106.105.163.140

Basic Info

City: unknown

Region: unknown

Country: Taiwan, Province of China

Internet Service Provider: New Century Infocomm Tech. Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	81/tcp [2020-03-05]1pkt	2020-03-06 01:04:28
attack	port scan and connect, tcp 23 (telnet)	2020-01-11 08:24:58
attackbotsspam	Unauthorized connection attempt detected from IP address 106.105.163.140 to port 23 [J]	2020-01-05 02:20:59

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.105.163.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51290
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.105.163.140.		IN	A

;; AUTHORITY SECTION:
.			552	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010400 1800 900 604800 86400

;; Query time: 96 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 05 02:20:54 CST 2020
;; MSG SIZE  rcvd: 119

Host info

140.163.105.106.in-addr.arpa domain name pointer 106.105.163.140.adsl.dynamic.seed.net.tw.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
140.163.105.106.in-addr.arpa	name = 106.105.163.140.adsl.dynamic.seed.net.tw.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
144.217.91.253	attackbotsspam	Jan 4 05:54:35 work-partkepr sshd\[1003\]: Invalid user avis from 144.217.91.253 port 43204 Jan 4 05:54:35 work-partkepr sshd\[1003\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.91.253 ...	2020-01-04 14:59:59
189.176.92.195	attackbotsspam	Jan 2 17:15:43 pl3server sshd[5199]: reveeclipse mapping checking getaddrinfo for dsl-189-176-92-195-dyn.prod-infinhostnameum.com.mx [189.176.92.195] failed - POSSIBLE BREAK-IN ATTEMPT! Jan 2 17:15:43 pl3server sshd[5199]: Invalid user ubnt from 189.176.92.195 Jan 2 17:15:44 pl3server sshd[5199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.176.92.195 Jan 2 17:15:46 pl3server sshd[5199]: Failed password for invalid user ubnt from 189.176.92.195 port 62529 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=189.176.92.195	2020-01-04 15:02:32
59.92.241.185	attack	20/1/3@23:53:46: FAIL: Alarm-Network address from=59.92.241.185 ...	2020-01-04 15:08:14
77.247.110.38	attackbotsspam	\[2020-01-04 02:06:12\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-01-04T02:06:12.227-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="31948134454003",SessionID="0x7f0fb4a5a908",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.38/53542",ACLName="no_extension_match" \[2020-01-04 02:06:13\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-01-04T02:06:13.411-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="26500048566101002",SessionID="0x7f0fb4ca4128",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.38/57642",ACLName="no_extension_match" \[2020-01-04 02:06:30\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-01-04T02:06:30.539-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="2780048158790013",SessionID="0x7f0fb405b8f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.38/56057",ACLName="no_e	2020-01-04 15:11:47
91.232.96.14	attackspam	Jan 4 06:50:25 grey postfix/smtpd\[18256\]: NOQUEUE: reject: RCPT from unknown\[91.232.96.14\]: 554 5.7.1 Service unavailable\; Client host \[91.232.96.14\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[91.232.96.14\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-01-04 15:12:48
46.38.144.179	attackbotsspam	Jan 4 08:31:45 host postfix/smtpd[36029]: warning: unknown[46.38.144.179]: SASL LOGIN authentication failed: authentication failure Jan 4 08:35:02 host postfix/smtpd[37194]: warning: unknown[46.38.144.179]: SASL LOGIN authentication failed: authentication failure ...	2020-01-04 15:36:39
185.176.27.14	attack	Jan 4 08:14:44 debian-2gb-nbg1-2 kernel: \[381409.572643\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.14 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=45184 PROTO=TCP SPT=51056 DPT=12285 WINDOW=1024 RES=0x00 SYN URGP=0	2020-01-04 15:38:51
151.80.254.73	attackspam	Jan 3 19:53:05 web9 sshd\[20357\]: Invalid user musicbot from 151.80.254.73 Jan 3 19:53:05 web9 sshd\[20357\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.254.73 Jan 3 19:53:07 web9 sshd\[20357\]: Failed password for invalid user musicbot from 151.80.254.73 port 33920 ssh2 Jan 3 19:56:29 web9 sshd\[20910\]: Invalid user user from 151.80.254.73 Jan 3 19:56:29 web9 sshd\[20910\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.254.73	2020-01-04 15:06:47
222.186.175.163	attackbotsspam	2020-01-04T08:04:31.2345791240 sshd\[30102\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.163 user=root 2020-01-04T08:04:33.2479651240 sshd\[30102\]: Failed password for root from 222.186.175.163 port 60848 ssh2 2020-01-04T08:04:36.2427061240 sshd\[30102\]: Failed password for root from 222.186.175.163 port 60848 ssh2 ...	2020-01-04 15:22:24
182.61.61.44	attack	Jan 4 05:52:51 icinga sshd[16677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.61.44 Jan 4 05:52:52 icinga sshd[16677]: Failed password for invalid user cactiuser from 182.61.61.44 port 51726 ssh2 ...	2020-01-04 15:36:17
192.144.155.63	attack	Jan 4 06:26:42 vmd17057 sshd\[14609\]: Invalid user fc from 192.144.155.63 port 49088 Jan 4 06:26:42 vmd17057 sshd\[14609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.155.63 Jan 4 06:26:44 vmd17057 sshd\[14609\]: Failed password for invalid user fc from 192.144.155.63 port 49088 ssh2 ...	2020-01-04 15:20:00
46.38.144.146	attackspam	Jan 4 08:39:07 vmanager6029 postfix/smtpd\[5162\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 4 08:39:36 vmanager6029 postfix/smtpd\[5291\]: warning: unknown\[46.38.144.146\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-01-04 15:40:32
112.85.42.94	attack	Jan 4 08:12:48 eventyay sshd[4101]: Failed password for root from 112.85.42.94 port 57924 ssh2 Jan 4 08:12:51 eventyay sshd[4101]: Failed password for root from 112.85.42.94 port 57924 ssh2 Jan 4 08:12:53 eventyay sshd[4101]: Failed password for root from 112.85.42.94 port 57924 ssh2 ...	2020-01-04 15:34:41
180.76.102.136	attack	Invalid user admin from 180.76.102.136 port 50938	2020-01-04 15:20:15
37.139.0.226	attack	Invalid user plotkin from 37.139.0.226 port 35636	2020-01-04 14:58:59

Recently Reported IPs

191.101.34.8	187.58.254.198	106.122.70.214	187.131.40.142
95.5.8.59	132.207.178.110	135.134.117.117	13.45.3.95
127.220.145.76	93.44.110.36	215.50.109.85	35.13.213.172
137.27.198.235	191.73.62.75	87.188.182.108	150.130.242.115
190.94.243.251	123.150.116.33	87.99.70.42	85.105.231.41