City: Gniezno
Region: Greater Poland
Country: Poland
Internet Service Provider: Servcom S.A.
Hostname: unknown
Organization: unknown
Usage Type: Fixed Line ISP
| Type | Details | Datetime |
|---|---|---|
| attack | Aug 28 01:40:12 mail.srvfarm.net postfix/smtpd[2002814]: warning: unknown[213.92.204.15]: SASL PLAIN authentication failed: Aug 28 01:40:12 mail.srvfarm.net postfix/smtpd[2002814]: lost connection after AUTH from unknown[213.92.204.15] Aug 28 01:42:52 mail.srvfarm.net postfix/smtpd[2002815]: warning: unknown[213.92.204.15]: SASL PLAIN authentication failed: Aug 28 01:42:52 mail.srvfarm.net postfix/smtpd[2002815]: lost connection after AUTH from unknown[213.92.204.15] Aug 28 01:45:14 mail.srvfarm.net postfix/smtps/smtpd[2003945]: warning: unknown[213.92.204.15]: SASL PLAIN authentication failed: |
2020-08-28 09:09:18 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 213.92.204.124 | attackspam | $f2bV_matches |
2020-10-12 05:11:36 |
| 213.92.204.124 | attackspambots | $f2bV_matches |
2020-10-11 21:16:18 |
| 213.92.204.124 | attackbots | $f2bV_matches |
2020-10-11 13:13:57 |
| 213.92.204.124 | attackbotsspam | $f2bV_matches |
2020-10-11 06:37:23 |
| 213.92.204.210 | attackbots | Jul 28 05:37:34 mail.srvfarm.net postfix/smtpd[2353403]: warning: unknown[213.92.204.210]: SASL PLAIN authentication failed: Jul 28 05:37:34 mail.srvfarm.net postfix/smtpd[2353403]: lost connection after AUTH from unknown[213.92.204.210] Jul 28 05:46:49 mail.srvfarm.net postfix/smtps/smtpd[2356561]: warning: unknown[213.92.204.210]: SASL PLAIN authentication failed: Jul 28 05:46:49 mail.srvfarm.net postfix/smtps/smtpd[2356561]: lost connection after AUTH from unknown[213.92.204.210] Jul 28 05:47:08 mail.srvfarm.net postfix/smtps/smtpd[2356781]: warning: unknown[213.92.204.210]: SASL PLAIN authentication failed: |
2020-07-28 17:41:53 |
| 213.92.204.4 | attackspam | warning: unknown\[213.92.204.4\]: PLAIN authentication failed: |
2020-07-26 03:33:30 |
| 213.92.204.175 | attack | SASL PLAIN auth failed: ruser=... |
2020-07-17 06:32:51 |
| 213.92.204.108 | attackspam | failed_logins |
2020-07-16 08:22:19 |
| 213.92.204.7 | attack | $f2bV_matches |
2020-07-16 05:26:58 |
| 213.92.204.175 | attackspambots | Brute force attempt |
2020-07-13 14:22:20 |
| 213.92.204.141 | attackbots | (PL/Poland/-) SMTP Bruteforcing attempts |
2020-06-19 18:54:12 |
| 213.92.204.213 | attackbotsspam | (PL/Poland/-) SMTP Bruteforcing attempts |
2020-06-18 16:29:39 |
| 213.92.204.213 | attack | Jun 16 05:21:36 mail.srvfarm.net postfix/smtpd[936065]: lost connection after CONNECT from unknown[213.92.204.213] Jun 16 05:22:16 mail.srvfarm.net postfix/smtpd[953480]: warning: unknown[213.92.204.213]: SASL PLAIN authentication failed: Jun 16 05:22:16 mail.srvfarm.net postfix/smtpd[953480]: lost connection after AUTH from unknown[213.92.204.213] Jun 16 05:24:42 mail.srvfarm.net postfix/smtps/smtpd[938178]: warning: unknown[213.92.204.213]: SASL PLAIN authentication failed: Jun 16 05:24:42 mail.srvfarm.net postfix/smtps/smtpd[938178]: lost connection after AUTH from unknown[213.92.204.213] |
2020-06-16 16:26:34 |
| 213.92.204.99 | attack | Jun 5 16:27:32 mail.srvfarm.net postfix/smtpd[3132025]: warning: unknown[213.92.204.99]: SASL PLAIN authentication failed: Jun 5 16:27:32 mail.srvfarm.net postfix/smtpd[3132025]: lost connection after AUTH from unknown[213.92.204.99] Jun 5 16:31:23 mail.srvfarm.net postfix/smtps/smtpd[3128932]: warning: unknown[213.92.204.99]: SASL PLAIN authentication failed: Jun 5 16:31:23 mail.srvfarm.net postfix/smtps/smtpd[3128932]: lost connection after AUTH from unknown[213.92.204.99] Jun 5 16:32:48 mail.srvfarm.net postfix/smtps/smtpd[3128931]: warning: unknown[213.92.204.99]: SASL PLAIN authentication failed: |
