City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.94.98.7
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11095
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;112.94.98.7. IN A
;; AUTHORITY SECTION:
. 107 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021301 1800 900 604800 86400
;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 14 06:40:28 CST 2022
;; MSG SIZE rcvd: 104Host 7.98.94.112.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 7.98.94.112.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 138.36.200.18 | attackbots | Sep 7 12:45:07 mail.srvfarm.net postfix/smtps/smtpd[1055413]: warning: unknown[138.36.200.18]: SASL PLAIN authentication failed: Sep 7 12:45:09 mail.srvfarm.net postfix/smtps/smtpd[1055413]: lost connection after AUTH from unknown[138.36.200.18] Sep 7 12:49:35 mail.srvfarm.net postfix/smtpd[1053370]: warning: unknown[138.36.200.18]: SASL PLAIN authentication failed: Sep 7 12:49:39 mail.srvfarm.net postfix/smtpd[1053370]: lost connection after AUTH from unknown[138.36.200.18] Sep 7 12:53:18 mail.srvfarm.net postfix/smtpd[1058607]: lost connection after AUTH from unknown[138.36.200.18] |
2020-09-12 02:10:14 |
| 185.124.186.41 | attackbots | Sep 7 12:24:10 mail.srvfarm.net postfix/smtpd[1053383]: warning: unknown[185.124.186.41]: SASL PLAIN authentication failed: Sep 7 12:24:10 mail.srvfarm.net postfix/smtpd[1053383]: lost connection after AUTH from unknown[185.124.186.41] Sep 7 12:29:00 mail.srvfarm.net postfix/smtps/smtpd[1055414]: warning: unknown[185.124.186.41]: SASL PLAIN authentication failed: Sep 7 12:29:00 mail.srvfarm.net postfix/smtps/smtpd[1055414]: lost connection after AUTH from unknown[185.124.186.41] Sep 7 12:31:35 mail.srvfarm.net postfix/smtps/smtpd[1055415]: warning: unknown[185.124.186.41]: SASL PLAIN authentication failed: |
2020-09-12 02:40:32 |
| 103.19.201.83 | attack | Sep 7 12:52:47 mail.srvfarm.net postfix/smtps/smtpd[1059471]: warning: unknown[103.19.201.83]: SASL PLAIN authentication failed: Sep 7 12:52:47 mail.srvfarm.net postfix/smtps/smtpd[1059471]: lost connection after AUTH from unknown[103.19.201.83] Sep 7 12:54:28 mail.srvfarm.net postfix/smtpd[1058623]: warning: unknown[103.19.201.83]: SASL PLAIN authentication failed: Sep 7 12:54:29 mail.srvfarm.net postfix/smtpd[1058623]: lost connection after AUTH from unknown[103.19.201.83] Sep 7 12:58:10 mail.srvfarm.net postfix/smtps/smtpd[1056884]: warning: unknown[103.19.201.83]: SASL PLAIN authentication failed: |
2020-09-12 02:11:18 |
| 114.67.254.244 | attack | Sep 11 12:04:31 Tower sshd[16244]: Connection from 114.67.254.244 port 59866 on 192.168.10.220 port 22 rdomain "" Sep 11 12:04:34 Tower sshd[16244]: Invalid user elastic from 114.67.254.244 port 59866 Sep 11 12:04:34 Tower sshd[16244]: error: Could not get shadow information for NOUSER Sep 11 12:04:34 Tower sshd[16244]: Failed password for invalid user elastic from 114.67.254.244 port 59866 ssh2 Sep 11 12:04:35 Tower sshd[16244]: Received disconnect from 114.67.254.244 port 59866:11: Bye Bye [preauth] Sep 11 12:04:35 Tower sshd[16244]: Disconnected from invalid user elastic 114.67.254.244 port 59866 [preauth] |
2020-09-12 02:31:20 |
| 103.18.242.23 | attack | Sep 8 10:14:26 mail.srvfarm.net postfix/smtps/smtpd[1700326]: warning: unknown[103.18.242.23]: SASL PLAIN authentication failed: Sep 8 10:14:26 mail.srvfarm.net postfix/smtps/smtpd[1700326]: lost connection after AUTH from unknown[103.18.242.23] Sep 8 10:19:14 mail.srvfarm.net postfix/smtps/smtpd[1716015]: warning: unknown[103.18.242.23]: SASL PLAIN authentication failed: Sep 8 10:19:15 mail.srvfarm.net postfix/smtps/smtpd[1716015]: lost connection after AUTH from unknown[103.18.242.23] Sep 8 10:19:25 mail.srvfarm.net postfix/smtps/smtpd[1700325]: warning: unknown[103.18.242.23]: SASL PLAIN authentication failed: |
2020-09-12 02:11:45 |
| 200.174.72.131 | attackbots | Sep 11 12:47:50 HPCompaq6200-Xubuntu sshd[1512384]: Invalid user admin from 200.174.72.131 port 51284 Sep 11 12:47:50 HPCompaq6200-Xubuntu sshd[1512384]: Connection closed by invalid user admin 200.174.72.131 port 51284 [preauth] Sep 11 12:47:50 HPCompaq6200-Xubuntu sshd[1512384]: Invalid user admin from 200.174.72.131 port 51284 Sep 11 12:47:50 HPCompaq6200-Xubuntu sshd[1512384]: Connection closed by invalid user admin 200.174.72.131 port 51284 [preauth] Sep 11 12:47:54 HPCompaq6200-Xubuntu sshd[1512390]: Connection closed by authenticating user root 200.174.72.131 port 51399 [preauth] ... |
2020-09-12 02:37:43 |
| 162.142.125.26 | attackspam | firewall-block, port(s): 21/tcp |
