City: unknown
Region: unknown
Country: Germany
Internet Service Provider: DigitalOcean LLC
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attack | Sep 19 16:16:27 mail.srvfarm.net postfix/smtpd[1505471]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 19 16:16:27 mail.srvfarm.net postfix/smtpd[1505471]: lost connection after AUTH from unknown[134.122.73.64] Sep 19 16:16:48 mail.srvfarm.net postfix/smtpd[1490388]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 19 16:16:48 mail.srvfarm.net postfix/smtpd[1490388]: lost connection after AUTH from unknown[134.122.73.64] Sep 19 16:17:57 mail.srvfarm.net postfix/smtpd[1490388]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 19 16:17:57 mail.srvfarm.net postfix/smtpd[1490388]: lost connection after AUTH from unknown[134.122.73.64] |
2020-09-20 00:59:38 |
| attack | Sep 19 09:48:20 mail.srvfarm.net postfix/smtpd[1352725]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 19 09:48:20 mail.srvfarm.net postfix/smtpd[1352725]: lost connection after AUTH from unknown[134.122.73.64] Sep 19 09:49:23 mail.srvfarm.net postfix/smtpd[1350470]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 19 09:49:23 mail.srvfarm.net postfix/smtpd[1350470]: lost connection after AUTH from unknown[134.122.73.64] Sep 19 09:52:28 mail.srvfarm.net postfix/smtpd[1352190]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-09-19 16:47:47 |
| attack | Sep 16 18:38:40 srv1 postfix/smtpd[22138]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: authentication failure Sep 16 18:40:43 srv1 postfix/smtpd[23094]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: authentication failure Sep 16 18:42:49 srv1 postfix/smtpd[23094]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: authentication failure Sep 16 18:47:59 srv1 postfix/smtpd[23478]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: authentication failure Sep 16 19:05:59 srv1 postfix/smtpd[28783]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: authentication failure ... |
2020-09-17 01:49:54 |
| attackbotsspam | Sep 16 10:35:13 mail.srvfarm.net postfix/smtpd[3376000]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 16 10:35:13 mail.srvfarm.net postfix/smtpd[3376000]: lost connection after AUTH from unknown[134.122.73.64] Sep 16 10:35:35 mail.srvfarm.net postfix/smtpd[3375987]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 16 10:35:35 mail.srvfarm.net postfix/smtpd[3375987]: lost connection after AUTH from unknown[134.122.73.64] Sep 16 10:36:43 mail.srvfarm.net postfix/smtpd[3379743]: warning: unknown[134.122.73.64]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 16 10:36:43 mail.srvfarm.net postfix/smtpd[3379743]: lost connection after AUTH from unknown[134.122.73.64] |
2020-09-16 18:06:31 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 134.122.73.25 | attack | (sshd) Failed SSH login from 134.122.73.25 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 8 06:56:42 s1 sshd[15232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.73.25 user=root Jun 8 06:56:44 s1 sshd[15232]: Failed password for root from 134.122.73.25 port 38922 ssh2 Jun 8 07:09:25 s1 sshd[15573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.73.25 user=root Jun 8 07:09:27 s1 sshd[15573]: Failed password for root from 134.122.73.25 port 58482 ssh2 Jun 8 07:12:35 s1 sshd[15674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.73.25 user=root |
2020-06-08 14:16:00 |
| 134.122.73.25 | attack | May 24 22:10:46 localhost sshd[3194747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.73.25 user=root May 24 22:10:48 localhost sshd[3194747]: Failed password for root from 134.122.73.25 port 32898 ssh2 ... |
2020-05-25 00:57:10 |
| 134.122.73.25 | attackspam | $f2bV_matches |