2020-06-08 00:22:50 |
| 213.92.204.124 | attackspam | (PL/Poland/-) SMTP Bruteforcing attempts |
2020-06-05 16:25:31 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.92.204.15
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55007
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;213.92.204.15. IN A
;; AUTHORITY SECTION:
. 329 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020082702 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 28 09:09:14 CST 2020
;; MSG SIZE rcvd: 11715.204.92.213.in-addr.arpa domain name pointer 213-92-204-15.nornet.pl.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
15.204.92.213.in-addr.arpa name = 213-92-204-15.nornet.pl.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 137.74.173.182 | attackspam | Jun 22 14:33:48 eventyay sshd[22393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.173.182 Jun 22 14:33:50 eventyay sshd[22393]: Failed password for invalid user gengjiao from 137.74.173.182 port 52918 ssh2 Jun 22 14:37:06 eventyay sshd[22532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.173.182 ... |
2020-06-22 20:49:46 |
| 3.82.61.205 | attackspambots | Hit honeypot r. |
2020-06-22 21:12:59 |
| 2.184.236.174 | attackspam | Automatic report - Port Scan Attack |
2020-06-22 20:51:32 |
| 5.135.94.191 | attack | prod11 ... |
2020-06-22 20:50:55 |
| 88.230.182.55 | attack | Honeypot attack, port: 445, PTR: 88.230.182.55.dynamic.ttnet.com.tr. |
2020-06-22 21:12:33 |
| 101.69.200.162 | attackspambots | Jun 22 14:50:15 plex sshd[8636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.69.200.162 user=root Jun 22 14:50:17 plex sshd[8636]: Failed password for root from 101.69.200.162 port 45223 ssh2 |
2020-06-22 20:50:24 |
| 157.230.53.57 | attackbots |
|
2020-06-22 21:15:02 |
| 128.14.137.182 | attackbotsspam | Jun 22 14:07:34 debian-2gb-nbg1-2 kernel: \[15086329.417110\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=128.14.137.182 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=30185 PROTO=TCP SPT=24837 DPT=8040 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-22 20:57:16 |
| 201.234.66.133 | attackbots | Jun 22 14:37:47 home sshd[28226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.234.66.133 Jun 22 14:37:49 home sshd[28226]: Failed password for invalid user sara from 201.234.66.133 port 9407 ssh2 Jun 22 14:44:50 home sshd[28988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.234.66.133 ... |
2020-06-22 21:03:53 |
| 183.62.197.115 | attackspam | Jun 22 14:22:15 ns381471 sshd[3851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.62.197.115 Jun 22 14:22:18 ns381471 sshd[3851]: Failed password for invalid user b from 183.62.197.115 port 41306 ssh2 |
2020-06-22 20:53:28 |
| 222.186.42.155 | attack | odoo8 ... |
2020-06-22 21:08:59 |
| 59.97.69.210 | attackspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-06-22 21:01:15 |
| 218.92.0.219 | attackbotsspam | Jun 22 03:13:31 web9 sshd\[13940\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.219 user=root Jun 22 03:13:33 web9 sshd\[13940\]: Failed password for root from 218.92.0.219 port 37693 ssh2 Jun 22 03:13:35 web9 sshd\[13940\]: Failed password for root from 218.92.0.219 port 37693 ssh2 Jun 22 03:13:37 web9 sshd\[13940\]: Failed password for root from 218.92.0.219 port 37693 ssh2 Jun 22 03:13:40 web9 sshd\[13962\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.219 user=root |
2020-06-22 21:14:10 |
| 213.226.80.70 | attackbotsspam | Automatic report - Banned IP Access |
2020-06-22 20:46:12 |
| 113.22.53.76 | attackspam | Port probing on unauthorized port 445 |
2020-06-22 21:04:44 |