Go
IP informations Cybercrime IP Feeds Raw whois
218.92.1.142
is an
Open Proxy
used by
Hackers
100 %
China
Report Abuse
1013attacks reported
878Brute-ForceSSH
57HackingBrute-ForceIoT Targeted
25HackingSSHIoT Targeted
16SSH
9Brute-Force
7FTP Brute-ForceHacking
6uncategorized
5HackingBrute-ForceSSH
1DDoS AttackBrute-ForceSSH
1FTP Brute-ForceHackingExploited Host
...
1reputation reported
1uncategorized
1anonymizers reported
1Open Proxy
from 39 distinct reporters
and 6 distinct sources : BadIPs.com, Blocklist.de, FireHOL, Charles Haley, darklist.de, AbuseIPDB
218.92.1.142 was first signaled at 2018-11-27 00:36 and last record was at 2019-07-29 10:11.
IP

218.92.1.142

Organization
No.31,Jin-rong Street
list IP owned by No.31,Jin-rong Street
Localisation
China
Jiangsu, Nanjing
NetRange : First & Last IP
218.91.254.0 - 218.91.254.15
Network CIDR
218.91.254.0/28

Cybercrime IP Feeds

Date UTC Category Sub Categories Source List Source Logs
2019-07-29 10:11 attacks Brute-ForceSSH AbuseIPDB Jul 29 15:10:35 TORMINT sshd\[9138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=roo
2019-07-29 09:53 attacks Brute-ForceSSH AbuseIPDB Jul 29 14:50:44 TORMINT sshd\[8189\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=roo
2019-07-29 09:27 attacks Brute-ForceSSH AbuseIPDB Jul 29 14:25:23 TORMINT sshd\[6748\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=roo
2019-07-29 09:02 attacks Brute-ForceSSH AbuseIPDB Jul 29 13:56:47 TORMINT sshd\[2080\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=roo
2019-07-29 08:30 attacks Brute-ForceSSH AbuseIPDB Jul 29 13:29:52 TORMINT sshd\[27815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-29 08:07 attacks Brute-ForceSSH AbuseIPDB Jul 29 13:06:46 TORMINT sshd\[26783\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-29 07:42 attacks Brute-ForceSSH AbuseIPDB Jul 29 12:42:32 TORMINT sshd\[24371\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-29 07:16 attacks Brute-ForceSSH AbuseIPDB Jul 29 12:14:19 TORMINT sshd\[23134\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 19:18 attacks Brute-ForceSSH AbuseIPDB Jul 24 00:17:30 TORMINT sshd\[31177\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 18:55 attacks Brute-ForceSSH AbuseIPDB Jul 23 23:49:31 TORMINT sshd\[29500\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 18:38 attacks Brute-ForceSSH AbuseIPDB Jul 23 23:34:20 TORMINT sshd\[28624\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 18:21 attacks Brute-ForceSSH AbuseIPDB Jul 23 23:17:28 TORMINT sshd\[27554\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 18:01 attacks Brute-ForceSSH AbuseIPDB Jul 23 22:58:51 TORMINT sshd\[26495\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 17:34 attacks Brute-ForceSSH AbuseIPDB Jul 23 22:27:32 TORMINT sshd\[24649\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 17:16 attacks Brute-ForceSSH AbuseIPDB Jul 23 22:16:06 TORMINT sshd\[23986\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 16:53 attacks Brute-ForceSSH AbuseIPDB Jul 23 21:52:33 TORMINT sshd\[21583\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 16:27 attacks Brute-ForceSSH AbuseIPDB Jul 23 21:26:42 TORMINT sshd\[20246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 16:05 attacks Brute-ForceSSH AbuseIPDB Jul 23 21:02:39 TORMINT sshd\[18852\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 15:29 attacks Brute-ForceSSH AbuseIPDB Jul 23 20:29:10 TORMINT sshd\[16941\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 15:05 attacks Brute-ForceSSH AbuseIPDB Jul 23 20:04:32 TORMINT sshd\[15537\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 14:38 attacks Brute-ForceSSH AbuseIPDB Jul 23 19:37:17 TORMINT sshd\[13977\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 14:16 attacks Brute-ForceSSH AbuseIPDB Jul 23 19:15:22 TORMINT sshd\[12726\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 13:53 attacks Brute-ForceSSH AbuseIPDB Jul 23 18:52:54 TORMINT sshd\[10671\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 13:31 attacks Brute-ForceSSH AbuseIPDB Jul 23 18:27:55 TORMINT sshd\[8242\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=roo
2019-07-23 13:05 attacks Brute-ForceSSH AbuseIPDB Jul 23 18:04:14 TORMINT sshd\[7135\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=roo
2019-07-23 12:42 attacks Brute-ForceSSH AbuseIPDB Jul 23 17:32:32 TORMINT sshd\[3050\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=roo
2019-07-23 12:20 attacks Brute-ForceSSH AbuseIPDB Jul 23 17:19:56 TORMINT sshd\[2251\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=roo
2019-07-23 11:54 attacks Brute-ForceSSH AbuseIPDB Jul 23 16:54:20 TORMINT sshd\[993\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=root
