City: Ashaiman
Region: Greater Accra Region
Country: Ghana
Internet Service Provider: Y-Zone Service
Hostname: unknown
Organization: unknown
Usage Type: Fixed Line ISP
| Type | Details | Datetime |
|---|---|---|
| attackspambots | Sep 17 18:45:19 mail.srvfarm.net postfix/smtpd[157365]: warning: unknown[41.139.10.210]: SASL PLAIN authentication failed: Sep 17 18:45:19 mail.srvfarm.net postfix/smtpd[157365]: lost connection after AUTH from unknown[41.139.10.210] Sep 17 18:46:54 mail.srvfarm.net postfix/smtpd[163728]: warning: unknown[41.139.10.210]: SASL PLAIN authentication failed: Sep 17 18:46:54 mail.srvfarm.net postfix/smtpd[163728]: lost connection after AUTH from unknown[41.139.10.210] Sep 17 18:49:46 mail.srvfarm.net postfix/smtps/smtpd[159171]: lost connection after CONNECT from unknown[41.139.10.210] |
2020-09-19 01:57:13 |
| attackspam | Sep 17 18:45:19 mail.srvfarm.net postfix/smtpd[157365]: warning: unknown[41.139.10.210]: SASL PLAIN authentication failed: Sep 17 18:45:19 mail.srvfarm.net postfix/smtpd[157365]: lost connection after AUTH from unknown[41.139.10.210] Sep 17 18:46:54 mail.srvfarm.net postfix/smtpd[163728]: warning: unknown[41.139.10.210]: SASL PLAIN authentication failed: Sep 17 18:46:54 mail.srvfarm.net postfix/smtpd[163728]: lost connection after AUTH from unknown[41.139.10.210] Sep 17 18:49:46 mail.srvfarm.net postfix/smtps/smtpd[159171]: lost connection after CONNECT from unknown[41.139.10.210] |
2020-09-18 17:54:30 |
| attackbots | Sep 17 18:45:19 mail.srvfarm.net postfix/smtpd[157365]: warning: unknown[41.139.10.210]: SASL PLAIN authentication failed: Sep 17 18:45:19 mail.srvfarm.net postfix/smtpd[157365]: lost connection after AUTH from unknown[41.139.10.210] Sep 17 18:46:54 mail.srvfarm.net postfix/smtpd[163728]: warning: unknown[41.139.10.210]: SASL PLAIN authentication failed: Sep 17 18:46:54 mail.srvfarm.net postfix/smtpd[163728]: lost connection after AUTH from unknown[41.139.10.210] Sep 17 18:49:46 mail.srvfarm.net postfix/smtps/smtpd[159171]: lost connection after CONNECT from unknown[41.139.10.210] |
2020-09-18 08:09:14 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 41.139.10.92 | attack | Sep 17 18:39:28 mail.srvfarm.net postfix/smtpd[157368]: warning: unknown[41.139.10.92]: SASL PLAIN authentication failed: Sep 17 18:39:28 mail.srvfarm.net postfix/smtpd[157368]: lost connection after AUTH from unknown[41.139.10.92] Sep 17 18:39:47 mail.srvfarm.net postfix/smtps/smtpd[161658]: warning: unknown[41.139.10.92]: SASL PLAIN authentication failed: Sep 17 18:39:47 mail.srvfarm.net postfix/smtps/smtpd[161658]: lost connection after AUTH from unknown[41.139.10.92] Sep 17 18:44:25 mail.srvfarm.net postfix/smtpd[157371]: warning: unknown[41.139.10.92]: SASL PLAIN authentication failed: |
2020-09-19 01:57:31 |
| 41.139.10.92 | attackbots | Sep 17 18:39:28 mail.srvfarm.net postfix/smtpd[157368]: warning: unknown[41.139.10.92]: SASL PLAIN authentication failed: Sep 17 18:39:28 mail.srvfarm.net postfix/smtpd[157368]: lost connection after AUTH from unknown[41.139.10.92] Sep 17 18:39:47 mail.srvfarm.net postfix/smtps/smtpd[161658]: warning: unknown[41.139.10.92]: SASL PLAIN authentication failed: Sep 17 18:39:47 mail.srvfarm.net postfix/smtps/smtpd[161658]: lost connection after AUTH from unknown[41.139.10.92] Sep 17 18:44:25 mail.srvfarm.net postfix/smtpd[157371]: warning: unknown[41.139.10.92]: SASL PLAIN authentication failed: |
2020-09-18 17:54:59 |
| 41.139.10.92 | attack | Sep 17 18:39:28 mail.srvfarm.net postfix/smtpd[157368]: warning: unknown[41.139.10.92]: SASL PLAIN authentication failed: Sep 17 18:39:28 mail.srvfarm.net postfix/smtpd[157368]: lost connection after AUTH from unknown[41.139.10.92] Sep 17 18:39:47 mail.srvfarm.net postfix/smtps/smtpd[161658]: warning: unknown[41.139.10.92]: SASL PLAIN authentication failed: Sep 17 18:39:47 mail.srvfarm.net postfix/smtps/smtpd[161658]: lost connection after AUTH from unknown[41.139.10.92] Sep 17 18:44:25 mail.srvfarm.net postfix/smtpd[157371]: warning: unknown[41.139.10.92]: SASL PLAIN authentication failed: |
