City: unknown
Region: unknown
Country: Brazil
Internet Service Provider: Teleart Internet
Hostname: unknown
Organization: unknown
Usage Type: Fixed Line ISP
| Type | Details | Datetime |
|---|---|---|
| attackbotsspam | Aug 15 01:06:14 mail.srvfarm.net postfix/smtps/smtpd[915855]: warning: unknown[45.160.138.163]: SASL PLAIN authentication failed: Aug 15 01:06:14 mail.srvfarm.net postfix/smtps/smtpd[915855]: lost connection after AUTH from unknown[45.160.138.163] Aug 15 01:10:17 mail.srvfarm.net postfix/smtps/smtpd[927777]: warning: unknown[45.160.138.163]: SASL PLAIN authentication failed: Aug 15 01:10:18 mail.srvfarm.net postfix/smtps/smtpd[927777]: lost connection after AUTH from unknown[45.160.138.163] Aug 15 01:13:47 mail.srvfarm.net postfix/smtpd[928780]: warning: unknown[45.160.138.163]: SASL PLAIN authentication failed: |
2020-08-15 16:02:58 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.160.138.182 | attack | Sep 14 18:54:56 mail.srvfarm.net postfix/smtpd[2076883]: warning: unknown[45.160.138.182]: SASL PLAIN authentication failed: Sep 14 18:54:57 mail.srvfarm.net postfix/smtpd[2076883]: lost connection after AUTH from unknown[45.160.138.182] Sep 14 18:56:18 mail.srvfarm.net postfix/smtpd[2076883]: warning: unknown[45.160.138.182]: SASL PLAIN authentication failed: Sep 14 18:56:18 mail.srvfarm.net postfix/smtpd[2076883]: lost connection after AUTH from unknown[45.160.138.182] Sep 14 18:57:07 mail.srvfarm.net postfix/smtps/smtpd[2079600]: warning: unknown[45.160.138.182]: SASL PLAIN authentication failed: |
2020-09-15 23:11:47 |
| 45.160.138.182 | attackbotsspam | Sep 14 18:54:56 mail.srvfarm.net postfix/smtpd[2076883]: warning: unknown[45.160.138.182]: SASL PLAIN authentication failed: Sep 14 18:54:57 mail.srvfarm.net postfix/smtpd[2076883]: lost connection after AUTH from unknown[45.160.138.182] Sep 14 18:56:18 mail.srvfarm.net postfix/smtpd[2076883]: warning: unknown[45.160.138.182]: SASL PLAIN authentication failed: Sep 14 18:56:18 mail.srvfarm.net postfix/smtpd[2076883]: lost connection after AUTH from unknown[45.160.138.182] Sep 14 18:57:07 mail.srvfarm.net postfix/smtps/smtpd[2079600]: warning: unknown[45.160.138.182]: SASL PLAIN authentication failed: |
2020-09-15 15:05:16 |
| 45.160.138.182 | attack | Sep 14 18:54:56 mail.srvfarm.net postfix/smtpd[2076883]: warning: unknown[45.160.138.182]: SASL PLAIN authentication failed: Sep 14 18:54:57 mail.srvfarm.net postfix/smtpd[2076883]: lost connection after AUTH from unknown[45.160.138.182] Sep 14 18:56:18 mail.srvfarm.net postfix/smtpd[2076883]: warning: unknown[45.160.138.182]: SASL PLAIN authentication failed: Sep 14 18:56:18 mail.srvfarm.net postfix/smtpd[2076883]: lost connection after AUTH from unknown[45.160.138.182] Sep 14 18:57:07 mail.srvfarm.net postfix/smtps/smtpd[2079600]: warning: unknown[45.160.138.182]: SASL PLAIN authentication failed: |
2020-09-15 07:12:17 |
| 45.160.138.113 | attack | Aug 15 00:07:55 mail.srvfarm.net postfix/smtps/smtpd[893682]: warning: unknown[45.160.138.113]: SASL PLAIN authentication failed: Aug 15 00:07:56 mail.srvfarm.net postfix/smtps/smtpd[893682]: lost connection after AUTH from unknown[45.160.138.113] Aug 15 00:11:23 mail.srvfarm.net postfix/smtpd[795872]: warning: unknown[45.160.138.113]: SASL PLAIN authentication failed: Aug 15 00:11:23 mail.srvfarm.net postfix/smtpd[795872]: lost connection after AUTH from unknown[45.160.138.113] Aug 15 00:17:44 mail.srvfarm.net postfix/smtps/smtpd[741489]: warning: unknown[45.160.138.113]: SASL PLAIN authentication failed: |
