140.143.142.213

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Jul 26 07:09:17 vps sshd[756313]: Failed password for invalid user turbo from 140.143.142.213 port 52270 ssh2 Jul 26 07:10:21 vps sshd[765179]: Invalid user mns from 140.143.142.213 port 36220 Jul 26 07:10:21 vps sshd[765179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.142.213 Jul 26 07:10:23 vps sshd[765179]: Failed password for invalid user mns from 140.143.142.213 port 36220 ssh2 Jul 26 07:11:29 vps sshd[769782]: Invalid user postgres from 140.143.142.213 port 48398 ...	2020-07-26 13:26:06

Type

Details

Datetime

attackspambots

Jul 26 07:09:17 vps sshd[756313]: Failed password for invalid user turbo from 140.143.142.213 port 52270 ssh2
Jul 26 07:10:21 vps sshd[765179]: Invalid user mns from 140.143.142.213 port 36220
Jul 26 07:10:21 vps sshd[765179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.142.213
Jul 26 07:10:23 vps sshd[765179]: Failed password for invalid user mns from 140.143.142.213 port 36220 ssh2
Jul 26 07:11:29 vps sshd[769782]: Invalid user postgres from 140.143.142.213 port 48398
...

2020-07-26 13:26:06

Comments on same subnet:

IP	Type	Details	Datetime
140.143.142.190	attackspam	Apr 16 23:00:14 mockhub sshd[12333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.142.190 Apr 16 23:00:17 mockhub sshd[12333]: Failed password for invalid user bf from 140.143.142.190 port 43628 ssh2 ...	2020-04-17 14:07:20
140.143.142.190	attackspambots	Apr 16 05:00:35 ip-172-31-61-156 sshd[12534]: Failed password for invalid user rootadmin from 140.143.142.190 port 36554 ssh2 Apr 16 05:00:33 ip-172-31-61-156 sshd[12534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.142.190 Apr 16 05:00:33 ip-172-31-61-156 sshd[12534]: Invalid user rootadmin from 140.143.142.190 Apr 16 05:00:35 ip-172-31-61-156 sshd[12534]: Failed password for invalid user rootadmin from 140.143.142.190 port 36554 ssh2 Apr 16 05:11:52 ip-172-31-61-156 sshd[13011]: Invalid user user from 140.143.142.190 ...	2020-04-16 13:24:47
140.143.142.190	attack	5x Failed Password	2020-04-12 01:24:32
140.143.142.190	attackspambots	Apr 2 18:38:06 gw1 sshd[26934]: Failed password for root from 140.143.142.190 port 59622 ssh2 ...	2020-04-03 02:29:28
140.143.142.190	attackspam	Invalid user nek from 140.143.142.190 port 49378	2020-03-31 17:11:36
140.143.142.190	attackspambots	Invalid user upa from 140.143.142.190 port 58324	2020-03-29 00:55:17
140.143.142.190	attackspam	Mar 6 19:21:43 sshd\[27412\]: User root from 140.143.142.190 not allowed because not listed in AllowUsersMar 6 19:21:45 sshd\[27412\]: Failed password for invalid user root from 140.143.142.190 port 36204 ssh2 ...	2020-03-07 02:27:03
140.143.142.190	attackspam	Feb 13 06:56:24 MK-Soft-VM3 sshd[31157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.142.190 Feb 13 06:56:26 MK-Soft-VM3 sshd[31157]: Failed password for invalid user xu from 140.143.142.190 port 44248 ssh2 ...	2020-02-13 14:17:01
140.143.142.190	attackspam	Unauthorized connection attempt detected from IP address 140.143.142.190 to port 2220 [J]	2020-01-25 02:34:03
140.143.142.190	attack	Unauthorized connection attempt detected from IP address 140.143.142.190 to port 2220 [J]	2020-01-19 20:53:54
140.143.142.190	attack	$f2bV_matches	2020-01-11 23:23:29
140.143.142.190	attack	Jan 2 07:29:53 sxvn sshd[3079284]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.142.190	2020-01-02 15:24:34
140.143.142.190	attackbots	Dec 27 22:02:03 DAAP sshd[1616]: Invalid user ozwkenso from 140.143.142.190 port 32792 Dec 27 22:02:03 DAAP sshd[1616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.142.190 Dec 27 22:02:03 DAAP sshd[1616]: Invalid user ozwkenso from 140.143.142.190 port 32792 Dec 27 22:02:05 DAAP sshd[1616]: Failed password for invalid user ozwkenso from 140.143.142.190 port 32792 ssh2 Dec 27 22:04:50 DAAP sshd[1625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.142.190 user=backup Dec 27 22:04:52 DAAP sshd[1625]: Failed password for backup from 140.143.142.190 port 59602 ssh2 ...	2019-12-28 06:12:43
140.143.142.190	attackbots	Dec 10 01:58:03 OPSO sshd\[24962\]: Invalid user marvette from 140.143.142.190 port 34560 Dec 10 01:58:03 OPSO sshd\[24962\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.142.190 Dec 10 01:58:04 OPSO sshd\[24962\]: Failed password for invalid user marvette from 140.143.142.190 port 34560 ssh2 Dec 10 02:05:52 OPSO sshd\[27390\]: Invalid user gaby from 140.143.142.190 port 39644 Dec 10 02:05:52 OPSO sshd\[27390\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.142.190	2019-12-10 09:18:12
140.143.142.190	attack	$f2bV_matches	2019-12-09 19:50:35

