City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 100.120.124.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17551
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;100.120.124.34. IN A
;; AUTHORITY SECTION:
. 452 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022112700 1800 900 604800 86400
;; Query time: 90 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Nov 27 20:15:41 CST 2022
;; MSG SIZE rcvd: 107Host 34.124.120.100.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 34.124.120.100.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 83.97.20.35 | attackspambots | Unauthorized connection attempt detected from IP address 83.97.20.35 to port 587 |
2020-08-05 13:56:31 |
| 106.13.201.44 | attackspam | (sshd) Failed SSH login from 106.13.201.44 (CN/China/-): 5 in the last 3600 secs |
2020-08-05 13:47:20 |
| 46.101.164.33 | attackspam | Lines containing failures of 46.101.164.33 Aug 5 00:30:57 nemesis sshd[16948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.164.33 user=r.r Aug 5 00:30:59 nemesis sshd[16948]: Failed password for r.r from 46.101.164.33 port 50172 ssh2 Aug 5 00:31:00 nemesis sshd[16948]: Received disconnect from 46.101.164.33 port 50172:11: Bye Bye [preauth] Aug 5 00:31:00 nemesis sshd[16948]: Disconnected from authenticating user r.r 46.101.164.33 port 50172 [preauth] Aug 5 00:42:25 nemesis sshd[21514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.164.33 user=r.r Aug 5 00:42:27 nemesis sshd[21514]: Failed password for r.r from 46.101.164.33 port 40700 ssh2 Aug 5 00:42:27 nemesis sshd[21514]: Received disconnect from 46.101.164.33 port 40700:11: Bye Bye [preauth] Aug 5 00:42:27 nemesis sshd[21514]: Disconnected from authenticating user r.r 46.101.164.33 port 40700 [preauth] Aug 5........ ------------------------------ |
2020-08-05 13:14:27 |
| 106.124.131.70 | attackbots | detected by Fail2Ban |
2020-08-05 14:04:34 |
| 177.154.239.214 | attackbotsspam | Aug 5 05:47:23 mail.srvfarm.net postfix/smtpd[1876490]: warning: unknown[177.154.239.214]: SASL PLAIN authentication failed: Aug 5 05:47:23 mail.srvfarm.net postfix/smtpd[1876490]: lost connection after AUTH from unknown[177.154.239.214] Aug 5 05:51:10 mail.srvfarm.net postfix/smtpd[1877844]: warning: unknown[177.154.239.214]: SASL PLAIN authentication failed: Aug 5 05:51:11 mail.srvfarm.net postfix/smtpd[1877844]: lost connection after AUTH from unknown[177.154.239.214] Aug 5 05:52:42 mail.srvfarm.net postfix/smtpd[1878872]: warning: unknown[177.154.239.214]: SASL PLAIN authentication failed: |
2020-08-05 13:58:02 |
| 5.188.206.197 | attackspambots | Aug 5 07:15:16 relay postfix/smtpd\[16022\]: warning: unknown\[5.188.206.197\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 5 07:15:39 relay postfix/smtpd\[16020\]: warning: unknown\[5.188.206.197\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 5 07:20:34 relay postfix/smtpd\[16019\]: warning: unknown\[5.188.206.197\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 5 07:20:56 relay postfix/smtpd\[25268\]: warning: unknown\[5.188.206.197\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 5 07:24:19 relay postfix/smtpd\[16022\]: warning: unknown\[5.188.206.197\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-08-05 14:07:58 |
| 45.227.254.30 | attackspambots | Port scanning [10 denied] |
2020-08-05 13:29:54 |
| 193.107.90.185 | attack | Aug 5 05:17:45 scw-tender-jepsen sshd[15571]: Failed password for root from 193.107.90.185 port 33623 ssh2 |
2020-08-05 13:29:29 |
