City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 48.26.117.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16859
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;48.26.117.2. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020601 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 05:20:06 CST 2025
;; MSG SIZE rcvd: 104Host 2.117.26.48.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 2.117.26.48.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 177.190.76.130 | attackbotsspam | Aug 12 05:33:01 mail.srvfarm.net postfix/smtpd[2866061]: warning: unknown[177.190.76.130]: SASL PLAIN authentication failed: Aug 12 05:33:01 mail.srvfarm.net postfix/smtpd[2866061]: lost connection after AUTH from unknown[177.190.76.130] Aug 12 05:36:43 mail.srvfarm.net postfix/smtps/smtpd[2870983]: warning: unknown[177.190.76.130]: SASL PLAIN authentication failed: Aug 12 05:36:44 mail.srvfarm.net postfix/smtps/smtpd[2870983]: lost connection after AUTH from unknown[177.190.76.130] Aug 12 05:39:47 mail.srvfarm.net postfix/smtpd[2870453]: warning: unknown[177.190.76.130]: SASL PLAIN authentication failed: |
2020-08-12 14:26:31 |
| 77.45.86.207 | attackspam | Aug 12 05:38:51 mail.srvfarm.net postfix/smtps/smtpd[2866825]: warning: 77-45-86-207.sta.asta-net.com.pl[77.45.86.207]: SASL PLAIN authentication failed: Aug 12 05:38:51 mail.srvfarm.net postfix/smtps/smtpd[2866825]: lost connection after AUTH from 77-45-86-207.sta.asta-net.com.pl[77.45.86.207] Aug 12 05:39:52 mail.srvfarm.net postfix/smtps/smtpd[2871652]: warning: 77-45-86-207.sta.asta-net.com.pl[77.45.86.207]: SASL PLAIN authentication failed: Aug 12 05:39:52 mail.srvfarm.net postfix/smtps/smtpd[2871652]: lost connection after AUTH from 77-45-86-207.sta.asta-net.com.pl[77.45.86.207] Aug 12 05:44:28 mail.srvfarm.net postfix/smtpd[2868697]: warning: 77-45-86-207.sta.asta-net.com.pl[77.45.86.207]: SASL PLAIN authentication failed: |
2020-08-12 14:31:01 |
| 103.237.58.200 | attackbots | Aug 12 05:09:57 mail.srvfarm.net postfix/smtps/smtpd[2853371]: warning: unknown[103.237.58.200]: SASL PLAIN authentication failed: Aug 12 05:09:57 mail.srvfarm.net postfix/smtps/smtpd[2853371]: lost connection after AUTH from unknown[103.237.58.200] Aug 12 05:17:33 mail.srvfarm.net postfix/smtpd[2866066]: warning: unknown[103.237.58.200]: SASL PLAIN authentication failed: Aug 12 05:17:34 mail.srvfarm.net postfix/smtpd[2866066]: lost connection after AUTH from unknown[103.237.58.200] Aug 12 05:19:43 mail.srvfarm.net postfix/smtps/smtpd[2853558]: warning: unknown[103.237.58.200]: SASL PLAIN authentication failed: |
2020-08-12 14:44:23 |
| 106.12.5.48 | attackbotsspam | Aug 12 05:47:13 amit sshd\[29855\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.5.48 user=root Aug 12 05:47:14 amit sshd\[29855\]: Failed password for root from 106.12.5.48 port 32802 ssh2 Aug 12 05:52:28 amit sshd\[20452\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.5.48 user=root ... |
2020-08-12 14:52:12 |
| 185.234.219.229 | attack | Aug 12 05:09:19 web01.agentur-b-2.de postfix/smtpd[1171201]: warning: unknown[185.234.219.229]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 05:09:19 web01.agentur-b-2.de postfix/smtpd[1171201]: lost connection after AUTH from unknown[185.234.219.229] Aug 12 05:13:17 web01.agentur-b-2.de postfix/smtpd[1171801]: warning: unknown[185.234.219.229]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 05:13:17 web01.agentur-b-2.de postfix/smtpd[1171801]: lost connection after AUTH from unknown[185.234.219.229] Aug 12 05:17:41 web01.agentur-b-2.de postfix/smtpd[1172474]: warning: unknown[185.234.219.229]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-08-12 14:37:54 |
| 179.107.11.134 | attackbots | Aug 12 05:38:30 mail.srvfarm.net postfix/smtps/smtpd[2866826]: warning: unknown[179.107.11.134]: SASL PLAIN authentication failed: Aug 12 05:38:31 mail.srvfarm.net postfix/smtps/smtpd[2866826]: lost connection after AUTH from unknown[179.107.11.134] Aug 12 05:44:24 mail.srvfarm.net postfix/smtpd[2868691]: warning: unknown[179.107.11.134]: SASL PLAIN authentication failed: Aug 12 05:44:24 mail.srvfarm.net postfix/smtpd[2868691]: lost connection after AUTH from unknown[179.107.11.134] Aug 12 05:47:51 mail.srvfarm.net postfix/smtps/smtpd[2873005]: warning: unknown[179.107.11.134]: SASL PLAIN authentication failed: |
2020-08-12 14:25:58 |
