103.25.134.245

Basic Info

City: unknown

Region: unknown

Country: India

Internet Service Provider: ApnaTeleLink Pvt. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Jul 24 08:35:14 mail.srvfarm.net postfix/smtps/smtpd[2137407]: warning: unknown[103.25.134.245]: SASL PLAIN authentication failed: Jul 24 08:35:15 mail.srvfarm.net postfix/smtps/smtpd[2137407]: lost connection after AUTH from unknown[103.25.134.245] Jul 24 08:35:52 mail.srvfarm.net postfix/smtps/smtpd[2137533]: warning: unknown[103.25.134.245]: SASL PLAIN authentication failed: Jul 24 08:35:52 mail.srvfarm.net postfix/smtps/smtpd[2137533]: lost connection after AUTH from unknown[103.25.134.245] Jul 24 08:41:02 mail.srvfarm.net postfix/smtpd[2132843]: warning: unknown[103.25.134.245]: SASL PLAIN authentication failed:	2020-07-25 04:27:29
attackbotsspam	IMAP/SMTP Authentication Failure	2020-07-07 05:30:20
attack	Brute force attempt	2020-06-05 04:53:48

Type

Details

Datetime

attack

Jul 24 08:35:14 mail.srvfarm.net postfix/smtps/smtpd[2137407]: warning: unknown[103.25.134.245]: SASL PLAIN authentication failed: 
Jul 24 08:35:15 mail.srvfarm.net postfix/smtps/smtpd[2137407]: lost connection after AUTH from unknown[103.25.134.245]
Jul 24 08:35:52 mail.srvfarm.net postfix/smtps/smtpd[2137533]: warning: unknown[103.25.134.245]: SASL PLAIN authentication failed: 
Jul 24 08:35:52 mail.srvfarm.net postfix/smtps/smtpd[2137533]: lost connection after AUTH from unknown[103.25.134.245]
Jul 24 08:41:02 mail.srvfarm.net postfix/smtpd[2132843]: warning: unknown[103.25.134.245]: SASL PLAIN authentication failed:

2020-07-25 04:27:29

attackbotsspam

IMAP/SMTP Authentication Failure

2020-07-07 05:30:20

attack

Brute force attempt

2020-06-05 04:53:48

Comments on same subnet:

