City: Frankfurt am Main
Region: Hessen
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 134.122.73.64 | attack | Sep 19 16:16:27 mail.srvfarm.net postfix/smtpd[1505471]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 19 16:16:27 mail.srvfarm.net postfix/smtpd[1505471]: lost connection after AUTH from unknown[134.122.73.64] Sep 19 16:16:48 mail.srvfarm.net postfix/smtpd[1490388]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 19 16:16:48 mail.srvfarm.net postfix/smtpd[1490388]: lost connection after AUTH from unknown[134.122.73.64] Sep 19 16:17:57 mail.srvfarm.net postfix/smtpd[1490388]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 19 16:17:57 mail.srvfarm.net postfix/smtpd[1490388]: lost connection after AUTH from unknown[134.122.73.64] |
2020-09-20 00:59:38 |
| 134.122.73.64 | attack | Sep 19 09:48:20 mail.srvfarm.net postfix/smtpd[1352725]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 19 09:48:20 mail.srvfarm.net postfix/smtpd[1352725]: lost connection after AUTH from unknown[134.122.73.64] Sep 19 09:49:23 mail.srvfarm.net postfix/smtpd[1350470]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 19 09:49:23 mail.srvfarm.net postfix/smtpd[1350470]: lost connection after AUTH from unknown[134.122.73.64] Sep 19 09:52:28 mail.srvfarm.net postfix/smtpd[1352190]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-09-19 16:47:47 |
| 134.122.73.64 | attack | Sep 16 18:38:40 srv1 postfix/smtpd[22138]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: authentication failure Sep 16 18:40:43 srv1 postfix/smtpd[23094]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: authentication failure Sep 16 18:42:49 srv1 postfix/smtpd[23094]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: authentication failure Sep 16 18:47:59 srv1 postfix/smtpd[23478]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: authentication failure Sep 16 19:05:59 srv1 postfix/smtpd[28783]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: authentication failure ... |
2020-09-17 01:49:54 |
| 134.122.73.64 | attackbotsspam | Sep 16 10:35:13 mail.srvfarm.net postfix/smtpd[3376000]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 16 10:35:13 mail.srvfarm.net postfix/smtpd[3376000]: lost connection after AUTH from unknown[134.122.73.64] Sep 16 10:35:35 mail.srvfarm.net postfix/smtpd[3375987]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 16 10:35:35 mail.srvfarm.net postfix/smtpd[3375987]: lost connection after AUTH from unknown[134.122.73.64] Sep 16 10:36:43 mail.srvfarm.net postfix/smtpd[3379743]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 16 10:36:43 mail.srvfarm.net postfix/smtpd[3379743]: lost connection after AUTH from unknown[134.122.73.64] |
2020-09-16 18:06:31 |
| 134.122.73.25 | attack | (sshd) Failed SSH login from 134.122.73.25 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 8 06:56:42 s1 sshd[15232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.73.25 user=root Jun 8 06:56:44 s1 sshd[15232]: Failed password for root from 134.122.73.25 port 38922 ssh2 Jun 8 07:09:25 s1 sshd[15573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.73.25 user=root Jun 8 07:09:27 s1 sshd[15573]: Failed password for root from 134.122.73.25 port 58482 ssh2 Jun 8 07:12:35 s1 sshd[15674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.73.25 user=root |
2020-06-08 14:16:00 |
| 134.122.73.25 | attack | May 24 22:10:46 localhost sshd[3194747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.73.25 user=root May 24 22:10:48 localhost sshd[3194747]: Failed password for root from 134.122.73.25 port 32898 ssh2 ... |
2020-05-25 00:57:10 |
| 134.122.73.25 | attackspam | $f2bV_matches |
2020-05-15 21:09:16 |
| 134.122.73.25 | attackspam | SSH Invalid Login |
2020-05-14 05:45:53 |
