City: Shenzhen
Region: Guangdong
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.52.37.234
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13877
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;120.52.37.234. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019071401 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 15 11:14:28 CST 2019
;; MSG SIZE rcvd: 117Host 234.37.52.120.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 67.207.67.3, trying next server
Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 234.37.52.120.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 193.148.70.216 | attackbotsspam | Banned for a week because repeated abuses, for example SSH, but not only |
2020-08-12 14:50:45 |
| 52.147.11.240 | attack | Aug 12 05:32:29 mail.srvfarm.net postfix/smtps/smtpd[2866826]: warning: unknown[52.147.11.240]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 05:34:49 mail.srvfarm.net postfix/smtps/smtpd[2866825]: warning: unknown[52.147.11.240]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 05:37:09 mail.srvfarm.net postfix/smtps/smtpd[2866827]: warning: unknown[52.147.11.240]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 05:39:30 mail.srvfarm.net postfix/smtps/smtpd[2866647]: warning: unknown[52.147.11.240]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 05:41:52 mail.srvfarm.net postfix/smtps/smtpd[2871652]: warning: unknown[52.147.11.240]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-08-12 14:31:54 |
| 218.92.0.248 | attack | Aug 12 06:49:52 rush sshd[28262]: Failed password for root from 218.92.0.248 port 15927 ssh2 Aug 12 06:50:06 rush sshd[28262]: error: maximum authentication attempts exceeded for root from 218.92.0.248 port 15927 ssh2 [preauth] Aug 12 06:50:14 rush sshd[28268]: Failed password for root from 218.92.0.248 port 49009 ssh2 ... |
2020-08-12 14:57:18 |
| 139.59.174.107 | attack | 139.59.174.107 - - [12/Aug/2020:05:24:05 +0100] "POST /wp-login.php HTTP/1.1" 200 1971 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.174.107 - - [12/Aug/2020:05:24:06 +0100] "POST /wp-login.php HTTP/1.1" 200 1967 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.174.107 - - [12/Aug/2020:05:24:06 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-12 14:51:09 |
| 2002:b9ea:d842::b9ea:d842 | attackspambots | Aug 12 05:40:47 web01.agentur-b-2.de postfix/smtpd[1176310]: warning: unknown[2002:b9ea:d842::b9ea:d842]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 05:40:47 web01.agentur-b-2.de postfix/smtpd[1176310]: lost connection after AUTH from unknown[2002:b9ea:d842::b9ea:d842] Aug 12 05:44:43 web01.agentur-b-2.de postfix/smtpd[1171802]: warning: unknown[2002:b9ea:d842::b9ea:d842]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 05:44:43 web01.agentur-b-2.de postfix/smtpd[1171802]: lost connection after AUTH from unknown[2002:b9ea:d842::b9ea:d842] Aug 12 05:49:07 web01.agentur-b-2.de postfix/smtpd[1171802]: warning: unknown[2002:b9ea:d842::b9ea:d842]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 05:49:07 web01.agentur-b-2.de postfix/smtpd[1171802]: lost connection after AUTH from unknown[2002:b9ea:d842::b9ea:d842] |
2020-08-12 15:01:10 |
| 75.44.16.251 | attackbots | Aug 12 02:41:48 r.ca sshd[26915]: Failed password for root from 75.44.16.251 port 60002 ssh2 |
2020-08-12 15:08:05 |
| 185.234.216.64 | attack | Aug 12 05:09:13 web01.agentur-b-2.de postfix/smtpd[1170065]: warning: unknown[185.234.216.64]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 05:09:13 web01.agentur-b-2.de postfix/smtpd[1170065]: lost connection after AUTH from unknown[185.234.216.64] Aug 12 05:13:12 web01.agentur-b-2.de postfix/smtpd[1171801]: warning: unknown[185.234.216.64]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 05:13:12 web01.agentur-b-2.de postfix/smtpd[1171801]: lost connection after AUTH from unknown[185.234.216.64] Aug 12 05:17:33 web01.agentur-b-2.de postfix/smtpd[1172475]: warning: unknown[185.234.216.64]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-08-12 14:40:41 |