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.143.142.213
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44355
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;140.143.142.213.		IN	A

;; AUTHORITY SECTION:
.			121	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020072501 1800 900 604800 86400

;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jul 26 13:26:00 CST 2020
;; MSG SIZE  rcvd: 119

Host info

Host 213.142.143.140.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 213.142.143.140.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.31.135	attackbots	Mar 30 06:20:43 server sshd[5011]: Failed password for root from 222.186.31.135 port 31293 ssh2 Mar 30 06:20:46 server sshd[5011]: Failed password for root from 222.186.31.135 port 31293 ssh2 Mar 30 06:20:51 server sshd[5011]: Failed password for root from 222.186.31.135 port 31293 ssh2	2020-03-30 12:24:58
111.230.13.11	attackbotsspam	SSH authentication failure x 6 reported by Fail2Ban ...	2020-03-30 12:46:35
188.166.185.236	attack	(sshd) Failed SSH login from 188.166.185.236 (SG/Singapore/bubble.jdinnovation.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 30 05:56:23 ubnt-55d23 sshd[15395]: Invalid user diego from 188.166.185.236 port 47424 Mar 30 05:56:25 ubnt-55d23 sshd[15395]: Failed password for invalid user diego from 188.166.185.236 port 47424 ssh2	2020-03-30 12:40:14
2606:4700:3034::681b:be53	attack	Spamvertised Website http://i9q.cn/4HpseC 203.195.186.176 server_redirect temporary http://k7njjrcwnhi4vyc.ru/ 104.27.191.83 104.27.190.83 2606:4700:3034::681b:be53 2606:4700:3030::681b:bf53 server_redirect temporary http://k7njjrcwnhi4vyc.ru/uNzu2C/ Received: from 217.78.61.143 (HELO 182.22.12.247) (217.78.61.143) Return-Path: From: "vohrals@gxususwhtbucgoyfu.jp" Subject: 本物を確認したいあなたにお届けします X-Mailer: Microsoft Outlook, Build 10.0.2616	2020-03-30 12:50:38
132.232.132.103	attack	Mar 30 10:56:47 webhost01 sshd[32030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.132.103 Mar 30 10:56:49 webhost01 sshd[32030]: Failed password for invalid user eeg from 132.232.132.103 port 50842 ssh2 ...	2020-03-30 12:19:28
118.70.184.109	attackbotsspam	1585540580 - 03/30/2020 05:56:20 Host: 118.70.184.109/118.70.184.109 Port: 445 TCP Blocked	2020-03-30 12:49:31
154.83.29.6	attack	Mar 29 11:17:34 server sshd\[14720\]: Failed password for invalid user xaw from 154.83.29.6 port 59810 ssh2 Mar 30 03:35:38 server sshd\[23814\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.83.29.6 user=mysql Mar 30 03:35:40 server sshd\[23814\]: Failed password for mysql from 154.83.29.6 port 48026 ssh2 Mar 30 07:19:49 server sshd\[14196\]: Invalid user qcb from 154.83.29.6 Mar 30 07:19:49 server sshd\[14196\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.83.29.6 ...	2020-03-30 12:36:29