| 134.122.73.25 | attack | May 5 20:57:44 pixelmemory sshd[718377]: Failed password for invalid user karma from 134.122.73.25 port 54374 ssh2 May 5 21:09:36 pixelmemory sshd[720524]: Invalid user gitblit from 134.122.73.25 port 45956 May 5 21:09:36 pixelmemory sshd[720524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.73.25 May 5 21:09:36 pixelmemory sshd[720524]: Invalid user gitblit from 134.122.73.25 port 45956 May 5 21:09:38 pixelmemory sshd[720524]: Failed password for invalid user gitblit from 134.122.73.25 port 45956 ssh2 ... |
2020-05-06 16:36:49 |
| 134.122.73.25 | attack | May 5 18:42:27 localhost sshd\[27919\]: Invalid user kenneth from 134.122.73.25 May 5 18:42:27 localhost sshd\[27919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.73.25 May 5 18:42:29 localhost sshd\[27919\]: Failed password for invalid user kenneth from 134.122.73.25 port 42266 ssh2 May 5 18:48:25 localhost sshd\[28252\]: Invalid user admin from 134.122.73.25 May 5 18:48:25 localhost sshd\[28252\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.73.25 ... |
2020-05-06 01:02:40 |
| 134.122.73.4 | attackspambots | Lines containing failures of 134.122.73.4 Apr 29 07:40:38 box sshd[12990]: Did not receive identification string from 134.122.73.4 port 44256 Apr 29 07:41:56 box sshd[12991]: Did not receive identification string from 134.122.73.4 port 46478 Apr 29 07:42:42 box sshd[12994]: Invalid user ftpuser from 134.122.73.4 port 33056 Apr 29 07:42:42 box sshd[12994]: Received disconnect from 134.122.73.4 port 33056:11: Normal Shutdown, Thank you for playing [preauth] Apr 29 07:42:42 box sshd[12994]: Disconnected from invalid user ftpuser 134.122.73.4 port 33056 [preauth] Apr 29 07:43:25 box sshd[13007]: Invalid user ghostname from 134.122.73.4 port 47626 Apr 29 07:43:25 box sshd[13007]: Received disconnect from 134.122.73.4 port 47626:11: Normal Shutdown, Thank you for playing [preauth] Apr 29 07:43:25 box sshd[13007]: Disconnected from invalid user ghostname 134.122.73.4 port 47626 [preauth] Apr 29 07:44:09 box sshd[13010]: Invalid user oracle from 134.122.73.4 port 33966 Apr 29 07........ ------------------------------ |
2020-04-29 22:00:38 |
| 134.122.73.25 | attack | Apr 23 01:34:36 vps sshd[803163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.73.25 Apr 23 01:34:39 vps sshd[803163]: Failed password for invalid user wq from 134.122.73.25 port 41274 ssh2 Apr 23 01:38:00 vps sshd[821307]: Invalid user zh from 134.122.73.25 port 44508 Apr 23 01:38:00 vps sshd[821307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.73.25 Apr 23 01:38:02 vps sshd[821307]: Failed password for invalid user zh from 134.122.73.25 port 44508 ssh2 ... |
2020-04-23 07:42:54 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.122.73.171
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16126
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;134.122.73.171. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025040600 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 06 23:29:59 CST 2025
;; MSG SIZE rcvd: 107Host 171.73.122.134.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 171.73.122.134.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 177.54.144.70 | attack | Chat Spam |
2019-11-29 04:32:52 |
| 141.98.80.71 | attackbots | Nov 29 02:12:13 areeb-Workstation sshd[25802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.80.71 Nov 29 02:12:15 areeb-Workstation sshd[25802]: Failed password for invalid user admin from 141.98.80.71 port 44514 ssh2 ... |
2019-11-29 04:59:56 |
| 49.88.112.113 | attackspambots | Nov 28 15:52:01 plusreed sshd[20553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.113 user=root Nov 28 15:52:02 plusreed sshd[20553]: Failed password for root from 49.88.112.113 port 35704 ssh2 ... |
2019-11-29 04:55:08 |
