City: unknown
Region: unknown
Country: Canada
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 156.44.219.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52971
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;156.44.219.139. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022702 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 04:43:11 CST 2025
;; MSG SIZE rcvd: 107Host 139.219.44.156.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 139.219.44.156.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.233.206.241 | attackspambots | PHP Info File Request - Possible PHP Version Scan |
2020-06-14 08:26:25 |
| 45.162.20.174 | attackspambots | Jun 13 22:51:44 mail.srvfarm.net postfix/smtps/smtpd[1294952]: warning: unknown[45.162.20.174]: SASL PLAIN authentication failed: Jun 13 22:51:45 mail.srvfarm.net postfix/smtps/smtpd[1294952]: lost connection after AUTH from unknown[45.162.20.174] Jun 13 22:52:27 mail.srvfarm.net postfix/smtpd[1296189]: warning: unknown[45.162.20.174]: SASL PLAIN authentication failed: Jun 13 22:52:28 mail.srvfarm.net postfix/smtpd[1296189]: lost connection after AUTH from unknown[45.162.20.174] Jun 13 23:01:18 mail.srvfarm.net postfix/smtpd[1295647]: warning: unknown[45.162.20.174]: SASL PLAIN authentication failed: |
2020-06-14 08:42:42 |
| 106.13.184.7 | attack | Jun 14 01:07:42 ift sshd\[38895\]: Invalid user vnc from 106.13.184.7Jun 14 01:07:43 ift sshd\[38895\]: Failed password for invalid user vnc from 106.13.184.7 port 35626 ssh2Jun 14 01:11:11 ift sshd\[39846\]: Invalid user tester from 106.13.184.7Jun 14 01:11:13 ift sshd\[39846\]: Failed password for invalid user tester from 106.13.184.7 port 58926 ssh2Jun 14 01:14:42 ift sshd\[40304\]: Failed password for root from 106.13.184.7 port 54238 ssh2 ... |
2020-06-14 08:56:19 |
| 201.55.143.245 | attackspambots | Jun 13 22:35:18 mail.srvfarm.net postfix/smtpd[1275649]: warning: unknown[201.55.143.245]: SASL PLAIN authentication failed: Jun 13 22:35:18 mail.srvfarm.net postfix/smtpd[1275649]: lost connection after AUTH from unknown[201.55.143.245] Jun 13 22:38:29 mail.srvfarm.net postfix/smtpd[1286879]: warning: unknown[201.55.143.245]: SASL PLAIN authentication failed: Jun 13 22:38:30 mail.srvfarm.net postfix/smtpd[1286879]: lost connection after AUTH from unknown[201.55.143.245] Jun 13 22:42:19 mail.srvfarm.net postfix/smtps/smtpd[1286914]: warning: unknown[201.55.143.245]: SASL PLAIN authentication failed: |
2020-06-14 08:31:34 |
| 188.165.231.68 | attackbots | Jun 13 23:40:49 debian-2gb-nbg1-2 kernel: \[14343164.316096\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=188.165.231.68 DST=195.201.40.59 LEN=52 TOS=0x02 PREC=0x00 TTL=115 ID=25054 DF PROTO=TCP SPT=50112 DPT=3389 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 |
2020-06-14 08:23:47 |
| 159.203.87.46 | attack | k+ssh-bruteforce |
2020-06-14 08:22:22 |
| 193.189.77.114 | attackbotsspam | Jun 13 22:57:12 mail.srvfarm.net postfix/smtpd[1294894]: warning: unknown[193.189.77.114]: SASL PLAIN authentication failed: Jun 13 22:57:12 mail.srvfarm.net postfix/smtpd[1294894]: lost connection after AUTH from unknown[193.189.77.114] Jun 13 23:01:27 mail.srvfarm.net postfix/smtpd[1294955]: warning: unknown[193.189.77.114]: SASL PLAIN authentication failed: Jun 13 23:01:27 mail.srvfarm.net postfix/smtpd[1294955]: lost connection after AUTH from unknown[193.189.77.114] Jun 13 23:03:51 mail.srvfarm.net postfix/smtpd[1295544]: lost connection after CONNECT from unknown[193.189.77.114] |
