119.54.205.34 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Unicom Jilin Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Telnet Honeypot -> Telnet Bruteforce / Login	2020-09-12 22:34:09
attackbotsspam	Telnet Honeypot -> Telnet Bruteforce / Login	2020-09-12 14:37:05
attack	Telnet Honeypot -> Telnet Bruteforce / Login	2020-09-12 06:26:01

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.54.205.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2751
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;119.54.205.34.			IN	A

;; AUTHORITY SECTION:
.			372	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020091101 1800 900 604800 86400

;; Query time: 74 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Sep 12 06:25:58 CST 2020
;; MSG SIZE  rcvd: 117

Host info

34.205.54.119.in-addr.arpa domain name pointer 34.205.54.119.adsl-pool.jlccptt.net.cn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
34.205.54.119.in-addr.arpa	name = 34.205.54.119.adsl-pool.jlccptt.net.cn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
191.53.237.121	attack	failed_logins	2020-09-19 02:09:36
177.39.142.108	attack	Sep 17 23:03:33 mail.srvfarm.net postfix/smtps/smtpd[252848]: warning: unknown[177.39.142.108]: SASL PLAIN authentication failed: Sep 17 23:03:33 mail.srvfarm.net postfix/smtps/smtpd[252848]: lost connection after AUTH from unknown[177.39.142.108] Sep 17 23:08:16 mail.srvfarm.net postfix/smtps/smtpd[269415]: warning: unknown[177.39.142.108]: SASL PLAIN authentication failed: Sep 17 23:08:17 mail.srvfarm.net postfix/smtps/smtpd[269415]: lost connection after AUTH from unknown[177.39.142.108] Sep 17 23:08:34 mail.srvfarm.net postfix/smtps/smtpd[254688]: warning: unknown[177.39.142.108]: SASL PLAIN authentication failed:	2020-09-19 02:11:30
186.216.154.248	attack	Sep 17 18:35:49 mail.srvfarm.net postfix/smtpd[143208]: warning: unknown[186.216.154.248]: SASL PLAIN authentication failed: Sep 17 18:35:50 mail.srvfarm.net postfix/smtpd[143208]: lost connection after AUTH from unknown[186.216.154.248] Sep 17 18:36:09 mail.srvfarm.net postfix/smtps/smtpd[157126]: warning: unknown[186.216.154.248]: SASL PLAIN authentication failed: Sep 17 18:36:10 mail.srvfarm.net postfix/smtps/smtpd[157126]: lost connection after AUTH from unknown[186.216.154.248] Sep 17 18:36:42 mail.srvfarm.net postfix/smtps/smtpd[157125]: warning: unknown[186.216.154.248]: SASL PLAIN authentication failed:	2020-09-19 02:00:03
129.226.138.179	attackbots	Sep 18 17:38:06 nextcloud sshd\[23610\]: Invalid user shiori from 129.226.138.179 Sep 18 17:38:06 nextcloud sshd\[23610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.138.179 Sep 18 17:38:08 nextcloud sshd\[23610\]: Failed password for invalid user shiori from 129.226.138.179 port 33876 ssh2	2020-09-19 02:21:28
177.87.221.253	attackbotsspam	Sep 18 06:52:01 mail.srvfarm.net postfix/smtps/smtpd[591813]: warning: unknown[177.87.221.253]: SASL PLAIN authentication failed: Sep 18 06:52:01 mail.srvfarm.net postfix/smtps/smtpd[591813]: lost connection after AUTH from unknown[177.87.221.253] Sep 18 06:55:30 mail.srvfarm.net postfix/smtpd[593531]: warning: unknown[177.87.221.253]: SASL PLAIN authentication failed: Sep 18 06:55:31 mail.srvfarm.net postfix/smtpd[593531]: lost connection after AUTH from unknown[177.87.221.253] Sep 18 07:00:21 mail.srvfarm.net postfix/smtps/smtpd[591277]: warning: unknown[177.87.221.253]: SASL PLAIN authentication failed:	2020-09-19 02:02:18
