City: Oschatz
Region: Saxony
Country: Germany
Internet Service Provider: Telekom
Hostname: unknown
Organization: Deutsche Telekom AG
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 84.186.22.96
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60159
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;84.186.22.96. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019060601 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jun 07 02:27:16 CST 2019
;; MSG SIZE rcvd: 116
96.22.186.84.in-addr.arpa domain name pointer p54BA1660.dip0.t-ipconnect.de.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
96.22.186.84.in-addr.arpa name = p54BA1660.dip0.t-ipconnect.de.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 187.85.166.20 | attackspam | Aug 15 01:24:29 mail.srvfarm.net postfix/smtpd[928780]: warning: unknown[187.85.166.20]: SASL PLAIN authentication failed: Aug 15 01:24:30 mail.srvfarm.net postfix/smtpd[928780]: lost connection after AUTH from unknown[187.85.166.20] Aug 15 01:28:49 mail.srvfarm.net postfix/smtps/smtpd[927803]: warning: unknown[187.85.166.20]: SASL PLAIN authentication failed: Aug 15 01:28:49 mail.srvfarm.net postfix/smtps/smtpd[927803]: lost connection after AUTH from unknown[187.85.166.20] Aug 15 01:30:02 mail.srvfarm.net postfix/smtps/smtpd[930971]: warning: unknown[187.85.166.20]: SASL PLAIN authentication failed: |
2020-08-15 14:00:33 |
| 91.236.133.185 | attack | Aug 15 01:55:59 mail.srvfarm.net postfix/smtpd[948606]: warning: unknown[91.236.133.185]: SASL PLAIN authentication failed: Aug 15 01:55:59 mail.srvfarm.net postfix/smtpd[948606]: lost connection after AUTH from unknown[91.236.133.185] Aug 15 02:03:12 mail.srvfarm.net postfix/smtpd[947316]: warning: unknown[91.236.133.185]: SASL PLAIN authentication failed: Aug 15 02:03:12 mail.srvfarm.net postfix/smtpd[947316]: lost connection after AUTH from unknown[91.236.133.185] Aug 15 02:05:41 mail.srvfarm.net postfix/smtpd[948604]: warning: unknown[91.236.133.185]: SASL PLAIN authentication failed: |
2020-08-15 13:54:19 |
| 144.91.65.110 | attackbotsspam | Trying ports that it shouldn't be. |
2020-08-15 14:08:44 |
| 118.25.91.168 | attackspambots | Failed password for root from 118.25.91.168 port 49086 ssh2 |
2020-08-15 14:08:28 |
| 62.210.194.6 | attack | Aug 15 02:57:51 mail.srvfarm.net postfix/smtpd[972036]: lost connection after STARTTLS from r6.news.eu.rvca.com[62.210.194.6] Aug 15 02:58:54 mail.srvfarm.net postfix/smtpd[972891]: lost connection after STARTTLS from r6.news.eu.rvca.com[62.210.194.6] Aug 15 02:59:57 mail.srvfarm.net postfix/smtpd[972632]: lost connection after STARTTLS from r6.news.eu.rvca.com[62.210.194.6] Aug 15 03:02:15 mail.srvfarm.net postfix/smtpd[970999]: lost connection after STARTTLS from r6.news.eu.rvca.com[62.210.194.6] Aug 15 03:03:18 mail.srvfarm.net postfix/smtpd[970729]: lost connection after STARTTLS from r6.news.eu.rvca.com[62.210.194.6] |
2020-08-15 13:56:03 |
| 61.177.172.102 | attackspam | 2020-08-15T09:19:16.323566snf-827550 sshd[3960]: Failed password for root from 61.177.172.102 port 21353 ssh2 2020-08-15T09:19:18.844188snf-827550 sshd[3960]: Failed password for root from 61.177.172.102 port 21353 ssh2 2020-08-15T09:19:21.780359snf-827550 sshd[3960]: Failed password for root from 61.177.172.102 port 21353 ssh2 ... |
2020-08-15 14:22:04 |
| 139.186.68.226 | attack | frenzy |
2020-08-15 14:16:27 |
