City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.66.29.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62018
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;102.66.29.42. IN A
;; AUTHORITY SECTION:
. 380 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 22:45:44 CST 2022
;; MSG SIZE rcvd: 105Host 42.29.66.102.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 42.29.66.102.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.232.65.50 | attackspam | Aug 15 00:01:15 mail.srvfarm.net postfix/smtpd[741824]: warning: unknown[45.232.65.50]: SASL PLAIN authentication failed: Aug 15 00:01:15 mail.srvfarm.net postfix/smtpd[741824]: lost connection after AUTH from unknown[45.232.65.50] Aug 15 00:02:20 mail.srvfarm.net postfix/smtps/smtpd[740202]: warning: unknown[45.232.65.50]: SASL PLAIN authentication failed: Aug 15 00:02:20 mail.srvfarm.net postfix/smtps/smtpd[740202]: lost connection after AUTH from unknown[45.232.65.50] Aug 15 00:09:01 mail.srvfarm.net postfix/smtps/smtpd[893682]: warning: unknown[45.232.65.50]: SASL PLAIN authentication failed: |
2020-08-15 17:25:00 |
| 201.236.182.92 | attackspam | $f2bV_matches |
2020-08-15 17:53:52 |
| 141.145.116.229 | attackbots | srvr2: (mod_security) mod_security (id:920350) triggered by 141.145.116.229 (GB/-/oc-141-145-116-229.compute.oraclecloud.com): 1 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/15 05:51:45 [error] 65017#0: *98571 [client 141.145.116.229] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host' [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/"] [unique_id "15974635058.896981"] [ref "o0,18v21,18"], client: 141.145.116.229, [redacted] request: "GET / HTTP/1.1" [redacted] |
2020-08-15 17:45:59 |
| 221.144.178.231 | attack | Aug 15 05:45:01 serwer sshd\[13617\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.144.178.231 user=root Aug 15 05:45:03 serwer sshd\[13617\]: Failed password for root from 221.144.178.231 port 34286 ssh2 Aug 15 05:47:00 serwer sshd\[15171\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.144.178.231 user=root ... |
2020-08-15 18:00:49 |
| 180.126.227.173 | attack | Aug 15 11:48:31 bacztwo sshd[3038]: Invalid user pi from 180.126.227.173 port 49286 Aug 15 11:48:36 bacztwo sshd[3565]: Invalid user pi from 180.126.227.173 port 51086 Aug 15 11:48:39 bacztwo sshd[3714]: Invalid user pi from 180.126.227.173 port 53569 Aug 15 11:48:44 bacztwo sshd[4086]: Invalid user osboxes from 180.126.227.173 port 55415 Aug 15 11:48:48 bacztwo sshd[4433]: Invalid user openhabian from 180.126.227.173 port 57150 Aug 15 11:48:52 bacztwo sshd[4723]: Invalid user NetLinx from 180.126.227.173 port 58787 Aug 15 11:48:55 bacztwo sshd[4989]: Invalid user nexthink from 180.126.227.173 port 60835 Aug 15 11:49:00 bacztwo sshd[5652]: Invalid user plexuser from 180.126.227.173 port 33926 Aug 15 11:49:04 bacztwo sshd[5965]: Invalid user osbash from 180.126.227.173 port 35931 Aug 15 11:52:02 bacztwo sshd[23209]: Invalid user admin from 180.126.227.173 port 58875 Aug 15 11:52:06 bacztwo sshd[23658]: Invalid user admin from 180.126.227.173 port 32822 Aug 15 11:52:08 bacztwo sshd[24289 ... |
2020-08-15 17:30:16 |
| 36.90.63.130 | attackspambots | 1597463488 - 08/15/2020 05:51:28 Host: 36.90.63.130/36.90.63.130 Port: 445 TCP Blocked |
2020-08-15 17:59:09 |
| 51.77.148.7 | attackbotsspam | Aug 15 05:52:43 serwer sshd\[19373\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.148.7 user=root Aug 15 05:52:45 serwer sshd\[19373\]: Failed password for root from 51.77.148.7 port 43152 ssh2 Aug 15 05:56:18 serwer sshd\[21934\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.148.7 user=root ... |
2020-08-15 17:31:48 |