IP	Type	Details	Datetime
103.25.134.167	attackbotsspam	Sep 21 18:55:45 mail.srvfarm.net postfix/smtpd[2952347]: warning: unknown[103.25.134.167]: SASL PLAIN authentication failed: Sep 21 18:55:45 mail.srvfarm.net postfix/smtpd[2952347]: lost connection after AUTH from unknown[103.25.134.167] Sep 21 18:58:26 mail.srvfarm.net postfix/smtps/smtpd[2951826]: warning: unknown[103.25.134.167]: SASL PLAIN authentication failed: Sep 21 18:58:27 mail.srvfarm.net postfix/smtps/smtpd[2951826]: lost connection after AUTH from unknown[103.25.134.167] Sep 21 19:01:56 mail.srvfarm.net postfix/smtpd[2953238]: warning: unknown[103.25.134.167]: SASL PLAIN authentication failed:	2020-09-22 21:13:35
103.25.134.167	attackbots	Sep 21 18:55:45 mail.srvfarm.net postfix/smtpd[2952347]: warning: unknown[103.25.134.167]: SASL PLAIN authentication failed: Sep 21 18:55:45 mail.srvfarm.net postfix/smtpd[2952347]: lost connection after AUTH from unknown[103.25.134.167] Sep 21 18:58:26 mail.srvfarm.net postfix/smtps/smtpd[2951826]: warning: unknown[103.25.134.167]: SASL PLAIN authentication failed: Sep 21 18:58:27 mail.srvfarm.net postfix/smtps/smtpd[2951826]: lost connection after AUTH from unknown[103.25.134.167] Sep 21 19:01:56 mail.srvfarm.net postfix/smtpd[2953238]: warning: unknown[103.25.134.167]: SASL PLAIN authentication failed:	2020-09-22 05:23:49
103.25.134.139	attackspam	Aug 27 05:59:07 mail.srvfarm.net postfix/smtpd[1362762]: warning: unknown[103.25.134.139]: SASL PLAIN authentication failed: Aug 27 05:59:08 mail.srvfarm.net postfix/smtpd[1362762]: lost connection after AUTH from unknown[103.25.134.139] Aug 27 06:02:05 mail.srvfarm.net postfix/smtpd[1379454]: warning: unknown[103.25.134.139]: SASL PLAIN authentication failed: Aug 27 06:02:06 mail.srvfarm.net postfix/smtpd[1379454]: lost connection after AUTH from unknown[103.25.134.139] Aug 27 06:02:15 mail.srvfarm.net postfix/smtps/smtpd[1362633]: warning: unknown[103.25.134.139]: SASL PLAIN authentication failed:	2020-08-28 07:23:48
103.25.134.140	attackbots	Aug 16 05:00:26 mail.srvfarm.net postfix/smtpd[1872412]: warning: unknown[103.25.134.140]: SASL PLAIN authentication failed: Aug 16 05:00:26 mail.srvfarm.net postfix/smtpd[1872412]: lost connection after AUTH from unknown[103.25.134.140] Aug 16 05:03:03 mail.srvfarm.net postfix/smtpd[1887487]: warning: unknown[103.25.134.140]: SASL PLAIN authentication failed: Aug 16 05:03:04 mail.srvfarm.net postfix/smtpd[1887487]: lost connection after AUTH from unknown[103.25.134.140] Aug 16 05:09:52 mail.srvfarm.net postfix/smtps/smtpd[1887810]: warning: unknown[103.25.134.140]: SASL PLAIN authentication failed:	2020-08-16 13:21:42
103.25.134.222	attackspam	Aug 16 05:27:48 mail.srvfarm.net postfix/smtps/smtpd[1890600]: warning: unknown[103.25.134.222]: SASL PLAIN authentication failed: Aug 16 05:27:48 mail.srvfarm.net postfix/smtps/smtpd[1890600]: lost connection after AUTH from unknown[103.25.134.222] Aug 16 05:29:39 mail.srvfarm.net postfix/smtps/smtpd[1888744]: warning: unknown[103.25.134.222]: SASL PLAIN authentication failed: Aug 16 05:29:40 mail.srvfarm.net postfix/smtps/smtpd[1888744]: lost connection after AUTH from unknown[103.25.134.222] Aug 16 05:32:09 mail.srvfarm.net postfix/smtpd[1879275]: warning: unknown[103.25.134.222]: SASL PLAIN authentication failed:	2020-08-16 13:03:21
103.25.134.143	attack	Aug 16 05:33:23 mail.srvfarm.net postfix/smtpd[1888511]: warning: unknown[103.25.134.143]: SASL PLAIN authentication failed: Aug 16 05:33:23 mail.srvfarm.net postfix/smtpd[1888511]: lost connection after AUTH from unknown[103.25.134.143] Aug 16 05:42:23 mail.srvfarm.net postfix/smtps/smtpd[1907644]: warning: unknown[103.25.134.143]: SASL PLAIN authentication failed: Aug 16 05:42:23 mail.srvfarm.net postfix/smtps/smtpd[1907644]: lost connection after AUTH from unknown[103.25.134.143] Aug 16 05:43:06 mail.srvfarm.net postfix/smtps/smtpd[1890437]: warning: unknown[103.25.134.143]: SASL PLAIN authentication failed:	2020-08-16 12:26:19
