City: Cape Town
Region: Western Cape
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.67.136.82
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8729
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;102.67.136.82. IN A
;; AUTHORITY SECTION:
. 148 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022040402 1800 900 604800 86400
;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 05 17:46:41 CST 2022
;; MSG SIZE rcvd: 10682.136.67.102.in-addr.arpa domain name pointer web1.it.na.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
82.136.67.102.in-addr.arpa name = web1.it.na.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 177.74.254.88 | attack | Aug 27 05:37:23 mail.srvfarm.net postfix/smtpd[1362101]: warning: unknown[177.74.254.88]: SASL PLAIN authentication failed: Aug 27 05:37:24 mail.srvfarm.net postfix/smtpd[1362101]: lost connection after AUTH from unknown[177.74.254.88] Aug 27 05:43:07 mail.srvfarm.net postfix/smtps/smtpd[1359584]: warning: unknown[177.74.254.88]: SASL PLAIN authentication failed: Aug 27 05:43:07 mail.srvfarm.net postfix/smtps/smtpd[1359584]: lost connection after AUTH from unknown[177.74.254.88] Aug 27 05:43:49 mail.srvfarm.net postfix/smtps/smtpd[1357931]: warning: unknown[177.74.254.88]: SASL PLAIN authentication failed: |
2020-08-28 07:31:01 |
| 185.59.123.126 | attack | Autoban 185.59.123.126 AUTH/CONNECT |
2020-08-28 07:29:44 |
| 103.40.200.211 | attackbots | Aug 27 05:42:34 mail.srvfarm.net postfix/smtpd[1361436]: warning: unknown[103.40.200.211]: SASL PLAIN authentication failed: Aug 27 05:42:35 mail.srvfarm.net postfix/smtpd[1361436]: lost connection after AUTH from unknown[103.40.200.211] Aug 27 05:42:50 mail.srvfarm.net postfix/smtps/smtpd[1357931]: warning: unknown[103.40.200.211]: SASL PLAIN authentication failed: Aug 27 05:42:50 mail.srvfarm.net postfix/smtps/smtpd[1357931]: lost connection after AUTH from unknown[103.40.200.211] Aug 27 05:49:22 mail.srvfarm.net postfix/smtpd[1361463]: warning: unknown[103.40.200.211]: SASL PLAIN authentication failed: |
2020-08-28 07:35:41 |
| 8.209.216.162 | attackspam | (sshd) Failed SSH login from 8.209.216.162 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 27 22:49:23 amsweb01 sshd[27924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.216.162 user=root Aug 27 22:49:25 amsweb01 sshd[27924]: Failed password for root from 8.209.216.162 port 56418 ssh2 Aug 27 23:06:16 amsweb01 sshd[30299]: Invalid user nurul from 8.209.216.162 port 52782 Aug 27 23:06:18 amsweb01 sshd[30299]: Failed password for invalid user nurul from 8.209.216.162 port 52782 ssh2 Aug 27 23:11:45 amsweb01 sshd[31098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.209.216.162 user=root |
2020-08-28 07:41:20 |
| 51.159.56.131 | attack | 2020/08/27 06:04:59 [error] 7341#7341: *46444570 open() "/usr/share/nginx/html/pma/scripts/setup.php" failed (2: No such file or directory), client: 51.159.56.131, server: _, request: "GET /pma/scripts/setup.php HTTP/1.1", host: "185.118.197.130" 2020/08/27 06:05:00 [error] 7341#7341: *46444600 open() "/usr/share/nginx/html/myadmin/scripts/setup.php" failed (2: No such file or directory), client: 51.159.56.131, server: _, request: "GET /myadmin/scripts/setup.php HTTP/1.1", host: "185.118.197.130" |
2020-08-28 07:25:05 |
| 139.59.85.186 | attack | detected by Fail2Ban |
2020-08-28 07:49:44 |
| 185.176.27.46 | attackspambots | [N10.H2.VM2] Port Scanner Detected Blocked by UFW |
2020-08-28 07:51:30 |
| 198.35.47.13 | attack | Aug 28 01:06:14 abendstille sshd\[26322\]: Invalid user otr from 198.35.47.13 Aug 28 01:06:14 abendstille sshd\[26322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.35.47.13 Aug 28 01:06:16 abendstille sshd\[26322\]: Failed password for invalid user otr from 198.35.47.13 port 53786 ssh2 Aug 28 01:10:48 abendstille sshd\[31494\]: Invalid user support from 198.35.47.13 Aug 28 01:10:48 abendstille sshd\[31494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.35.47.13 ... |
2020-08-28 07:51:09 |
| 45.227.108.161 | attackbots | Aug 27 05:58:45 mail.srvfarm.net postfix/smtpd[1362003]: warning: 161-108-227-45.vitalplaynet.com.br[45.227.108.161]: SASL PLAIN authentication failed: Aug 27 05:58:46 mail.srvfarm.net postfix/smtpd[1362003]: lost connection after AUTH from 161-108-227-45.vitalplaynet.com.br[45.227.108.161] Aug 27 05:59:33 mail.srvfarm.net postfix/smtps/smtpd[1366628]: warning: 161-108-227-45.vitalplaynet.com.br[45.227.108.161]: SASL PLAIN authentication failed: Aug 27 05:59:34 mail.srvfarm.net postfix/smtps/smtpd[1366628]: lost connection after AUTH from 161-108-227-45.vitalplaynet.com.br[45.227.108.161] Aug 27 06:05:18 mail.srvfarm.net postfix/smtps/smtpd[1364784]: warning: 161-108-227-45.vitalplaynet.com.br[45.227.108.161]: SASL PLAIN authentication failed: |
