City: unknown
Region: unknown
Country: India
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.199.54.161
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41451
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;106.199.54.161. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021800 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 19:23:18 CST 2025
;; MSG SIZE rcvd: 107Host 161.54.199.106.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 161.54.199.106.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 91.245.30.125 | attack | Aug 16 05:14:59 mail.srvfarm.net postfix/smtps/smtpd[1888763]: warning: unknown[91.245.30.125]: SASL PLAIN authentication failed: Aug 16 05:14:59 mail.srvfarm.net postfix/smtps/smtpd[1888763]: lost connection after AUTH from unknown[91.245.30.125] Aug 16 05:22:34 mail.srvfarm.net postfix/smtpd[1888825]: warning: unknown[91.245.30.125]: SASL PLAIN authentication failed: Aug 16 05:22:34 mail.srvfarm.net postfix/smtpd[1888825]: lost connection after AUTH from unknown[91.245.30.125] Aug 16 05:24:01 mail.srvfarm.net postfix/smtpd[1888504]: warning: unknown[91.245.30.125]: SASL PLAIN authentication failed: |
2020-08-16 13:05:13 |
| 177.91.188.95 | attackbotsspam | Aug 16 05:03:01 mail.srvfarm.net postfix/smtpd[1887645]: warning: unknown[177.91.188.95]: SASL PLAIN authentication failed: Aug 16 05:03:02 mail.srvfarm.net postfix/smtpd[1887645]: lost connection after AUTH from unknown[177.91.188.95] Aug 16 05:04:32 mail.srvfarm.net postfix/smtpd[1887645]: warning: unknown[177.91.188.95]: SASL PLAIN authentication failed: Aug 16 05:04:32 mail.srvfarm.net postfix/smtpd[1887645]: lost connection after AUTH from unknown[177.91.188.95] Aug 16 05:06:53 mail.srvfarm.net postfix/smtps/smtpd[1870325]: warning: unknown[177.91.188.95]: SASL PLAIN authentication failed: |
2020-08-16 13:16:14 |
| 185.234.216.87 | attackspambots | Aug 16 06:25:43 web01.agentur-b-2.de postfix/smtpd[4177350]: warning: unknown[185.234.216.87]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 16 06:25:43 web01.agentur-b-2.de postfix/smtpd[4177350]: lost connection after AUTH from unknown[185.234.216.87] Aug 16 06:26:04 web01.agentur-b-2.de postfix/smtpd[1030]: warning: unknown[185.234.216.87]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 16 06:26:04 web01.agentur-b-2.de postfix/smtpd[1030]: lost connection after AUTH from unknown[185.234.216.87] Aug 16 06:26:25 web01.agentur-b-2.de postfix/smtpd[4177350]: warning: unknown[185.234.216.87]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-08-16 13:13:35 |
| 45.167.11.236 | attackbots | Aug 16 05:09:55 mail.srvfarm.net postfix/smtps/smtpd[1888715]: warning: unknown[45.167.11.236]: SASL PLAIN authentication failed: Aug 16 05:09:56 mail.srvfarm.net postfix/smtps/smtpd[1888715]: lost connection after AUTH from unknown[45.167.11.236] Aug 16 05:12:43 mail.srvfarm.net postfix/smtps/smtpd[1890438]: warning: unknown[45.167.11.236]: SASL PLAIN authentication failed: Aug 16 05:12:44 mail.srvfarm.net postfix/smtps/smtpd[1890438]: lost connection after AUTH from unknown[45.167.11.236] Aug 16 05:12:50 mail.srvfarm.net postfix/smtps/smtpd[1888820]: warning: unknown[45.167.11.236]: SASL PLAIN authentication failed: |
