167.172.145.139

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Invalid user usertest from 167.172.145.139 port 60974	2020-07-25 04:55:38
attack	Jul 20 14:31:03 mout sshd[11553]: Invalid user sonbol from 167.172.145.139 port 59594	2020-07-20 21:04:45
attackspambots	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-07-18T16:07:15Z and 2020-07-18T16:18:25Z	2020-07-19 03:25:36
attack	Invalid user administrador from 167.172.145.139 port 43088	2020-07-18 00:45:55
attack	2020-07-16T16:03:49.830133sorsha.thespaminator.com sshd[16908]: Invalid user inventory from 167.172.145.139 port 44682 2020-07-16T16:03:52.322588sorsha.thespaminator.com sshd[16908]: Failed password for invalid user inventory from 167.172.145.139 port 44682 ssh2 ...	2020-07-17 05:35:31
attack	Jul 16 11:21:09 master sshd[14645]: Failed password for invalid user sochy from 167.172.145.139 port 53226 ssh2 Jul 16 11:23:08 master sshd[14665]: Failed password for invalid user www from 167.172.145.139 port 46980 ssh2 Jul 16 11:24:31 master sshd[14687]: Failed password for invalid user harish from 167.172.145.139 port 37290 ssh2 Jul 16 11:25:56 master sshd[14705]: Failed password for invalid user dante from 167.172.145.139 port 55832 ssh2 Jul 16 11:27:20 master sshd[14713]: Failed password for invalid user mongo from 167.172.145.139 port 46144 ssh2 Jul 16 11:28:45 master sshd[14733]: Failed password for invalid user images from 167.172.145.139 port 36450 ssh2 Jul 16 11:30:08 master sshd[15165]: Failed password for invalid user ubuntu from 167.172.145.139 port 54992 ssh2 Jul 16 11:31:23 master sshd[15181]: Failed password for invalid user alm from 167.172.145.139 port 45300 ssh2 Jul 16 11:32:47 master sshd[15206]: Failed password for invalid user jacinthe from 167.172.145.139 port 35610 ssh2	2020-07-16 17:52:28
attack	Jul 7 20:42:40 mout sshd[13680]: Invalid user steven from 167.172.145.139 port 59948	2020-07-08 03:11:26
attack	Jun 22 05:47:59 game-panel sshd[4246]: Failed password for root from 167.172.145.139 port 52380 ssh2 Jun 22 05:51:53 game-panel sshd[4393]: Failed password for root from 167.172.145.139 port 54176 ssh2 Jun 22 05:55:50 game-panel sshd[4545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.145.139	2020-06-22 18:03:47

Comments on same subnet:

