114.104.140.50

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
114.104.140.45	attackbots	[SunMay1022:35:27.7017772020][:error][pid26022:tid47395582797568][client114.104.140.45:50546][client114.104.140.45]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\\|WormlyBot\\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"402"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSIE6.0detected\(DisableifyouwanttoallowMSIE6\)"][severity"WARNING"][hostname"foreveryoungonline.ch"][uri"/wp-content/plugins/wp-testimonial-widget/readme.txt"][unique_id"Xrhlj8TdKW7UysgF@OxR7wAAAJQ"][SunMay1022:35:32.4470692020][:error][pid14573:tid47395496449792][client114.104.140.45:50630][client114.104.140.45]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\\|WormlyBot\\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"402"][id"397989"][re	2020-05-11 06:07:31

Type

Details

Datetime

114.104.140.45

attackbots

[SunMay1022:35:27.7017772020][:error][pid26022:tid47395582797568][client114.104.140.45:50546][client114.104.140.45]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\|WormlyBot\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"402"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSIE6.0detected\(DisableifyouwanttoallowMSIE6\)"][severity"WARNING"][hostname"foreveryoungonline.ch"][uri"/wp-content/plugins/wp-testimonial-widget/readme.txt"][unique_id"Xrhlj8TdKW7UysgF@OxR7wAAAJQ"][SunMay1022:35:32.4470692020][:error][pid14573:tid47395496449792][client114.104.140.45:50630][client114.104.140.45]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\|WormlyBot\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"402"][id"397989"][re

2020-05-11 06:07:31

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.104.140.50
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42665
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;114.104.140.50.			IN	A

;; AUTHORITY SECTION:
.			18	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400

;; Query time: 22 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 14:35:10 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 50.140.104.114.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 50.140.104.114.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
46.38.145.251	attack	2020-06-25T01:52:49.282894linuxbox-skyline auth[188439]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=chita rhost=46.38.145.251 ...	2020-06-25 16:14:14
91.204.199.73	attack	Port scanning [2 denied]	2020-06-25 16:26:09
49.232.172.254	attack	Jun 25 03:37:04 XXXXXX sshd[50752]: Invalid user es from 49.232.172.254 port 42560	2020-06-25 16:35:23
211.193.31.52	attackspam	ssh brute force	2020-06-25 16:43:01
58.236.160.218	attack	Automatic report - FTP Brute Force	2020-06-25 16:36:15
223.242.225.190	attack	SMTP pregreeting traffic	2020-06-25 16:38:14
187.44.224.254	attackbots	Automatic report - XMLRPC Attack	2020-06-25 16:23:25
89.250.152.109	attackspambots	Jun 25 05:57:56 ncomp sshd[25288]: Invalid user miner from 89.250.152.109 Jun 25 05:57:56 ncomp sshd[25288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.250.152.109 Jun 25 05:57:56 ncomp sshd[25288]: Invalid user miner from 89.250.152.109 Jun 25 05:57:58 ncomp sshd[25288]: Failed password for invalid user miner from 89.250.152.109 port 39810 ssh2	2020-06-25 16:27:42
93.67.249.237	attack	TCP (SYN) 93.67.249.237:41788 -> port 60001, len 44	2020-06-25 16:17:21
38.102.173.17	attackbots	Invalid user projects from 38.102.173.17 port 19552	2020-06-25 16:15:56
191.235.239.168	attack	Fail2Ban Ban Triggered (2)	2020-06-25 16:34:36
113.57.109.73	attackspam	Jun 25 06:02:45 datenbank sshd[37416]: Invalid user samba from 113.57.109.73 port 21395 Jun 25 06:02:48 datenbank sshd[37416]: Failed password for invalid user samba from 113.57.109.73 port 21395 ssh2 Jun 25 06:08:15 datenbank sshd[37441]: Invalid user miura from 113.57.109.73 port 47763 ...	2020-06-25 16:29:03
213.150.206.88	attackbotsspam	Jun 25 04:27:25 ny01 sshd[22463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.150.206.88 Jun 25 04:27:27 ny01 sshd[22463]: Failed password for invalid user cheng from 213.150.206.88 port 47308 ssh2 Jun 25 04:31:28 ny01 sshd[23051]: Failed password for root from 213.150.206.88 port 45200 ssh2	2020-06-25 16:34:21
222.186.175.215	attackspambots	Jun 25 10:08:51 abendstille sshd\[21933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.215 user=root Jun 25 10:08:53 abendstille sshd\[21933\]: Failed password for root from 222.186.175.215 port 64920 ssh2 Jun 25 10:09:04 abendstille sshd\[21933\]: Failed password for root from 222.186.175.215 port 64920 ssh2 Jun 25 10:09:07 abendstille sshd\[21933\]: Failed password for root from 222.186.175.215 port 64920 ssh2 Jun 25 10:09:11 abendstille sshd\[22092\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.215 user=root ...	2020-06-25 16:12:53
2a02:a03f:3e69:3000:c9f:7e77:2e74:ea8b	attackspam	Jun 25 05:52:08 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=2a02:a03f:3e69:3000:c9f:7e77:2e74:ea8b, lip=2a01:7e01:e001:164::, session=<1rgihOCoRtgqAqA/PmkwAAyffncudOqL> Jun 25 05:52:14 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=2a02:a03f:3e69:3000:c9f:7e77:2e74:ea8b, lip=2a01:7e01:e001:164::, session= Jun 25 05:52:14 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=2a02:a03f:3e69:3000:c9f:7e77:2e74:ea8b, lip=2a01:7e01:e001:164::, session= Jun 25 05:52:26 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=2a02:a03f:3e69:3000:c9f:7e77:2e74:ea8b, lip=2a01:7e01:e001:164::, session=	2020-06-25 16:04:04

Recently Reported IPs

114.104.140.72	114.104.140.68	114.104.140.77	114.104.140.70
114.104.140.74	114.104.140.78	114.104.140.80	114.104.140.90
114.104.140.86	114.104.140.87	114.104.140.88	113.251.219.173
114.104.140.94	80.213.61.239	114.104.140.92	114.104.140.98
114.104.140.97	114.104.141.10	114.104.141.103	114.104.141.104