114.119.37.143	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-03-30 12:55:08
103.89.252.123	attack	Mar 29 18:11:21 hanapaa sshd\[27450\]: Invalid user arma3 from 103.89.252.123 Mar 29 18:11:21 hanapaa sshd\[27450\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.89.252.123 Mar 29 18:11:23 hanapaa sshd\[27450\]: Failed password for invalid user arma3 from 103.89.252.123 port 50418 ssh2 Mar 29 18:15:20 hanapaa sshd\[27726\]: Invalid user zwr from 103.89.252.123 Mar 29 18:15:20 hanapaa sshd\[27726\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.89.252.123	2020-03-30 12:20:40
188.166.150.230	attack	$f2bV_matches	2020-03-30 12:48:47
116.48.99.233	attackspam	Honeypot attack, port: 5555, PTR: n1164899233.netvigator.com.	2020-03-30 12:17:30
171.224.185.172	attackbots	Mar 30 05:56:08 debian64 sshd[20524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.224.185.172 Mar 30 05:56:10 debian64 sshd[20524]: Failed password for invalid user tech from 171.224.185.172 port 63479 ssh2 ...	2020-03-30 13:00:13
137.74.171.160	attack	Mar 30 03:57:47 ip-172-31-62-245 sshd\[10617\]: Invalid user hsk from 137.74.171.160\ Mar 30 03:57:49 ip-172-31-62-245 sshd\[10617\]: Failed password for invalid user hsk from 137.74.171.160 port 47100 ssh2\ Mar 30 04:02:49 ip-172-31-62-245 sshd\[10646\]: Invalid user radio from 137.74.171.160\ Mar 30 04:02:51 ip-172-31-62-245 sshd\[10646\]: Failed password for invalid user radio from 137.74.171.160 port 58564 ssh2\ Mar 30 04:07:35 ip-172-31-62-245 sshd\[10686\]: Invalid user asdfg from 137.74.171.160\	2020-03-30 12:45:23
122.51.255.162	attackspam	k+ssh-bruteforce	2020-03-30 12:34:45
211.159.186.92	attackspam	Mar 30 06:21:09 OPSO sshd\[32477\]: Invalid user uke from 211.159.186.92 port 48110 Mar 30 06:21:09 OPSO sshd\[32477\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.186.92 Mar 30 06:21:10 OPSO sshd\[32477\]: Failed password for invalid user uke from 211.159.186.92 port 48110 ssh2 Mar 30 06:24:39 OPSO sshd\[603\]: Invalid user rpb from 211.159.186.92 port 58596 Mar 30 06:24:39 OPSO sshd\[603\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.186.92	2020-03-30 12:48:31

Recently Reported IPs

2001:41d0:303:768d::	138.255.222.190	176.138.138.230	217.88.148.140
67.143.176.205	202.167.228.225	38.44.181.19	207.101.146.10
209.185.87.21	202.35.209.15	158.188.162.42	195.78.39.188
44.152.248.183	57.182.5.7	153.151.91.48	83.147.104.47
83.135.173.174	194.219.199.42	76.91.220.48	80.110.229.78