| 49.235.91.59 | attack | Aug 12 07:01:28 [host] sshd[6295]: pam_unix(sshd:a Aug 12 07:01:30 [host] sshd[6295]: Failed password Aug 12 07:06:04 [host] sshd[6453]: pam_unix(sshd:a |
2020-08-12 15:05:59 |
| 191.53.193.130 | attackbots | Aug 12 05:04:50 mail.srvfarm.net postfix/smtpd[2866059]: warning: unknown[191.53.193.130]: SASL PLAIN authentication failed: Aug 12 05:04:51 mail.srvfarm.net postfix/smtpd[2866059]: lost connection after AUTH from unknown[191.53.193.130] Aug 12 05:06:42 mail.srvfarm.net postfix/smtps/smtpd[2853844]: warning: unknown[191.53.193.130]: SASL PLAIN authentication failed: Aug 12 05:06:42 mail.srvfarm.net postfix/smtps/smtpd[2853844]: lost connection after AUTH from unknown[191.53.193.130] Aug 12 05:09:08 mail.srvfarm.net postfix/smtps/smtpd[2853878]: warning: unknown[191.53.193.130]: SASL PLAIN authentication failed: |
2020-08-12 14:36:47 |
| 106.52.64.125 | attackbotsspam | Aug 11 20:46:01 wbs sshd\[31270\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.64.125 user=root Aug 11 20:46:03 wbs sshd\[31270\]: Failed password for root from 106.52.64.125 port 46014 ssh2 Aug 11 20:52:00 wbs sshd\[31674\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.64.125 user=root Aug 11 20:52:01 wbs sshd\[31674\]: Failed password for root from 106.52.64.125 port 59712 ssh2 Aug 11 20:56:00 wbs sshd\[31959\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.64.125 user=root |
2020-08-12 15:10:17 |
| 139.59.32.156 | attackbotsspam | Aug 12 05:58:59 game-panel sshd[24115]: Failed password for root from 139.59.32.156 port 49294 ssh2 Aug 12 06:03:35 game-panel sshd[24265]: Failed password for root from 139.59.32.156 port 59006 ssh2 |
2020-08-12 14:54:39 |
| 2002:b9ea:d83f::b9ea:d83f | attackbotsspam | Aug 12 05:21:10 web01.agentur-b-2.de postfix/smtpd[1171199]: warning: unknown[2002:b9ea:d83f::b9ea:d83f]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 05:21:10 web01.agentur-b-2.de postfix/smtpd[1171199]: lost connection after AUTH from unknown[2002:b9ea:d83f::b9ea:d83f] Aug 12 05:23:52 web01.agentur-b-2.de postfix/smtpd[1173881]: warning: unknown[2002:b9ea:d83f::b9ea:d83f]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 05:23:52 web01.agentur-b-2.de postfix/smtpd[1173881]: lost connection after AUTH from unknown[2002:b9ea:d83f::b9ea:d83f] Aug 12 05:26:46 web01.agentur-b-2.de postfix/smtpd[1173912]: warning: unknown[2002:b9ea:d83f::b9ea:d83f]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-08-12 15:01:58 |
| 197.135.170.121 | attackspam | Aug 12 08:42:46 serwer sshd\[1139\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.135.170.121 user=root Aug 12 08:42:49 serwer sshd\[1139\]: Failed password for root from 197.135.170.121 port 22718 ssh2 Aug 12 08:48:03 serwer sshd\[1649\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.135.170.121 user=root ... |
2020-08-12 14:51:54 |
| 128.199.204.26 | attack | Aug 12 09:00:47 ip106 sshd[8397]: Failed password for root from 128.199.204.26 port 47324 ssh2 ... |
2020-08-12 15:15:26 |
| 91.150.172.115 | attackspam | Aug 12 04:59:19 mail.srvfarm.net postfix/smtps/smtpd[2853845]: warning: unknown[91.150.172.115]: SASL PLAIN authentication failed: Aug 12 04:59:19 mail.srvfarm.net postfix/smtps/smtpd[2853845]: lost connection after AUTH from unknown[91.150.172.115] Aug 12 05:04:55 mail.srvfarm.net postfix/smtpd[2866061]: warning: unknown[91.150.172.115]: SASL PLAIN authentication failed: Aug 12 05:04:55 mail.srvfarm.net postfix/smtpd[2866061]: lost connection after AUTH from unknown[91.150.172.115] Aug 12 05:06:48 mail.srvfarm.net postfix/smtpd[2849286]: warning: unknown[91.150.172.115]: SASL PLAIN authentication failed: |
2020-08-12 14:45:52 |