City: unknown
Region: unknown
Country: Italy
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 94.74.130.254 | attackbotsspam | (smtpauth) Failed SMTP AUTH login from 94.74.130.254 (IR/Iran/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-07-30 16:39:31 plain authenticator failed for ([94.74.130.254]) [94.74.130.254]: 535 Incorrect authentication data (set_id=a.nasiri) |
2020-07-30 20:41:40 |
| 94.74.130.104 | attackspam | Jul 24 13:02:18 mail.srvfarm.net postfix/smtpd[2237961]: warning: unknown[94.74.130.104]: SASL PLAIN authentication failed: Jul 24 13:02:18 mail.srvfarm.net postfix/smtpd[2237961]: lost connection after AUTH from unknown[94.74.130.104] Jul 24 13:08:37 mail.srvfarm.net postfix/smtpd[2236042]: warning: unknown[94.74.130.104]: SASL PLAIN authentication failed: Jul 24 13:08:37 mail.srvfarm.net postfix/smtpd[2236042]: lost connection after AUTH from unknown[94.74.130.104] Jul 24 13:11:38 mail.srvfarm.net postfix/smtps/smtpd[2240708]: warning: unknown[94.74.130.104]: SASL PLAIN authentication failed: |
2020-07-25 01:29:11 |
| 94.74.133.97 | attackspam | SASL PLAIN auth failed: ruser=... |
2020-07-17 06:36:10 |
| 94.74.136.183 | attackspambots | SASL PLAIN auth failed: ruser=... |
2020-07-17 06:35:52 |
| 94.74.134.224 | attack | SASL PLAIN auth failed: ruser=... |
2020-07-16 08:30:25 |
| 94.74.135.142 | attackspambots | Automatic report - Port Scan Attack |
2020-07-12 18:23:27 |
| 94.74.132.203 | attackbots | 07/10/2020-23:57:06.886914 94.74.132.203 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2020-07-11 12:53:43 |
| 94.74.134.239 | attackbotsspam | Jun 25 22:16:36 mail.srvfarm.net postfix/smtpd[2072678]: warning: unknown[94.74.134.239]: SASL PLAIN authentication failed: Jun 25 22:16:36 mail.srvfarm.net postfix/smtpd[2072678]: lost connection after AUTH from unknown[94.74.134.239] Jun 25 22:17:31 mail.srvfarm.net postfix/smtps/smtpd[2071633]: warning: unknown[94.74.134.239]: SASL PLAIN authentication failed: Jun 25 22:17:31 mail.srvfarm.net postfix/smtps/smtpd[2071633]: lost connection after AUTH from unknown[94.74.134.239] Jun 25 22:18:39 mail.srvfarm.net postfix/smtpd[2071449]: warning: unknown[94.74.134.239]: SASL PLAIN authentication failed: |
2020-06-26 05:31:31 |
| 94.74.134.199 | attack | Jun 18 16:15:24 mail.srvfarm.net postfix/smtps/smtpd[1525600]: warning: unknown[94.74.134.199]: SASL PLAIN authentication failed: Jun 18 16:15:24 mail.srvfarm.net postfix/smtps/smtpd[1525600]: lost connection after AUTH from unknown[94.74.134.199] Jun 18 16:20:16 mail.srvfarm.net postfix/smtpd[1533191]: warning: unknown[94.74.134.199]: SASL PLAIN authentication failed: Jun 18 16:20:16 mail.srvfarm.net postfix/smtpd[1533191]: lost connection after AUTH from unknown[94.74.134.199] Jun 18 16:20:24 mail.srvfarm.net postfix/smtps/smtpd[1518891]: warning: unknown[94.74.134.199]: SASL PLAIN authentication failed: |
2020-06-19 00:55:34 |
| 94.74.134.199 | attackspambots | Jun 16 05:31:17 mail.srvfarm.net postfix/smtps/smtpd[937456]: warning: unknown[94.74.134.199]: SASL PLAIN authentication failed: Jun 16 05:31:17 mail.srvfarm.net postfix/smtps/smtpd[937456]: lost connection after AUTH from unknown[94.74.134.199] Jun 16 05:32:25 mail.srvfarm.net postfix/smtpd[936050]: warning: unknown[94.74.134.199]: SASL PLAIN authentication failed: Jun 16 05:32:25 mail.srvfarm.net postfix/smtpd[936050]: lost connection after AUTH from unknown[94.74.134.199] Jun 16 05:32:41 mail.srvfarm.net postfix/smtpd[953476]: warning: unknown[94.74.134.199]: SASL PLAIN authentication failed: |
2020-06-16 16:20:34 |
