City: unknown
Region: unknown
Country: Japan
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 27.138.0.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15292
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;27.138.0.64. IN A
;; AUTHORITY SECTION:
. 593 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022011200 1800 900 604800 86400
;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 12 15:36:29 CST 2022
;; MSG SIZE rcvd: 10464.0.138.27.in-addr.arpa domain name pointer 27-138-0-64.rev.home.ne.jp.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
64.0.138.27.in-addr.arpa name = 27-138-0-64.rev.home.ne.jp.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 84.17.49.196 | attack | QNAP login attempts with admin username |
2021-03-08 17:57:16 |
| 34.107.210.159 | spam | Some random number texted me this link, it looks sketchy. I'm not opening this. |
2021-03-07 13:48:02 |
| 69.65.62.64 | spamattack | PHISHING AND SPAM ATTACK FROM "123Greetings - specials@123g.biz -" : SUBJECT "Diabetics - No More Finger Pricks " : RECEIVED "from mail.silver64.123g.biz ([69.65.62.64]:43032) " : DATE/TIMESENT "Thu, 04 Mar 2021 09:25:27 " NOTE Take care with cards from 123Greetings.com, it uses 69.65.62.0/25 as above" |
2021-03-04 07:51:00 |
| 154.28.188.162 | attack | Numerous QNAP login attempts with admin username |
2021-03-08 17:53:55 |
| 183.148.177.212 | attack | brute force attack attempts from 183.148.177.212 |
2021-03-27 02:11:23 |
| 185.63.253.223 | spambotsattackproxynormal | 153.63.253.200 |
2021-03-02 00:01:18 |
| 40.92.41.13 | spamnormal | Ask cost for a private tour in Greece |
2021-03-13 20:43:54 |
| 23.247.75.97 | spamattack | PHISHING AND SPAM ATTACK FROM African Tribesmen - PenisElongationRitual@backyrdrevolution.co -" : SUBJECT "White Wife Caught In African Elongation Ritual " : RECEIVED "from duhart.rotonat.com ([23.247.75.97]:39223 helo=lima.backyrdrevolution.co) " : DATE/TIMESENT "Sat, 06 Mar 2021 07:32:39 " IP ADDRESS "NetRange: 23.247.75.0 - 23.247.75.255 Customer: Andrew Horton (C04842071)" PHISHING AND SPAM ATTACK FROM "Wireless Earbuds - WirelessEarbuds@hellfire.cyou -" : SUBJECT "New Apple H1 headphone chip delivers faster wireless connection to your devices " : RECEIVED "from kvotes.rotonat.com ([23.247.75.102]:60098 helo=gull.hellfire.cyou) " : DATE/TIMESENT "Sat, 27 Feb 2021 23:52:46 " IP ADDRESS "NetRange: 23.247.75.0 - 23.247.75.255 Customer: Andrew Horton (C04842071) |
2021-03-06 07:48:25 |
| 51.161.104.129 | attack | Tried to log into my accounts |
2021-03-07 18:35:47 |
| 23.247.94.234 | spamattack | PHISHING AND SPAM ATTACK FROM "TV Caster - WirelesslyStreams@casterzilla.us -" : SUBJECT "Is it Really as Good as a Smart TV? " : RECEIVED "from [23.247.94.234] (port=37453 helo=narvi.casterzilla.us) " : DATE/TIMESENT "Fri, 12 Mar 2021 00:56:42 " IP ADDRESS "NetRange: 23.247.0.0 - 23.247.127.255 OrgName: LayerHost " |
2021-03-12 07:41:13 |
| 23.247.94.198 | spamattack | PHISHING AND SPAM ATTACK FROM "Portable Telescope - PortableMonocularTelescope@learnspeaking.cyou -" : SUBJECT "BREAKING: New military spy tech available to public " : RECEIVED "from [23.247.94.198] (port=39004 helo=topeka.learnspeaking.cyou) " : DATE/TIMESENT "Sun, 07 Mar 2021 20:27:57 " IP ADDRESS "NetRange: 23.247.0.0 - 23.247.127.255 OrgName: LayerHost " |
2021-03-07 18:05:36 |
| 23.247.27.21 | spamattack | PHISHING AND SPAM ATTACK FROM "Professional Drone - ProfessionalDrone@newfund.buzz -" : SUBJECT "The perfect professional drone on a budget. " : RECEIVED "from [23.247.27.21] (port=37460 helo=data.newfund.buzz) " : DATE/TIMESENT "Sat, 06 Mar 2021 23:04:10 " IP ADDRESS "NetRange: 23.247.0.0 - 23.247.127.255 OrgName: LayerHost " |
2021-03-07 08:14:27 |
| 103.153.183.18 | spamattack | PHISHING AND SPAM ATTACK FROM "Mr. google - Admin@liubim.com -" : SUBJECT "RE " : RECEIVED "from [103.153.183.18] (unknown [103.153.183.18]) (Authenticated sender: Admin@liubim.com) by liubim.com (Postfix) with ESMTPSA id 456EA12F6FE " : DATE/TIMESENT "Mon, 1 Mar 2021 05:04:34 " IP ADDRESS "inetnum: 103.153.182.0 - 103.153.183.254 address: 1004/D-Wing, Astonia Royale, Ambegaon Narhe Road, Pune Maharashtra 411046" |
2021-03-03 07:12:17 |
| 103.105.35.89 | normal | HP YANG ADA IP TERSEBUT TELAH DICURI |
2021-03-23 08:03:44 |
| 213.5.195.97 | spamattack | Tried to access Google Account and has compromised other accounts. |
2021-03-17 02:43:48 |