50.50	attack	Found on CINS badguys / proto=6 . srcport=54914 . dstport=1433 . (4293)	2020-10-03 06:40:59
139.155.86.214	attackbotsspam	Oct 2 22:04:53 gitlab sshd[2681859]: Invalid user informix from 139.155.86.214 port 47324 Oct 2 22:04:53 gitlab sshd[2681859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.86.214 Oct 2 22:04:53 gitlab sshd[2681859]: Invalid user informix from 139.155.86.214 port 47324 Oct 2 22:04:55 gitlab sshd[2681859]: Failed password for invalid user informix from 139.155.86.214 port 47324 ssh2 Oct 2 22:08:08 gitlab sshd[2682355]: Invalid user bruno from 139.155.86.214 port 44644 ...	2020-10-03 06:33:57
81.18.134.18	attack	Unauthorised access (Oct 2) SRC=81.18.134.18 LEN=52 TTL=118 ID=15089 DF TCP DPT=445 WINDOW=8192 SYN	2020-10-03 06:36:03
182.254.195.46	attackbots	$f2bV_matches	2020-10-03 06:59:09
139.59.161.78	attack	Oct 2 22:59:28 DAAP sshd[3444]: Invalid user x from 139.59.161.78 port 12865 Oct 2 22:59:28 DAAP sshd[3444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.161.78 Oct 2 22:59:28 DAAP sshd[3444]: Invalid user x from 139.59.161.78 port 12865 Oct 2 22:59:30 DAAP sshd[3444]: Failed password for invalid user x from 139.59.161.78 port 12865 ssh2 Oct 2 23:04:06 DAAP sshd[3524]: Invalid user deployer from 139.59.161.78 port 36970 ...	2020-10-03 06:47:52
114.232.109.187	attack	SSH Invalid Login	2020-10-03 06:38:00
103.240.237.182	attackbotsspam	Lines containing failures of 103.240.237.182 (max 1000) Oct 2 22:23:54 server sshd[5607]: Connection from 103.240.237.182 port 13041 on 62.116.165.82 port 22 Oct 2 22:23:54 server sshd[5607]: Did not receive identification string from 103.240.237.182 port 13041 Oct 2 22:23:57 server sshd[5611]: Connection from 103.240.237.182 port 10054 on 62.116.165.82 port 22 Oct 2 22:23:58 server sshd[5611]: Address 103.240.237.182 maps to dhcp.tripleplay.in, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 2 22:23:58 server sshd[5611]: Invalid user admin1 from 103.240.237.182 port 10054 Oct 2 22:23:58 server sshd[5611]: Connection closed by 103.240.237.182 port 10054 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=103.240.237.182	2020-10-03 06:43:55

Recently Reported IPs

154.160.9.244	140.201.172.39	214.213.205.255	213.45.245.242
244.164.51.65	52.72.234.124	179.36.43.212	154.51.139.63
251.152.35.124	234.222.97.216	222.252.115.231	10.242.2.10
8.196.188.181	10.100.213.134	136.145.248.236	249.129.28.249
156.197.99.51	53.102.54.121	248.29.221.140	84.221.181.64