City: Kaohsiung
Region: Kaohsiung
Country: Taiwan, China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.116.243.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34962
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;140.116.243.66. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023050200 1800 900 604800 86400
;; Query time: 74 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue May 02 16:02:39 CST 2023
;; MSG SIZE rcvd: 10766.243.116.140.in-addr.arpa domain name pointer wlan.ncku.edu.tw.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
66.243.116.140.in-addr.arpa name = wlan.ncku.edu.tw.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 220.136.113.35 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-07 05:38:02,353 INFO [amun_request_handler] PortScan Detected on Port: 445 (220.136.113.35) |
2019-08-07 22:53:26 |
| 188.128.39.126 | attackspambots | Aug 7 16:17:46 localhost sshd\[20928\]: Invalid user ggutierrez from 188.128.39.126 Aug 7 16:17:46 localhost sshd\[20928\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.128.39.126 Aug 7 16:17:48 localhost sshd\[20928\]: Failed password for invalid user ggutierrez from 188.128.39.126 port 49500 ssh2 Aug 7 16:23:17 localhost sshd\[21198\]: Invalid user more from 188.128.39.126 Aug 7 16:23:17 localhost sshd\[21198\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.128.39.126 ... |
2019-08-07 22:27:01 |
| 89.238.154.124 | attackspambots | localhost 89.238.154.124 - - [07/Aug/2019:14:52:42 +0800] "GET /img/ HTTP/1.1" 404 267 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" VLOG=- localhost 89.238.154.124 - - [07/Aug/2019:14:52:43 +0800] "GET /includes HTTP/1.1" 404 271 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" VLOG=- localhost 89.238.154.124 - - [07/Aug/2019:14:52:43 +0800] "GET /includes/ HTTP/1.1" 404 272 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" VLOG=- localhost 89.238.154.124 - - [07/Aug/2019:14:52:44 +0800] "GET /statistics.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.71 Safari/537.36" VLOG=- localhost 89.238.154.124 - - [07/Aug/2019:14:52:44 +0800] "GET /statistics.php/ HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWeb ... |
2019-08-07 22:06:56 |
| 1.53.114.168 | attackbots | Unauthorised access (Aug 7) SRC=1.53.114.168 LEN=52 TTL=108 ID=13810 DF TCP DPT=445 WINDOW=8192 SYN |
2019-08-07 21:41:36 |
| 34.210.236.195 | attack | port scan and connect, tcp 119 (nntp) |
2019-08-07 21:39:08 |
| 14.183.73.155 | attackbots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-07 05:43:17,707 INFO [amun_request_handler] PortScan Detected on Port: 445 (14.183.73.155) |
2019-08-07 22:28:32 |
| 183.81.73.60 | attackbots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-07 05:41:24,463 INFO [amun_request_handler] PortScan Detected on Port: 445 (183.81.73.60) |
2019-08-07 22:36:33 |
| 27.3.150.15 | attackbots | Honeypot attack, port: 23, PTR: PTR record not found |
2019-08-07 22:23:06 |
| 85.212.244.17 | attackbotsspam | Automatic report - Port Scan Attack |
2019-08-07 22:46:46 |
| 125.64.94.220 | attackbotsspam | 08/07/2019-09:11:34.854811 125.64.94.220 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-08-07 22:25:00 |
| 185.122.223.211 | attackspambots | Aug 7 08:13:08 tux postfix/smtpd[13907]: warning: hostname mostafadehghani.com does not resolve to address 185.122.223.211 Aug 7 08:13:08 tux postfix/smtpd[13907]: connect from unknown[185.122.223.211] Aug 7 08:13:11 tux postfix/smtpd[13907]: 928E8B0002: client=unknown[185.122.223.211] Aug 7 08:13:12 tux postfix/smtpd[13907]: disconnect from unknown[185.122.223.211] Aug 7 08:32:33 tux postfix/smtpd[14028]: warning: hostname mostafadehghani.com does not resolve to address 185.122.223.211 Aug 7 08:32:33 tux postfix/smtpd[14028]: connect from unknown[185.122.223.211] Aug 7 08:32:37 tux postfix/smtpd[14028]: 66AF0B0002: client=unknown[185.122.223.211] Aug 7 08:32:37 tux postfix/smtpd[14028]: disconnect from unknown[185.122.223.211] Aug 7 08:44:05 tux postfix/smtpd[14354]: warning: hostname mostafadehghani.com does not resolve to address 185.122.223.211 Aug 7 08:44:05 tux postfix/smtpd[14354]: connect from unknown[185.122.223.211] Aug x@x ........ ----------------------------------------------- https:/ |
2019-08-07 21:51:19 |
| 2001:41d0:1004:f7e:: | attackbotsspam | WordPress wp-login brute force :: 2001:41d0:1004:f7e:: 0.044 BYPASS [07/Aug/2019:16:52:30 1000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 4630 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-08-07 22:24:08 |
| 2.216.87.31 | attackspambots | Automatic report - Port Scan Attack |
2019-08-07 22:19:33 |
| 218.161.93.221 | attackspam | Aug 7 01:48:38 euve59663 sshd[13736]: Bad protocol version identificat= ion '' from 218.161.93.221 Aug 7 01:48:40 euve59663 sshd[13737]: pam_unix(sshd:auth): authenticat= ion failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D218= -161-93-221.hinet-ip.hinet.net user=3Dr.r Aug 7 01:48:42 euve59663 sshd[13737]: Failed password for r.r from 21= 8.161.93.221 port 56066 ssh2 Aug 7 01:48:42 euve59663 sshd[13737]: Connection closed by 218.161.93.= 221 [preauth] Aug 7 01:48:46 euve59663 sshd[13739]: pam_unix(sshd:auth): authenticat= ion failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D218= -161-93-221.hinet-ip.hinet.net user=3Dr.r Aug 7 01:48:48 euve59663 sshd[13739]: Failed password for r.r from 21= 8.161.93.221 port 57098 ssh2 Aug 7 01:48:49 euve59663 sshd[13739]: Connection closed by 218.161.93.= 221 [preauth] Aug 7 01:48:53 euve59663 sshd[13741]: pam_unix(sshd:auth): authenticat= ion failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=........ ------------------------------- |
2019-08-07 22:44:53 |
| 72.34.118.194 | attackbots | Honeypot attack, port: 23, PTR: 72-34-118-194.LSANCA.static.bb.race.com. |
2019-08-07 21:54:40 |