City: Hsinchu
Region: Hsinchu
Country: Taiwan, China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.113.2.86
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57494
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;140.113.2.86. IN A
;; AUTHORITY SECTION:
. 184 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023050501 1800 900 604800 86400
;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 06 08:41:46 CST 2023
;; MSG SIZE rcvd: 105
86.2.113.140.in-addr.arpa domain name pointer s-web.nctu.edu.tw.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
86.2.113.140.in-addr.arpa name = s-web.nctu.edu.tw.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 92.119.160.52 | attack | 10/02/2019-02:15:22.995743 92.119.160.52 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-10-02 15:15:33 |
| 162.241.200.117 | attackbots | 2019-10-02T12:23:04.364049enmeeting.mahidol.ac.th sshd\[16841\]: Invalid user oracle from 162.241.200.117 port 43804 2019-10-02T12:23:04.383453enmeeting.mahidol.ac.th sshd\[16841\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.241.200.117 2019-10-02T12:23:06.530209enmeeting.mahidol.ac.th sshd\[16841\]: Failed password for invalid user oracle from 162.241.200.117 port 43804 ssh2 ... |
2019-10-02 15:03:42 |
| 14.254.221.19 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 02-10-2019 04:50:22. |
2019-10-02 15:40:01 |
| 142.93.81.77 | attackspambots | Invalid user digital from 142.93.81.77 port 55638 |
2019-10-02 15:14:13 |
| 123.16.37.102 | attackspambots | Oct 1 23:26:36 f201 sshd[13249]: Address 123.16.37.102 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 1 23:26:38 f201 sshd[13249]: Connection closed by 123.16.37.102 [preauth] Oct 2 05:32:39 f201 sshd[26303]: Address 123.16.37.102 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 2 05:32:40 f201 sshd[26303]: Connection closed by 123.16.37.102 [preauth] Oct 2 05:41:28 f201 sshd[28805]: Address 123.16.37.102 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 2 05:41:29 f201 sshd[28805]: Connection closed by 123.16.37.102 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=123.16.37.102 |
2019-10-02 15:26:51 |
| 58.210.46.54 | attack | Oct 1 20:55:50 eddieflores sshd\[31818\]: Invalid user server from 58.210.46.54 Oct 1 20:55:50 eddieflores sshd\[31818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.210.46.54 Oct 1 20:55:52 eddieflores sshd\[31818\]: Failed password for invalid user server from 58.210.46.54 port 2103 ssh2 Oct 1 21:01:17 eddieflores sshd\[32266\]: Invalid user web from 58.210.46.54 Oct 1 21:01:17 eddieflores sshd\[32266\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.210.46.54 |
2019-10-02 15:04:26 |
| 54.39.104.30 | attackspam | Oct 1 21:04:38 tdfoods sshd\[19964\]: Invalid user sampler2 from 54.39.104.30 Oct 1 21:04:38 tdfoods sshd\[19964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns558643.ip-54-39-104.net Oct 1 21:04:41 tdfoods sshd\[19964\]: Failed password for invalid user sampler2 from 54.39.104.30 port 41852 ssh2 Oct 1 21:08:20 tdfoods sshd\[20264\]: Invalid user jenny from 54.39.104.30 Oct 1 21:08:20 tdfoods sshd\[20264\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns558643.ip-54-39-104.net |
2019-10-02 15:20:00 |
| 2.8.178.15 | attack | Chat Spam |
2019-10-02 15:11:57 |
| 88.129.208.50 | attack | port scan and connect, tcp 23 (telnet) |
2019-10-02 15:39:18 |
| 186.224.120.196 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 02-10-2019 04:50:24. |
2019-10-02 15:36:21 |
| 89.207.92.172 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 02-10-2019 04:50:28. |
2019-10-02 15:33:03 |
| 193.35.153.133 | attackbots | Oct 2 13:15:34 our-server-hostname postfix/smtpd[14909]: connect from unknown[193.35.153.133] Oct x@x Oct x@x Oct 2 13:15:36 our-server-hostname postfix/smtpd[14909]: 7F4AAA40092: client=unknown[193.35.153.133] Oct 2 13:15:37 our-server-hostname postfix/smtpd[24362]: 4C8E4A40085: client=unknown[127.0.0.1], orig_client=unknown[193.35.153.133] Oct 2 13:15:37 our-server-hostname amavis[16594]: (16594-17) Passed CLEAN, [193.35.153.133] [193.35.153.133] |
2019-10-02 15:31:19 |
| 134.175.59.235 | attack | Oct 1 20:26:33 php1 sshd\[21687\]: Invalid user green123 from 134.175.59.235 Oct 1 20:26:33 php1 sshd\[21687\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.59.235 Oct 1 20:26:35 php1 sshd\[21687\]: Failed password for invalid user green123 from 134.175.59.235 port 48685 ssh2 Oct 1 20:32:40 php1 sshd\[22265\]: Invalid user password123 from 134.175.59.235 Oct 1 20:32:40 php1 sshd\[22265\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.59.235 |
2019-10-02 15:15:19 |
| 31.129.143.73 | attackbotsspam | 2019-10-02T05:35:09.597386static.108.197.76.144.clients.your-server.de sshd[1831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.129.143.73 user=r.r 2019-10-02T05:35:12.171090static.108.197.76.144.clients.your-server.de sshd[1831]: Failed password for r.r from 31.129.143.73 port 47569 ssh2 2019-10-02T05:35:14.541430static.108.197.76.144.clients.your-server.de sshd[1831]: Failed password for r.r from 31.129.143.73 port 47569 ssh2 2019-10-02T05:35:17.195951static.108.197.76.144.clients.your-server.de sshd[1831]: Failed password for r.r from 31.129.143.73 port 47569 ssh2 2019-10-02T05:35:18.587318static.108.197.76.144.clients.your-server.de sshd[1831]: Failed password for r.r from 31.129.143.73 port 47569 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=31.129.143.73 |
2019-10-02 15:11:25 |
| 195.140.227.93 | attack | Automatic report - SSH Brute-Force Attack |
2019-10-02 15:04:39 |