2020-08-16 13:27:00 |
| 112.85.42.186 | attackbots | 2020-08-16T08:29:17.888298lavrinenko.info sshd[25791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.186 user=root 2020-08-16T08:29:19.888628lavrinenko.info sshd[25791]: Failed password for root from 112.85.42.186 port 63397 ssh2 2020-08-16T08:29:17.888298lavrinenko.info sshd[25791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.186 user=root 2020-08-16T08:29:19.888628lavrinenko.info sshd[25791]: Failed password for root from 112.85.42.186 port 63397 ssh2 2020-08-16T08:29:23.855077lavrinenko.info sshd[25791]: Failed password for root from 112.85.42.186 port 63397 ssh2 ... |
2020-08-16 13:40:32 |
| 185.186.17.36 | attackspambots | Aug 16 05:10:24 mail.srvfarm.net postfix/smtpd[1875075]: warning: unknown[185.186.17.36]: SASL PLAIN authentication failed: Aug 16 05:10:24 mail.srvfarm.net postfix/smtpd[1875075]: lost connection after AUTH from unknown[185.186.17.36] Aug 16 05:13:34 mail.srvfarm.net postfix/smtpd[1879275]: warning: unknown[185.186.17.36]: SASL PLAIN authentication failed: Aug 16 05:13:34 mail.srvfarm.net postfix/smtpd[1879275]: lost connection after AUTH from unknown[185.186.17.36] Aug 16 05:13:57 mail.srvfarm.net postfix/smtps/smtpd[1890600]: warning: unknown[185.186.17.36]: SASL PLAIN authentication failed: |
2020-08-16 13:14:19 |
| 222.186.175.215 | attackspambots | Aug 15 22:22:59 dignus sshd[7383]: Failed password for root from 222.186.175.215 port 12800 ssh2 Aug 15 22:23:02 dignus sshd[7383]: Failed password for root from 222.186.175.215 port 12800 ssh2 Aug 15 22:23:06 dignus sshd[7383]: Failed password for root from 222.186.175.215 port 12800 ssh2 Aug 15 22:23:09 dignus sshd[7383]: Failed password for root from 222.186.175.215 port 12800 ssh2 Aug 15 22:23:12 dignus sshd[7383]: Failed password for root from 222.186.175.215 port 12800 ssh2 ... |
2020-08-16 13:39:59 |
| 87.246.7.22 | attackbotsspam | Aug 16 05:19:27 web01.agentur-b-2.de postfix/smtpd[4170720]: warning: unknown[87.246.7.22]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 16 05:19:27 web01.agentur-b-2.de postfix/smtpd[4170720]: lost connection after AUTH from unknown[87.246.7.22] Aug 16 05:19:32 web01.agentur-b-2.de postfix/smtpd[4171239]: warning: unknown[87.246.7.22]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 16 05:19:32 web01.agentur-b-2.de postfix/smtpd[4154461]: warning: unknown[87.246.7.22]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 16 05:19:32 web01.agentur-b-2.de postfix/smtpd[4154461]: lost connection after AUTH from unknown[87.246.7.22] |
2020-08-16 13:22:47 |
| 46.249.59.113 | attackspam | (sshd) Failed SSH login from 46.249.59.113 (NL/Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 16 06:35:34 amsweb01 sshd[21562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.249.59.113 user=root Aug 16 06:35:36 amsweb01 sshd[21562]: Failed password for root from 46.249.59.113 port 39020 ssh2 Aug 16 06:35:39 amsweb01 sshd[21562]: Failed password for root from 46.249.59.113 port 39020 ssh2 Aug 16 06:35:41 amsweb01 sshd[21562]: Failed password for root from 46.249.59.113 port 39020 ssh2 Aug 16 06:35:44 amsweb01 sshd[21562]: Failed password for root from 46.249.59.113 port 39020 ssh2 |