| 94.74.135.201 | attack | Jun 16 05:29:12 mail.srvfarm.net postfix/smtps/smtpd[937454]: warning: unknown[94.74.135.201]: SASL PLAIN authentication failed: Jun 16 05:29:12 mail.srvfarm.net postfix/smtps/smtpd[937454]: lost connection after AUTH from unknown[94.74.135.201] Jun 16 05:37:45 mail.srvfarm.net postfix/smtps/smtpd[937456]: warning: unknown[94.74.135.201]: SASL PLAIN authentication failed: Jun 16 05:37:46 mail.srvfarm.net postfix/smtps/smtpd[937456]: lost connection after AUTH from unknown[94.74.135.201] Jun 16 05:39:09 mail.srvfarm.net postfix/smtpd[936017]: warning: unknown[94.74.135.201]: SASL PLAIN authentication failed: |
2020-06-16 15:47:20 |
| 94.74.133.234 | attackbots | Jun 5 15:11:23 mail.srvfarm.net postfix/smtps/smtpd[3108734]: warning: unknown[94.74.133.234]: SASL PLAIN authentication failed: Jun 5 15:11:23 mail.srvfarm.net postfix/smtps/smtpd[3108734]: lost connection after AUTH from unknown[94.74.133.234] Jun 5 15:14:17 mail.srvfarm.net postfix/smtpd[3109366]: warning: unknown[94.74.133.234]: SASL PLAIN authentication failed: Jun 5 15:14:17 mail.srvfarm.net postfix/smtpd[3109366]: lost connection after AUTH from unknown[94.74.133.234] Jun 5 15:15:56 mail.srvfarm.net postfix/smtpd[3109220]: warning: unknown[94.74.133.234]: SASL PLAIN authentication failed: |
2020-06-08 01:00:21 |
| 94.74.134.190 | attackbotsspam | Jun 6 03:23:13 mail.srvfarm.net postfix/smtps/smtpd[3484883]: warning: unknown[94.74.134.190]: SASL PLAIN authentication failed: Jun 6 03:23:13 mail.srvfarm.net postfix/smtps/smtpd[3484883]: lost connection after AUTH from unknown[94.74.134.190] Jun 6 03:27:01 mail.srvfarm.net postfix/smtpd[3483002]: warning: unknown[94.74.134.190]: SASL PLAIN authentication failed: Jun 6 03:27:01 mail.srvfarm.net postfix/smtpd[3483002]: lost connection after AUTH from unknown[94.74.134.190] Jun 6 03:29:54 mail.srvfarm.net postfix/smtps/smtpd[3498473]: warning: unknown[94.74.134.190]: SASL PLAIN authentication failed: |
2020-06-08 00:59:57 |
| 94.74.133.243 | attackbots | Jun 4 13:16:29 mail.srvfarm.net postfix/smtpd[2478761]: warning: unknown[94.74.133.243]: SASL PLAIN authentication failed: Jun 4 13:16:30 mail.srvfarm.net postfix/smtpd[2478761]: lost connection after AUTH from unknown[94.74.133.243] Jun 4 13:18:55 mail.srvfarm.net postfix/smtps/smtpd[2495491]: warning: unknown[94.74.133.243]: SASL PLAIN authentication failed: Jun 4 13:18:56 mail.srvfarm.net postfix/smtps/smtpd[2495491]: lost connection after AUTH from unknown[94.74.133.243] Jun 4 13:26:15 mail.srvfarm.net postfix/smtps/smtpd[2492413]: warning: unknown[94.74.133.243]: SASL PLAIN authentication failed: |
2020-06-05 03:35:51 |
| 94.74.137.248 | attackspam | MultiHost/MultiPort Probe, Scan, Hack - |
2019-10-04 14:07:03 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.74.13.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16358
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;94.74.13.29. IN A
;; AUTHORITY SECTION:
. 112 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024052601 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 26 20:17:35 CST 2024
;; MSG SIZE rcvd: 10429.13.74.94.in-addr.arpa domain name pointer host-94-74-13-29.aemnet.it.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
29.13.74.94.in-addr.arpa name = host-94-74-13-29.aemnet.it.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.175.148 | attack | Dec 16 23:26:32 SilenceServices sshd[25570]: Failed password for root from 222.186.175.148 port 33030 ssh2 Dec 16 23:26:35 SilenceServices sshd[25570]: Failed password for root from 222.186.175.148 port 33030 ssh2 Dec 16 23:26:46 SilenceServices sshd[25570]: Failed password for root from 222.186.175.148 port 33030 ssh2 Dec 16 23:26:46 SilenceServices sshd[25570]: error: maximum authentication attempts exceeded for root from 222.186.175.148 port 33030 ssh2 [preauth] |
