城市(city): Hsinchu
省份(region): Hsinchu
国家(country): Taiwan, China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.113.143.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41543
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;140.113.143.140. IN A
;; AUTHORITY SECTION:
. 574 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020030501 1800 900 604800 86400
;; Query time: 49 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 06 04:42:49 CST 2020
;; MSG SIZE rcvd: 119140.143.113.140.in-addr.arpa domain name pointer pc143-140.cos.nctu.edu.tw.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
140.143.113.140.in-addr.arpa name = pc143-140.cos.nctu.edu.tw.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 195.54.160.210 | attack | Fail2Ban Ban Triggered |
2020-05-07 01:33:35 |
| 49.49.212.242 | attackbotsspam | 1588766314 - 05/06/2020 13:58:34 Host: 49.49.212.242/49.49.212.242 Port: 445 TCP Blocked |
2020-05-07 01:31:22 |
| 46.102.68.81 | attackbotsspam | Port probing on unauthorized port 2323 |
2020-05-07 01:10:11 |
| 162.251.236.2 | attack | probes 8 times on the port 13818 |
2020-05-07 01:53:47 |
| 178.62.117.151 | attackspam | scans 2 times in preceeding hours on the ports (in chronological order) 8660 30478 |
2020-05-07 01:51:46 |
| 92.246.84.185 | attackspambots | [2020-05-06 09:50:06] NOTICE[1157][C-000008a1] chan_sip.c: Call from '' (92.246.84.185:64275) to extension '846812400991' rejected because extension not found in context 'public'. [2020-05-06 09:50:06] SECURITY[1173] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-05-06T09:50:06.587-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="846812400991",SessionID="0x7f5f10197838",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/92.246.84.185/64275",ACLName="no_extension_match" [2020-05-06 09:55:29] NOTICE[1157][C-000008a5] chan_sip.c: Call from '' (92.246.84.185:64970) to extension '1046812400991' rejected because extension not found in context 'public'. [2020-05-06 09:55:29] SECURITY[1173] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-05-06T09:55:29.971-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="1046812400991",SessionID="0x7f5f10613848",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/92.246.84. ... |
2020-05-07 01:36:32 |
| 218.92.0.165 | attack | May 6 19:06:28 minden010 sshd[11388]: Failed password for root from 218.92.0.165 port 63617 ssh2 May 6 19:06:38 minden010 sshd[11388]: Failed password for root from 218.92.0.165 port 63617 ssh2 May 6 19:06:42 minden010 sshd[11388]: Failed password for root from 218.92.0.165 port 63617 ssh2 May 6 19:06:42 minden010 sshd[11388]: error: maximum authentication attempts exceeded for root from 218.92.0.165 port 63617 ssh2 [preauth] ... |
2020-05-07 01:23:43 |
| 106.13.48.241 | attackspam | May 6 10:29:00 dns1 sshd[30088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.241 May 6 10:29:02 dns1 sshd[30088]: Failed password for invalid user txt from 106.13.48.241 port 59072 ssh2 May 6 10:33:55 dns1 sshd[30436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.241 |
2020-05-07 01:19:31 |
| 195.54.160.211 | attack | firewall-block, port(s): 11179/tcp, 11187/tcp |
2020-05-07 01:45:53 |
| 103.115.38.2 | attack | May 5 06:30:33 w sshd[21068]: Invalid user nginx from 103.115.38.2 May 5 06:30:33 w sshd[21068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.115.38.2 May 5 06:30:35 w sshd[21068]: Failed password for invalid user nginx from 103.115.38.2 port 29581 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=103.115.38.2 |
2020-05-07 01:30:54 |
| 61.234.48.7 | attack | May 6 14:45:07 h2779839 sshd[21562]: Invalid user alexis from 61.234.48.7 port 39227 May 6 14:45:07 h2779839 sshd[21562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.234.48.7 May 6 14:45:07 h2779839 sshd[21562]: Invalid user alexis from 61.234.48.7 port 39227 May 6 14:45:09 h2779839 sshd[21562]: Failed password for invalid user alexis from 61.234.48.7 port 39227 ssh2 May 6 14:49:01 h2779839 sshd[21583]: Invalid user user from 61.234.48.7 port 58124 May 6 14:49:01 h2779839 sshd[21583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.234.48.7 May 6 14:49:01 h2779839 sshd[21583]: Invalid user user from 61.234.48.7 port 58124 May 6 14:49:03 h2779839 sshd[21583]: Failed password for invalid user user from 61.234.48.7 port 58124 ssh2 May 6 14:52:45 h2779839 sshd[21608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.234.48.7 user=root May 6 14:52:48 ... |
2020-05-07 01:19:00 |
| 165.227.114.161 | attackspambots | May 6 14:58:02 debian-2gb-nbg1-2 kernel: \[11028772.776485\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=165.227.114.161 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=64799 PROTO=TCP SPT=53246 DPT=6471 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-05-07 01:53:05 |
| 122.51.193.205 | attackbots | 2020-05-06T11:48:41.421735shield sshd\[26768\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.193.205 user=root 2020-05-06T11:48:43.239526shield sshd\[26768\]: Failed password for root from 122.51.193.205 port 55904 ssh2 2020-05-06T11:58:24.458623shield sshd\[29215\]: Invalid user tyr from 122.51.193.205 port 40306 2020-05-06T11:58:24.462455shield sshd\[29215\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.193.205 2020-05-06T11:58:26.315360shield sshd\[29215\]: Failed password for invalid user tyr from 122.51.193.205 port 40306 ssh2 |
2020-05-07 01:38:44 |
| 222.186.180.6 | attackbots | May 6 20:19:30 ift sshd\[13257\]: Failed password for root from 222.186.180.6 port 21526 ssh2May 6 20:19:34 ift sshd\[13257\]: Failed password for root from 222.186.180.6 port 21526 ssh2May 6 20:19:51 ift sshd\[13272\]: Failed password for root from 222.186.180.6 port 42040 ssh2May 6 20:19:54 ift sshd\[13272\]: Failed password for root from 222.186.180.6 port 42040 ssh2May 6 20:19:57 ift sshd\[13272\]: Failed password for root from 222.186.180.6 port 42040 ssh2 ... |
2020-05-07 01:21:49 |
| 178.62.118.53 | attackspambots | May 6 17:18:47 ip-172-31-62-245 sshd\[17961\]: Invalid user peter from 178.62.118.53\ May 6 17:18:50 ip-172-31-62-245 sshd\[17961\]: Failed password for invalid user peter from 178.62.118.53 port 46083 ssh2\ May 6 17:23:45 ip-172-31-62-245 sshd\[18047\]: Invalid user oracle from 178.62.118.53\ May 6 17:23:47 ip-172-31-62-245 sshd\[18047\]: Failed password for invalid user oracle from 178.62.118.53 port 36563 ssh2\ May 6 17:28:36 ip-172-31-62-245 sshd\[18132\]: Invalid user xhy from 178.62.118.53\ |
2020-05-07 01:38:07 |