City: unknown
Region: unknown
Country: Republic of China (ROC)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.42.164.220
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62129
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.42.164.220. IN A
;; AUTHORITY SECTION:
. 305 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019101300 1800 900 604800 86400
;; Query time: 299 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 13 15:09:24 CST 2019
;; MSG SIZE rcvd: 118220.164.42.114.in-addr.arpa domain name pointer 114-42-164-220.dynamic-ip.hinet.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
220.164.42.114.in-addr.arpa name = 114-42-164-220.dynamic-ip.hinet.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.142.120.183 | attackbotsspam | Sep 9 03:50:32 nlmail01.srvfarm.net postfix/smtpd[3552667]: warning: unknown[45.142.120.183]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 9 03:51:11 nlmail01.srvfarm.net postfix/smtpd[3552667]: warning: unknown[45.142.120.183]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 9 03:51:49 nlmail01.srvfarm.net postfix/smtpd[3552667]: warning: unknown[45.142.120.183]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 9 03:52:29 nlmail01.srvfarm.net postfix/smtpd[3552667]: warning: unknown[45.142.120.183]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 9 03:53:07 nlmail01.srvfarm.net postfix/smtpd[3552667]: warning: unknown[45.142.120.183]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-09-12 02:16:18 |
| 177.200.64.90 | attackbots | Sep 8 01:21:21 mail.srvfarm.net postfix/smtpd[1484470]: warning: 177-200-64-90.static.skysever.com.br[177.200.64.90]: SASL PLAIN authentication failed: Sep 8 01:21:22 mail.srvfarm.net postfix/smtpd[1484470]: lost connection after AUTH from 177-200-64-90.static.skysever.com.br[177.200.64.90] Sep 8 01:21:47 mail.srvfarm.net postfix/smtps/smtpd[1499177]: warning: 177-200-64-90.static.skysever.com.br[177.200.64.90]: SASL PLAIN authentication failed: Sep 8 01:21:47 mail.srvfarm.net postfix/smtps/smtpd[1499177]: lost connection after AUTH from 177-200-64-90.static.skysever.com.br[177.200.64.90] Sep 8 01:22:06 mail.srvfarm.net postfix/smtps/smtpd[1499177]: warning: 177-200-64-90.static.skysever.com.br[177.200.64.90]: SASL PLAIN authentication failed: |
2020-09-12 02:44:20 |
| 77.88.5.218 | attack | port scan and connect, tcp 80 (http) |
2020-09-12 02:24:56 |
| 177.10.22.126 | attackspam | Sep 10 02:35:48 mail.srvfarm.net postfix/smtps/smtpd[2854037]: warning: unknown[177.10.22.126]: SASL PLAIN authentication failed: Sep 10 02:35:49 mail.srvfarm.net postfix/smtps/smtpd[2854037]: lost connection after AUTH from unknown[177.10.22.126] Sep 10 02:37:03 mail.srvfarm.net postfix/smtps/smtpd[2854037]: warning: unknown[177.10.22.126]: SASL PLAIN authentication failed: Sep 10 02:37:04 mail.srvfarm.net postfix/smtps/smtpd[2854037]: lost connection after AUTH from unknown[177.10.22.126] Sep 10 02:45:27 mail.srvfarm.net postfix/smtpd[2859616]: warning: unknown[177.10.22.126]: SASL PLAIN authentication failed: |
2020-09-12 02:41:38 |
| 45.224.161.251 | attackbots | Sep 7 12:57:08 mail.srvfarm.net postfix/smtps/smtpd[1056821]: warning: unknown[45.224.161.251]: SASL PLAIN authentication failed: Sep 7 12:57:09 mail.srvfarm.net postfix/smtps/smtpd[1056821]: lost connection after AUTH from unknown[45.224.161.251] Sep 7 13:00:12 mail.srvfarm.net postfix/smtps/smtpd[1056821]: warning: unknown[45.224.161.251]: SASL PLAIN authentication failed: Sep 7 13:00:13 mail.srvfarm.net postfix/smtps/smtpd[1056821]: lost connection after AUTH from unknown[45.224.161.251] Sep 7 13:00:37 mail.srvfarm.net postfix/smtps/smtpd[1056821]: warning: unknown[45.224.161.251]: SASL PLAIN authentication failed: |
2020-09-12 02:15:07 |
| 209.85.208.65 | attackspam | Trying to spoof execs |
2020-09-12 02:39:17 |
| 91.235.0.104 | attackbotsspam | Sep 8 20:37:36 mail.srvfarm.net postfix/smtps/smtpd[1957217]: warning: 91-235-0-104.static.ip.netia.com.pl[91.235.0.104]: SASL PLAIN authentication failed: Sep 8 20:37:36 mail.srvfarm.net postfix/smtps/smtpd[1957217]: lost connection after AUTH from 91-235-0-104.static.ip.netia.com.pl[91.235.0.104] Sep 8 20:38:13 mail.srvfarm.net postfix/smtpd[1954569]: warning: 91-235-0-104.static.ip.netia.com.pl[91.235.0.104]: SASL PLAIN authentication failed: Sep 8 20:38:13 mail.srvfarm.net postfix/smtpd[1954569]: lost connection after AUTH from 91-235-0-104.static.ip.netia.com.pl[91.235.0.104] Sep 8 20:43:50 mail.srvfarm.net postfix/smtpd[1954281]: warning: 91-235-0-104.static.ip.netia.com.pl[91.235.0.104]: SASL PLAIN authentication failed: |