103.25.134.193	attackbotsspam	Aug 15 01:47:06 mail.srvfarm.net postfix/smtpd[947315]: warning: unknown[103.25.134.193]: SASL PLAIN authentication failed: Aug 15 01:47:06 mail.srvfarm.net postfix/smtpd[947315]: lost connection after AUTH from unknown[103.25.134.193] Aug 15 01:47:15 mail.srvfarm.net postfix/smtps/smtpd[930972]: warning: unknown[103.25.134.193]: SASL PLAIN authentication failed: Aug 15 01:47:15 mail.srvfarm.net postfix/smtps/smtpd[930972]: lost connection after AUTH from unknown[103.25.134.193] Aug 15 01:47:30 mail.srvfarm.net postfix/smtps/smtpd[944622]: lost connection after AUTH from unknown[103.25.134.193]	2020-08-15 13:52:29
103.25.134.192	attack	Aug 2 05:47:00 mail.srvfarm.net postfix/smtpd[1404334]: warning: unknown[103.25.134.192]: SASL PLAIN authentication failed: Aug 2 05:47:00 mail.srvfarm.net postfix/smtpd[1404334]: lost connection after AUTH from unknown[103.25.134.192] Aug 2 05:49:47 mail.srvfarm.net postfix/smtpd[1403823]: warning: unknown[103.25.134.192]: SASL PLAIN authentication failed: Aug 2 05:49:47 mail.srvfarm.net postfix/smtpd[1403823]: lost connection after AUTH from unknown[103.25.134.192] Aug 2 05:51:03 mail.srvfarm.net postfix/smtps/smtpd[1403451]: warning: unknown[103.25.134.192]: SASL PLAIN authentication failed:	2020-08-02 15:35:17
103.25.134.147	attackbots	Jul 28 05:00:08 mail.srvfarm.net postfix/smtpd[2325907]: warning: unknown[103.25.134.147]: SASL PLAIN authentication failed: Jul 28 05:00:08 mail.srvfarm.net postfix/smtpd[2325907]: lost connection after AUTH from unknown[103.25.134.147] Jul 28 05:03:10 mail.srvfarm.net postfix/smtpd[2327642]: warning: unknown[103.25.134.147]: SASL PLAIN authentication failed: Jul 28 05:03:10 mail.srvfarm.net postfix/smtpd[2327642]: lost connection after AUTH from unknown[103.25.134.147] Jul 28 05:09:00 mail.srvfarm.net postfix/smtps/smtpd[2353295]: warning: unknown[103.25.134.147]: SASL PLAIN authentication failed:	2020-07-28 17:52:51
103.25.134.158	attack	SASL PLAIN auth failed: ruser=...	2020-07-17 07:14:53
103.25.134.173	attackbotsspam	Jul 16 05:36:19 mail.srvfarm.net postfix/smtpd[699495]: warning: unknown[103.25.134.173]: SASL PLAIN authentication failed: Jul 16 05:36:19 mail.srvfarm.net postfix/smtpd[699495]: lost connection after AUTH from unknown[103.25.134.173] Jul 16 05:42:10 mail.srvfarm.net postfix/smtpd[699401]: warning: unknown[103.25.134.173]: SASL PLAIN authentication failed: Jul 16 05:42:10 mail.srvfarm.net postfix/smtpd[699401]: lost connection after AUTH from unknown[103.25.134.173] Jul 16 05:45:27 mail.srvfarm.net postfix/smtps/smtpd[708455]: warning: unknown[103.25.134.173]: SASL PLAIN authentication failed:	2020-07-16 15:45:32
103.25.134.244	attackbotsspam	SASL PLAIN auth failed: ruser=...	2020-07-16 09:16:11
103.25.134.156	attackbots	$f2bV_matches	2020-07-15 10:33:31
103.25.134.21	attackbotsspam	2020-07-0714:31:21dovecot_plainauthenticatorfailedfor$[94.74.144.30]$[94.74.144.30]:42612:535Incorrectauthenticationdata$set_id=info$2020-07-0714:04:16dovecot_plainauthenticatorfailedfor$[37.239.111.82]$[37.239.111.82]:44658:535Incorrectauthenticationdata$set_id=info$2020-07-0714:13:37dovecot_plainauthenticatorfailedfor$[177.130.162.234]$[177.130.162.234]:53663:535Incorrectauthenticationdata$set_id=info$2020-07-0714:45:24dovecot_plainauthenticatorfailedfor$[91.222.58.28]$[91.222.58.28]:41038:535Incorrectauthenticationdata$set_id=info$2020-07-0714:24:39dovecot_plainauthenticatorfailedfor$[103.109.178.210]$[103.109.178.210]:40447:535Incorrectauthenticationdata$set_id=info$2020-07-0714:19:22dovecot_plainauthenticatorfailedfor$[91.231.246.232]$[91.231.246.232]:46394:535Incorrectauthenticationdata$set_id=info$2020-07-0714:45:00dovecot_plainauthenticatorfailedfor$[177.130.162.178]$[177.130.162.178]:54313:535Incorrectauthenticationdata$set_id=info$2020-07-0714:43:09dovecot_plainauthentica	2020-07-07 22:40:10
103.25.134.153	attack	SASL PLAIN auth failed: ruser=...	2020-06-26 08:15:41