2020-08-16 13:36:37 |
| 191.209.82.106 | attack | Aug 16 06:19:40 cp sshd[25450]: Failed password for root from 191.209.82.106 port 16994 ssh2 Aug 16 06:19:40 cp sshd[25450]: Failed password for root from 191.209.82.106 port 16994 ssh2 |
2020-08-16 13:44:01 |
| 172.82.239.23 | attack | Aug 16 06:32:27 mail.srvfarm.net postfix/smtpd[1931097]: lost connection after STARTTLS from r23.news.eu.rvca.com[172.82.239.23] Aug 16 06:35:36 mail.srvfarm.net postfix/smtpd[1928557]: lost connection after STARTTLS from r23.news.eu.rvca.com[172.82.239.23] Aug 16 06:36:41 mail.srvfarm.net postfix/smtpd[1929156]: lost connection after STARTTLS from r23.news.eu.rvca.com[172.82.239.23] Aug 16 06:38:06 mail.srvfarm.net postfix/smtpd[1924778]: lost connection after STARTTLS from r23.news.eu.rvca.com[172.82.239.23] Aug 16 06:39:11 mail.srvfarm.net postfix/smtpd[1931098]: lost connection after STARTTLS from r23.news.eu.rvca.com[172.82.239.23] |
2020-08-16 13:17:50 |
| 27.54.173.75 | attack | Aug 16 05:09:30 mail.srvfarm.net postfix/smtpd[1887708]: warning: unknown[27.54.173.75]: SASL PLAIN authentication failed: Aug 16 05:09:30 mail.srvfarm.net postfix/smtpd[1887708]: lost connection after AUTH from unknown[27.54.173.75] Aug 16 05:18:09 mail.srvfarm.net postfix/smtpd[1887708]: warning: unknown[27.54.173.75]: SASL PLAIN authentication failed: Aug 16 05:18:09 mail.srvfarm.net postfix/smtpd[1887708]: lost connection after AUTH from unknown[27.54.173.75] Aug 16 05:19:06 mail.srvfarm.net postfix/smtpd[1887224]: warning: unknown[27.54.173.75]: SASL PLAIN authentication failed: |
2020-08-16 13:29:24 |
| 106.12.94.186 | attackbotsspam | Aug 16 05:56:24 db sshd[21419]: User root from 106.12.94.186 not allowed because none of user's groups are listed in AllowGroups ... |
2020-08-16 13:35:41 |
| 62.193.129.233 | attack | Aug 16 05:01:55 mail.srvfarm.net postfix/smtpd[1869832]: warning: 233-ppp.tehnicom.net[62.193.129.233]: SASL PLAIN authentication failed: Aug 16 05:01:55 mail.srvfarm.net postfix/smtpd[1869832]: lost connection after AUTH from 233-ppp.tehnicom.net[62.193.129.233] Aug 16 05:07:14 mail.srvfarm.net postfix/smtps/smtpd[1887813]: warning: 233-ppp.tehnicom.net[62.193.129.233]: SASL PLAIN authentication failed: Aug 16 05:07:14 mail.srvfarm.net postfix/smtps/smtpd[1887813]: lost connection after AUTH from 233-ppp.tehnicom.net[62.193.129.233] Aug 16 05:10:15 mail.srvfarm.net postfix/smtpd[1887708]: warning: 233-ppp.tehnicom.net[62.193.129.233]: SASL PLAIN authentication failed: |
2020-08-16 13:25:36 |
| 172.82.230.3 | attack | Aug 16 06:32:24 mail.srvfarm.net postfix/smtpd[1931086]: lost connection after STARTTLS from r3.news.eu.rvca.com[172.82.230.3] Aug 16 06:35:37 mail.srvfarm.net postfix/smtpd[1931103]: lost connection after STARTTLS from r3.news.eu.rvca.com[172.82.230.3] Aug 16 06:36:41 mail.srvfarm.net postfix/smtpd[1931103]: lost connection after STARTTLS from r3.news.eu.rvca.com[172.82.230.3] Aug 16 06:38:03 mail.srvfarm.net postfix/smtpd[1931086]: lost connection after STARTTLS from r3.news.eu.rvca.com[172.82.230.3] Aug 16 06:39:11 mail.srvfarm.net postfix/smtpd[1931085]: lost connection after STARTTLS from r3.news.eu.rvca.com[172.82.230.3] |
2020-08-16 13:19:31 |