City: unknown
Region: unknown
Country: Taiwan, China
Internet Service Provider: Digital United Inc.
Hostname: unknown
Organization: unknown
Usage Type: Fixed Line ISP
| Type | Details | Datetime |
|---|---|---|
| attack | Honeypot attack, port: 5555, PTR: 112-104-138-140.adsl.dynamic.seed.net.tw. |
2020-06-11 03:22:25 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 112.104.138.223 | attackspam | 23/tcp [2019-09-30]1pkt |
2019-10-01 03:53:03 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.104.138.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31742
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;112.104.138.140. IN A
;; AUTHORITY SECTION:
. 113 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020061001 1800 900 604800 86400
;; Query time: 99 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jun 11 03:22:22 CST 2020
;; MSG SIZE rcvd: 119140.138.104.112.in-addr.arpa domain name pointer 112-104-138-140.adsl.dynamic.seed.net.tw.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
140.138.104.112.in-addr.arpa name = 112-104-138-140.adsl.dynamic.seed.net.tw.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.67.152.212 | attackspam | Honeypot attack, port: 23, PTR: PTR record not found |
2019-12-27 16:00:26 |
| 124.109.53.126 | attackbots | 445/tcp [2019-12-27]1pkt |
2019-12-27 15:40:42 |
| 144.132.166.70 | attackbots | 23/tcp [2019-12-27]1pkt |
2019-12-27 15:58:01 |
| 36.92.98.15 | attack | 445/tcp [2019-12-27]1pkt |
2019-12-27 15:29:08 |
| 129.204.105.244 | attackspambots | Dec 27 08:00:40 [host] sshd[6068]: Invalid user guest2 from 129.204.105.244 Dec 27 08:00:40 [host] sshd[6068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.105.244 Dec 27 08:00:42 [host] sshd[6068]: Failed password for invalid user guest2 from 129.204.105.244 port 58780 ssh2 |
2019-12-27 15:36:43 |
| 49.228.76.14 | attackspambots | 27015/udp [2019-12-27]1pkt |
2019-12-27 15:51:00 |
| 121.229.0.50 | attackspam | CN China 50.0.229.121.broad.nj.js.dynamic.163data.com.cn Failures: 5 smtpauth |
2019-12-27 15:57:07 |
| 58.231.121.213 | attackspambots | 23/tcp [2019-12-27]1pkt |
2019-12-27 15:21:32 |
| 49.48.20.120 | attackbots | Honeypot attack, port: 445, PTR: mx-ll-49.48.20-120.dynamic.3bb.in.th. |
2019-12-27 15:45:36 |
| 218.92.0.148 | attack | Dec 27 08:35:20 h2779839 sshd[10256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.148 user=root Dec 27 08:35:21 h2779839 sshd[10256]: Failed password for root from 218.92.0.148 port 64742 ssh2 Dec 27 08:35:34 h2779839 sshd[10256]: error: maximum authentication attempts exceeded for root from 218.92.0.148 port 64742 ssh2 [preauth] Dec 27 08:35:20 h2779839 sshd[10256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.148 user=root Dec 27 08:35:21 h2779839 sshd[10256]: Failed password for root from 218.92.0.148 port 64742 ssh2 Dec 27 08:35:34 h2779839 sshd[10256]: error: maximum authentication attempts exceeded for root from 218.92.0.148 port 64742 ssh2 [preauth] Dec 27 08:35:41 h2779839 sshd[10258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.148 user=root Dec 27 08:35:43 h2779839 sshd[10258]: Failed password for root from 218.92.0.1 ... |
2019-12-27 15:46:11 |
| 54.183.215.24 | attackspam | Unauthorized connection attempt detected from IP address 54.183.215.24 to port 2087 |
2019-12-27 15:47:59 |
| 222.186.175.212 | attackspambots | Dec 27 04:56:17 firewall sshd[30770]: Failed password for root from 222.186.175.212 port 20634 ssh2 Dec 27 04:56:32 firewall sshd[30770]: error: maximum authentication attempts exceeded for root from 222.186.175.212 port 20634 ssh2 [preauth] Dec 27 04:56:32 firewall sshd[30770]: Disconnecting: Too many authentication failures [preauth] ... |
2019-12-27 15:59:24 |
| 138.19.102.178 | attackspam | Honeypot attack, port: 5555, PTR: 138019102178.ctinets.com. |
2019-12-27 15:54:23 |
| 125.34.90.156 | attack | CN China - Failures: 20 ftpd |
2019-12-27 15:53:11 |
| 5.249.131.161 | attack | Repeated failed SSH attempt |
2019-12-27 15:18:59 |