City: unknown
Region: unknown
Country: Australia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.21.131.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40739
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;103.21.131.34. IN A
;; AUTHORITY SECTION:
. 569 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022401 1800 900 604800 86400
;; Query time: 134 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 01:45:48 CST 2022
;; MSG SIZE rcvd: 10634.131.21.103.in-addr.arpa domain name pointer ip-103-21-131-34.mdg-it.net.au.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
34.131.21.103.in-addr.arpa name = ip-103-21-131-34.mdg-it.net.au.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.237.57.69 | attack | Aug 16 05:04:57 mail.srvfarm.net postfix/smtps/smtpd[1869934]: warning: unknown[103.237.57.69]: SASL PLAIN authentication failed: Aug 16 05:04:57 mail.srvfarm.net postfix/smtps/smtpd[1869934]: lost connection after AUTH from unknown[103.237.57.69] Aug 16 05:09:50 mail.srvfarm.net postfix/smtps/smtpd[1887813]: warning: unknown[103.237.57.69]: SASL PLAIN authentication failed: Aug 16 05:09:50 mail.srvfarm.net postfix/smtps/smtpd[1887813]: lost connection after AUTH from unknown[103.237.57.69] Aug 16 05:12:20 mail.srvfarm.net postfix/smtps/smtpd[1872718]: warning: unknown[103.237.57.69]: SASL PLAIN authentication failed: |
2020-08-16 13:21:20 |
| 106.12.108.170 | attack | web-1 [ssh] SSH Attack |
2020-08-16 12:45:28 |
| 177.44.17.81 | attackspambots | Aug 16 05:11:49 mail.srvfarm.net postfix/smtpd[1888503]: warning: unknown[177.44.17.81]: SASL PLAIN authentication failed: Aug 16 05:11:50 mail.srvfarm.net postfix/smtpd[1888503]: lost connection after AUTH from unknown[177.44.17.81] Aug 16 05:14:50 mail.srvfarm.net postfix/smtps/smtpd[1888755]: warning: unknown[177.44.17.81]: SASL PLAIN authentication failed: Aug 16 05:14:51 mail.srvfarm.net postfix/smtps/smtpd[1888755]: lost connection after AUTH from unknown[177.44.17.81] Aug 16 05:18:57 mail.srvfarm.net postfix/smtpd[1887547]: warning: unknown[177.44.17.81]: SASL PLAIN authentication failed: |
2020-08-16 13:16:44 |
| 177.85.19.115 | attack | Aug 16 05:30:35 mail.srvfarm.net postfix/smtpd[1888510]: warning: 115-19-85-177.netvale.psi.br[177.85.19.115]: SASL PLAIN authentication failed: Aug 16 05:30:36 mail.srvfarm.net postfix/smtpd[1888510]: lost connection after AUTH from 115-19-85-177.netvale.psi.br[177.85.19.115] Aug 16 05:31:02 mail.srvfarm.net postfix/smtpd[1888822]: warning: 115-19-85-177.netvale.psi.br[177.85.19.115]: SASL PLAIN authentication failed: Aug 16 05:31:02 mail.srvfarm.net postfix/smtpd[1888822]: lost connection after AUTH from 115-19-85-177.netvale.psi.br[177.85.19.115] Aug 16 05:36:25 mail.srvfarm.net postfix/smtps/smtpd[1888715]: warning: 115-19-85-177.netvale.psi.br[177.85.19.115]: SASL PLAIN authentication failed: |
2020-08-16 12:59:49 |
| 41.79.19.176 | attackbotsspam | Aug 16 05:20:37 mail.srvfarm.net postfix/smtps/smtpd[1887813]: warning: unknown[41.79.19.176]: SASL PLAIN authentication failed: Aug 16 05:20:38 mail.srvfarm.net postfix/smtps/smtpd[1887813]: lost connection after AUTH from unknown[41.79.19.176] Aug 16 05:21:49 mail.srvfarm.net postfix/smtpd[1887487]: warning: unknown[41.79.19.176]: SASL PLAIN authentication failed: Aug 16 05:21:49 mail.srvfarm.net postfix/smtpd[1887487]: lost connection after AUTH from unknown[41.79.19.176] Aug 16 05:27:49 mail.srvfarm.net postfix/smtpd[1887708]: warning: unknown[41.79.19.176]: SASL PLAIN authentication failed: |
2020-08-16 13:09:43 |
| 193.164.135.246 | attack | Unauthorized connection attempt from IP address 193.164.135.246 on port 587 |
2020-08-16 12:53:56 |