2020-09-12 02:13:26 |
| 111.75.149.221 | attackbots | 111.75.149.221 is unauthorized and has been banned by fail2ban |
2020-09-12 02:10:55 |
| 89.203.137.38 | attackspam | Sep 8 04:50:04 mail.srvfarm.net postfix/smtps/smtpd[1580696]: warning: unknown[89.203.137.38]: SASL PLAIN authentication failed: Sep 8 04:50:04 mail.srvfarm.net postfix/smtps/smtpd[1580696]: lost connection after AUTH from unknown[89.203.137.38] Sep 8 04:50:51 mail.srvfarm.net postfix/smtps/smtpd[1582317]: warning: unknown[89.203.137.38]: SASL PLAIN authentication failed: Sep 8 04:50:51 mail.srvfarm.net postfix/smtps/smtpd[1582317]: lost connection after AUTH from unknown[89.203.137.38] Sep 8 04:54:07 mail.srvfarm.net postfix/smtps/smtpd[1582460]: warning: unknown[89.203.137.38]: SASL PLAIN authentication failed: |
2020-09-12 02:14:20 |
| 190.108.45.196 | attack | Sep 7 12:09:15 mail.srvfarm.net postfix/smtps/smtpd[1033778]: warning: unknown[190.108.45.196]: SASL PLAIN authentication failed: Sep 7 12:09:16 mail.srvfarm.net postfix/smtps/smtpd[1033778]: lost connection after AUTH from unknown[190.108.45.196] Sep 7 12:17:11 mail.srvfarm.net postfix/smtps/smtpd[1050813]: warning: unknown[190.108.45.196]: SASL PLAIN authentication failed: Sep 7 12:17:12 mail.srvfarm.net postfix/smtps/smtpd[1050813]: lost connection after AUTH from unknown[190.108.45.196] Sep 7 12:17:23 mail.srvfarm.net postfix/smtps/smtpd[1051109]: warning: unknown[190.108.45.196]: SASL PLAIN authentication failed: |
2020-09-12 02:43:17 |
| 192.34.57.113 | attackbotsspam | Sep 11 18:02:55 sshgateway sshd\[20903\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=doctorsfundinggroup.com user=root Sep 11 18:02:57 sshgateway sshd\[20903\]: Failed password for root from 192.34.57.113 port 53602 ssh2 Sep 11 18:12:25 sshgateway sshd\[22098\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=doctorsfundinggroup.com user=root |
2020-09-12 02:32:41 |
| 77.57.204.34 | attackspam | Sep 11 19:14:11 sshgateway sshd\[30018\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77-57-204-34.dclient.hispeed.ch user=root Sep 11 19:14:13 sshgateway sshd\[30018\]: Failed password for root from 77.57.204.34 port 39335 ssh2 Sep 11 19:17:09 sshgateway sshd\[30382\]: Invalid user diane from 77.57.204.34 Sep 11 19:17:09 sshgateway sshd\[30382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77-57-204-34.dclient.hispeed.ch |
2020-09-12 02:25:48 |
| 45.142.120.36 | attack | Sep 9 03:55:39 websrv1.derweidener.de postfix/smtpd[3037237]: warning: unknown[45.142.120.36]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 9 03:56:18 websrv1.derweidener.de postfix/smtpd[3037237]: warning: unknown[45.142.120.36]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 9 03:56:57 websrv1.derweidener.de postfix/smtpd[3036532]: warning: unknown[45.142.120.36]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 9 03:57:35 websrv1.derweidener.de postfix/smtpd[3037237]: warning: unknown[45.142.120.36]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 9 03:58:13 websrv1.derweidener.de postfix/smtpd[3037237]: warning: unknown[45.142.120.36]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-09-12 02:18:24 |
| 118.126.97.243 | attack |
|
2020-09-12 02:44:36 |
| 200.174.72.131 | attackbots | Sep 11 12:47:50 HPCompaq6200-Xubuntu sshd[1512384]: Invalid user admin from 200.174.72.131 port 51284 Sep 11 12:47:50 HPCompaq6200-Xubuntu sshd[1512384]: Connection closed by invalid user admin 200.174.72.131 port 51284 [preauth] Sep 11 12:47:50 HPCompaq6200-Xubuntu sshd[1512384]: Invalid user admin from 200.174.72.131 port 51284 Sep 11 12:47:50 HPCompaq6200-Xubuntu sshd[1512384]: Connection closed by invalid user admin 200.174.72.131 port 51284 [preauth] Sep 11 12:47:54 HPCompaq6200-Xubuntu sshd[1512390]: Connection closed by authenticating user root 200.174.72.131 port 51399 [preauth] ... |
2020-09-12 02:37:43 |