City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 48.1.146.141
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61146
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;48.1.146.141. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022800 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 21:45:14 CST 2025
;; MSG SIZE rcvd: 105Host 141.146.1.48.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 141.146.1.48.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 190.210.73.121 | attackbots | SMTP blocked logins: 26. Dates: 12-7-2020 / 14-7-2020 |
2020-07-14 19:06:06 |
| 212.70.149.51 | attack | Jul 14 12:59:03 srv01 postfix/smtpd\[11554\]: warning: unknown\[212.70.149.51\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 14 12:59:11 srv01 postfix/smtpd\[11712\]: warning: unknown\[212.70.149.51\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 14 12:59:12 srv01 postfix/smtpd\[27612\]: warning: unknown\[212.70.149.51\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 14 12:59:12 srv01 postfix/smtpd\[27613\]: warning: unknown\[212.70.149.51\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 14 12:59:33 srv01 postfix/smtpd\[11554\]: warning: unknown\[212.70.149.51\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-07-14 19:04:15 |
| 119.187.151.218 | attack | Suspicious access to SMTP/POP/IMAP services. |
2020-07-14 19:07:26 |
| 202.155.217.150 | attackbots | Invalid user vm from 202.155.217.150 port 21792 |
2020-07-14 19:20:00 |
| 39.42.166.111 | attackbots | RDP brute force attack detected by fail2ban |
2020-07-14 19:25:43 |
| 49.233.183.15 | attackspam | 2020-07-14T04:19:40.259375morrigan.ad5gb.com sshd[2511341]: Invalid user bb from 49.233.183.15 port 42002 2020-07-14T04:19:41.828650morrigan.ad5gb.com sshd[2511341]: Failed password for invalid user bb from 49.233.183.15 port 42002 ssh2 |
2020-07-14 19:23:50 |
| 196.52.43.126 | attack |
|
2020-07-14 18:51:18 |
| 216.218.206.86 | attackspam | MultiHost/MultiPort Probe, Scan, Hack - |
2020-07-14 19:02:19 |
| 78.128.113.226 | attackbotsspam | Jul 14 12:49:08 vpn01 sshd[17102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.128.113.226 Jul 14 12:49:10 vpn01 sshd[17102]: Failed password for invalid user ubnt from 78.128.113.226 port 45438 ssh2 ... |
2020-07-14 19:13:29 |
| 213.212.132.47 | attackspambots | [Tue Jul 14 07:05:33.705582 2020] [:error] [pid 234365] [client 213.212.132.47:35474] [client 213.212.132.47] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ws24vmsma01.ufn.edu.br"] [uri "/xmlrpc.php"] [unique_id "Xw2DbQ9xgSJzf94w66KtogAAAAc"] ... |
2020-07-14 19:18:13 |
| 103.78.215.150 | attackbots | $f2bV_matches |
2020-07-14 19:01:11 |
| 5.188.206.195 | attackspambots | Auto Fail2Ban report, multiple SMTP login attempts. |
2020-07-14 19:10:11 |
| 41.93.32.89 | attackspambots | Jul 14 12:49:07 *user* sshd[31052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.93.32.89 Jul 14 12:49:09 *user* sshd[31052]: Failed password for invalid user karol from 41.93.32.89 port 49214 ssh2 |
2020-07-14 19:09:43 |
| 52.152.97.229 | attack | SSH auth scanning - multiple failed logins |
2020-07-14 19:03:50 |
| 107.180.92.3 | attack | Jul 14 08:37:58 plex-server sshd[655860]: Invalid user visitor from 107.180.92.3 port 30087 Jul 14 08:37:58 plex-server sshd[655860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.180.92.3 Jul 14 08:37:58 plex-server sshd[655860]: Invalid user visitor from 107.180.92.3 port 30087 Jul 14 08:38:00 plex-server sshd[655860]: Failed password for invalid user visitor from 107.180.92.3 port 30087 ssh2 Jul 14 08:41:03 plex-server sshd[656809]: Invalid user martin from 107.180.92.3 port 27330 ... |
2020-07-14 18:51:54 |