2020-08-15 17:11:51 |
| 45.160.138.182 | attackbotsspam | Aug 15 00:13:58 mail.srvfarm.net postfix/smtpd[848719]: warning: unknown[45.160.138.182]: SASL PLAIN authentication failed: Aug 15 00:13:58 mail.srvfarm.net postfix/smtpd[848719]: lost connection after AUTH from unknown[45.160.138.182] Aug 15 00:15:00 mail.srvfarm.net postfix/smtpd[741824]: warning: unknown[45.160.138.182]: SASL PLAIN authentication failed: Aug 15 00:15:01 mail.srvfarm.net postfix/smtpd[741824]: lost connection after AUTH from unknown[45.160.138.182] Aug 15 00:15:08 mail.srvfarm.net postfix/smtpd[795872]: warning: unknown[45.160.138.182]: SASL PLAIN authentication failed: |
2020-08-15 17:11:30 |
| 45.160.138.172 | attackspambots | Jul 28 05:35:51 mail.srvfarm.net postfix/smtps/smtpd[2355365]: warning: unknown[45.160.138.172]: SASL PLAIN authentication failed: Jul 28 05:35:52 mail.srvfarm.net postfix/smtps/smtpd[2355365]: lost connection after AUTH from unknown[45.160.138.172] Jul 28 05:38:56 mail.srvfarm.net postfix/smtpd[2354260]: warning: unknown[45.160.138.172]: SASL PLAIN authentication failed: Jul 28 05:38:57 mail.srvfarm.net postfix/smtpd[2354260]: lost connection after AUTH from unknown[45.160.138.172] Jul 28 05:41:05 mail.srvfarm.net postfix/smtps/smtpd[2355866]: warning: unknown[45.160.138.172]: SASL PLAIN authentication failed: |
2020-07-28 17:50:43 |
| 45.160.138.165 | attackspambots | Jul 24 08:44:30 mail.srvfarm.net postfix/smtps/smtpd[2137441]: warning: unknown[45.160.138.165]: SASL PLAIN authentication failed: Jul 24 08:44:30 mail.srvfarm.net postfix/smtps/smtpd[2137441]: lost connection after AUTH from unknown[45.160.138.165] Jul 24 08:46:01 mail.srvfarm.net postfix/smtps/smtpd[2137533]: warning: unknown[45.160.138.165]: SASL PLAIN authentication failed: Jul 24 08:46:02 mail.srvfarm.net postfix/smtps/smtpd[2137533]: lost connection after AUTH from unknown[45.160.138.165] Jul 24 08:54:12 mail.srvfarm.net postfix/smtpd[2140704]: warning: unknown[45.160.138.165]: SASL PLAIN authentication failed: |
2020-07-25 04:29:06 |
| 45.160.138.187 | attackspambots | Jul 24 16:57:50 mail.srvfarm.net postfix/smtps/smtpd[2334289]: warning: unknown[45.160.138.187]: SASL PLAIN authentication failed: Jul 24 16:57:51 mail.srvfarm.net postfix/smtps/smtpd[2334289]: lost connection after AUTH from unknown[45.160.138.187] Jul 24 17:04:37 mail.srvfarm.net postfix/smtps/smtpd[2333865]: warning: unknown[45.160.138.187]: SASL PLAIN authentication failed: Jul 24 17:04:37 mail.srvfarm.net postfix/smtps/smtpd[2333865]: lost connection after AUTH from unknown[45.160.138.187] Jul 24 17:05:22 mail.srvfarm.net postfix/smtps/smtpd[2349270]: warning: unknown[45.160.138.187]: SASL PLAIN authentication failed: |
2020-07-25 01:45:23 |
| 45.160.138.211 | attack | failed_logins |
2020-07-18 17:08:37 |
| 45.160.138.211 | attackspambots | (smtpauth) Failed SMTP AUTH login from 45.160.138.211 (BR/Brazil/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-07-17 08:24:55 plain authenticator failed for ([45.160.138.211]) [45.160.138.211]: 535 Incorrect authentication data (set_id=dairy) |
2020-07-17 15:54:33 |
| 45.160.138.160 | attackspam | Jun 16 05:16:06 mail.srvfarm.net postfix/smtpd[916166]: warning: unknown[45.160.138.160]: SASL PLAIN authentication failed: Jun 16 05:16:07 mail.srvfarm.net postfix/smtpd[916166]: lost connection after AUTH from unknown[45.160.138.160] Jun 16 05:23:27 mail.srvfarm.net postfix/smtpd[935980]: warning: unknown[45.160.138.160]: SASL PLAIN authentication failed: Jun 16 05:23:27 mail.srvfarm.net postfix/smtpd[935980]: lost connection after AUTH from unknown[45.160.138.160] Jun 16 05:25:26 mail.srvfarm.net postfix/smtps/smtpd[938097]: warning: unknown[45.160.138.160]: SASL PLAIN authentication failed: |