2020-09-18 08:09:43 |
| 41.139.10.92 | attack | Aug 14 23:59:26 mail.srvfarm.net postfix/smtpd[736664]: warning: unknown[41.139.10.92]: SASL PLAIN authentication failed: Aug 14 23:59:26 mail.srvfarm.net postfix/smtpd[736664]: lost connection after AUTH from unknown[41.139.10.92] Aug 15 00:04:58 mail.srvfarm.net postfix/smtps/smtpd[739406]: warning: unknown[41.139.10.92]: SASL PLAIN authentication failed: Aug 15 00:04:59 mail.srvfarm.net postfix/smtps/smtpd[739406]: lost connection after AUTH from unknown[41.139.10.92] Aug 15 00:07:54 mail.srvfarm.net postfix/smtpd[738032]: warning: unknown[41.139.10.92]: SASL PLAIN authentication failed: |
2020-08-15 17:26:08 |
| 41.139.10.176 | attackbotsspam | Aug 11 05:32:10 mail.srvfarm.net postfix/smtps/smtpd[2162586]: warning: unknown[41.139.10.176]: SASL PLAIN authentication failed: Aug 11 05:32:10 mail.srvfarm.net postfix/smtps/smtpd[2162586]: lost connection after AUTH from unknown[41.139.10.176] Aug 11 05:32:28 mail.srvfarm.net postfix/smtpd[2163447]: warning: unknown[41.139.10.176]: SASL PLAIN authentication failed: Aug 11 05:32:28 mail.srvfarm.net postfix/smtpd[2163447]: lost connection after AUTH from unknown[41.139.10.176] Aug 11 05:39:28 mail.srvfarm.net postfix/smtpd[2163992]: warning: unknown[41.139.10.176]: SASL PLAIN authentication failed: |
2020-08-11 15:23:45 |
| 41.139.10.86 | attack | Jun 16 05:22:50 mail.srvfarm.net postfix/smtpd[935946]: lost connection after CONNECT from unknown[41.139.10.86] Jun 16 05:26:10 mail.srvfarm.net postfix/smtpd[935987]: warning: unknown[41.139.10.86]: SASL PLAIN authentication failed: Jun 16 05:26:10 mail.srvfarm.net postfix/smtpd[935987]: lost connection after AUTH from unknown[41.139.10.86] Jun 16 05:29:54 mail.srvfarm.net postfix/smtpd[935980]: warning: unknown[41.139.10.86]: SASL PLAIN authentication failed: Jun 16 05:29:54 mail.srvfarm.net postfix/smtpd[935980]: lost connection after AUTH from unknown[41.139.10.86] |
2020-06-16 16:24:57 |
| 41.139.10.47 | attackspam | IMAP/SMTP Authentication Failure |
2020-05-17 02:28:52 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.139.10.210
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34356
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;41.139.10.210. IN A
;; AUTHORITY SECTION:
. 155 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020091701 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 18 08:09:09 CST 2020
;; MSG SIZE rcvd: 117Host 210.10.139.41.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.82.98, trying next server
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 210.10.139.41.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 144.217.85.4 | attackbotsspam | 2020-07-26T07:07:45.157384morrigan.ad5gb.com sshd[4126812]: Failed password for invalid user hou from 144.217.85.4 port 43382 ssh2 2020-07-26T07:07:45.396870morrigan.ad5gb.com sshd[4126812]: Disconnected from invalid user hou 144.217.85.4 port 43382 [preauth] |
2020-07-26 20:29:08 |
| 198.46.152.161 | attack | Jul 26 13:59:01 ns382633 sshd\[29948\]: Invalid user webmaster from 198.46.152.161 port 56408 Jul 26 13:59:01 ns382633 sshd\[29948\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.46.152.161 Jul 26 13:59:03 ns382633 sshd\[29948\]: Failed password for invalid user webmaster from 198.46.152.161 port 56408 ssh2 Jul 26 14:07:27 ns382633 sshd\[31684\]: Invalid user zd from 198.46.152.161 port 53974 Jul 26 14:07:27 ns382633 sshd\[31684\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.46.152.161 |
