114.39.54.59 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Republic of China (ROC)

Internet Service Provider: Chunghwa Telecom Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-08-29 19:54:18

Comments on same subnet:

IP	Type	Details	Datetime
114.39.54.104	attackspambots	Brute force blocker - service: proftpd1 - aantal: 146 - Tue Sep 11 16:10:20 2018	2020-09-26 03:49:12
114.39.54.104	attackbotsspam	Brute force blocker - service: proftpd1 - aantal: 146 - Tue Sep 11 16:10:20 2018	2020-09-25 20:33:57
114.39.54.104	attackbots	Brute force blocker - service: proftpd1 - aantal: 146 - Tue Sep 11 16:10:20 2018	2020-09-25 12:11:29
114.39.54.200	attackbotsspam	Unauthorized connection attempt from IP address 114.39.54.200 on Port 445(SMB)	2019-11-27 00:05:47
114.39.54.137	attack	UTC: 2019-10-21 port: 23/tcp	2019-10-22 17:04:36

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.39.54.59
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64338
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.39.54.59.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082900 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Aug 29 19:54:11 CST 2019
;; MSG SIZE  rcvd: 116

Host info

59.54.39.114.in-addr.arpa domain name pointer 114-39-54-59.dynamic-ip.hinet.net.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
59.54.39.114.in-addr.arpa	name = 114-39-54-59.dynamic-ip.hinet.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
195.238.75.227	attackbotsspam	195.238.75.227 - - [05/Aug/2020:13:11:07 +0100] "POST /wp-login.php HTTP/1.1" 200 1948 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 195.238.75.227 - - [05/Aug/2020:13:11:08 +0100] "POST /wp-login.php HTTP/1.1" 200 1929 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 195.238.75.227 - - [05/Aug/2020:13:11:10 +0100] "POST /wp-login.php HTTP/1.1" 200 1926 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-06 03:52:05
193.150.88.173	attack	Automatic report - Banned IP Access	2020-08-06 03:42:58
201.184.169.106	attack	Aug 5 14:08:24 abendstille sshd\[5657\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.184.169.106 user=root Aug 5 14:08:26 abendstille sshd\[5657\]: Failed password for root from 201.184.169.106 port 53292 ssh2 Aug 5 14:10:07 abendstille sshd\[7344\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.184.169.106 user=root Aug 5 14:10:09 abendstille sshd\[7344\]: Failed password for root from 201.184.169.106 port 48910 ssh2 Aug 5 14:11:52 abendstille sshd\[9129\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.184.169.106 user=root ...	2020-08-06 03:30:22
129.213.38.54	attackbots	Aug 5 00:15:14 roki sshd[27512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.38.54 user=root Aug 5 00:15:16 roki sshd[27512]: Failed password for root from 129.213.38.54 port 50150 ssh2 Aug 5 20:52:48 roki sshd[20876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.38.54 user=root Aug 5 20:52:50 roki sshd[20876]: Failed password for root from 129.213.38.54 port 33332 ssh2 Aug 5 20:59:38 roki sshd[21333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.38.54 user=root ...	2020-08-06 03:52:36
175.6.35.202	attackspam	$f2bV_matches	2020-08-06 03:59:50
113.31.102.234	attackbots	Aug 5 21:42:42 cosmoit sshd[27544]: Failed password for root from 113.31.102.234 port 52040 ssh2	2020-08-06 03:55:01
157.44.114.84	attackbots	1596629471 - 08/05/2020 14:11:11 Host: 157.44.114.84/157.44.114.84 Port: 445 TCP Blocked ...	2020-08-06 03:51:04
49.235.76.203	attackbots	2020-08-05T19:26:44.494866abusebot-4.cloudsearch.cf sshd[15198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.76.203 user=root 2020-08-05T19:26:46.831502abusebot-4.cloudsearch.cf sshd[15198]: Failed password for root from 49.235.76.203 port 34978 ssh2 2020-08-05T19:33:14.518435abusebot-4.cloudsearch.cf sshd[15292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.76.203 user=root 2020-08-05T19:33:16.729421abusebot-4.cloudsearch.cf sshd[15292]: Failed password for root from 49.235.76.203 port 42908 ssh2 2020-08-05T19:34:35.274987abusebot-4.cloudsearch.cf sshd[15355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.76.203 user=root 2020-08-05T19:34:37.606276abusebot-4.cloudsearch.cf sshd[15355]: Failed password for root from 49.235.76.203 port 57336 ssh2 2020-08-05T19:35:57.017046abusebot-4.cloudsearch.cf sshd[15365]: pam_unix(sshd:auth): authe ...	2020-08-06 03:53:45
201.187.99.212	attackbotsspam	TCP (SYN) 201.187.99.212:48644 -> port 80, len 44	2020-08-06 03:51:31
180.248.80.38	attackspambots	Automatic report - Port Scan Attack	2020-08-06 03:55:40
218.92.0.133	attackbots	Multiple SSH login attempts.	2020-08-06 04:00:38
79.162.242.191	attackbotsspam	79.162.242.191 - - \[05/Aug/2020:20:11:42 +0800\] "GET /phpmyadmin/index.php\?lang=en HTTP/1.1" 404 360 "-" "Mozilla/5.0 $Windows NT 10.0\; Win64\; x64$ AppleWebKit/537.36 $KHTML, like Gecko$ Chrome/77.0.3865.120 Safari/537.36"	2020-08-06 03:37:09
112.23.7.76	attack	Dovecot Invalid User Login Attempt.	2020-08-06 03:49:12
121.201.74.154	attackbots	Aug 5 15:44:24 ny01 sshd[32168]: Failed password for root from 121.201.74.154 port 43888 ssh2 Aug 5 15:46:19 ny01 sshd[32393]: Failed password for root from 121.201.74.154 port 40114 ssh2	2020-08-06 03:48:50
168.90.204.31	attackbotsspam	TCP (SYN) 168.90.204.31:27669 -> port 23, len 44	2020-08-06 03:50:41

Recently Reported IPs

202.96.144.47	36.234.41.238	115.203.194.112	185.89.100.141
106.52.235.249	115.59.24.62	192.151.159.76	118.70.28.133
115.76.186.15	203.162.13.26	42.52.103.231	176.119.141.251
222.140.18.239	116.0.196.133	199.234.15.21	188.212.102.233
14.177.178.5	49.158.169.30	116.7.54.97	128.215.6.227