| 80.90.135.230 | attackspam | Aug 12 05:06:17 mail.srvfarm.net postfix/smtps/smtpd[2866679]: warning: 80-90-135-230.static.oxid.cz[80.90.135.230]: SASL PLAIN authentication failed: Aug 12 05:06:17 mail.srvfarm.net postfix/smtps/smtpd[2866679]: lost connection after AUTH from 80-90-135-230.static.oxid.cz[80.90.135.230] Aug 12 05:07:19 mail.srvfarm.net postfix/smtps/smtpd[2853558]: warning: 80-90-135-230.static.oxid.cz[80.90.135.230]: SASL PLAIN authentication failed: Aug 12 05:07:19 mail.srvfarm.net postfix/smtps/smtpd[2853558]: lost connection after AUTH from 80-90-135-230.static.oxid.cz[80.90.135.230] Aug 12 05:15:23 mail.srvfarm.net postfix/smtpd[2866067]: warning: 80-90-135-230.static.oxid.cz[80.90.135.230]: SASL PLAIN authentication failed: |
2020-08-12 14:46:54 |
| 170.150.54.4 | attackspam | Aug 12 05:02:47 mail.srvfarm.net postfix/smtps/smtpd[2853845]: warning: unknown[170.150.54.4]: SASL PLAIN authentication failed: Aug 12 05:02:48 mail.srvfarm.net postfix/smtps/smtpd[2853845]: lost connection after AUTH from unknown[170.150.54.4] Aug 12 05:04:40 mail.srvfarm.net postfix/smtpd[2849288]: warning: unknown[170.150.54.4]: SASL PLAIN authentication failed: Aug 12 05:04:41 mail.srvfarm.net postfix/smtpd[2849288]: lost connection after AUTH from unknown[170.150.54.4] Aug 12 05:10:47 mail.srvfarm.net postfix/smtps/smtpd[2853371]: warning: unknown[170.150.54.4]: SASL PLAIN authentication failed: |
2020-08-12 14:42:38 |
| 185.76.10.83 | attack | Mailserver and mailaccount attacks |
2020-08-12 15:07:45 |
| 193.148.70.216 | attackbotsspam | Banned for a week because repeated abuses, for example SSH, but not only |
2020-08-12 14:50:45 |
| 5.188.206.197 | attackspambots | 2020-08-12 08:30:23 dovecot_login authenticator failed for \(\[5.188.206.197\]\) \[5.188.206.197\]: 535 Incorrect authentication data \(set_id=postmaster@nophost.com\) 2020-08-12 08:30:33 dovecot_login authenticator failed for \(\[5.188.206.197\]\) \[5.188.206.197\]: 535 Incorrect authentication data 2020-08-12 08:30:44 dovecot_login authenticator failed for \(\[5.188.206.197\]\) \[5.188.206.197\]: 535 Incorrect authentication data 2020-08-12 08:30:52 dovecot_login authenticator failed for \(\[5.188.206.197\]\) \[5.188.206.197\]: 535 Incorrect authentication data 2020-08-12 08:31:06 dovecot_login authenticator failed for \(\[5.188.206.197\]\) \[5.188.206.197\]: 535 Incorrect authentication data |
2020-08-12 14:50:30 |
| 31.170.61.26 | attackspambots | Aug 12 05:30:26 mail.srvfarm.net postfix/smtps/smtpd[2866647]: warning: unknown[31.170.61.26]: SASL PLAIN authentication failed: Aug 12 05:30:26 mail.srvfarm.net postfix/smtps/smtpd[2866647]: lost connection after AUTH from unknown[31.170.61.26] Aug 12 05:31:13 mail.srvfarm.net postfix/smtpd[2868697]: warning: unknown[31.170.61.26]: SASL PLAIN authentication failed: Aug 12 05:31:13 mail.srvfarm.net postfix/smtpd[2868697]: lost connection after AUTH from unknown[31.170.61.26] Aug 12 05:31:44 mail.srvfarm.net postfix/smtps/smtpd[2866679]: warning: unknown[31.170.61.26]: SASL PLAIN authentication failed: |
2020-08-12 14:34:23 |
| 193.35.51.13 | attackspam | 2020-08-12 08:31:12 dovecot_login authenticator failed for \(\[193.35.51.13\]\) \[193.35.51.13\]: 535 Incorrect authentication data \(set_id=ller@jugend-ohne-grenzen.net\) 2020-08-12 08:31:19 dovecot_login authenticator failed for \(\[193.35.51.13\]\) \[193.35.51.13\]: 535 Incorrect authentication data 2020-08-12 08:31:27 dovecot_login authenticator failed for \(\[193.35.51.13\]\) \[193.35.51.13\]: 535 Incorrect authentication data 2020-08-12 08:31:29 dovecot_login authenticator failed for \(\[193.35.51.13\]\) \[193.35.51.13\]: 535 Incorrect authentication data 2020-08-12 08:31:32 dovecot_login authenticator failed for \(\[193.35.51.13\]\) \[193.35.51.13\]: 535 Incorrect authentication data 2020-08-12 08:31:34 dovecot_login authenticator failed for \(\[193.35.51.13\]\) \[193.35.51.13\]: 535 Incorrect authentication data 2020-08-12 08:31:44 dovecot_login authenticator failed for \(\[193.35.51.13\]\) \[193.35.51.13\]: 535 Incorrect authentication data 2020-08-12 08:31:45 dovecot_login au ... |
2020-08-12 14:36:30 |
| 89.248.167.141 | attack |
|
2020-08-12 15:04:27 |
| 123.207.144.186 | attack | Aug 12 05:48:59 [host] sshd[3886]: pam_unix(sshd:a Aug 12 05:49:01 [host] sshd[3886]: Failed password Aug 12 05:52:37 [host] sshd[4032]: pam_unix(sshd:a |
2020-08-12 14:29:02 |