City: unknown
Region: unknown
Country: Brazil
Internet Service Provider: WI - Provedor de Telecomunicacoes Ltda.
Hostname: unknown
Organization: unknown
Usage Type: Fixed Line ISP
| Type | Details | Datetime |
|---|---|---|
| attackbots | Sep 13 18:26:49 mail.srvfarm.net postfix/smtps/smtpd[1230736]: warning: unknown[201.55.142.243]: SASL PLAIN authentication failed: Sep 13 18:26:49 mail.srvfarm.net postfix/smtps/smtpd[1230736]: lost connection after AUTH from unknown[201.55.142.243] Sep 13 18:32:14 mail.srvfarm.net postfix/smtpd[1230212]: warning: unknown[201.55.142.243]: SASL PLAIN authentication failed: Sep 13 18:32:15 mail.srvfarm.net postfix/smtpd[1230212]: lost connection after AUTH from unknown[201.55.142.243] Sep 13 18:33:48 mail.srvfarm.net postfix/smtpd[1232021]: warning: unknown[201.55.142.243]: SASL PLAIN authentication failed: |
2020-09-15 03:37:06 |
| attackspambots | Sep 13 18:26:49 mail.srvfarm.net postfix/smtps/smtpd[1230736]: warning: unknown[201.55.142.243]: SASL PLAIN authentication failed: Sep 13 18:26:49 mail.srvfarm.net postfix/smtps/smtpd[1230736]: lost connection after AUTH from unknown[201.55.142.243] Sep 13 18:32:14 mail.srvfarm.net postfix/smtpd[1230212]: warning: unknown[201.55.142.243]: SASL PLAIN authentication failed: Sep 13 18:32:15 mail.srvfarm.net postfix/smtpd[1230212]: lost connection after AUTH from unknown[201.55.142.243] Sep 13 18:33:48 mail.srvfarm.net postfix/smtpd[1232021]: warning: unknown[201.55.142.243]: SASL PLAIN authentication failed: |
2020-09-14 19:33:28 |
| attack | Aug 15 02:17:39 mail.srvfarm.net postfix/smtps/smtpd[963474]: warning: unknown[201.55.142.243]: SASL PLAIN authentication failed: Aug 15 02:17:40 mail.srvfarm.net postfix/smtps/smtpd[963474]: lost connection after AUTH from unknown[201.55.142.243] Aug 15 02:18:38 mail.srvfarm.net postfix/smtpd[965947]: warning: unknown[201.55.142.243]: SASL PLAIN authentication failed: Aug 15 02:18:39 mail.srvfarm.net postfix/smtpd[965947]: lost connection after AUTH from unknown[201.55.142.243] Aug 15 02:26:15 mail.srvfarm.net postfix/smtps/smtpd[963278]: warning: unknown[201.55.142.243]: SASL PLAIN authentication failed: |
2020-08-15 12:47:55 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 201.55.142.209 | attackbotsspam | Aug 16 05:30:29 mail.srvfarm.net postfix/smtpd[1875198]: warning: unknown[201.55.142.209]: SASL PLAIN authentication failed: Aug 16 05:30:29 mail.srvfarm.net postfix/smtpd[1875198]: lost connection after AUTH from unknown[201.55.142.209] Aug 16 05:30:30 mail.srvfarm.net postfix/smtps/smtpd[1888818]: warning: unknown[201.55.142.209]: SASL PLAIN authentication failed: Aug 16 05:30:30 mail.srvfarm.net postfix/smtps/smtpd[1888818]: lost connection after AUTH from unknown[201.55.142.209] Aug 16 05:36:50 mail.srvfarm.net postfix/smtpd[1888503]: warning: unknown[201.55.142.209]: SASL PLAIN authentication failed: |
2020-08-16 12:38:33 |
| 201.55.142.135 | attack | Aug 14 23:49:22 mail.srvfarm.net postfix/smtpd[738030]: warning: unknown[201.55.142.135]: SASL PLAIN authentication failed: Aug 14 23:49:23 mail.srvfarm.net postfix/smtpd[738030]: lost connection after AUTH from unknown[201.55.142.135] Aug 14 23:53:36 mail.srvfarm.net postfix/smtps/smtpd[739407]: warning: unknown[201.55.142.135]: SASL PLAIN authentication failed: Aug 14 23:53:37 mail.srvfarm.net postfix/smtps/smtpd[739407]: lost connection after AUTH from unknown[201.55.142.135] Aug 14 23:59:22 mail.srvfarm.net postfix/smtpd[736667]: warning: unknown[201.55.142.135]: SASL PLAIN authentication failed: |
