City: Hsinchu
Region: Hsinchu
Country: Taiwan, China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.113.2.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49059
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;140.113.2.68. IN A
;; AUTHORITY SECTION:
. 597 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023050500 1800 900 604800 86400
;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 05 16:41:55 CST 2023
;; MSG SIZE rcvd: 105
68.2.113.140.in-addr.arpa domain name pointer smtp.it.nycu.edu.tw.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
68.2.113.140.in-addr.arpa name = smtp.it.nycu.edu.tw.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 134.122.55.9 | attackbotsspam | Unauthorized connection attempt detected from IP address 134.122.55.9 to port 443 [T] |
2020-04-24 17:24:36 |
| 190.193.250.221 | attack | Apr 22 19:00:02 uapps sshd[31514]: reveeclipse mapping checking getaddrinfo for 221-250-193-190.cab.prima.net.ar [190.193.250.221] failed - POSSIBLE BREAK-IN ATTEMPT! Apr 22 19:00:02 uapps sshd[31514]: User r.r from 190.193.250.221 not allowed because not listed in AllowUsers Apr 22 19:00:02 uapps sshd[31514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.193.250.221 user=r.r Apr 22 19:00:04 uapps sshd[31514]: Failed password for invalid user r.r from 190.193.250.221 port 37724 ssh2 Apr 22 19:00:04 uapps sshd[31514]: Received disconnect from 190.193.250.221: 11: Bye Bye [preauth] Apr 22 19:11:54 uapps sshd[31986]: reveeclipse mapping checking getaddrinfo for 221-250-193-190.cab.prima.net.ar [190.193.250.221] failed - POSSIBLE BREAK-IN ATTEMPT! Apr 22 19:11:56 uapps sshd[31986]: Failed password for invalid user ju from 190.193.250.221 port 51532 ssh2 Apr 22 19:11:56 uapps sshd[31986]: Received disconnect from 190.193.250.221........ ------------------------------- |
2020-04-24 17:17:14 |
| 42.200.66.164 | attackspambots | Invalid user erp from 42.200.66.164 port 33880 |
2020-04-24 17:44:32 |
| 1.169.72.117 | attack | Port probing on unauthorized port 1433 |
2020-04-24 17:49:34 |
| 118.126.98.159 | attack | SSH Brute-Force. Ports scanning. |
2020-04-24 17:52:52 |
| 193.194.92.112 | attackbots | Apr 24 10:43:46 163-172-32-151 sshd[3082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.194.92.112 user=root Apr 24 10:43:48 163-172-32-151 sshd[3082]: Failed password for root from 193.194.92.112 port 33980 ssh2 ... |
2020-04-24 17:21:41 |
| 115.236.35.107 | attackspam | Invalid user 22 from 115.236.35.107 port 41498 |
2020-04-24 17:20:50 |
| 37.187.74.109 | attackbotsspam | wp attack |
2020-04-24 17:24:49 |
| 84.46.101.242 | attackbotsspam | Unauthorized connection attempt detected from IP address 84.46.101.242 |
2020-04-24 17:51:04 |
| 2001:1600:4:b:1618:77ff:fe41:ddd1 | attackbotsspam | xmlrpc attack |
2020-04-24 17:46:31 |
| 138.197.25.187 | attack | Apr 24 08:44:56 ArkNodeAT sshd\[17530\]: Invalid user admin from 138.197.25.187 Apr 24 08:44:56 ArkNodeAT sshd\[17530\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.25.187 Apr 24 08:44:58 ArkNodeAT sshd\[17530\]: Failed password for invalid user admin from 138.197.25.187 port 38670 ssh2 |
2020-04-24 17:13:44 |
| 80.211.59.160 | attackbotsspam | SSH login attempts. |
2020-04-24 17:16:02 |
| 194.55.132.250 | attackspambots | [2020-04-24 05:25:59] NOTICE[1170][C-00004922] chan_sip.c: Call from '' (194.55.132.250:53587) to extension '46842002301' rejected because extension not found in context 'public'. [2020-04-24 05:25:59] SECURITY[1184] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-24T05:25:59.125-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="46842002301",SessionID="0x7f6c0825b8a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/194.55.132.250/53587",ACLName="no_extension_match" [2020-04-24 05:26:40] NOTICE[1170][C-00004923] chan_sip.c: Call from '' (194.55.132.250:57507) to extension '01146842002301' rejected because extension not found in context 'public'. [2020-04-24 05:26:40] SECURITY[1184] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-24T05:26:40.774-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01146842002301",SessionID="0x7f6c0825b8a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/194.55. ... |
2020-04-24 17:32:46 |
| 66.249.79.213 | attack | MYH,DEF GET /media/adminer.php |
2020-04-24 17:31:37 |
| 46.101.2.179 | attack | IP blocked |
2020-04-24 17:38:01 |