2019-07-23 11:28 attacks Brute-ForceSSH AbuseIPDB Jul 23 16:25:49 TORMINT sshd\[31556\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 11:03 attacks Brute-ForceSSH AbuseIPDB Jul 23 15:58:21 TORMINT sshd\[30175\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 10:35 attacks Brute-ForceSSH AbuseIPDB Jul 23 15:32:25 TORMINT sshd\[28815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 10:08 attacks Brute-ForceSSH AbuseIPDB Jul 23 15:07:14 TORMINT sshd\[27691\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 09:41 attacks Brute-ForceSSH AbuseIPDB Jul 23 14:41:22 TORMINT sshd\[26644\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 09:09 attacks Brute-ForceSSH AbuseIPDB Jul 23 14:08:17 TORMINT sshd\[25309\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 08:52 attacks Brute-ForceSSH AbuseIPDB Jul 23 13:51:46 TORMINT sshd\[24633\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 08:27 attacks Brute-ForceSSH AbuseIPDB Jul 23 13:21:38 TORMINT sshd\[21431\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 08:09 attacks Brute-ForceSSH AbuseIPDB Jul 23 13:09:23 TORMINT sshd\[20956\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 07:45 attacks Brute-ForceSSH AbuseIPDB Jul 23 12:42:08 TORMINT sshd\[18683\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 07:17 attacks Brute-ForceSSH AbuseIPDB Jul 23 12:16:12 TORMINT sshd\[13682\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 06:51 attacks Brute-ForceSSH AbuseIPDB Jul 23 11:51:19 TORMINT sshd\[12697\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 06:28 attacks Brute-ForceSSH AbuseIPDB Jul 23 11:28:06 TORMINT sshd\[10323\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 06:04 attacks Brute-ForceSSH AbuseIPDB Jul 23 10:58:57 TORMINT sshd\[9055\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=roo
2019-07-23 05:44 attacks Brute-ForceSSH AbuseIPDB Jul 23 10:42:07 TORMINT sshd\[8315\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=roo
2019-07-23 05:28 attacks Brute-ForceSSH AbuseIPDB Jul 23 10:28:47 TORMINT sshd\[7581\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=roo
2019-07-23 04:57 attacks Brute-ForceSSH AbuseIPDB Jul 23 09:56:57 TORMINT sshd\[2848\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=roo
2019-07-23 04:26 attacks Brute-ForceSSH AbuseIPDB Jul 23 09:24:13 TORMINT sshd\[959\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=root
2019-07-23 04:06 attacks Brute-ForceSSH AbuseIPDB Jul 23 09:05:05 TORMINT sshd\[32601\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 03:50 attacks Brute-ForceSSH AbuseIPDB Jul 23 08:40:43 TORMINT sshd\[31581\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 03:30 attacks Brute-ForceSSH AbuseIPDB Jul 23 08:26:32 TORMINT sshd\[30987\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2019-07-23 02:54 attacks Brute-ForceSSH AbuseIPDB Jul 23 07:50:02 TORMINT sshd\[29523\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=ro
2018-11-27 00:36 attacks Port ScanBrute-ForceSSH AbuseIPDB $f2bV_matches
2018-11-27 00:38 attacks Brute-Force AbuseIPDB Nov 27 11:27:22 mysql sshd\[30354\]: Failed password for root from 218.92.1.142 port 59932 ssh2\ Nov 27 11:27:24 mysql sshd\[30354\]: Failed password
2018-11-27 00:38 attacks Brute-ForceSSH AbuseIPDB Nov 27 11:37:48 localhost sshd\[676\]: Disconnected from 218.92.1.142 port 19127 \[preauth\] Nov 27 11:38:48 localhost sshd\[836\]: Disconnected from
2018-11-27 00:39 attacks Brute-ForceSSH AbuseIPDB Nov 27 11:37:44 vmd14399 sshd\[25936\]: User root from 218.92.1.142 not allowed because none of user\'s groups are listed in AllowGroupsNov 27 11
2018-11-27 00:40 attacks FTP Brute-ForceHacking AbuseIPDB Nov 27 11:37:05 econome sshd[16314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=r.r Nov
2018-11-27 01:02 attacks Brute-ForceSSH AbuseIPDB Nov 27 12:01:19 vmd14399 sshd\[29194\]: User root from 218.92.1.142 not allowed because none of user\'s groups are listed in AllowGroupsNov 27 12
2018-11-27 01:05 attacks FTP Brute-ForceHacking AbuseIPDB Nov 27 11:37:05 econome sshd[16314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=r.r Nov
2018-11-27 01:22 attacks FTP Brute-ForceHacking AbuseIPDB Nov 27 11:37:05 econome sshd[16314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=r.r Nov
2018-11-27 01:24 attacks Brute-ForceSSH AbuseIPDB Nov 27 12:23:45 vmd14399 sshd\[32372\]: User root from 218.92.1.142 not allowed because none of user\'s groups are listed in AllowGroupsNov 27 12
2018-11-27 01:43 attacks FTP Brute-ForceHacking AbuseIPDB Nov 27 11:37:05 econome sshd[16314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142 user=r.r Nov
2019-03-29 18:18 reputation bds_atif  
2019-03-29 18:19 attacks bi_any_0_1d BadIPs.com  
2019-03-29 18:20 attacks SSH bi_ssh_0_1d BadIPs.com  
2019-03-29 18:21 attacks blocklist_de Blocklist.de  
2019-03-29 18:21 attacks SSH blocklist_de_ssh Blocklist.de  
2019-03-29 18:21 attacks blocklist_de_strongips Blocklist.de  
2019-03-29 18:27 attacks firehol_level2 FireHOL  
2019-03-29 18:34 anonymizers Open Proxy firehol_proxies FireHOL  
2019-03-29 18:35 attacks SSH haley_ssh Charles Haley  
2019-05-28 23:19 attacks SSH bi_ssh-ddos_0_1d BadIPs.com  
2019-06-03 22:43 attacks Bad Web Bot bi_badbots_0_1d BadIPs.com  
2019-06-03 22:43 attacks Brute-Force bi_bruteforce_0_1d BadIPs.com  
2019-07-16 02:49 attacks SSH bi_sshd_0_1d BadIPs.com  
2019-03-29 18:23 attacks darklist_de darklist.de  
2019-03-29 18:28 attacks firehol_level4 FireHOL  
only last 50 and first 10 AbuseIPDB logs are shown