| 94.102.49.159 | attackbots | Aug 15 08:05:44 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.49.159 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=41383 PROTO=TCP SPT=45696 DPT=22092 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 15 08:10:49 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.49.159 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=10752 PROTO=TCP SPT=45696 DPT=23476 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 15 08:16:24 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.49.159 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=52777 PROTO=TCP SPT=45696 DPT=22157 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 15 08:20:06 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.49.159 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=6156 PROTO=TCP SPT=45696 DPT=22139 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 15 08:22:54 * ... |
2020-08-15 14:33:48 |
| 177.54.251.146 | attack | 2020-08-14 18:38 SMTP:25 IP autobanned - 2 attempts a day |
2020-08-15 14:02:34 |
| 132.145.242.238 | attack | Aug 15 06:27:07 abendstille sshd\[19167\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238 user=root Aug 15 06:27:10 abendstille sshd\[19167\]: Failed password for root from 132.145.242.238 port 45126 ssh2 Aug 15 06:30:58 abendstille sshd\[22529\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238 user=root Aug 15 06:31:01 abendstille sshd\[22529\]: Failed password for root from 132.145.242.238 port 49963 ssh2 Aug 15 06:34:51 abendstille sshd\[26077\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238 user=root ... |
2020-08-15 14:11:28 |
| 194.26.25.97 | attack | [Sat Aug 15 07:14:00 2020] - DDoS Attack From IP: 194.26.25.97 Port: 40449 |
2020-08-15 14:34:08 |
| 94.74.172.113 | attack | Aug 15 01:48:52 mail.srvfarm.net postfix/smtpd[947294]: warning: unknown[94.74.172.113]: SASL PLAIN authentication failed: Aug 15 01:48:52 mail.srvfarm.net postfix/smtpd[947294]: lost connection after AUTH from unknown[94.74.172.113] Aug 15 01:51:12 mail.srvfarm.net postfix/smtps/smtpd[944628]: warning: unknown[94.74.172.113]: SASL PLAIN authentication failed: Aug 15 01:51:12 mail.srvfarm.net postfix/smtps/smtpd[944628]: lost connection after AUTH from unknown[94.74.172.113] Aug 15 01:58:31 mail.srvfarm.net postfix/smtpd[948606]: warning: unknown[94.74.172.113]: SASL PLAIN authentication failed: |
2020-08-15 13:53:23 |
| 45.14.148.141 | attack | Port scan denied |
2020-08-15 14:28:01 |
| 138.122.96.251 | attack | Aug 15 01:41:07 mail.srvfarm.net postfix/smtpd[929464]: warning: unknown[138.122.96.251]: SASL PLAIN authentication failed: Aug 15 01:41:07 mail.srvfarm.net postfix/smtpd[929464]: lost connection after AUTH from unknown[138.122.96.251] Aug 15 01:43:00 mail.srvfarm.net postfix/smtpd[929427]: warning: unknown[138.122.96.251]: SASL PLAIN authentication failed: Aug 15 01:43:00 mail.srvfarm.net postfix/smtpd[929427]: lost connection after AUTH from unknown[138.122.96.251] Aug 15 01:49:36 mail.srvfarm.net postfix/smtpd[947515]: warning: unknown[138.122.96.251]: SASL PLAIN authentication failed: |
2020-08-15 13:50:27 |
| 177.91.188.64 | attackbotsspam | Aug 15 01:27:55 mail.srvfarm.net postfix/smtps/smtpd[927774]: warning: unknown[177.91.188.64]: SASL PLAIN authentication failed: Aug 15 01:27:55 mail.srvfarm.net postfix/smtps/smtpd[927774]: lost connection after AUTH from unknown[177.91.188.64] Aug 15 01:29:54 mail.srvfarm.net postfix/smtpd[929432]: warning: unknown[177.91.188.64]: SASL PLAIN authentication failed: Aug 15 01:29:55 mail.srvfarm.net postfix/smtpd[929432]: lost connection after AUTH from unknown[177.91.188.64] Aug 15 01:35:41 mail.srvfarm.net postfix/smtpd[929438]: warning: unknown[177.91.188.64]: SASL PLAIN authentication failed: |
2020-08-15 14:01:23 |