City: Suwon
Region: Gyeonggi-do
Country: South Korea
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '106.240.0.0 - 106.255.255.255'
% Abuse contact for '106.240.0.0 - 106.255.255.255' is 'irt@nic.or.kr'
inetnum: 106.240.0.0 - 106.255.255.255
netname: BORANET
descr: LG DACOM Corporation
admin-c: IM646-AP
tech-c: IM646-AP
country: KR
status: ALLOCATED PORTABLE
mnt-by: MNT-KRNIC-AP
mnt-irt: IRT-KRNIC-KR
last-modified: 2017-02-03T00:55:03Z
source: APNIC
irt: IRT-KRNIC-KR
address: 9, Jinheung-gil, Naju-si, Jeollanam-do
e-mail: irt@nic.or.kr
abuse-mailbox: irt@nic.or.kr
admin-c: IM574-AP
tech-c: IM574-AP
auth: # Filtered
remarks: irt@nic.or.kr was validated on 2020-04-09
mnt-by: MNT-KRNIC-AP
last-modified: 2025-09-04T01:00:01Z
source: APNIC
person: IP Manager
address: Seoul Yongsan-gu Hangang-daero 32
country: KR
phone: +82-2-1-01
e-mail: ipadm@lguplus.co.kr
nic-hdl: IM646-AP
mnt-by: MNT-KRNIC-AP
last-modified: 2021-10-05T05:20:03Z
source: APNIC
% Information related to '106.240.0.0 - 106.255.255.255'
inetnum: 106.240.0.0 - 106.255.255.255
netname: BORANET-KR
descr: LG DACOM Corporation
country: KR
admin-c: IA5-KR
tech-c: IA5-KR
status: ALLOCATED PORTABLE
mnt-by: MNT-KRNIC-AP
mnt-irt: IRT-KRNIC-KR
changed: hostmaster@nic.or.kr 20240912
remarks: This information has been partially mirrored by APNIC from
remarks: KRNIC. To obtain more specific information, please use the
remarks: KRNIC whois server at whois.kisa.or.kr.
source: KRNIC
person: IP Manager
address: Seoul Yongsan-gu Hangang-daero 32
address: LG UPLUS
country: KR
phone: +82-2-1-01
e-mail: ipadm@lguplus.co.kr
nic-hdl: IA5-KR
mnt-by: MNT-KRNIC-AP
changed: hostmaster@nic.or.kr 20240912
remarks: This information has been partially mirrored by APNIC from
remarks: KRNIC. To obtain more specific information, please use the
remarks: KRNIC whois server at whois.kisa.or.kr.
source: KRNIC
% This query was served by the APNIC Whois Service version 1.88.36-SNAPSHOT (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.244.42.175
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10933
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;106.244.42.175. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025110600 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 06 23:30:50 CST 2025
;; MSG SIZE rcvd: 107Host 175.42.244.106.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 175.42.244.106.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 117.6.97.138 | attackspambots | Mar 20 23:04:47 xeon sshd[42749]: Failed password for invalid user csserver from 117.6.97.138 port 14683 ssh2 |
2020-03-21 06:27:43 |
| 185.220.102.4 | attackbots | Mar 20 18:55:45 mail sshd\[17428\]: Invalid user support from 185.220.102.4 Mar 20 18:55:46 mail sshd\[17428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.102.4 Mar 20 18:55:48 mail sshd\[17428\]: Failed password for invalid user support from 185.220.102.4 port 34935 ssh2 ... |
2020-03-21 06:09:53 |
| 113.252.19.216 | attackbotsspam | Unauthorized connection attempt from IP address 113.252.19.216 on Port 445(SMB) |
2020-03-21 06:08:44 |
| 222.186.175.140 | attackspam | Mar 20 23:13:41 eventyay sshd[936]: Failed password for root from 222.186.175.140 port 22104 ssh2 Mar 20 23:13:45 eventyay sshd[936]: Failed password for root from 222.186.175.140 port 22104 ssh2 Mar 20 23:13:55 eventyay sshd[936]: Failed password for root from 222.186.175.140 port 22104 ssh2 Mar 20 23:13:55 eventyay sshd[936]: error: maximum authentication attempts exceeded for root from 222.186.175.140 port 22104 ssh2 [preauth] ... |
2020-03-21 06:24:16 |
| 178.62.186.49 | attack | SSH bruteforce (Triggered fail2ban) |
2020-03-21 06:23:24 |
| 162.243.130.40 | attackspam | Port scan: Attack repeated for 24 hours |
2020-03-21 06:10:12 |