Threats Categories :

abuse
IPs used to spam forum, boards, blogs or smtp servers, automated web scripts or scrappers (bad bots)
anonymizer
Onion Router IP addresses. TOR network IPs, TOR exit points, socks or ssl proxy.
attacks
bruteforce ssh/ftp/system account, IPs that have been detected by fail2ban, ports scan, vulnerabilities scan, DDoS.
malware
Addresses that have been identified distributing malware, form-grabber and stealer, Viruses, Worms, Trojans, Ransomware, Adware, Spyware

Whois

inetnum: 218.91.254.0 - 218.91.254.15
netname: NANTONG-DIREN-CORP
descr: Nantong Diren Co., Ltd.
descr: Nantong City
descr: Jiangsu Province
country: CN
admin-c: CH448-AP
tech-c: WWD2-AP
status: ASSIGNED NON-PORTABLE
mnt-by: MAINT-CHINANET-JS-NT
last-modified: 2008-09-04T06:52:35Z
source: APNIC

person: chinanet-js-nt hostmaster
address: No.88,Huancheng South Road,Nantong 226001
country: CN
phone: +86-513-5518003
fax-no: +86-513-5521614
e-mail: ntip@pub.nt.jsinfo.net
nic-hdl: CH448-AP
remarks: send anti-spam or abuse reports to abuse@public.nt.js.cn
remarks: or abuse@pub.nt.jsinfo.net
remarks: times in GMT+8
mnt-by: MAINT-CHINANET-JS-NT
last-modified: 2008-09-04T07:29:59Z
source: APNIC

person: WANG WEI DONG
nic-hdl: WWD2-AP
e-mail: eiton@teijin.com.cn
address: No.19, Zhongxing Road, Kaifaqu, Nantong
phone: +86-513-3599887
country: CN
mnt-by: MAINT-CHINANET-JS-NT
last-modified: 2008-09-04T07:30:50Z
source: APNIC

route: 218.91.0.0/16
descr: CHINANET jiangsu province network
country: CN
origin: AS23650
mnt-by: MAINT-CHINANET-JS
last-modified: 2008-09-04T07:54:28Z
source: APNIC
most specific ip range is highlighted
Updated : 2019-02-01