AbuseIPDB » 220.164.2.119

Enter an IP Address, Domain Name, or Subnet:

e.g. 34.228.30.69, microsoft.com, or 5.188.10.0/23

220.164.2.119 was found in our database!

This IP was reported 186 times. Confidence of Abuse is 39%: ?

39%

ISP	ChinaNet Yunnan Province Network
Usage Type	Unknown
Domain Name	Unknown
Country	China
City	Chuxiong, Yunnan

Spot an error? IP info including ISP, Usage Type, and Location provided by IP2Location. Contact them to update it!

Report 220.164.2.119

Whois 220.164.2.119

IP Abuse Reports for 220.164.2.119:

This IP address has been reported a total of 186 times from 37 distinct sources. 220.164.2.119 was first reported on December 2nd 2017, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
MadPsy	07 Dec 2018	POST /wplogin.php HTTP/1.1 POST /wplogin.php HTTP/1.1 POST /wplogin.php HTTP/1.1	Web App Attack
MadPsy	28 Nov 2018	POST /wplogin.php HTTP/1.1 POST /wplogin.php HTTP/1.1 POST /wplogin.php HTTP/1.1	Web App Attack
xinomilo	27 Nov 2018	WP Authentication failure	Brute-Force Web App Attack
applemooz	25 Nov 2018	[munged]::443 220.164.2.119 - - [25/Nov/2018:17:14:19 +0100] "POST /[munged]: HTTP/1.1" 200 9467 "-" ... show more[munged]::443 220.164.2.119 - - [25/Nov/2018:17:14:19 +0100] "POST /[munged]: HTTP/1.1" 200 9467 "-" "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0" [munged]::443 220.164.2.119 - - [25/Nov/2018:17:14:20 +0100] "POST /[munged]: HTTP/1.1" 200 4714 "-" "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0" [munged]::443 220.164.2.119 - - [25/Nov/2018:17:14:21 +0100] "POST /[munged]: HTTP/1.1" 200 4714 "-" "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0" [munged]::443 220.164.2.119 - - [25/Nov/2018:17:14:23 +0100] "POST /[munged]: HTTP/1.1" 200 4714 "-" "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0" [munged]::443 220.164.2.119 - - [25/Nov/2018:17:14:24 +0100] "POST /[munged]: HTTP/1.1" 200 4714 "-" "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0" [munged]::443 220.164.2.119 - - [25/Nov/2018:17:14:25 +0100] "POST /[munged]: HTTP/1.1" 200 4714 "-" "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0" [munged]:: show less	Brute-Force Web App Attack
Anonymous	24 Nov 2018	Time: Sat Nov 24 17:43:55 2018 -0200 IP: 220.164.2.119 (CN/China/-) Failures ... show moreTime: Sat Nov 24 17:43:55 2018 -0200 IP: 220.164.2.119 (CN/China/-) Failures: 20 (WordPressBruteForcePOST) Interval: 3600 seconds Blocked: Permanent Block show less	Brute-Force
MadPsy	22 Nov 2018	POST /wplogin.php HTTP/1.1 POST /wplogin.php HTTP/1.1	Web App Attack
shaunc	20 Nov 2018	Nov 20 12:53:19 mailman dovecot: imap-login: Disconnected (auth failed, 1 attempts): user=<[email protected][munged ... show moreNov 20 12:53:19 mailman dovecot: imap-login: Disconnected (auth failed, 1 attempts): user=<[email protected][munged]>, method=PLAIN, rip=220.164.2.119, lip=[munged], TLS: Disconnected show less	Brute-Force
computerdoc	19 Nov 2018	failed_logins	Brute-Force
MadPsy	18 Nov 2018	POST /wplogin.php HTTP/1.1 POST /wplogin.php HTTP/1.1 POST /wplogin.php HTTP/1.1 P ... show morePOST /wplogin.php HTTP/1.1 POST /wplogin.php HTTP/1.1 POST /wplogin.php HTTP/1.1 POST /wplogin.php HTTP/1.1 POST /wplogin.php HTTP/1.1 show less	Web App Attack
xinomilo	15 Nov 2018	WP Authentication failure	Brute-Force Web App Attack