2019-12-17 06:46:02 |
| 124.232.163.91 | attackspam | 2019-12-16T21:53:25.595491abusebot-5.cloudsearch.cf sshd\[8843\]: Invalid user postgres from 124.232.163.91 port 48556 2019-12-16T21:53:25.600916abusebot-5.cloudsearch.cf sshd\[8843\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.232.163.91 2019-12-16T21:53:27.352662abusebot-5.cloudsearch.cf sshd\[8843\]: Failed password for invalid user postgres from 124.232.163.91 port 48556 ssh2 2019-12-16T21:59:20.256928abusebot-5.cloudsearch.cf sshd\[8890\]: Invalid user armelia from 124.232.163.91 port 34394 |
2019-12-17 06:53:48 |
| 154.8.232.205 | attackspambots | Dec 16 17:46:39 linuxvps sshd\[12474\]: Invalid user vcsa from 154.8.232.205 Dec 16 17:46:39 linuxvps sshd\[12474\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.8.232.205 Dec 16 17:46:40 linuxvps sshd\[12474\]: Failed password for invalid user vcsa from 154.8.232.205 port 56332 ssh2 Dec 16 17:53:18 linuxvps sshd\[16899\]: Invalid user slap from 154.8.232.205 Dec 16 17:53:18 linuxvps sshd\[16899\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.8.232.205 |
2019-12-17 06:58:41 |
| 62.234.66.50 | attackbots | Dec 16 12:47:34 kapalua sshd\[21865\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.66.50 user=root Dec 16 12:47:36 kapalua sshd\[21865\]: Failed password for root from 62.234.66.50 port 44979 ssh2 Dec 16 12:53:21 kapalua sshd\[22506\]: Invalid user bishell from 62.234.66.50 Dec 16 12:53:21 kapalua sshd\[22506\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.66.50 Dec 16 12:53:23 kapalua sshd\[22506\]: Failed password for invalid user bishell from 62.234.66.50 port 44260 ssh2 |
2019-12-17 07:05:01 |
| 94.191.47.31 | attackbots | Dec 16 22:41:54 localhost sshd\[36546\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.47.31 user=root Dec 16 22:41:56 localhost sshd\[36546\]: Failed password for root from 94.191.47.31 port 47258 ssh2 Dec 16 22:47:59 localhost sshd\[36734\]: Invalid user lee from 94.191.47.31 port 36742 Dec 16 22:47:59 localhost sshd\[36734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.47.31 Dec 16 22:48:01 localhost sshd\[36734\]: Failed password for invalid user lee from 94.191.47.31 port 36742 ssh2 ... |
2019-12-17 07:06:46 |
| 124.30.44.214 | attackspambots | Dec 16 23:51:40 ns381471 sshd[16735]: Failed password for root from 124.30.44.214 port 19166 ssh2 |
2019-12-17 06:59:57 |
| 181.130.114.152 | attackbots | Dec 16 12:22:48 php1 sshd\[9255\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.130.114.152 user=root Dec 16 12:22:49 php1 sshd\[9255\]: Failed password for root from 181.130.114.152 port 41306 ssh2 Dec 16 12:28:37 php1 sshd\[9794\]: Invalid user horce from 181.130.114.152 Dec 16 12:28:37 php1 sshd\[9794\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.130.114.152 Dec 16 12:28:38 php1 sshd\[9794\]: Failed password for invalid user horce from 181.130.114.152 port 47068 ssh2 |
2019-12-17 06:42:56 |
| 116.203.148.211 | attackspambots | Dec 17 00:52:59 server sshd\[8839\]: Invalid user steam from 116.203.148.211 Dec 17 00:52:59 server sshd\[8839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.211.148.203.116.clients.your-server.de Dec 17 00:53:01 server sshd\[8839\]: Failed password for invalid user steam from 116.203.148.211 port 32806 ssh2 Dec 17 00:59:23 server sshd\[10552\]: Invalid user forest from 116.203.148.211 Dec 17 00:59:23 server sshd\[10552\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.211.148.203.116.clients.your-server.de ... |
2019-12-17 06:49:55 |