| 77.247.109.88 | attack | [2020-08-15 05:35:02] NOTICE[1185][C-000026e8] chan_sip.c: Call from '' (77.247.109.88:58322) to extension '9011442037699492' rejected because extension not found in context 'public'. [2020-08-15 05:35:02] SECURITY[1203] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-15T05:35:02.852-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011442037699492",SessionID="0x7f10c43e3a48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.88/58322",ACLName="no_extension_match" [2020-08-15 05:35:03] NOTICE[1185][C-000026e9] chan_sip.c: Call from '' (77.247.109.88:62247) to extension '9011442037699492' rejected because extension not found in context 'public'. [2020-08-15 05:35:03] SECURITY[1203] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-15T05:35:03.845-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011442037699492",SessionID="0x7f10c4320288",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/ ... |
2020-08-15 17:41:47 |
| 104.236.228.230 | attackspambots | frenzy |
2020-08-15 17:27:11 |
| 170.83.189.5 | attack | Aug 14 23:51:50 mail.srvfarm.net postfix/smtpd[738025]: warning: unknown[170.83.189.5]: SASL PLAIN authentication failed: Aug 14 23:51:51 mail.srvfarm.net postfix/smtpd[738025]: lost connection after AUTH from unknown[170.83.189.5] Aug 14 23:52:29 mail.srvfarm.net postfix/smtpd[738028]: warning: unknown[170.83.189.5]: SASL PLAIN authentication failed: Aug 14 23:52:31 mail.srvfarm.net postfix/smtpd[738028]: lost connection after AUTH from unknown[170.83.189.5] Aug 15 00:01:08 mail.srvfarm.net postfix/smtpd[738032]: warning: unknown[170.83.189.5]: SASL PLAIN authentication failed: |
2020-08-15 17:20:42 |
| 159.65.236.182 | attackspambots | $f2bV_matches |
2020-08-15 17:35:45 |
| 81.219.94.93 | attackspam | Aug 14 23:42:31 mail.srvfarm.net postfix/smtpd[734604]: warning: 81-219-94-93.ostmedia.pl[81.219.94.93]: SASL PLAIN authentication failed: Aug 14 23:42:31 mail.srvfarm.net postfix/smtpd[734604]: lost connection after AUTH from 81-219-94-93.ostmedia.pl[81.219.94.93] Aug 14 23:49:29 mail.srvfarm.net postfix/smtpd[738023]: warning: 81-219-94-93.ostmedia.pl[81.219.94.93]: SASL PLAIN authentication failed: Aug 14 23:49:29 mail.srvfarm.net postfix/smtpd[738023]: lost connection after AUTH from 81-219-94-93.ostmedia.pl[81.219.94.93] Aug 14 23:50:25 mail.srvfarm.net postfix/smtps/smtpd[736704]: warning: 81-219-94-93.ostmedia.pl[81.219.94.93]: SASL PLAIN authentication failed: |
2020-08-15 17:23:21 |
| 84.17.48.249 | attackspam | (From no-replydib@google.com) Hеllо! If you want to get ahead of your competition, have a higher Domain Authority score. Its just simple as that. With our service you get Domain Authority above 50 points in just 30 days. This service is guaranteed For more information, check our service here https://www.monkeydigital.co/Get-Guaranteed-Domain-Authority-50/ thank you Mike Monkey Digital support@monkeydigital.co |
2020-08-15 17:53:01 |
| 157.48.157.160 | attackbotsspam | IP 157.48.157.160 attacked honeypot on port: 8080 at 8/14/2020 8:50:28 PM |
2020-08-15 18:02:29 |
| 41.139.10.92 | attack | Aug 14 23:59:26 mail.srvfarm.net postfix/smtpd[736664]: warning: unknown[41.139.10.92]: SASL PLAIN authentication failed: Aug 14 23:59:26 mail.srvfarm.net postfix/smtpd[736664]: lost connection after AUTH from unknown[41.139.10.92] Aug 15 00:04:58 mail.srvfarm.net postfix/smtps/smtpd[739406]: warning: unknown[41.139.10.92]: SASL PLAIN authentication failed: Aug 15 00:04:59 mail.srvfarm.net postfix/smtps/smtpd[739406]: lost connection after AUTH from unknown[41.139.10.92] Aug 15 00:07:54 mail.srvfarm.net postfix/smtpd[738032]: warning: unknown[41.139.10.92]: SASL PLAIN authentication failed: |
2020-08-15 17:26:08 |