City: unknown
Region: unknown
Country: Germany
Internet Service Provider: 1&1 Telecom GmbH
Hostname: unknown
Organization: unknown
Usage Type: Fixed Line ISP
| Type | Details | Datetime |
|---|---|---|
| attackspam | Invalid user admin from 92.116.1.146 port 34199 |
2019-08-23 22:47:41 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 92.116.194.101 | attackbots | Invalid user ry from 92.116.194.101 port 35044 |
2020-04-22 02:47:14 |
| 92.116.194.101 | attack | Invalid user ry from 92.116.194.101 port 35044 |
2020-04-20 23:17:49 |
| 92.116.14.104 | attack | repeated ssh bruteforce attempts |
2020-04-14 08:39:07 |
| 92.116.134.222 | attackspambots | 2019-11-01T06:05:22.554Z CLOSE host=92.116.134.222 port=33412 fd=4 time=30.031 bytes=50 ... |
2020-03-12 23:08:34 |
| 92.116.164.245 | attackbotsspam | 2019-12-08T04:45:39.012Z CLOSE host=92.116.164.245 port=45410 fd=4 time=30.023 bytes=34 ... |
2020-03-12 23:07:48 |
| 92.116.132.209 | attackspambots | Automatic report - Banned IP Access |
2020-03-03 13:31:26 |
| 92.116.160.65 | attackbots | Feb 27 13:08:18 mx01 sshd[14143]: Invalid user lzhou from 92.116.160.65 Feb 27 13:08:18 mx01 sshd[14143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.116.160.65 Feb 27 13:08:20 mx01 sshd[14143]: Failed password for invalid user lzhou from 92.116.160.65 port 33834 ssh2 Feb 27 13:08:20 mx01 sshd[14143]: Received disconnect from 92.116.160.65: 11: Bye Bye [preauth] Feb 27 14:59:08 mx01 sshd[28553]: Invalid user ftpuser from 92.116.160.65 Feb 27 14:59:08 mx01 sshd[28553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.116.160.65 Feb 27 14:59:10 mx01 sshd[28553]: Failed password for invalid user ftpuser from 92.116.160.65 port 51504 ssh2 Feb 27 14:59:10 mx01 sshd[28553]: Received disconnect from 92.116.160.65: 11: Bye Bye [preauth] Feb 27 15:00:16 mx01 sshd[28815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.116.160.65 user=www-data Feb........ ------------------------------- |
2020-02-28 03:39:18 |
| 92.116.141.214 | attackspam | Scanning |
2020-01-16 05:12:21 |
| 92.116.138.74 | attackbotsspam | Fail2Ban |
2020-01-01 07:22:33 |
| 92.116.147.81 | attack | Scanning |
2019-12-13 21:48:12 |
| 92.116.134.0 | attackspam | Dec 6 01:04:43 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 92.116.134.0 port 47222 ssh2 (target: 158.69.100.138:22, password: dogg1xvoao) Dec 6 01:05:05 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 92.116.134.0 port 33862 ssh2 (target: 158.69.100.138:22, password: r.r) Dec 6 01:05:21 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 92.116.134.0 port 44878 ssh2 (target: 158.69.100.138:22, password: password) Dec 6 01:05:36 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 92.116.134.0 port 52344 ssh2 (target: 158.69.100.138:22, password: 123456) Dec 6 01:06:00 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 92.116.134.0 port 60328 ssh2 (target: 158.69.100.138:22, password: r.r123) Dec 6 01:06:23 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 92.116.134.0 port 43532 ssh2 (target: 158.69.100.138:22, password: 123456789) Dec 6 01:06:44 wildwolf ssh-honeypotd[26164]: Failed password for r.r fr........ ------------------------------ |
2019-12-06 20:06:24 |
| 92.116.167.138 | attackspam | Automatic report - Banned IP Access |
2019-11-23 22:21:41 |
| 92.116.165.116 | attackbotsspam | SSH-bruteforce attempts |
2019-11-19 23:52:03 |
| 92.116.109.4 | attack | Fail2Ban Ban Triggered |
2019-10-18 05:56:22 |
| 92.116.120.125 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/92.116.120.125/ DE - 1H : (64) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : DE NAME ASN : ASN8881 IP : 92.116.120.125 CIDR : 92.116.64.0/18 PREFIX COUNT : 472 UNIQUE IP COUNT : 1347328 WYKRYTE ATAKI Z ASN8881 : 1H - 1 3H - 1 6H - 1 12H - 3 24H - 4 DateTime : 2019-10-08 13:54:10 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-08 22:30:19 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 92.116.1.146