2020-07-26 20:47:06 |
| 222.186.190.2 | attack | 2020-07-26T14:23:42.495570vps773228.ovh.net sshd[2230]: Failed password for root from 222.186.190.2 port 53720 ssh2 2020-07-26T14:23:46.897796vps773228.ovh.net sshd[2230]: Failed password for root from 222.186.190.2 port 53720 ssh2 2020-07-26T14:23:50.270726vps773228.ovh.net sshd[2230]: Failed password for root from 222.186.190.2 port 53720 ssh2 2020-07-26T14:23:54.066104vps773228.ovh.net sshd[2230]: Failed password for root from 222.186.190.2 port 53720 ssh2 2020-07-26T14:23:58.163363vps773228.ovh.net sshd[2230]: Failed password for root from 222.186.190.2 port 53720 ssh2 ... |
2020-07-26 20:25:23 |
| 49.233.208.40 | attack | Jul 26 14:07:44 vpn01 sshd[1740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.208.40 Jul 26 14:07:46 vpn01 sshd[1740]: Failed password for invalid user wyw from 49.233.208.40 port 62711 ssh2 ... |
2020-07-26 20:29:43 |
| 168.243.232.146 | attack | 07/26/2020-08:07:55.198761 168.243.232.146 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-07-26 20:16:10 |
| 54.37.159.12 | attackbotsspam | Jul 26 08:14:48 ny01 sshd[29750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.159.12 Jul 26 08:14:50 ny01 sshd[29750]: Failed password for invalid user ecc from 54.37.159.12 port 42988 ssh2 Jul 26 08:23:33 ny01 sshd[31049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.159.12 |
2020-07-26 20:26:15 |
| 111.72.194.222 | attackspambots | Jul 26 14:31:10 srv01 postfix/smtpd\[14112\]: warning: unknown\[111.72.194.222\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 26 14:41:49 srv01 postfix/smtpd\[14239\]: warning: unknown\[111.72.194.222\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 26 14:42:01 srv01 postfix/smtpd\[14239\]: warning: unknown\[111.72.194.222\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 26 14:42:19 srv01 postfix/smtpd\[14239\]: warning: unknown\[111.72.194.222\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 26 14:42:40 srv01 postfix/smtpd\[14239\]: warning: unknown\[111.72.194.222\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-07-26 20:43:24 |
| 45.148.10.68 | attack | Brute force attempt |
2020-07-26 20:23:05 |
| 152.136.130.218 | attackbotsspam | 2020-07-26T14:07:42.860140ks3355764 sshd[29575]: Invalid user tat from 152.136.130.218 port 56776 2020-07-26T14:07:45.095398ks3355764 sshd[29575]: Failed password for invalid user tat from 152.136.130.218 port 56776 ssh2 ... |
2020-07-26 20:28:53 |
| 109.116.41.170 | attackbots | Jul 26 05:07:46 propaganda sshd[82653]: Connection from 109.116.41.170 port 47960 on 10.0.0.160 port 22 rdomain "" Jul 26 05:07:46 propaganda sshd[82653]: Connection closed by 109.116.41.170 port 47960 [preauth] |
2020-07-26 20:26:52 |
| 37.152.177.66 | attackspambots | Jul 26 11:15:15 XXX sshd[45771]: Invalid user sammy from 37.152.177.66 port 60050 |
2020-07-26 20:09:56 |
| 107.175.33.240 | attack | SSH bruteforce |
2020-07-26 20:27:11 |
| 8.30.197.230 | attackbotsspam | $f2bV_matches |
2020-07-26 20:13:53 |
| 222.186.42.7 | attack | Jul 26 14:21:17 * sshd[18581]: Failed password for root from 222.186.42.7 port 24812 ssh2 |
2020-07-26 20:23:38 |
| 120.132.12.136 | attackspam | Jul 26 14:14:13 Ubuntu-1404-trusty-64-minimal sshd\[21298\]: Invalid user ambari from 120.132.12.136 Jul 26 14:14:13 Ubuntu-1404-trusty-64-minimal sshd\[21298\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.132.12.136 Jul 26 14:14:15 Ubuntu-1404-trusty-64-minimal sshd\[21298\]: Failed password for invalid user ambari from 120.132.12.136 port 57954 ssh2 Jul 26 14:25:25 Ubuntu-1404-trusty-64-minimal sshd\[27165\]: Invalid user kal from 120.132.12.136 Jul 26 14:25:25 Ubuntu-1404-trusty-64-minimal sshd\[27165\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.132.12.136 |
2020-07-26 20:40:22 |