2020-05-15 21:09:16 |
| 134.122.73.25 | attackspam | SSH Invalid Login |
2020-05-14 05:45:53 |
| 134.122.73.25 | attack | May 5 20:57:44 pixelmemory sshd[718377]: Failed password for invalid user karma from 134.122.73.25 port 54374 ssh2 May 5 21:09:36 pixelmemory sshd[720524]: Invalid user gitblit from 134.122.73.25 port 45956 May 5 21:09:36 pixelmemory sshd[720524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.73.25 May 5 21:09:36 pixelmemory sshd[720524]: Invalid user gitblit from 134.122.73.25 port 45956 May 5 21:09:38 pixelmemory sshd[720524]: Failed password for invalid user gitblit from 134.122.73.25 port 45956 ssh2 ... |
2020-05-06 16:36:49 |
| 134.122.73.25 | attack | May 5 18:42:27 localhost sshd\[27919\]: Invalid user kenneth from 134.122.73.25 May 5 18:42:27 localhost sshd\[27919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.73.25 May 5 18:42:29 localhost sshd\[27919\]: Failed password for invalid user kenneth from 134.122.73.25 port 42266 ssh2 May 5 18:48:25 localhost sshd\[28252\]: Invalid user admin from 134.122.73.25 May 5 18:48:25 localhost sshd\[28252\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.73.25 ... |
2020-05-06 01:02:40 |
| 134.122.73.4 | attackspambots | Lines containing failures of 134.122.73.4 Apr 29 07:40:38 box sshd[12990]: Did not receive identification string from 134.122.73.4 port 44256 Apr 29 07:41:56 box sshd[12991]: Did not receive identification string from 134.122.73.4 port 46478 Apr 29 07:42:42 box sshd[12994]: Invalid user ftpuser from 134.122.73.4 port 33056 Apr 29 07:42:42 box sshd[12994]: Received disconnect from 134.122.73.4 port 33056:11: Normal Shutdown, Thank you for playing [preauth] Apr 29 07:42:42 box sshd[12994]: Disconnected from invalid user ftpuser 134.122.73.4 port 33056 [preauth] Apr 29 07:43:25 box sshd[13007]: Invalid user ghostname from 134.122.73.4 port 47626 Apr 29 07:43:25 box sshd[13007]: Received disconnect from 134.122.73.4 port 47626:11: Normal Shutdown, Thank you for playing [preauth] Apr 29 07:43:25 box sshd[13007]: Disconnected from invalid user ghostname 134.122.73.4 port 47626 [preauth] Apr 29 07:44:09 box sshd[13010]: Invalid user oracle from 134.122.73.4 port 33966 Apr 29 07........ ------------------------------ |
2020-04-29 22:00:38 |
| 134.122.73.25 | attack | Apr 23 01:34:36 vps sshd[803163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.73.25 Apr 23 01:34:39 vps sshd[803163]: Failed password for invalid user wq from 134.122.73.25 port 41274 ssh2 Apr 23 01:38:00 vps sshd[821307]: Invalid user zh from 134.122.73.25 port 44508 Apr 23 01:38:00 vps sshd[821307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.73.25 Apr 23 01:38:02 vps sshd[821307]: Failed password for invalid user zh from 134.122.73.25 port 44508 ssh2 ... |
2020-04-23 07:42:54 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.122.73.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56623
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.122.73.64. IN A
;; AUTHORITY SECTION:
. 524 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020091600 1800 900 604800 86400
;; Query time: 69 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 16 18:06:27 CST 2020
;; MSG SIZE rcvd: 117Host 64.73.122.134.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 64.73.122.134.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 223.30.225.162 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:06:16. |
2019-09-28 03:52:21 |
| 51.75.169.236 | attackbotsspam | Sep 27 17:10:00 SilenceServices sshd[2157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.169.236 Sep 27 17:10:03 SilenceServices sshd[2157]: Failed password for invalid user www from 51.75.169.236 port 40347 ssh2 Sep 27 17:14:16 SilenceServices sshd[5175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.169.236 |