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 762
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;92.116.1.146. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019082300 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Aug 23 22:47:33 CST 2019
;; MSG SIZE rcvd: 116Host 146.1.116.92.in-addr.arpa. not found: 3(NXDOMAIN)Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 146.1.116.92.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 180.76.167.78 | attack | frenzy |
2020-08-15 16:45:52 |
| 190.110.35.131 | attack | Aug 15 00:09:20 mail.srvfarm.net postfix/smtpd[848719]: warning: unknown[190.110.35.131]: SASL PLAIN authentication failed: Aug 15 00:09:20 mail.srvfarm.net postfix/smtpd[848719]: lost connection after AUTH from unknown[190.110.35.131] Aug 15 00:15:33 mail.srvfarm.net postfix/smtpd[741824]: warning: unknown[190.110.35.131]: SASL PLAIN authentication failed: Aug 15 00:15:33 mail.srvfarm.net postfix/smtpd[741824]: lost connection after AUTH from unknown[190.110.35.131] Aug 15 00:16:15 mail.srvfarm.net postfix/smtps/smtpd[739406]: warning: unknown[190.110.35.131]: SASL PLAIN authentication failed: |
2020-08-15 17:04:07 |
| 177.87.253.120 | attack | Aug 15 02:52:34 mail.srvfarm.net postfix/smtpd[972891]: warning: unknown[177.87.253.120]: SASL PLAIN authentication failed: Aug 15 02:52:35 mail.srvfarm.net postfix/smtpd[972891]: lost connection after AUTH from unknown[177.87.253.120] Aug 15 02:52:40 mail.srvfarm.net postfix/smtpd[970729]: warning: unknown[177.87.253.120]: SASL PLAIN authentication failed: Aug 15 02:52:41 mail.srvfarm.net postfix/smtpd[970729]: lost connection after AUTH from unknown[177.87.253.120] Aug 15 02:57:12 mail.srvfarm.net postfix/smtpd[972858]: warning: unknown[177.87.253.120]: SASL PLAIN authentication failed: |
2020-08-15 17:06:31 |
| 179.124.50.92 | attackbots | Aug 15 00:26:40 mail.srvfarm.net postfix/smtps/smtpd[893716]: warning: unknown[179.124.50.92]: SASL PLAIN authentication failed: Aug 15 00:26:41 mail.srvfarm.net postfix/smtps/smtpd[893716]: lost connection after AUTH from unknown[179.124.50.92] Aug 15 00:32:28 mail.srvfarm.net postfix/smtpd[909357]: warning: unknown[179.124.50.92]: SASL PLAIN authentication failed: Aug 15 00:32:30 mail.srvfarm.net postfix/smtpd[909357]: lost connection after AUTH from unknown[179.124.50.92] Aug 15 00:33:10 mail.srvfarm.net postfix/smtps/smtpd[893682]: warning: unknown[179.124.50.92]: SASL PLAIN authentication failed: |
2020-08-15 17:05:21 |
| 179.27.60.34 | attack | Failed password for root from 179.27.60.34 port 46298 ssh2 |
2020-08-15 16:57:48 |
| 195.136.43.135 | attack | Aug 14 23:44:03 mail.srvfarm.net postfix/smtpd[736665]: warning: unknown[195.136.43.135]: SASL PLAIN authentication failed: Aug 14 23:44:03 mail.srvfarm.net postfix/smtpd[736665]: lost connection after AUTH from unknown[195.136.43.135] Aug 14 23:44:58 mail.srvfarm.net postfix/smtps/smtpd[734717]: warning: unknown[195.136.43.135]: SASL PLAIN authentication failed: Aug 14 23:44:58 mail.srvfarm.net postfix/smtps/smtpd[734717]: lost connection after AUTH from unknown[195.136.43.135] Aug 14 23:48:01 mail.srvfarm.net postfix/smtpd[738025]: warning: unknown[195.136.43.135]: SASL PLAIN authentication failed: |
2020-08-15 17:14:54 |
| 177.154.237.66 | attackbotsspam | Aug 15 00:25:11 mail.srvfarm.net postfix/smtps/smtpd[908458]: warning: unknown[177.154.237.66]: SASL PLAIN authentication failed: Aug 15 00:25:11 mail.srvfarm.net postfix/smtps/smtpd[908458]: lost connection after AUTH from unknown[177.154.237.66] Aug 15 00:27:37 mail.srvfarm.net postfix/smtpd[906759]: warning: unknown[177.154.237.66]: SASL PLAIN authentication failed: Aug 15 00:27:37 mail.srvfarm.net postfix/smtpd[906759]: lost connection after AUTH from unknown[177.154.237.66] Aug 15 00:30:06 mail.srvfarm.net postfix/smtps/smtpd[908454]: warning: unknown[177.154.237.66]: SASL PLAIN authentication failed: |