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.25.134.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63176
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.25.134.245.			IN	A

;; AUTHORITY SECTION:
.			378	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060401 1800 900 604800 86400

;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jun 05 04:53:44 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 245.134.25.103.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 245.134.25.103.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
81.134.41.100	attackbots	Oct 9 22:46:24 webhost01 sshd[16117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.134.41.100 Oct 9 22:46:26 webhost01 sshd[16117]: Failed password for invalid user Computer@1 from 81.134.41.100 port 43188 ssh2 ...	2019-10-10 00:22:16
200.95.175.48	attack	Oct 9 16:29:32 vpn01 sshd[21388]: Failed password for root from 200.95.175.48 port 56470 ssh2 ...	2019-10-10 00:04:53
178.216.202.56	attack	Oct 9 05:23:33 eddieflores sshd\[32289\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cc.smarteducation.pl user=root Oct 9 05:23:35 eddieflores sshd\[32289\]: Failed password for root from 178.216.202.56 port 58262 ssh2 Oct 9 05:27:53 eddieflores sshd\[32620\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cc.smarteducation.pl user=root Oct 9 05:27:56 eddieflores sshd\[32620\]: Failed password for root from 178.216.202.56 port 47137 ssh2 Oct 9 05:32:16 eddieflores sshd\[844\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cc.smarteducation.pl user=root	2019-10-09 23:48:32
210.51.161.210	attack	Oct 9 19:09:31 server sshd\[21063\]: User root from 210.51.161.210 not allowed because listed in DenyUsers Oct 9 19:09:31 server sshd\[21063\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.51.161.210 user=root Oct 9 19:09:32 server sshd\[21063\]: Failed password for invalid user root from 210.51.161.210 port 45736 ssh2 Oct 9 19:13:39 server sshd\[16955\]: User root from 210.51.161.210 not allowed because listed in DenyUsers Oct 9 19:13:39 server sshd\[16955\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.51.161.210 user=root	2019-10-10 00:18:24
142.112.249.112	attack	Automatic report - Port Scan Attack	2019-10-10 00:27:26
62.234.206.12	attack	leo_www	2019-10-09 23:52:49
51.38.125.51	attack	Oct 9 17:43:46 SilenceServices sshd[25339]: Failed password for root from 51.38.125.51 port 33686 ssh2 Oct 9 17:47:40 SilenceServices sshd[26373]: Failed password for root from 51.38.125.51 port 44374 ssh2	2019-10-09 23:58:19
222.252.25.241	attackbotsspam	SSH Brute Force, server-1 sshd[18756]: Failed password for invalid user developer from 222.252.25.241 port 30420 ssh2	2019-10-10 00:18:06
198.108.66.100	attackbots	" "	2019-10-09 23:51:59
212.3.214.45	attack	$f2bV_matches	2019-10-09 23:47:37
46.38.144.17	attackbots	Oct 9 17:34:51 webserver postfix/smtpd\[25088\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 9 17:36:04 webserver postfix/smtpd\[25088\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 9 17:37:24 webserver postfix/smtpd\[25243\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 9 17:38:40 webserver postfix/smtpd\[25243\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 9 17:39:56 webserver postfix/smtpd\[25306\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-10-09 23:51:32
112.84.90.163	attackspam	Oct 9 14:34:13 elektron postfix/smtpd\[5347\]: NOQUEUE: reject: RCPT from unknown\[112.84.90.163\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[112.84.90.163\]\; from=\ to=\ proto=ESMTP helo=\ Oct 9 14:34:27 elektron postfix/smtpd\[5347\]: NOQUEUE: reject: RCPT from unknown\[112.84.90.163\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[112.84.90.163\]\; from=\ to=\ proto=ESMTP helo=\ Oct 9 14:35:11 elektron postfix/smtpd\[1324\]: NOQUEUE: reject: RCPT from unknown\[112.84.90.163\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[112.84.90.163\]\; from=\ to=\ proto=ESMTP helo=\	2019-10-10 00:07:55
114.4.208.6	attack	2019-10-09 06:34:06 H=(114-4-192-17.resources.indosat.com) [114.4.208.6]:44422 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/114.4.208.6) 2019-10-09 06:34:07 H=(114-4-192-17.resources.indosat.com) [114.4.208.6]:44422 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/114.4.208.6) 2019-10-09 06:34:07 H=(114-4-192-17.resources.indosat.com) [114.4.208.6]:44422 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/114.4.208.6) ...	2019-10-10 00:11:40
145.239.91.88	attackspam	Oct 9 17:36:58 eventyay sshd[372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.91.88 Oct 9 17:36:59 eventyay sshd[372]: Failed password for invalid user Abstract123 from 145.239.91.88 port 47564 ssh2 Oct 9 17:41:08 eventyay sshd[460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.91.88 ...	2019-10-09 23:54:36
121.46.129.158	attackbots	SMTP Fraud Orders	2019-10-10 00:10:13

Recently Reported IPs

186.151.122.156	213.184.104.91	30.77.141.155	211.55.92.147
197.1.108.228	49.213.182.7	45.226.72.5	147.76.148.13
184.93.77.214	34.92.120.142	18.203.123.243	129.46.53.214
61.167.243.174	70.105.180.103	73.63.89.183	129.94.147.166
41.16.7.199	241.139.245.13	194.166.147.237	160.28.169.109