2019-09-28 04:05:39 |
| 104.248.175.232 | attack | Sep 27 16:59:21 dedicated sshd[27846]: Invalid user amaina from 104.248.175.232 port 53110 |
2019-09-28 03:36:41 |
| 113.54.159.55 | attack | Sep 27 13:58:56 game-panel sshd[9967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.54.159.55 Sep 27 13:58:58 game-panel sshd[9967]: Failed password for invalid user ftpuser1 from 113.54.159.55 port 39344 ssh2 Sep 27 14:03:14 game-panel sshd[10119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.54.159.55 |
2019-09-28 03:30:53 |
| 223.225.131.237 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:06:16. |
2019-09-28 03:52:02 |
| 92.118.160.37 | attack | port scan and connect, tcp 143 (imap) |
2019-09-28 04:01:56 |
| 188.165.242.200 | attackbots | Invalid user rtorrent from 188.165.242.200 port 36410 |
2019-09-28 03:27:29 |
| 58.162.140.172 | attack | Sep 27 15:23:57 vps691689 sshd[12819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.162.140.172 Sep 27 15:24:00 vps691689 sshd[12819]: Failed password for invalid user just from 58.162.140.172 port 54290 ssh2 ... |
2019-09-28 03:24:22 |
| 177.79.71.103 | attack | Sep 27 08:06:20 bilbo sshd[17325]: User root from 177.79.71.103 not allowed because not listed in AllowUsers Sep 27 08:06:22 bilbo sshd[17327]: User root from 177.79.71.103 not allowed because not listed in AllowUsers Sep 27 08:06:25 bilbo sshd[17329]: User root from 177.79.71.103 not allowed because not listed in AllowUsers Sep 27 08:06:27 bilbo sshd[17331]: User root from 177.79.71.103 not allowed because not listed in AllowUsers ... |
2019-09-28 03:44:03 |
| 79.11.181.225 | attackspam | $f2bV_matches |
2019-09-28 03:28:14 |
| 46.38.144.32 | attack | Sep 27 21:24:35 webserver postfix/smtpd\[21208\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 27 21:26:50 webserver postfix/smtpd\[21208\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 27 21:29:19 webserver postfix/smtpd\[21209\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 27 21:31:48 webserver postfix/smtpd\[21414\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 27 21:34:16 webserver postfix/smtpd\[21209\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-09-28 03:40:45 |
| 165.227.209.96 | attack | 2019-09-27T22:19:52.776687tmaserv sshd\[21613\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.209.96 2019-09-27T22:19:54.863825tmaserv sshd\[21613\]: Failed password for invalid user juan from 165.227.209.96 port 33552 ssh2 2019-09-27T22:31:45.994978tmaserv sshd\[22423\]: Invalid user s from 165.227.209.96 port 40174 2019-09-27T22:31:46.001207tmaserv sshd\[22423\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.209.96 2019-09-27T22:31:47.773704tmaserv sshd\[22423\]: Failed password for invalid user s from 165.227.209.96 port 40174 ssh2 2019-09-27T22:35:40.728507tmaserv sshd\[22520\]: Invalid user liman from 165.227.209.96 port 51812 ... |
2019-09-28 03:46:05 |
| 200.106.58.194 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:06:03. |
2019-09-28 04:08:38 |
| 221.127.9.100 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:06:14. |
2019-09-28 03:56:33 |
| 190.166.252.202 | attackbots | Sep 27 05:18:20 php1 sshd\[27509\]: Invalid user cod from 190.166.252.202 Sep 27 05:18:20 php1 sshd\[27509\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.166.252.202 Sep 27 05:18:21 php1 sshd\[27509\]: Failed password for invalid user cod from 190.166.252.202 port 50098 ssh2 Sep 27 05:23:26 php1 sshd\[27928\]: Invalid user SYSTEM from 190.166.252.202 Sep 27 05:23:26 php1 sshd\[27928\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.166.252.202 |
2019-09-28 03:40:15 |