45.142.120.121	attackbots	Sep 18 19:09:26 mail.srvfarm.net postfix/smtpd[865157]: warning: unknown[45.142.120.121]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 18 19:09:34 mail.srvfarm.net postfix/smtpd[869290]: warning: unknown[45.142.120.121]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 18 19:09:37 mail.srvfarm.net postfix/smtpd[869292]: warning: unknown[45.142.120.121]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 18 19:09:43 mail.srvfarm.net postfix/smtpd[865157]: warning: unknown[45.142.120.121]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 18 19:09:47 mail.srvfarm.net postfix/smtpd[869297]: warning: unknown[45.142.120.121]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-09-19 02:18:12
172.82.230.4	attackbots	Sep 18 19:22:24 mail.srvfarm.net postfix/smtpd[869294]: lost connection after STARTTLS from r4.news.eu.rvca.com[172.82.230.4] Sep 18 19:24:08 mail.srvfarm.net postfix/smtpd[869217]: lost connection after STARTTLS from r4.news.eu.rvca.com[172.82.230.4] Sep 18 19:24:46 mail.srvfarm.net postfix/smtpd[869290]: lost connection after STARTTLS from r4.news.eu.rvca.com[172.82.230.4] Sep 18 19:28:15 mail.srvfarm.net postfix/smtpd[882426]: lost connection after STARTTLS from r4.news.eu.rvca.com[172.82.230.4] Sep 18 19:30:08 mail.srvfarm.net postfix/smtpd[869297]: lost connection after STARTTLS from r4.news.eu.rvca.com[172.82.230.4]	2020-09-19 02:12:53
88.199.127.162	attackbots	Sep 17 20:22:34 mail.srvfarm.net postfix/smtpd[188380]: warning: 88-199-127-162.tktelekom.pl[88.199.127.162]: SASL PLAIN authentication failed: Sep 17 20:22:34 mail.srvfarm.net postfix/smtpd[188380]: lost connection after AUTH from 88-199-127-162.tktelekom.pl[88.199.127.162] Sep 17 20:23:54 mail.srvfarm.net postfix/smtpd[188380]: warning: 88-199-127-162.tktelekom.pl[88.199.127.162]: SASL PLAIN authentication failed: Sep 17 20:23:54 mail.srvfarm.net postfix/smtpd[188380]: lost connection after AUTH from 88-199-127-162.tktelekom.pl[88.199.127.162] Sep 17 20:26:04 mail.srvfarm.net postfix/smtpd[201394]: warning: 88-199-127-162.tktelekom.pl[88.199.127.162]: SASL PLAIN authentication failed:	2020-09-19 02:15:21
103.19.201.125	attackspam	Sep 17 18:32:50 mail.srvfarm.net postfix/smtpd[156674]: warning: unknown[103.19.201.125]: SASL PLAIN authentication failed: Sep 17 18:32:50 mail.srvfarm.net postfix/smtpd[156674]: lost connection after AUTH from unknown[103.19.201.125] Sep 17 18:36:25 mail.srvfarm.net postfix/smtpd[161687]: warning: unknown[103.19.201.125]: SASL PLAIN authentication failed: Sep 17 18:36:25 mail.srvfarm.net postfix/smtpd[161687]: lost connection after AUTH from unknown[103.19.201.125] Sep 17 18:39:51 mail.srvfarm.net postfix/smtpd[157369]: warning: unknown[103.19.201.125]: SASL PLAIN authentication failed:	2020-09-19 02:05:15
148.203.151.248	attackbots	Sep 18 16:02:27 mail.srvfarm.net postfix/smtpd[819719]: NOQUEUE: reject: RCPT from mailrelay5.vw.com.mx[148.203.151.248]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Sep 18 16:02:27 mail.srvfarm.net postfix/smtpd[806927]: NOQUEUE: reject: RCPT from mailrelay5.vw.com.mx[148.203.151.248]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Sep 18 16:02:28 mail.srvfarm.net postfix/smtpd[819719]: NOQUEUE: reject: RCPT from mailrelay5.vw.com.mx[148.203.151.248]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Sep 18 16:02:28 mail.srvfarm.net postfix/smtpd[806927]: NOQUEUE	2020-09-19 01:51:39