applemooz	10 Nov 2018	[munged]::443 220.164.2.119 - - [10/Nov/2018:09:53:11 +0100] "POST /[munged]: HTTP/1.1" 200 9115 "-" ... show more[munged]::443 220.164.2.119 - - [10/Nov/2018:09:53:11 +0100] "POST /[munged]: HTTP/1.1" 200 9115 "-" "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0" [munged]::443 220.164.2.119 - - [10/Nov/2018:09:53:13 +0100] "POST /[munged]: HTTP/1.1" 200 4362 "-" "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0" [munged]::443 220.164.2.119 - - [10/Nov/2018:09:53:15 +0100] "POST /[munged]: HTTP/1.1" 200 4362 "-" "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0" [munged]::443 220.164.2.119 - - [10/Nov/2018:09:53:16 +0100] "POST /[munged]: HTTP/1.1" 200 4362 "-" "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0" [munged]::443 220.164.2.119 - - [10/Nov/2018:09:53:18 +0100] "POST /[munged]: HTTP/1.1" 200 4362 "-" "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0" [munged]::443 220.164.2.119 - - [10/Nov/2018:09:53:19 +0100] "POST /[munged]: HTTP/1.1" 200 4362 "-" "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0" [munged]:: show less	Brute-Force Web App Attack
twr	08 Nov 2018	Nov 8 07:24:09 *** sshd[11558]: Invalid user admin from 220.164.2.119	Brute-Force SSH
MadPsy	06 Nov 2018	POST /wplogin.php HTTP/1.1 POST /wplogin.php HTTP/1.1 POST /wplogin.php HTTP/1.1 P ... show morePOST /wplogin.php HTTP/1.1 POST /wplogin.php HTTP/1.1 POST /wplogin.php HTTP/1.1 POST /wplogin.php HTTP/1.1 show less	Web App Attack
applemooz	05 Nov 2018	[munged]::443 220.164.2.119 - - [05/Nov/2018:21:20:11 +0100] "POST /[munged]: HTTP/1.1" 200 10443 "- ... show more[munged]::443 220.164.2.119 - - [05/Nov/2018:21:20:11 +0100] "POST /[munged]: HTTP/1.1" 200 10443 "-" "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0" [munged]::443 220.164.2.119 - - [05/Nov/2018:21:20:13 +0100] "POST /[munged]: HTTP/1.1" 200 5690 "-" "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0" [munged]::443 220.164.2.119 - - [05/Nov/2018:21:20:14 +0100] "POST /[munged]: HTTP/1.1" 200 5690 "-" "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0" [munged]::443 220.164.2.119 - - [05/Nov/2018:21:20:16 +0100] "POST /[munged]: HTTP/1.1" 200 5690 "-" "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0" [munged]::443 220.164.2.119 - - [05/Nov/2018:21:20:17 +0100] "POST /[munged]: HTTP/1.1" 200 5690 "-" "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0" [munged]::443 220.164.2.119 - - [05/Nov/2018:21:20:19 +0100] "POST /[munged]: HTTP/1.1" 200 5690 "-" "Mozilla/5.0 (Windows NT 6.1; rv:52.0) Gecko/20100101 Firefox/52.0" [munged]: show less	Brute-Force Web App Attack
gmc	01 Nov 2018	2018-11-01T19:26:14.665721+00:00 suse sshd[29096]: Invalid user admin from 220.164.2.119 port 49368< ... show more2018-11-01T19:26:14.665721+00:00 suse sshd[29096]: Invalid user admin from 220.164.2.119 port 49368 2018-11-01T19:26:21.864215+00:00 suse sshd[29096]: error: PAM: User not known to the underlying authentication module for illegal user admin from 220.164.2.119 2018-11-01T19:26:14.665721+00:00 suse sshd[29096]: Invalid user admin from 220.164.2.119 port 49368 2018-11-01T19:26:21.864215+00:00 suse sshd[29096]: error: PAM: User not known to the underlying authentication module for illegal user admin from 220.164.2.119 2018-11-01T19:26:14.665721+00:00 suse sshd[29096]: Invalid user admin from 220.164.2.119 port 49368 2018-11-01T19:26:21.864215+00:00 suse sshd[29096]: error: PAM: User not known to the underlying authentication module for illegal user admin from 220.164.2.119 2018-11-01T19:26:21.887895+00:00 suse sshd[29096]: Failed keyboard-interactive/pam for invalid user admin from 220.164.2.119 port 49368 ssh2 ... show less	Brute-Force SSH