| 62.210.194.7 | attackbots | Aug 16 06:28:58 mail.srvfarm.net postfix/smtpd[1924773]: lost connection after STARTTLS from r7.news.eu.rvca.com[62.210.194.7] Aug 16 06:32:25 mail.srvfarm.net postfix/smtpd[1931086]: lost connection after STARTTLS from r7.news.eu.rvca.com[62.210.194.7] Aug 16 06:35:38 mail.srvfarm.net postfix/smtpd[1931096]: lost connection after STARTTLS from r7.news.eu.rvca.com[62.210.194.7] Aug 16 06:36:42 mail.srvfarm.net postfix/smtpd[1931087]: lost connection after STARTTLS from r7.news.eu.rvca.com[62.210.194.7] Aug 16 06:38:05 mail.srvfarm.net postfix/smtpd[1929155]: lost connection after STARTTLS from r7.news.eu.rvca.com[62.210.194.7] |
2020-08-16 13:25:00 |
| 218.92.0.212 | attackspam | Aug 16 00:47:25 ny01 sshd[17462]: Failed password for root from 218.92.0.212 port 8508 ssh2 Aug 16 00:47:38 ny01 sshd[17462]: error: maximum authentication attempts exceeded for root from 218.92.0.212 port 8508 ssh2 [preauth] Aug 16 00:47:47 ny01 sshd[17506]: Failed password for root from 218.92.0.212 port 37088 ssh2 |
2020-08-16 12:50:29 |
| 172.82.230.4 | attackbots | Aug 16 06:32:25 mail.srvfarm.net postfix/smtpd[1931085]: lost connection after STARTTLS from r4.news.eu.rvca.com[172.82.230.4] Aug 16 06:35:37 mail.srvfarm.net postfix/smtpd[1931086]: lost connection after STARTTLS from r4.news.eu.rvca.com[172.82.230.4] Aug 16 06:36:42 mail.srvfarm.net postfix/smtpd[1931087]: lost connection after STARTTLS from r4.news.eu.rvca.com[172.82.230.4] Aug 16 06:38:04 mail.srvfarm.net postfix/smtpd[1931096]: lost connection after STARTTLS from r4.news.eu.rvca.com[172.82.230.4] Aug 16 06:39:12 mail.srvfarm.net postfix/smtpd[1924775]: lost connection after STARTTLS from r4.news.eu.rvca.com[172.82.230.4] |
2020-08-16 13:19:15 |
| 142.93.34.169 | attack | 142.93.34.169 - - [16/Aug/2020:05:56:38 +0200] "POST /wp-login.php HTTP/1.0" 200 4749 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-16 12:49:08 |
| 189.91.6.63 | attackspam | Aug 16 05:16:57 mail.srvfarm.net postfix/smtps/smtpd[1874176]: warning: unknown[189.91.6.63]: SASL PLAIN authentication failed: Aug 16 05:16:57 mail.srvfarm.net postfix/smtps/smtpd[1874176]: lost connection after AUTH from unknown[189.91.6.63] Aug 16 05:20:19 mail.srvfarm.net postfix/smtps/smtpd[1874176]: warning: unknown[189.91.6.63]: SASL PLAIN authentication failed: Aug 16 05:20:19 mail.srvfarm.net postfix/smtps/smtpd[1874176]: lost connection after AUTH from unknown[189.91.6.63] Aug 16 05:21:39 mail.srvfarm.net postfix/smtpd[1888511]: warning: unknown[189.91.6.63]: SASL PLAIN authentication failed: |
2020-08-16 12:54:18 |
| 172.82.239.23 | attack | Aug 16 06:32:27 mail.srvfarm.net postfix/smtpd[1931097]: lost connection after STARTTLS from r23.news.eu.rvca.com[172.82.239.23] Aug 16 06:35:36 mail.srvfarm.net postfix/smtpd[1928557]: lost connection after STARTTLS from r23.news.eu.rvca.com[172.82.239.23] Aug 16 06:36:41 mail.srvfarm.net postfix/smtpd[1929156]: lost connection after STARTTLS from r23.news.eu.rvca.com[172.82.239.23] Aug 16 06:38:06 mail.srvfarm.net postfix/smtpd[1924778]: lost connection after STARTTLS from r23.news.eu.rvca.com[172.82.239.23] Aug 16 06:39:11 mail.srvfarm.net postfix/smtpd[1931098]: lost connection after STARTTLS from r23.news.eu.rvca.com[172.82.239.23] |
2020-08-16 13:17:50 |
| 103.237.56.170 | attackbots | Aug 16 05:27:55 mail.srvfarm.net postfix/smtpd[1875198]: warning: unknown[103.237.56.170]: SASL PLAIN authentication failed: Aug 16 05:27:55 mail.srvfarm.net postfix/smtpd[1875198]: lost connection after AUTH from unknown[103.237.56.170] Aug 16 05:30:07 mail.srvfarm.net postfix/smtpd[1888825]: warning: unknown[103.237.56.170]: SASL PLAIN authentication failed: Aug 16 05:30:07 mail.srvfarm.net postfix/smtpd[1888825]: lost connection after AUTH from unknown[103.237.56.170] Aug 16 05:36:15 mail.srvfarm.net postfix/smtpd[1888825]: warning: unknown[103.237.56.170]: SASL PLAIN authentication failed: |
2020-08-16 13:02:11 |
| 222.186.175.182 | attack | Aug 16 06:45:10 * sshd[8819]: Failed password for root from 222.186.175.182 port 37118 ssh2 Aug 16 06:45:22 * sshd[8819]: error: maximum authentication attempts exceeded for root from 222.186.175.182 port 37118 ssh2 [preauth] |
2020-08-16 12:51:16 |
| 72.11.135.222 | attack | Brute Force attack - banned by Fail2Ban |
2020-08-16 13:07:19 |