IP	Type	Details	Datetime
167.172.145.230	attack	2020-08-28T14:01:52.878727shield sshd\[12363\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.145.230 user=root 2020-08-28T14:01:54.251876shield sshd\[12363\]: Failed password for root from 167.172.145.230 port 49424 ssh2 2020-08-28T14:05:30.925496shield sshd\[12635\]: Invalid user monica from 167.172.145.230 port 56020 2020-08-28T14:05:30.946387shield sshd\[12635\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.145.230 2020-08-28T14:05:33.583589shield sshd\[12635\]: Failed password for invalid user monica from 167.172.145.230 port 56020 ssh2	2020-08-28 22:13:42
167.172.145.142	attackspambots	May 15 10:50:17 legacy sshd[8917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.145.142 May 15 10:50:20 legacy sshd[8917]: Failed password for invalid user postgres from 167.172.145.142 port 52428 ssh2 May 15 10:54:10 legacy sshd[9025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.145.142 ...	2020-05-15 17:09:08
167.172.145.142	attack	SSH login attempts.	2020-05-11 15:39:41
167.172.145.142	attackbotsspam	May 10 09:35:52 localhost sshd\[7136\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.145.142 user=root May 10 09:35:54 localhost sshd\[7136\]: Failed password for root from 167.172.145.142 port 43282 ssh2 May 10 09:39:54 localhost sshd\[7279\]: Invalid user zhang from 167.172.145.142 May 10 09:39:54 localhost sshd\[7279\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.145.142 May 10 09:39:56 localhost sshd\[7279\]: Failed password for invalid user zhang from 167.172.145.142 port 54564 ssh2 ...	2020-05-10 15:59:57
167.172.145.231	attackspam	(sshd) Failed SSH login from 167.172.145.231 (US/United States/-): 5 in the last 3600 secs	2020-05-09 17:35:21
167.172.145.142	attackspambots	May 7 19:50:33 sachi sshd\[29949\]: Invalid user admin from 167.172.145.142 May 7 19:50:33 sachi sshd\[29949\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.145.142 May 7 19:50:35 sachi sshd\[29949\]: Failed password for invalid user admin from 167.172.145.142 port 51264 ssh2 May 7 19:54:23 sachi sshd\[30235\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.145.142 user=root May 7 19:54:26 sachi sshd\[30235\]: Failed password for root from 167.172.145.142 port 32808 ssh2	2020-05-08 16:21:30
167.172.145.45	attack	SIPVicious Scanner Detection	2020-05-02 20:43:29
167.172.145.231	attackbotsspam	2020-04-26T15:42:10.352995abusebot-8.cloudsearch.cf sshd[10635]: Invalid user pascal from 167.172.145.231 port 56648 2020-04-26T15:42:10.362322abusebot-8.cloudsearch.cf sshd[10635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.145.231 2020-04-26T15:42:10.352995abusebot-8.cloudsearch.cf sshd[10635]: Invalid user pascal from 167.172.145.231 port 56648 2020-04-26T15:42:12.551127abusebot-8.cloudsearch.cf sshd[10635]: Failed password for invalid user pascal from 167.172.145.231 port 56648 ssh2 2020-04-26T15:49:13.924003abusebot-8.cloudsearch.cf sshd[10986]: Invalid user terrariaserver from 167.172.145.231 port 45320 2020-04-26T15:49:13.931708abusebot-8.cloudsearch.cf sshd[10986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.145.231 2020-04-26T15:49:13.924003abusebot-8.cloudsearch.cf sshd[10986]: Invalid user terrariaserver from 167.172.145.231 port 45320 2020-04-26T15:49:15.858879abusebot-8 ...	2020-04-27 03:36:05
167.172.145.142	attack	Apr 24 14:49:36 ns382633 sshd\[2468\]: Invalid user maxpe from 167.172.145.142 port 53792 Apr 24 14:49:36 ns382633 sshd\[2468\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.145.142 Apr 24 14:49:39 ns382633 sshd\[2468\]: Failed password for invalid user maxpe from 167.172.145.142 port 53792 ssh2 Apr 24 15:02:08 ns382633 sshd\[5570\]: Invalid user calidad from 167.172.145.142 port 57060 Apr 24 15:02:08 ns382633 sshd\[5570\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.145.142	2020-04-25 02:36:09
167.172.145.142	attack	Invalid user tf from 167.172.145.142 port 41864	2020-04-24 13:23:29
167.172.145.231	attackbotsspam	Apr 23 07:07:35 v22018086721571380 sshd[27405]: Failed password for invalid user st from 167.172.145.231 port 42976 ssh2	2020-04-23 13:15:20
167.172.145.142	attackspambots	Apr 19 16:52:12 firewall sshd[30742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.145.142 user=root Apr 19 16:52:15 firewall sshd[30742]: Failed password for root from 167.172.145.142 port 41578 ssh2 Apr 19 16:53:32 firewall sshd[30787]: Invalid user admin from 167.172.145.142 ...	2020-04-20 04:07:38
167.172.145.243	attack	SIP/5060 Probe, BF, Hack -	2020-04-16 17:18:09
167.172.145.231	attack	Apr 13 11:49:25 host01 sshd[6427]: Failed password for root from 167.172.145.231 port 33028 ssh2 Apr 13 11:53:44 host01 sshd[7309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.145.231 Apr 13 11:53:46 host01 sshd[7309]: Failed password for invalid user droste from 167.172.145.231 port 40802 ssh2 ...	2020-04-13 21:41:02
167.172.145.243	attackbots	" "	2020-04-13 18:18:40

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 167.172.145.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24498
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;167.172.145.139.		IN	A

;; AUTHORITY SECTION:
.			437	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020062200 1800 900 604800 86400

;; Query time: 54 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jun 22 18:03:43 CST 2020
;; MSG SIZE  rcvd: 119