2020-06-16 16:38:12 |
| 45.160.138.118 | attack | (smtpauth) Failed SMTP AUTH login from 45.160.138.118 (BR/Brazil/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-05-10 08:25:11 plain authenticator failed for ([45.160.138.118]) [45.160.138.118]: 535 Incorrect authentication data (set_id=sale) |
2020-05-10 13:27:22 |
| 45.160.138.219 | attack | Unauthorised access (Oct 31) SRC=45.160.138.219 LEN=52 TTL=109 ID=2475 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-01 01:55:04 |
| 45.160.138.186 | attackbotsspam | Jul 17 08:03:37 offspring postfix/smtpd[27867]: connect from unknown[45.160.138.186] Jul 17 08:03:41 offspring postfix/smtpd[27867]: warning: unknown[45.160.138.186]: SASL CRAM-MD5 authentication failed: authentication failure Jul 17 08:03:41 offspring postfix/smtpd[27867]: warning: unknown[45.160.138.186]: SASL PLAIN authentication failed: authentication failure Jul 17 08:03:43 offspring postfix/smtpd[27867]: warning: unknown[45.160.138.186]: SASL LOGIN authentication failed: authentication failure ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=45.160.138.186 |
2019-07-17 16:41:44 |
| 45.160.138.105 | attack | Jul 14 12:05:19 rigel postfix/smtpd[29099]: connect from unknown[45.160.138.105] Jul 14 12:05:22 rigel postfix/smtpd[29099]: warning: unknown[45.160.138.105]: SASL CRAM-MD5 authentication failed: authentication failure Jul 14 12:05:23 rigel postfix/smtpd[29099]: warning: unknown[45.160.138.105]: SASL PLAIN authentication failed: authentication failure Jul 14 12:05:24 rigel postfix/smtpd[29099]: warning: unknown[45.160.138.105]: SASL LOGIN authentication failed: authentication failure ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=45.160.138.105 |
2019-07-15 03:45:05 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.160.138.163
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39987
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.160.138.163. IN A
;; AUTHORITY SECTION:
. 425 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020081500 1800 900 604800 86400
;; Query time: 80 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Aug 15 16:02:53 CST 2020
;; MSG SIZE rcvd: 118Host 163.138.160.45.in-addr.arpa. not found: 3(NXDOMAIN)Server: 100.100.2.138
Address: 100.100.2.138#53
** server can't find 163.138.160.45.in-addr.arpa.: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 54.37.205.20 | attack | Jun 28 11:52:20 tanzim-HP-Z238-Microtower-Workstation sshd\[18626\]: Invalid user avis from 54.37.205.20 Jun 28 11:52:20 tanzim-HP-Z238-Microtower-Workstation sshd\[18626\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.205.20 Jun 28 11:52:22 tanzim-HP-Z238-Microtower-Workstation sshd\[18626\]: Failed password for invalid user avis from 54.37.205.20 port 34050 ssh2 ... |
2019-06-28 15:24:17 |
| 74.82.47.37 | attack | Unauthorised access (Jun 28) SRC=74.82.47.37 LEN=40 TTL=243 ID=54321 TCP DPT=8080 WINDOW=65535 SYN |
2019-06-28 15:36:34 |
| 189.121.176.100 | attackspambots | (sshd) Failed SSH login from 189.121.176.100 (BR/Brazil/bd79b064.virtua.com.br): 5 in the last 3600 secs |
2019-06-28 15:30:39 |
| 134.209.247.249 | attack | $f2bV_matches |
2019-06-28 15:29:00 |