2020-09-12 02:22:00 |
| 74.120.14.50 | attack | Unauthorized connection attempt detected port 8080 |
2020-09-12 02:34:52 |
| 134.209.57.3 | attackbotsspam | 134.209.57.3 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 11 09:39:17 jbs1 sshd[27037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.171.133.10 user=root Sep 11 09:22:32 jbs1 sshd[21317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.57.3 user=root Sep 11 09:41:25 jbs1 sshd[27782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.1.207 user=root Sep 11 09:28:36 jbs1 sshd[23550]: Failed password for root from 51.255.35.41 port 33340 ssh2 Sep 11 09:39:19 jbs1 sshd[27037]: Failed password for root from 190.171.133.10 port 36338 ssh2 Sep 11 09:22:34 jbs1 sshd[21317]: Failed password for root from 134.209.57.3 port 35080 ssh2 IP Addresses Blocked: 190.171.133.10 (CL/Chile/-) |
2020-09-12 02:27:14 |
| 94.74.177.249 | attack | Sep 7 12:59:35 mail.srvfarm.net postfix/smtps/smtpd[1058560]: warning: unknown[94.74.177.249]: SASL PLAIN authentication failed: Sep 7 12:59:36 mail.srvfarm.net postfix/smtps/smtpd[1058560]: lost connection after AUTH from unknown[94.74.177.249] Sep 7 13:01:08 mail.srvfarm.net postfix/smtpd[1053370]: warning: unknown[94.74.177.249]: SASL PLAIN authentication failed: Sep 7 13:01:08 mail.srvfarm.net postfix/smtpd[1053370]: lost connection after AUTH from unknown[94.74.177.249] Sep 7 13:03:16 mail.srvfarm.net postfix/smtps/smtpd[1060330]: warning: unknown[94.74.177.249]: SASL PLAIN authentication failed: |
2020-09-12 02:12:59 |
| 176.111.114.152 | attackbotsspam | Sep 7 12:59:03 mail.srvfarm.net postfix/smtpd[1053369]: warning: unknown[176.111.114.152]: SASL PLAIN authentication failed: Sep 7 12:59:03 mail.srvfarm.net postfix/smtpd[1053369]: lost connection after AUTH from unknown[176.111.114.152] Sep 7 12:59:39 mail.srvfarm.net postfix/smtps/smtpd[1056821]: warning: unknown[176.111.114.152]: SASL PLAIN authentication failed: Sep 7 12:59:39 mail.srvfarm.net postfix/smtps/smtpd[1056821]: lost connection after AUTH from unknown[176.111.114.152] Sep 7 13:01:28 mail.srvfarm.net postfix/smtps/smtpd[1060865]: warning: unknown[176.111.114.152]: SASL PLAIN authentication failed: |
2020-09-12 02:09:13 |
| 45.224.161.251 | attackbots | Sep 7 12:57:08 mail.srvfarm.net postfix/smtps/smtpd[1056821]: warning: unknown[45.224.161.251]: SASL PLAIN authentication failed: Sep 7 12:57:09 mail.srvfarm.net postfix/smtps/smtpd[1056821]: lost connection after AUTH from unknown[45.224.161.251] Sep 7 13:00:12 mail.srvfarm.net postfix/smtps/smtpd[1056821]: warning: unknown[45.224.161.251]: SASL PLAIN authentication failed: Sep 7 13:00:13 mail.srvfarm.net postfix/smtps/smtpd[1056821]: lost connection after AUTH from unknown[45.224.161.251] Sep 7 13:00:37 mail.srvfarm.net postfix/smtps/smtpd[1056821]: warning: unknown[45.224.161.251]: SASL PLAIN authentication failed: |
2020-09-12 02:15:07 |
| 80.82.70.215 | attackspambots | Sep 8 20:03:32 web01.agentur-b-2.de postfix/smtps/smtpd[3237223]: warning: unknown[80.82.70.215]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 20:04:13 web01.agentur-b-2.de postfix/smtps/smtpd[3237223]: warning: unknown[80.82.70.215]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 20:05:48 web01.agentur-b-2.de postfix/smtps/smtpd[3237235]: warning: unknown[80.82.70.215]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 20:06:55 web01.agentur-b-2.de postfix/smtps/smtpd[3237223]: warning: unknown[80.82.70.215]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 20:07:34 web01.agentur-b-2.de postfix/smtps/smtpd[3237235]: warning: unknown[80.82.70.215]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-09-12 02:04:37 |
| 93.174.93.31 | attackbotsspam | Sep 8 19:53:47 web01.agentur-b-2.de postfix/smtps/smtpd[3222064]: warning: unknown[93.174.93.31]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 19:55:33 web01.agentur-b-2.de postfix/smtps/smtpd[3222064]: warning: unknown[93.174.93.31]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 19:55:42 web01.agentur-b-2.de postfix/smtps/smtpd[3222064]: warning: unknown[93.174.93.31]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 19:56:20 web01.agentur-b-2.de postfix/smtps/smtpd[3222064]: warning: unknown[93.174.93.31]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 19:58:13 web01.agentur-b-2.de postfix/smtps/smtpd[3223750]: warning: unknown[93.174.93.31]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-09-12 02:21:31 |
| 124.65.141.110 | attackspam |
|
2020-09-12 02:34:10 |