2020-08-15 17:13:32 |
| 201.55.142.31 | attackbotsspam | "SMTP brute force auth login attempt." |
2020-08-13 17:32:34 |
| 201.55.142.73 | attackbotsspam | failed_logins |
2020-07-30 19:22:43 |
| 201.55.142.36 | attack | Jul 25 05:34:46 mail.srvfarm.net postfix/smtpd[366527]: warning: unknown[201.55.142.36]: SASL PLAIN authentication failed: Jul 25 05:34:46 mail.srvfarm.net postfix/smtpd[366527]: lost connection after AUTH from unknown[201.55.142.36] Jul 25 05:34:57 mail.srvfarm.net postfix/smtps/smtpd[365719]: warning: unknown[201.55.142.36]: SASL PLAIN authentication failed: Jul 25 05:34:58 mail.srvfarm.net postfix/smtps/smtpd[365719]: lost connection after AUTH from unknown[201.55.142.36] Jul 25 05:40:51 mail.srvfarm.net postfix/smtps/smtpd[365719]: warning: unknown[201.55.142.36]: SASL PLAIN authentication failed: |
2020-07-25 15:00:15 |
| 201.55.142.15 | attack | Jul 24 16:48:42 mail.srvfarm.net postfix/smtps/smtpd[2334300]: warning: unknown[201.55.142.15]: SASL PLAIN authentication failed: Jul 24 16:48:43 mail.srvfarm.net postfix/smtps/smtpd[2334300]: lost connection after AUTH from unknown[201.55.142.15] Jul 24 16:52:26 mail.srvfarm.net postfix/smtps/smtpd[2332586]: warning: unknown[201.55.142.15]: SASL PLAIN authentication failed: Jul 24 16:52:27 mail.srvfarm.net postfix/smtps/smtpd[2332586]: lost connection after AUTH from unknown[201.55.142.15] Jul 24 16:52:45 mail.srvfarm.net postfix/smtpd[2332939]: warning: unknown[201.55.142.15]: SASL PLAIN authentication failed: |
2020-07-25 03:38:13 |
| 201.55.142.36 | attackbots | failed_logins |
2020-07-11 14:43:04 |
| 201.55.142.135 | attackbots | Jun 18 12:25:38 mail.srvfarm.net postfix/smtpd[1443188]: warning: unknown[201.55.142.135]: SASL PLAIN authentication failed: Jun 18 12:25:38 mail.srvfarm.net postfix/smtpd[1443188]: lost connection after AUTH from unknown[201.55.142.135] Jun 18 12:28:59 mail.srvfarm.net postfix/smtpd[1445381]: warning: unknown[201.55.142.135]: SASL PLAIN authentication failed: Jun 18 12:28:59 mail.srvfarm.net postfix/smtpd[1445381]: lost connection after AUTH from unknown[201.55.142.135] Jun 18 12:31:47 mail.srvfarm.net postfix/smtpd[1445365]: warning: unknown[201.55.142.135]: SASL PLAIN authentication failed: |
2020-06-19 01:28:20 |
| 201.55.142.25 | attack | $f2bV_matches |
2019-09-12 21:27:09 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 201.55.142.243
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58080
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;201.55.142.243. IN A
;; AUTHORITY SECTION:
. 138 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020081401 1800 900 604800 86400
;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Aug 15 12:47:49 CST 2020
;; MSG SIZE rcvd: 118Host 243.142.55.201.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 243.142.55.201.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 107.173.26.170 | attack | Sep 10 03:22:55 nextcloud sshd\[29432\]: Invalid user test2 from 107.173.26.170 Sep 10 03:22:55 nextcloud sshd\[29432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.26.170 Sep 10 03:22:57 nextcloud sshd\[29432\]: Failed password for invalid user test2 from 107.173.26.170 port 58701 ssh2 ... |
2019-09-10 10:24:42 |
| 103.254.120.222 | attackspam | Sep 9 15:57:56 aiointranet sshd\[25907\]: Invalid user jenkins from 103.254.120.222 Sep 9 15:57:56 aiointranet sshd\[25907\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.254.120.222 Sep 9 15:57:57 aiointranet sshd\[25907\]: Failed password for invalid user jenkins from 103.254.120.222 port 44832 ssh2 Sep 9 16:04:48 aiointranet sshd\[26505\]: Invalid user vbox from 103.254.120.222 Sep 9 16:04:48 aiointranet sshd\[26505\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.254.120.222 |