Host info

Host 139.145.172.167.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.145.172.167.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
87.251.74.79	attackspam	07/10/2020-23:54:12.816288 87.251.74.79 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-07-11 15:21:18
218.92.0.247	attack	Jul 11 00:05:06 propaganda sshd[15755]: Connection from 218.92.0.247 port 57326 on 10.0.0.160 port 22 rdomain "" Jul 11 00:05:07 propaganda sshd[15755]: Unable to negotiate with 218.92.0.247 port 57326: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth]	2020-07-11 15:05:59
82.64.249.236	attackbots	Invalid user courier from 82.64.249.236 port 46936	2020-07-11 15:06:51
5.89.59.163	attackspam	Automatic report - Banned IP Access	2020-07-11 15:25:30
114.119.160.255	attackbots	Fail2Ban Ban Triggered	2020-07-11 15:10:22
78.128.113.226	attackspambots	Jul 11 05:54:48 vpn01 sshd[3485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.128.113.226 Jul 11 05:54:51 vpn01 sshd[3485]: Failed password for invalid user ubnt from 78.128.113.226 port 55454 ssh2 ...	2020-07-11 14:55:57
51.83.33.88	attackspambots	(sshd) Failed SSH login from 51.83.33.88 (FR/France/88.ip-51-83-33.eu): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 11 05:43:19 amsweb01 sshd[20342]: Invalid user marian from 51.83.33.88 port 42570 Jul 11 05:43:21 amsweb01 sshd[20342]: Failed password for invalid user marian from 51.83.33.88 port 42570 ssh2 Jul 11 05:51:11 amsweb01 sshd[21493]: Invalid user maraya from 51.83.33.88 port 55716 Jul 11 05:51:14 amsweb01 sshd[21493]: Failed password for invalid user maraya from 51.83.33.88 port 55716 ssh2 Jul 11 05:54:18 amsweb01 sshd[21916]: Invalid user bijiaqian from 51.83.33.88 port 51642	2020-07-11 15:15:16
157.245.240.102	attack	157.245.240.102 - - \[11/Jul/2020:06:33:56 +0200\] "POST /wp-login.php HTTP/1.0" 200 2889 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 157.245.240.102 - - \[11/Jul/2020:06:33:59 +0200\] "POST /wp-login.php HTTP/1.0" 200 2886 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 157.245.240.102 - - \[11/Jul/2020:06:34:00 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 747 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2020-07-11 15:27:19
222.186.175.183	attackspambots	$f2bV_matches	2020-07-11 15:05:44
160.202.162.67	attackbotsspam	Jul 11 07:54:12 buvik sshd[7602]: Failed password for invalid user alumni from 160.202.162.67 port 53348 ssh2 Jul 11 07:59:44 buvik sshd[8378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.202.162.67 user=list Jul 11 07:59:45 buvik sshd[8378]: Failed password for list from 160.202.162.67 port 46833 ssh2 ...	2020-07-11 15:07:37
211.24.100.128	attack	Jul 11 02:07:25 firewall sshd[4253]: Invalid user yanzihan from 211.24.100.128 Jul 11 02:07:27 firewall sshd[4253]: Failed password for invalid user yanzihan from 211.24.100.128 port 57962 ssh2 Jul 11 02:11:18 firewall sshd[4361]: Invalid user yzaki from 211.24.100.128 ...	2020-07-11 15:12:18
14.232.210.84	attackspam	(imapd) Failed IMAP login from 14.232.210.84 (VN/Vietnam/static.vnpt.vn): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 11 08:24:20 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=14.232.210.84, lip=5.63.12.44, TLS, session=	2020-07-11 15:13:36
78.128.113.230	attackspam	Jul 11 05:54:46 vpn01 sshd[3475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.128.113.230 Jul 11 05:54:48 vpn01 sshd[3475]: Failed password for invalid user admin from 78.128.113.230 port 38632 ssh2 ...	2020-07-11 15:01:36
77.40.2.29	attackspambots	(smtpauth) Failed SMTP AUTH login from 77.40.2.29 (RU/Russia/29.2.dialup.mari-el.ru): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-07-11 08:23:58 plain authenticator failed for (localhost) [77.40.2.29]: 535 Incorrect authentication data (set_id=webmaster@mehrbaft.com)	2020-07-11 15:25:00
152.136.165.25	attackspam	Invalid user brian from 152.136.165.25 port 46374	2020-07-11 15:20:54

Recently Reported IPs

209.141.35.68	37.120.218.86	5.52.202.166	128.199.121.172
103.93.76.91	60.167.178.132	180.242.72.24	115.124.72.81
50.62.176.125	59.65.168.118	220.180.46.232	183.166.149.59
67.141.97.246	30.104.172.180	222.96.193.104	171.25.84.84
227.160.220.83	60.44.243.170	183.83.154.37	130.61.9.207