| 222.186.30.187 | attackspambots | Mar 20 18:18:53 plusreed sshd[15367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.187 user=root Mar 20 18:18:55 plusreed sshd[15367]: Failed password for root from 222.186.30.187 port 58496 ssh2 ... |
2020-03-21 06:19:51 |
| 185.53.88.49 | attack | [2020-03-20 18:23:28] NOTICE[1148][C-00013dda] chan_sip.c: Call from '' (185.53.88.49:5076) to extension '5011972595778361' rejected because extension not found in context 'public'. [2020-03-20 18:23:28] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-20T18:23:28.331-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="5011972595778361",SessionID="0x7fd82c40aa58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.49/5076",ACLName="no_extension_match" [2020-03-20 18:30:10] NOTICE[1148][C-00013de3] chan_sip.c: Call from '' (185.53.88.49:5070) to extension '1011972595778361' rejected because extension not found in context 'public'. [2020-03-20 18:30:10] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-20T18:30:10.366-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="1011972595778361",SessionID="0x7fd82c530768",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/18 ... |
2020-03-21 06:36:21 |
| 193.112.125.49 | attackspambots | Mar 20 21:48:27 pornomens sshd\[29086\]: Invalid user admin from 193.112.125.49 port 59290 Mar 20 21:48:27 pornomens sshd\[29086\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.125.49 Mar 20 21:48:28 pornomens sshd\[29086\]: Failed password for invalid user admin from 193.112.125.49 port 59290 ssh2 ... |
2020-03-21 05:59:36 |
| 23.247.94.87 | attackspambots | Mar 20 13:51:33 mxgate1 postfix/postscreen[18658]: CONNECT from [23.247.94.87]:56672 to [176.31.12.44]:25 Mar 20 13:51:33 mxgate1 postfix/dnsblog[18661]: addr 23.247.94.87 listed by domain zen.spamhaus.org as 127.0.0.3 Mar 20 13:51:39 mxgate1 postfix/postscreen[18658]: DNSBL rank 2 for [23.247.94.87]:56672 Mar x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=23.247.94.87 |
2020-03-21 06:01:50 |
| 139.59.13.55 | attackbots | Mar 20 23:10:04 ArkNodeAT sshd\[21814\]: Invalid user endou from 139.59.13.55 Mar 20 23:10:04 ArkNodeAT sshd\[21814\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.55 Mar 20 23:10:06 ArkNodeAT sshd\[21814\]: Failed password for invalid user endou from 139.59.13.55 port 60147 ssh2 |
2020-03-21 06:21:32 |
| 167.99.66.158 | attackbots | Mar 20 15:31:27 home sshd[3184]: Invalid user asterisk from 167.99.66.158 port 50604 Mar 20 15:31:27 home sshd[3184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.66.158 Mar 20 15:31:27 home sshd[3184]: Invalid user asterisk from 167.99.66.158 port 50604 Mar 20 15:31:29 home sshd[3184]: Failed password for invalid user asterisk from 167.99.66.158 port 50604 ssh2 Mar 20 15:40:49 home sshd[3333]: Invalid user h from 167.99.66.158 port 40416 Mar 20 15:40:49 home sshd[3333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.66.158 Mar 20 15:40:49 home sshd[3333]: Invalid user h from 167.99.66.158 port 40416 Mar 20 15:40:51 home sshd[3333]: Failed password for invalid user h from 167.99.66.158 port 40416 ssh2 Mar 20 15:44:53 home sshd[3415]: Invalid user vmail from 167.99.66.158 port 52226 Mar 20 15:44:53 home sshd[3415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.66.15 |
2020-03-21 05:59:52 |
| 190.66.55.239 | attackbots | Invalid user sinusbot from 190.66.55.239 port 22689 |
2020-03-21 06:09:24 |
| 221.165.252.143 | attack | Mar 20 22:50:39 localhost sshd\[28790\]: Invalid user disasterbot from 221.165.252.143 port 39404 Mar 20 22:50:39 localhost sshd\[28790\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.165.252.143 Mar 20 22:50:41 localhost sshd\[28790\]: Failed password for invalid user disasterbot from 221.165.252.143 port 39404 ssh2 |
2020-03-21 06:00:45 |
| 188.170.13.225 | attackspambots | Invalid user user03 from 188.170.13.225 port 59338 |
2020-03-21 06:11:18 |