2019-09-10 10:05:32 |
| 139.59.75.241 | attackspambots | Sep 10 03:35:22 legacy sshd[4851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.75.241 Sep 10 03:35:24 legacy sshd[4851]: Failed password for invalid user tom from 139.59.75.241 port 53018 ssh2 Sep 10 03:41:27 legacy sshd[5037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.75.241 ... |
2019-09-10 09:57:50 |
| 106.12.14.254 | attackbotsspam | Sep 10 02:23:18 h2177944 sshd\[14350\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.14.254 Sep 10 02:23:21 h2177944 sshd\[14350\]: Failed password for invalid user steam from 106.12.14.254 port 40562 ssh2 Sep 10 03:23:33 h2177944 sshd\[17611\]: Invalid user demo1 from 106.12.14.254 port 50312 Sep 10 03:23:33 h2177944 sshd\[17611\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.14.254 ... |
2019-09-10 09:49:18 |
| 113.176.14.36 | attackbots | Unauthorised access (Sep 10) SRC=113.176.14.36 LEN=52 TTL=116 ID=19939 DF TCP DPT=445 WINDOW=8192 SYN |
2019-09-10 10:14:04 |
| 106.38.203.230 | attack | Sep 9 15:34:36 hiderm sshd\[13435\]: Invalid user myftp from 106.38.203.230 Sep 9 15:34:36 hiderm sshd\[13435\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.38.203.230 Sep 9 15:34:37 hiderm sshd\[13435\]: Failed password for invalid user myftp from 106.38.203.230 port 34818 ssh2 Sep 9 15:37:59 hiderm sshd\[13793\]: Invalid user testuser from 106.38.203.230 Sep 9 15:37:59 hiderm sshd\[13793\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.38.203.230 |
2019-09-10 09:55:52 |
| 51.68.192.106 | attack | Sep 10 04:52:25 taivassalofi sshd[113006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.192.106 Sep 10 04:52:27 taivassalofi sshd[113006]: Failed password for invalid user webuser from 51.68.192.106 port 42080 ssh2 ... |
2019-09-10 09:56:45 |
| 117.50.35.192 | attackspam | 2019-09-10T08:23:29.222317enmeeting.mahidol.ac.th sshd\[26021\]: Invalid user usuario from 117.50.35.192 port 53902 2019-09-10T08:23:29.241181enmeeting.mahidol.ac.th sshd\[26021\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.35.192 2019-09-10T08:23:31.216416enmeeting.mahidol.ac.th sshd\[26021\]: Failed password for invalid user usuario from 117.50.35.192 port 53902 ssh2 ... |
2019-09-10 09:53:23 |
| 77.247.110.195 | attackspam | firewall-block, port(s): 45454/udp |
2019-09-10 09:36:53 |
| 89.238.154.178 | attack | 20 attempts against mh-misbehave-ban on sonic.magehost.pro |
2019-09-10 10:27:03 |
| 137.74.4.25 | attackbotsspam | WordPress wp-login brute force :: 137.74.4.25 0.148 BYPASS [10/Sep/2019:11:23:13 1000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-09-10 10:15:20 |
| 93.104.178.153 | attackspambots | Automatic report - Port Scan Attack |
2019-09-10 09:49:40 |
| 87.61.232.98 | attack | Sep 10 01:45:43 MK-Soft-VM5 sshd\[18248\]: Invalid user pi from 87.61.232.98 port 36486 Sep 10 01:45:43 MK-Soft-VM5 sshd\[18248\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.61.232.98 Sep 10 01:45:44 MK-Soft-VM5 sshd\[18250\]: Invalid user pi from 87.61.232.98 port 36488 ... |
2019-09-10 09:58:26 |
| 5.189.166.57 | attackspambots | CloudCIX Reconnaissance Scan Detected, PTR: vmi275934.contaboserver.net. |
2019-09-10 10:16:21 |
| 138.68.223.45 | attackspambots | Autoban 138.68.223.45 AUTH/CONNECT |
2019-09-10 09:41:52 |