City: Kaohsiung
Region: Kaohsiung
Country: Taiwan, China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.114.197.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38356
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;140.114.197.57. IN A
;; AUTHORITY SECTION:
. 179 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023062800 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 28 19:41:09 CST 2023
;; MSG SIZE rcvd: 10757.197.114.140.in-addr.arpa domain name pointer sd197057.shin34.ab.nthu.edu.tw.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
57.197.114.140.in-addr.arpa name = sd197057.shin34.ab.nthu.edu.tw.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 2a02:c7f:2269:3d00:1b4:a64d:ed0b:8a24 | attack | C2,WP GET /wp-login.php |
2020-05-16 03:52:00 |
| 58.54.249.210 | attack | May 15 10:11:38 NPSTNNYC01T sshd[23791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.54.249.210 May 15 10:11:40 NPSTNNYC01T sshd[23791]: Failed password for invalid user alen from 58.54.249.210 port 41318 ssh2 May 15 10:16:20 NPSTNNYC01T sshd[24279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.54.249.210 ... |
2020-05-16 03:53:04 |
| 27.78.14.83 | attackbots | May 15 21:38:33 rotator sshd\[31596\]: Address 27.78.14.83 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!May 15 21:38:33 rotator sshd\[31596\]: Invalid user ftp from 27.78.14.83May 15 21:38:34 rotator sshd\[31598\]: Address 27.78.14.83 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!May 15 21:38:36 rotator sshd\[31596\]: Failed password for invalid user ftp from 27.78.14.83 port 42818 ssh2May 15 21:38:36 rotator sshd\[31598\]: Failed password for root from 27.78.14.83 port 59104 ssh2May 15 21:38:36 rotator sshd\[31605\]: Address 27.78.14.83 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!May 15 21:38:36 rotator sshd\[31605\]: Invalid user admin from 27.78.14.83 ... |
2020-05-16 03:46:39 |
| 142.93.172.64 | attackspam | May 15 19:45:09 localhost sshd[82146]: Invalid user Test from 142.93.172.64 port 38950 May 15 19:45:09 localhost sshd[82146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.172.64 May 15 19:45:09 localhost sshd[82146]: Invalid user Test from 142.93.172.64 port 38950 May 15 19:45:11 localhost sshd[82146]: Failed password for invalid user Test from 142.93.172.64 port 38950 ssh2 May 15 19:51:38 localhost sshd[83059]: Invalid user easter from 142.93.172.64 port 44968 ... |
2020-05-16 03:59:57 |
| 148.227.227.66 | attack | *Port Scan* detected from 148.227.227.66 (MX/Mexico/Sinaloa/Culiacán (Privada del Real)/-). 4 hits in the last 250 seconds |
2020-05-16 03:50:26 |
| 45.157.149.2 | attackbots | Email rejected due to spam filtering |
2020-05-16 03:28:50 |
| 106.54.245.12 | attack | Invalid user postgres from 106.54.245.12 port 52178 |
2020-05-16 03:56:23 |
| 185.137.234.155 | attack | TCP ports : 3355 / 3357 / 3369 / 3373 / 3389 |
2020-05-16 03:32:05 |
| 150.109.82.109 | attackbotsspam | SSH Brute Force |
2020-05-16 03:38:48 |
| 92.118.160.5 | attackspambots |
|
2020-05-16 03:40:36 |
| 218.28.21.236 | attackspam | May 15 17:39:49 vpn01 sshd[20349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.28.21.236 May 15 17:39:51 vpn01 sshd[20349]: Failed password for invalid user tg from 218.28.21.236 port 42096 ssh2 ... |
2020-05-16 03:43:22 |
| 106.13.88.196 | attack | Invalid user op from 106.13.88.196 port 55202 |
2020-05-16 03:57:36 |
| 80.82.78.104 | attackbotsspam | 05/15/2020-13:48:41.906283 80.82.78.104 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 82 |
2020-05-16 03:20:26 |
| 203.177.71.253 | attackbotsspam | May 15 18:31:39 MainVPS sshd[17837]: Invalid user hr from 203.177.71.253 port 43318 May 15 18:31:39 MainVPS sshd[17837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.177.71.253 May 15 18:31:39 MainVPS sshd[17837]: Invalid user hr from 203.177.71.253 port 43318 May 15 18:31:41 MainVPS sshd[17837]: Failed password for invalid user hr from 203.177.71.253 port 43318 ssh2 May 15 18:34:11 MainVPS sshd[19966]: Invalid user webadmin from 203.177.71.253 port 33525 ... |
2020-05-16 03:46:20 |
| 196.52.43.58 | attackbotsspam | Metasploit VxWorks WDB Agent Scanner Detection |
2020-05-16 03:28:27 |