187.87.8.97	attackspambots	Sep 18 01:59:44 mail.srvfarm.net postfix/smtps/smtpd[477183]: warning: unknown[187.87.8.97]: SASL PLAIN authentication failed: Sep 18 01:59:47 mail.srvfarm.net postfix/smtps/smtpd[477183]: lost connection after AUTH from unknown[187.87.8.97] Sep 18 02:08:36 mail.srvfarm.net postfix/smtpd[492944]: warning: unknown[187.87.8.97]: SASL PLAIN authentication failed: Sep 18 02:08:37 mail.srvfarm.net postfix/smtpd[492944]: lost connection after AUTH from unknown[187.87.8.97] Sep 18 02:09:07 mail.srvfarm.net postfix/smtps/smtpd[477707]: warning: 187-87-8-97.provedorm4net.com.br[187.87.8.97]: SASL PLAIN authentication failed:	2020-09-19 02:10:25
120.71.146.217	attack	Sep 18 14:28:43 santamaria sshd\[13620\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.71.146.217 user=root Sep 18 14:28:45 santamaria sshd\[13620\]: Failed password for root from 120.71.146.217 port 58204 ssh2 Sep 18 14:30:10 santamaria sshd\[13642\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.71.146.217 user=root ...	2020-09-19 02:22:43
78.128.113.120	attackspam	Sep 18 19:57:55 relay postfix/smtpd\[24282\]: warning: unknown\[78.128.113.120\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 18 19:58:14 relay postfix/smtpd\[25259\]: warning: unknown\[78.128.113.120\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 18 20:01:28 relay postfix/smtpd\[24282\]: warning: unknown\[78.128.113.120\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 18 20:01:46 relay postfix/smtpd\[25289\]: warning: unknown\[78.128.113.120\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 18 20:02:16 relay postfix/smtpd\[25236\]: warning: unknown\[78.128.113.120\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-09-19 02:08:10
187.109.34.205	attackbots	Sep 17 19:26:54 mail.srvfarm.net postfix/smtpd[178660]: warning: unknown[187.109.34.205]: SASL PLAIN authentication failed: Sep 17 19:26:54 mail.srvfarm.net postfix/smtpd[178660]: lost connection after AUTH from unknown[187.109.34.205] Sep 17 19:29:10 mail.srvfarm.net postfix/smtps/smtpd[181882]: warning: unknown[187.109.34.205]: SASL PLAIN authentication failed: Sep 17 19:29:11 mail.srvfarm.net postfix/smtps/smtpd[181882]: lost connection after AUTH from unknown[187.109.34.205] Sep 17 19:34:02 mail.srvfarm.net postfix/smtpd[179835]: warning: unknown[187.109.34.205]: SASL PLAIN authentication failed:	2020-09-19 02:09:58
172.82.239.23	attack	Sep 18 15:28:53 mail.srvfarm.net postfix/smtpd[800082]: lost connection after STARTTLS from r23.news.eu.rvca.com[172.82.239.23] Sep 18 15:30:02 mail.srvfarm.net postfix/smtpd[800082]: lost connection after STARTTLS from r23.news.eu.rvca.com[172.82.239.23] Sep 18 15:33:07 mail.srvfarm.net postfix/smtpd[800075]: lost connection after STARTTLS from r23.news.eu.rvca.com[172.82.239.23] Sep 18 15:33:24 mail.srvfarm.net postfix/smtpd[800082]: lost connection after STARTTLS from r23.news.eu.rvca.com[172.82.239.23] Sep 18 15:36:11 mail.srvfarm.net postfix/smtpd[800077]: lost connection after STARTTLS from r23.news.eu.rvca.com[172.82.239.23]	2020-09-19 02:11:44

Recently Reported IPs

144.51.157.15	167.74.111.227	178.128.212.200	94.10.116.77
241.24.199.165	227.59.192.58	68.151.11.176	44.36.106.121
155.14.115.125	33.0.185.199	186.198.15.222	204.184.160.4
8.132.115.176	20.19.79.178	91.37.97.200	154.54.249.16
42.191.184.110	95.76.17.169	116.75.107.232	103.76.191.93