| 187.190.221.81 | attackbots | Brute force attempt |
2019-06-28 14:56:36 |
| 60.249.18.62 | attackbotsspam | [FriJun2807:14:29.4567262019][:error][pid6259:tid47523410122496][client60.249.18.62:54004][client60.249.18.62]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\|WormlyBot\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"390"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSIE6.0detected\(DisableifyouwanttoallowMSIE6\)"][severity"WARNING"][hostname"ledpiu.ch"][uri"/wp-content/plugins/woo-fiscalita-italiana/includes/freemius/LICENSE.txt"][unique_id"XRWiNYupc1W2TxOFyfVQ7wAAAA0"][FriJun2807:14:36.6154762019][:error][pid6263:tid47523403818752][client60.249.18.62:61382][client60.249.18.62]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\|WormlyBot\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"390"][id"397989"][rev\ |
2019-06-28 15:29:49 |
| 221.213.75.133 | attackbotsspam | Detected by PostAnalyse. The number of the additional attacks is 30. |
2019-06-28 14:57:16 |
| 59.1.116.20 | attackspambots | Jun 28 07:16:07 mail sshd\[29724\]: Invalid user user from 59.1.116.20 Jun 28 07:16:07 mail sshd\[29724\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.1.116.20 Jun 28 07:16:09 mail sshd\[29724\]: Failed password for invalid user user from 59.1.116.20 port 43684 ssh2 ... |
2019-06-28 14:54:29 |
| 206.189.137.113 | attack | Jun 28 09:10:10 localhost sshd\[17900\]: Invalid user hadoop from 206.189.137.113 port 43404 Jun 28 09:10:10 localhost sshd\[17900\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.137.113 Jun 28 09:10:12 localhost sshd\[17900\]: Failed password for invalid user hadoop from 206.189.137.113 port 43404 ssh2 |
2019-06-28 15:20:41 |
| 223.83.155.77 | attackspam | Feb 3 16:59:35 vtv3 sshd\[24859\]: Invalid user protegent from 223.83.155.77 port 49738 Feb 3 16:59:35 vtv3 sshd\[24859\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.83.155.77 Feb 3 16:59:37 vtv3 sshd\[24859\]: Failed password for invalid user protegent from 223.83.155.77 port 49738 ssh2 Feb 3 17:07:34 vtv3 sshd\[27279\]: Invalid user www from 223.83.155.77 port 52618 Feb 3 17:07:34 vtv3 sshd\[27279\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.83.155.77 Feb 14 03:33:28 vtv3 sshd\[30894\]: Invalid user test from 223.83.155.77 port 50292 Feb 14 03:33:28 vtv3 sshd\[30894\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.83.155.77 Feb 14 03:33:29 vtv3 sshd\[30894\]: Failed password for invalid user test from 223.83.155.77 port 50292 ssh2 Feb 14 03:41:35 vtv3 sshd\[867\]: Invalid user server from 223.83.155.77 port 39774 Feb 14 03:41:35 vtv3 sshd\[867\]: pam_ |
2019-06-28 15:26:40 |
| 186.183.161.186 | attackbots | Jun 28 07:13:24 mail sshd\[26368\]: Invalid user hank from 186.183.161.186 port 56656 Jun 28 07:13:24 mail sshd\[26368\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.183.161.186 Jun 28 07:13:27 mail sshd\[26368\]: Failed password for invalid user hank from 186.183.161.186 port 56656 ssh2 Jun 28 07:15:22 mail sshd\[31057\]: Invalid user riley from 186.183.161.186 port 48088 Jun 28 07:15:22 mail sshd\[31057\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.183.161.186 ... |
2019-06-28 15:14:22 |
| 211.151.95.139 | attackbots | $f2bV_matches |
2019-06-28 15:27:12 |
| 106.75.7.70 | attack | detected by Fail2Ban |
2019-06-28 15:38:21 |
| 179.108.245.221 | attack | SMTP-sasl brute force ... |
2019-06-28 14:53:28 |
| 177.91.117.233 | attack | Brute force attempt |
2019-06-28 15:35:13 |