| 61.177.124.118 | attackspam | Aug 5 00:50:29 our-server-hostname sshd[23145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.124.118 user=r.r Aug 5 00:50:31 our-server-hostname sshd[23145]: Failed password for r.r from 61.177.124.118 port 2140 ssh2 Aug 5 01:06:51 our-server-hostname sshd[26890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.124.118 user=r.r Aug 5 01:06:54 our-server-hostname sshd[26890]: Failed password for r.r from 61.177.124.118 port 2141 ssh2 Aug 5 01:11:03 our-server-hostname sshd[27845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.124.118 user=r.r Aug 5 01:11:04 our-server-hostname sshd[27845]: Failed password for r.r from 61.177.124.118 port 2142 ssh2 Aug 5 01:14:54 our-server-hostname sshd[28812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.124.118 user=r.r Aug 5 01:14........ ------------------------------- |
2020-08-05 13:22:35 |
| 51.38.238.165 | attackspambots | Aug 5 06:55:33 jane sshd[23304]: Failed password for root from 51.38.238.165 port 52962 ssh2 ... |
2020-08-05 13:51:45 |
| 61.177.172.128 | attackspambots | Aug 5 08:44:44 ift sshd\[55769\]: Failed password for root from 61.177.172.128 port 32906 ssh2Aug 5 08:45:00 ift sshd\[55797\]: Failed password for root from 61.177.172.128 port 61068 ssh2Aug 5 08:45:04 ift sshd\[55797\]: Failed password for root from 61.177.172.128 port 61068 ssh2Aug 5 08:45:12 ift sshd\[55797\]: Failed password for root from 61.177.172.128 port 61068 ssh2Aug 5 08:45:25 ift sshd\[55797\]: Failed password for root from 61.177.172.128 port 61068 ssh2 ... |
2020-08-05 13:53:03 |
| 61.93.70.125 | attackbotsspam | Lines containing failures of 61.93.70.125 Aug 5 02:33:37 mellenthin sshd[19918]: User r.r from 61.93.70.125 not allowed because not listed in AllowUsers Aug 5 02:33:37 mellenthin sshd[19918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.93.70.125 user=r.r Aug 5 02:33:39 mellenthin sshd[19918]: Failed password for invalid user r.r from 61.93.70.125 port 50010 ssh2 Aug 5 02:33:39 mellenthin sshd[19918]: Received disconnect from 61.93.70.125 port 50010:11: Bye Bye [preauth] Aug 5 02:33:39 mellenthin sshd[19918]: Disconnected from invalid user r.r 61.93.70.125 port 50010 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=61.93.70.125 |
2020-08-05 13:28:31 |
| 103.93.9.117 | attackspambots | Aug 5 05:03:57 mail.srvfarm.net postfix/smtpd[1857043]: warning: unknown[103.93.9.117]: SASL PLAIN authentication failed: Aug 5 05:03:57 mail.srvfarm.net postfix/smtpd[1857043]: lost connection after AUTH from unknown[103.93.9.117] Aug 5 05:07:27 mail.srvfarm.net postfix/smtpd[1872480]: warning: unknown[103.93.9.117]: SASL PLAIN authentication failed: Aug 5 05:07:27 mail.srvfarm.net postfix/smtpd[1872480]: lost connection after AUTH from unknown[103.93.9.117] Aug 5 05:07:42 mail.srvfarm.net postfix/smtps/smtpd[1872308]: warning: unknown[103.93.9.117]: SASL PLAIN authentication failed: |
2020-08-05 14:06:13 |
| 193.35.48.18 | attackspambots | 2020-08-04 12:02:00 SMTP:25 IP autobanned - 51 attempts a day |
2020-08-05 14:00:01 |
| 138.122.98.173 | attackbots | Aug 5 05:43:11 mail.srvfarm.net postfix/smtps/smtpd[1876316]: warning: unknown[138.122.98.173]: SASL PLAIN authentication failed: Aug 5 05:43:11 mail.srvfarm.net postfix/smtps/smtpd[1876316]: lost connection after AUTH from unknown[138.122.98.173] Aug 5 05:46:23 mail.srvfarm.net postfix/smtpd[1876488]: warning: unknown[138.122.98.173]: SASL PLAIN authentication failed: Aug 5 05:46:24 mail.srvfarm.net postfix/smtpd[1876488]: lost connection after AUTH from unknown[138.122.98.173] Aug 5 05:47:28 mail.srvfarm.net postfix/smtps/smtpd[1878532]: warning: unknown[138.122.98.173]: SASL PLAIN authentication failed: |
2020-08-05 14:04:02 |