| 182.52.90.164 | attackspam | Invalid user chocs from 182.52.90.164 port 33942 |
2019-11-29 05:02:30 |
| 36.155.102.52 | attack | Port scan on 4 port(s): 2375 2376 2377 4243 |
2019-11-29 04:44:00 |
| 185.153.199.2 | attackspambots | Nov 28 19:38:02 h2177944 kernel: \[7841570.434922\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.153.199.2 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=44772 PROTO=TCP SPT=50742 DPT=3003 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 28 19:54:40 h2177944 kernel: \[7842568.969001\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.153.199.2 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=31188 PROTO=TCP SPT=50742 DPT=7000 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 28 19:59:04 h2177944 kernel: \[7842832.425553\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.153.199.2 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=49127 PROTO=TCP SPT=50742 DPT=3360 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 28 20:03:30 h2177944 kernel: \[7843097.911417\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.153.199.2 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=49449 PROTO=TCP SPT=50742 DPT=4014 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 28 20:03:31 h2177944 kernel: \[7843099.751375\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.153.199.2 DST=85.214.117.9 |
2019-11-29 05:03:25 |
| 43.245.200.173 | attackbots | Nov 29 02:23:56 webhost01 sshd[9016]: Failed password for root from 43.245.200.173 port 34352 ssh2 ... |
2019-11-29 05:05:25 |
| 68.183.160.63 | attackbots | 2019-11-28T20:44:12.310910shield sshd\[7287\]: Invalid user kmarripudi from 68.183.160.63 port 51164 2019-11-28T20:44:12.315514shield sshd\[7287\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.160.63 2019-11-28T20:44:14.062147shield sshd\[7287\]: Failed password for invalid user kmarripudi from 68.183.160.63 port 51164 ssh2 2019-11-28T20:50:12.499818shield sshd\[8015\]: Invalid user schinthamareddy from 68.183.160.63 port 46540 2019-11-28T20:50:12.503784shield sshd\[8015\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.160.63 |
2019-11-29 04:53:47 |
| 177.67.0.234 | attack | postfix (unknown user, SPF fail or relay access denied) |
2019-11-29 05:01:48 |
| 45.136.110.16 | attackspam | ET CINS Active Threat Intelligence Poor Reputation IP group 29 - port: 3388 proto: TCP cat: Misc Attack |
2019-11-29 04:52:18 |
| 24.63.224.206 | attackbots | Nov 28 19:41:32 microserver sshd[6179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.63.224.206 user=root Nov 28 19:41:34 microserver sshd[6179]: Failed password for root from 24.63.224.206 port 39088 ssh2 Nov 28 19:50:29 microserver sshd[7399]: Invalid user kylo from 24.63.224.206 port 37600 Nov 28 19:50:29 microserver sshd[7399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.63.224.206 Nov 28 19:50:31 microserver sshd[7399]: Failed password for invalid user kylo from 24.63.224.206 port 37600 ssh2 Nov 28 20:08:06 microserver sshd[9528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.63.224.206 user=root Nov 28 20:08:08 microserver sshd[9528]: Failed password for root from 24.63.224.206 port 47574 ssh2 Nov 28 20:17:09 microserver sshd[10800]: Invalid user wwwrun from 24.63.224.206 port 39890 Nov 28 20:17:09 microserver sshd[10800]: pam_unix(sshd:auth): authentication failure |
2019-11-29 04:47:59 |
| 4.59.215.178 | attackspam | MultiHost/MultiPort Probe, Scan, Hack - |
2019-11-29 04:49:39 |
| 195.5.143.59 | attackspam | Unauthorized SMTP/IMAP/POP3 connection attempt |
2019-11-29 04:49:13 |
| 164.132.12.22 | attackspam | Scanning random ports - tries to find possible vulnerable services |
2019-11-29 04:28:52 |
| 80.82.77.245 | attackspambots | Scanning random ports - tries to find possible vulnerable services |
2019-11-29 04:31:24 |