2020-06-14 08:31:54 |
| 78.128.113.115 | attack | Jun 14 02:09:49 web01.agentur-b-2.de postfix/smtpd[45338]: lost connection after CONNECT from unknown[78.128.113.115] Jun 14 02:09:49 web01.agentur-b-2.de postfix/smtps/smtpd[49879]: lost connection after CONNECT from unknown[78.128.113.115] Jun 14 02:09:52 web01.agentur-b-2.de postfix/smtpd[47831]: warning: unknown[78.128.113.115]: SASL PLAIN authentication failed: Jun 14 02:09:52 web01.agentur-b-2.de postfix/smtpd[47831]: lost connection after AUTH from unknown[78.128.113.115] Jun 14 02:09:58 web01.agentur-b-2.de postfix/smtps/smtpd[49880]: lost connection after CONNECT from unknown[78.128.113.115] |
2020-06-14 08:39:33 |
| 154.85.37.20 | attack | Jun 13 23:05:40 django-0 sshd\[8480\]: Invalid user ovo from 154.85.37.20Jun 13 23:05:42 django-0 sshd\[8480\]: Failed password for invalid user ovo from 154.85.37.20 port 33814 ssh2Jun 13 23:12:18 django-0 sshd\[8703\]: Invalid user uj from 154.85.37.20 ... |
2020-06-14 08:52:55 |
| 111.230.226.124 | attack | Jun 14 02:07:06 home sshd[19086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.226.124 Jun 14 02:07:08 home sshd[19086]: Failed password for invalid user dovecot from 111.230.226.124 port 53428 ssh2 Jun 14 02:08:33 home sshd[20161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.226.124 ... |
2020-06-14 08:15:40 |
| 185.143.72.34 | attackbotsspam | Jun 14 02:18:23 srv01 postfix/smtpd\[377\]: warning: unknown\[185.143.72.34\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 14 02:18:25 srv01 postfix/smtpd\[30766\]: warning: unknown\[185.143.72.34\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 14 02:18:54 srv01 postfix/smtpd\[779\]: warning: unknown\[185.143.72.34\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 14 02:19:13 srv01 postfix/smtpd\[30766\]: warning: unknown\[185.143.72.34\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 14 02:19:55 srv01 postfix/smtpd\[779\]: warning: unknown\[185.143.72.34\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-06-14 08:27:28 |
| 124.128.158.37 | attackspam | Brute-force attempt banned |
2020-06-14 08:55:54 |
| 167.86.108.141 | attackbotsspam | Jun 13 15:09:22 nxxxxxxx0 sshd[26436]: Did not receive identification string from 167.86.108.141 Jun 13 15:10:19 nxxxxxxx0 sshd[26537]: Invalid user soundcode from 167.86.108.141 Jun 13 15:10:20 nxxxxxxx0 sshd[26539]: Invalid user aerospike from 167.86.108.141 Jun 13 15:10:21 nxxxxxxx0 sshd[26537]: Failed password for invalid user soundcode from 167.86.108.141 port 52762 ssh2 Jun 13 15:10:21 nxxxxxxx0 sshd[26537]: Received disconnect from 167.86.108.141: 11: Normal Shutdown, Thank you for playing [preauth] Jun 13 15:10:21 nxxxxxxx0 sshd[26541]: Invalid user oracle from 167.86.108.141 Jun 13 15:10:23 nxxxxxxx0 sshd[26551]: Invalid user lbhome_crawl from 167.86.108.141 Jun 13 15:10:23 nxxxxxxx0 sshd[26539]: Failed password for invalid user aerospike from 167.86.108.141 port 55908 ssh2 Jun 13 15:10:23 nxxxxxxx0 sshd[26539]: Received disconnect from 167.86.108.141: 11: Normal Shutdown, Thank you for playing [preauth] Jun 13 15:10:23 nxxxxxxx0 sshd[26553]: Invalid user noder........ ------------------------------- |
2020-06-14 08:13:59 |
| 106.75.53.228 | attackbots | Invalid user es from 106.75.53.228 port 48998 |
2020-06-14 08:18:28 |
| 103.133.111.44 | attackspambots | Rude login attack (6 tries in 1d) |
2020-06-14 08:53:30 |