2020-08-15 17:06:14 |
| 103.129.64.182 | attackbots | Aug 14 23:57:25 mail.srvfarm.net postfix/smtpd[738028]: warning: unknown[103.129.64.182]: SASL PLAIN authentication failed: Aug 14 23:57:25 mail.srvfarm.net postfix/smtpd[738028]: lost connection after AUTH from unknown[103.129.64.182] Aug 15 00:01:20 mail.srvfarm.net postfix/smtps/smtpd[740203]: warning: unknown[103.129.64.182]: SASL PLAIN authentication failed: Aug 15 00:01:20 mail.srvfarm.net postfix/smtps/smtpd[740203]: lost connection after AUTH from unknown[103.129.64.182] Aug 15 00:02:43 mail.srvfarm.net postfix/smtps/smtpd[739406]: warning: unknown[103.129.64.182]: SASL PLAIN authentication failed: |
2020-08-15 17:22:46 |
| 125.110.253.145 | attackbots | Aug 15 00:38:15 web02.agentur-b-2.de pure-ftpd: (?@125.110.253.145) [WARNING] Authentication failed for user [anonymous] Aug 15 00:38:22 web02.agentur-b-2.de pure-ftpd: (?@125.110.253.145) [WARNING] Authentication failed for user [www] Aug 15 00:38:29 web02.agentur-b-2.de pure-ftpd: (?@125.110.253.145) [WARNING] Authentication failed for user [www] Aug 15 00:38:39 web02.agentur-b-2.de pure-ftpd: (?@125.110.253.145) [WARNING] Authentication failed for user [www] Aug 15 00:38:46 web02.agentur-b-2.de pure-ftpd: (?@125.110.253.145) [WARNING] Authentication failed for user [www] |
2020-08-15 17:08:53 |
| 64.225.47.15 | attackspambots | Aug 14 21:31:53 hanapaa sshd\[6889\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.47.15 user=root Aug 14 21:31:55 hanapaa sshd\[6889\]: Failed password for root from 64.225.47.15 port 35554 ssh2 Aug 14 21:35:48 hanapaa sshd\[7134\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.47.15 user=root Aug 14 21:35:50 hanapaa sshd\[7134\]: Failed password for root from 64.225.47.15 port 45478 ssh2 Aug 14 21:39:33 hanapaa sshd\[7502\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.47.15 user=root |
2020-08-15 16:50:16 |
| 191.53.238.191 | attack | Aug 14 23:47:46 mail.srvfarm.net postfix/smtpd[738025]: warning: unknown[191.53.238.191]: SASL PLAIN authentication failed: Aug 14 23:47:46 mail.srvfarm.net postfix/smtpd[738025]: lost connection after AUTH from unknown[191.53.238.191] Aug 14 23:51:38 mail.srvfarm.net postfix/smtps/smtpd[734717]: warning: unknown[191.53.238.191]: SASL PLAIN authentication failed: Aug 14 23:51:39 mail.srvfarm.net postfix/smtps/smtpd[734717]: lost connection after AUTH from unknown[191.53.238.191] Aug 14 23:57:14 mail.srvfarm.net postfix/smtps/smtpd[739406]: warning: unknown[191.53.238.191]: SASL PLAIN authentication failed: |
2020-08-15 17:15:44 |
| 42.236.10.116 | attackbots | Automatic report - Banned IP Access |
2020-08-15 16:59:44 |
| 104.215.94.133 | attack | Aug 15 05:52:19 haigwepa dovecot: auth-worker(26741): sql(cistes@pupat-ghestem.net,104.215.94.133, |
2020-08-15 16:58:51 |
| 218.92.0.172 | attackspam | Banned for a week because repeated abuses, for example SSH, but not only |
2020-08-15 16:46:13 |
| 189.91.5.209 | attackspam | Aug 15 00:27:45 mail.srvfarm.net postfix/smtpd[908818]: warning: unknown[189.91.5.209]: SASL PLAIN authentication failed: Aug 15 00:27:46 mail.srvfarm.net postfix/smtpd[908818]: lost connection after AUTH from unknown[189.91.5.209] Aug 15 00:31:05 mail.srvfarm.net postfix/smtps/smtpd[908976]: warning: unknown[189.91.5.209]: SASL PLAIN authentication failed: Aug 15 00:31:06 mail.srvfarm.net postfix/smtps/smtpd[908976]: lost connection after AUTH from unknown[189.91.5.209] Aug 15 00:37:43 mail.srvfarm.net postfix/smtpd[910653]: warning: unknown[189.91.5.209]: SASL PLAIN authentication failed: |
2020-08-15 17:04:23 |