City: Toronto
Region: Ontario
Country: Canada
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.245.49.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49787
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;142.245.49.106. IN A
;; AUTHORITY SECTION:
. 417 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024093002 1800 900 604800 86400
;; Query time: 42 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 01 12:03:30 CST 2024
;; MSG SIZE rcvd: 107Host 106.49.245.142.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 106.49.245.142.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 63.81.93.5 | attackspambots | spam mail |
2020-06-19 00:57:16 |
| 46.38.150.94 | attack | Jun 18 17:00:37 srv01 postfix/smtpd\[22624\]: warning: unknown\[46.38.150.94\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 18 17:00:43 srv01 postfix/smtpd\[19018\]: warning: unknown\[46.38.150.94\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 18 17:01:03 srv01 postfix/smtpd\[22596\]: warning: unknown\[46.38.150.94\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 18 17:01:06 srv01 postfix/smtpd\[19018\]: warning: unknown\[46.38.150.94\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 18 17:01:27 srv01 postfix/smtpd\[22624\]: warning: unknown\[46.38.150.94\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-06-19 00:58:33 |
| 219.240.99.120 | attackspambots | (sshd) Failed SSH login from 219.240.99.120 (KR/South Korea/-): 12 in the last 3600 secs |
2020-06-19 00:37:00 |
| 191.53.223.89 | attack | Jun 18 13:35:27 mail.srvfarm.net postfix/smtps/smtpd[1467941]: warning: unknown[191.53.223.89]: SASL PLAIN authentication failed: Jun 18 13:35:28 mail.srvfarm.net postfix/smtps/smtpd[1467941]: lost connection after AUTH from unknown[191.53.223.89] Jun 18 13:40:38 mail.srvfarm.net postfix/smtps/smtpd[1467941]: warning: unknown[191.53.223.89]: SASL PLAIN authentication failed: Jun 18 13:40:38 mail.srvfarm.net postfix/smtps/smtpd[1467941]: lost connection after AUTH from unknown[191.53.223.89] Jun 18 13:43:34 mail.srvfarm.net postfix/smtps/smtpd[1467936]: warning: unknown[191.53.223.89]: SASL PLAIN authentication failed: |
2020-06-19 00:18:08 |
| 139.155.17.74 | attackspam | Jun 18 16:18:58 buvik sshd[19083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.17.74 Jun 18 16:19:01 buvik sshd[19083]: Failed password for invalid user ww from 139.155.17.74 port 32784 ssh2 Jun 18 16:22:36 buvik sshd[19624]: Invalid user vitor from 139.155.17.74 ... |
2020-06-19 00:42:13 |
| 128.199.161.159 | attackbotsspam | Invalid user mdk from 128.199.161.159 port 34038 |
2020-06-19 00:49:22 |
| 45.55.145.31 | attack | no |
2020-06-19 00:36:11 |
| 189.91.3.0 | attackbotsspam | Jun 18 13:36:21 mail.srvfarm.net postfix/smtps/smtpd[1467859]: warning: unknown[189.91.3.0]: SASL PLAIN authentication failed: Jun 18 13:36:22 mail.srvfarm.net postfix/smtps/smtpd[1467859]: lost connection after AUTH from unknown[189.91.3.0] Jun 18 13:37:01 mail.srvfarm.net postfix/smtpd[1469103]: warning: unknown[189.91.3.0]: SASL PLAIN authentication failed: Jun 18 13:37:01 mail.srvfarm.net postfix/smtpd[1469103]: lost connection after AUTH from unknown[189.91.3.0] Jun 18 13:42:44 mail.srvfarm.net postfix/smtpd[1469102]: warning: unknown[189.91.3.0]: SASL PLAIN authentication failed: |
2020-06-19 00:18:43 |
| 104.131.91.148 | attack | Jun 18 17:24:44 h2427292 sshd\[30070\]: Invalid user hlds from 104.131.91.148 Jun 18 17:24:44 h2427292 sshd\[30070\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.91.148 Jun 18 17:24:46 h2427292 sshd\[30070\]: Failed password for invalid user hlds from 104.131.91.148 port 59922 ssh2 ... |
2020-06-19 00:45:05 |
| 129.28.141.140 | attackspam | 2020/06/18 13:06:05 [error] 842#842: *14189 open() "/usr/share/nginx/html/cgi-bin/php" failed (2: No such file or directory), client: 129.28.141.140, server: _, request: "POST /cgi-bin/php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1", host: "185.118.196.154" 2020/06/18 13:06:08 [error] 842#842: *14189 open() "/usr/share/nginx/html/cgi-bin/php5" failed (2: No such file or directory), client: 129.28.141.140, server: _, request: "POST /cgi-bin/php5?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6 |
2020-06-19 00:54:00 |
| 46.38.145.6 | attackbotsspam | Jun 18 18:55:33 relay postfix/smtpd\[24146\]: warning: unknown\[46.38.145.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 18 18:55:40 relay postfix/smtpd\[6145\]: warning: unknown\[46.38.145.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 18 18:56:57 relay postfix/smtpd\[24146\]: warning: unknown\[46.38.145.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 18 18:57:02 relay postfix/smtpd\[17886\]: warning: unknown\[46.38.145.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 18 18:58:20 relay postfix/smtpd\[19507\]: warning: unknown\[46.38.145.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-06-19 01:00:02 |
| 212.237.40.135 | attack | 2020-06-18T10:45:00.443516linuxbox-skyline auth[512667]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=info rhost=212.237.40.135 ... |
2020-06-19 00:50:39 |
| 217.112.142.110 | attack | Postfix RBL failed |
2020-06-19 00:15:26 |
| 156.96.56.216 | attack | Unauthorized access or intrusion attempt detected from Thor banned IP |
2020-06-19 01:02:08 |
| 46.38.145.252 | attack | Rude login attack (583 tries in 1d) |
2020-06-19 00:33:31 |