2020-08-28 07:25:30 |
| 45.5.238.15 | attack | Aug 27 05:37:14 mail.srvfarm.net postfix/smtpd[1362003]: warning: 45-5-238-15.jerenet.com.br[45.5.238.15]: SASL PLAIN authentication failed: Aug 27 05:37:14 mail.srvfarm.net postfix/smtpd[1362003]: lost connection after AUTH from 45-5-238-15.jerenet.com.br[45.5.238.15] Aug 27 05:40:20 mail.srvfarm.net postfix/smtps/smtpd[1356766]: warning: 45-5-238-15.jerenet.com.br[45.5.238.15]: SASL PLAIN authentication failed: Aug 27 05:40:21 mail.srvfarm.net postfix/smtps/smtpd[1356766]: lost connection after AUTH from 45-5-238-15.jerenet.com.br[45.5.238.15] Aug 27 05:43:28 mail.srvfarm.net postfix/smtpd[1362100]: warning: 45-5-238-15.jerenet.com.br[45.5.238.15]: SASL PLAIN authentication failed: |
2020-08-28 07:40:51 |
| 207.248.113.105 | attack | Aug 27 05:55:49 mail.srvfarm.net postfix/smtps/smtpd[1365298]: warning: unknown[207.248.113.105]: SASL PLAIN authentication failed: Aug 27 05:55:49 mail.srvfarm.net postfix/smtps/smtpd[1365298]: lost connection after AUTH from unknown[207.248.113.105] Aug 27 05:56:28 mail.srvfarm.net postfix/smtps/smtpd[1364785]: warning: unknown[207.248.113.105]: SASL PLAIN authentication failed: Aug 27 05:56:29 mail.srvfarm.net postfix/smtps/smtpd[1364785]: lost connection after AUTH from unknown[207.248.113.105] Aug 27 06:02:53 mail.srvfarm.net postfix/smtps/smtpd[1364783]: warning: unknown[207.248.113.105]: SASL PLAIN authentication failed: |
2020-08-28 07:18:12 |
| 190.228.41.137 | attack | Aug 27 05:56:44 mail.srvfarm.net postfix/smtps/smtpd[1366628]: warning: host137.190-228-41.telecom.net.ar[190.228.41.137]: SASL PLAIN authentication failed: Aug 27 05:56:45 mail.srvfarm.net postfix/smtps/smtpd[1366628]: lost connection after AUTH from host137.190-228-41.telecom.net.ar[190.228.41.137] Aug 27 05:59:18 mail.srvfarm.net postfix/smtpd[1362765]: warning: host137.190-228-41.telecom.net.ar[190.228.41.137]: SASL PLAIN authentication failed: Aug 27 05:59:19 mail.srvfarm.net postfix/smtpd[1362765]: lost connection after AUTH from host137.190-228-41.telecom.net.ar[190.228.41.137] Aug 27 06:04:16 mail.srvfarm.net postfix/smtps/smtpd[1365300]: warning: host137.190-228-41.telecom.net.ar[190.228.41.137]: SASL PLAIN authentication failed: |
2020-08-28 07:21:16 |
| 195.245.204.31 | attackspam | Aug 27 05:46:19 mail.srvfarm.net postfix/smtps/smtpd[1364786]: warning: unknown[195.245.204.31]: SASL PLAIN authentication failed: Aug 27 05:46:19 mail.srvfarm.net postfix/smtps/smtpd[1364786]: lost connection after AUTH from unknown[195.245.204.31] Aug 27 05:50:11 mail.srvfarm.net postfix/smtpd[1362099]: warning: unknown[195.245.204.31]: SASL PLAIN authentication failed: Aug 27 05:50:11 mail.srvfarm.net postfix/smtpd[1362099]: lost connection after AUTH from unknown[195.245.204.31] Aug 27 05:53:42 mail.srvfarm.net postfix/smtps/smtpd[1364784]: warning: unknown[195.245.204.31]: SASL PLAIN authentication failed: |
2020-08-28 07:19:02 |
| 103.237.56.213 | attackbots | Aug 27 05:34:42 mail.srvfarm.net postfix/smtps/smtpd[1355069]: warning: unknown[103.237.56.213]: SASL PLAIN authentication failed: Aug 27 05:34:42 mail.srvfarm.net postfix/smtps/smtpd[1355069]: lost connection after AUTH from unknown[103.237.56.213] Aug 27 05:43:54 mail.srvfarm.net postfix/smtps/smtpd[1361620]: warning: unknown[103.237.56.213]: SASL PLAIN authentication failed: Aug 27 05:43:54 mail.srvfarm.net postfix/smtps/smtpd[1361620]: lost connection after AUTH from unknown[103.237.56.213] Aug 27 05:44:04 mail.srvfarm.net postfix/smtpd[1362102]: warning: unknown[103.237.56.213]: SASL PLAIN authentication failed: |
2020-08-28 07:34:19 |
| 45.224.156.6 | attackspam | Aug 27 05:40:08 mail.srvfarm.net postfix/smtps/smtpd[1357934]: warning: unknown[45.224.156.6]: SASL PLAIN authentication failed: Aug 27 05:40:08 mail.srvfarm.net postfix/smtps/smtpd[1357934]: lost connection after AUTH from unknown[45.224.156.6] Aug 27 05:41:44 mail.srvfarm.net postfix/smtpd[1362003]: warning: unknown[45.224.156.6]: SASL PLAIN authentication failed: Aug 27 05:41:45 mail.srvfarm.net postfix/smtpd[1362003]: lost connection after AUTH from unknown[45.224.156.6] Aug 27 05:43:06 mail.srvfarm.net postfix/smtpd[1361436]: warning: unknown[45.224.156.6]: SASL PLAIN authentication failed: |
2020-08-28 07:40:19 |