| 154.8.185.122 | attack | 2019-12-16T22:59:17.615650centos sshd\[13940\]: Invalid user eminem from 154.8.185.122 port 36486 2019-12-16T22:59:17.624172centos sshd\[13940\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.8.185.122 2019-12-16T22:59:20.032266centos sshd\[13940\]: Failed password for invalid user eminem from 154.8.185.122 port 36486 ssh2 |
2019-12-17 06:51:12 |
| 206.189.26.171 | attackbotsspam | Dec 16 13:03:47 php1 sshd\[13234\]: Invalid user guest from 206.189.26.171 Dec 16 13:03:47 php1 sshd\[13234\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.26.171 Dec 16 13:03:49 php1 sshd\[13234\]: Failed password for invalid user guest from 206.189.26.171 port 33440 ssh2 Dec 16 13:08:51 php1 sshd\[13743\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.26.171 user=daemon Dec 16 13:08:54 php1 sshd\[13743\]: Failed password for daemon from 206.189.26.171 port 38804 ssh2 |
2019-12-17 07:10:21 |
| 142.44.160.214 | attack | Dec 16 22:59:14 cvbnet sshd[18921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.160.214 Dec 16 22:59:16 cvbnet sshd[18921]: Failed password for invalid user cude from 142.44.160.214 port 35106 ssh2 ... |
2019-12-17 06:59:00 |
| 203.186.57.191 | attackbotsspam | Dec 17 00:49:48 server sshd\[7769\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203186057191.static.ctinets.com user=mysql Dec 17 00:49:50 server sshd\[7769\]: Failed password for mysql from 203.186.57.191 port 44668 ssh2 Dec 17 00:59:17 server sshd\[10524\]: Invalid user guschelbauer from 203.186.57.191 Dec 17 00:59:17 server sshd\[10524\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203186057191.static.ctinets.com Dec 17 00:59:19 server sshd\[10524\]: Failed password for invalid user guschelbauer from 203.186.57.191 port 37762 ssh2 ... |
2019-12-17 06:52:08 |
| 129.211.166.249 | attackbotsspam | Dec 16 23:29:07 sd-53420 sshd\[24550\]: User root from 129.211.166.249 not allowed because none of user's groups are listed in AllowGroups Dec 16 23:29:07 sd-53420 sshd\[24550\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.166.249 user=root Dec 16 23:29:09 sd-53420 sshd\[24550\]: Failed password for invalid user root from 129.211.166.249 port 47200 ssh2 Dec 16 23:35:06 sd-53420 sshd\[26820\]: Invalid user nfs from 129.211.166.249 Dec 16 23:35:06 sd-53420 sshd\[26820\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.166.249 ... |
2019-12-17 06:48:56 |
| 91.123.198.239 | attackbotsspam | Dec 16 14:57:16 home sshd[11561]: Invalid user ubnt from 91.123.198.239 port 33445 Dec 16 14:57:16 home sshd[11561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.123.198.239 Dec 16 14:57:16 home sshd[11561]: Invalid user ubnt from 91.123.198.239 port 33445 Dec 16 14:57:18 home sshd[11561]: Failed password for invalid user ubnt from 91.123.198.239 port 33445 ssh2 Dec 16 15:05:22 home sshd[11644]: Invalid user haugsrud from 91.123.198.239 port 45686 Dec 16 15:05:22 home sshd[11644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.123.198.239 Dec 16 15:05:22 home sshd[11644]: Invalid user haugsrud from 91.123.198.239 port 45686 Dec 16 15:05:24 home sshd[11644]: Failed password for invalid user haugsrud from 91.123.198.239 port 45686 ssh2 Dec 16 15:12:03 home sshd[11714]: Invalid user sauze from 91.123.198.239 port 49914 Dec 16 15:12:03 home sshd[11714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=s |
2019-12-17 06:47:31 |
| 157.245.235.244 | attackbotsspam | Dec 17 00:38:06 sauna sshd[203294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.235.244 Dec 17 00:38:07 sauna sshd[203294]: Failed password for invalid user illyana from 157.245.235.244 port 49488 ssh2 ... |
2019-12-17 06:48:36 |