170.0.48.139 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: Webnet .

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Unauthorized connection attempt from IP address 170.0.48.139 on port 587	2020-07-07 17:57:09

Comments on same subnet:

IP	Type	Details	Datetime
170.0.48.230	attackspam	Icarus honeypot on github	2020-08-10 20:14:25
170.0.48.183	attack	(smtpauth) Failed SMTP AUTH login from 170.0.48.183 (BR/Brazil/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-07-04 03:44:31 plain authenticator failed for ([170.0.48.183]) [170.0.48.183]: 535 Incorrect authentication data (set_id=ar.davoudi@sunirco.ir)	2020-07-04 11:36:59
170.0.48.177	attackspam	Jun 18 05:31:52 mail.srvfarm.net postfix/smtps/smtpd[1340853]: warning: unknown[170.0.48.177]: SASL PLAIN authentication failed: Jun 18 05:31:52 mail.srvfarm.net postfix/smtps/smtpd[1340853]: lost connection after AUTH from unknown[170.0.48.177] Jun 18 05:36:58 mail.srvfarm.net postfix/smtpd[1342867]: warning: unknown[170.0.48.177]: SASL PLAIN authentication failed: Jun 18 05:36:58 mail.srvfarm.net postfix/smtpd[1342867]: lost connection after AUTH from unknown[170.0.48.177] Jun 18 05:41:29 mail.srvfarm.net postfix/smtps/smtpd[1343122]: warning: unknown[170.0.48.177]: SASL PLAIN authentication failed:	2020-06-18 16:34:09
170.0.48.161	attack	Jun 13 22:43:59 mail.srvfarm.net postfix/smtpd[1294848]: lost connection after CONNECT from unknown[170.0.48.161] Jun 13 22:48:14 mail.srvfarm.net postfix/smtpd[1294828]: warning: unknown[170.0.48.161]: SASL PLAIN authentication failed: Jun 13 22:48:14 mail.srvfarm.net postfix/smtpd[1294828]: lost connection after AUTH from unknown[170.0.48.161] Jun 13 22:50:00 mail.srvfarm.net postfix/smtpd[1295658]: warning: unknown[170.0.48.161]: SASL PLAIN authentication failed: Jun 13 22:50:01 mail.srvfarm.net postfix/smtpd[1295658]: lost connection after AUTH from unknown[170.0.48.161]	2020-06-14 08:36:15
170.0.48.177	attack	Jun 8 05:16:23 mail.srvfarm.net postfix/smtpd[669639]: warning: unknown[170.0.48.177]: SASL PLAIN authentication failed: Jun 8 05:16:23 mail.srvfarm.net postfix/smtpd[669639]: lost connection after AUTH from unknown[170.0.48.177] Jun 8 05:17:09 mail.srvfarm.net postfix/smtpd[671308]: warning: unknown[170.0.48.177]: SASL PLAIN authentication failed: Jun 8 05:17:09 mail.srvfarm.net postfix/smtpd[671308]: lost connection after AUTH from unknown[170.0.48.177] Jun 8 05:25:47 mail.srvfarm.net postfix/smtps/smtpd[671676]: warning: unknown[170.0.48.177]: SASL PLAIN authentication failed:	2020-06-08 18:41:50
170.0.48.22	attackspam	Brute force attempt	2019-10-19 06:21:09

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 170.0.48.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42775
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;170.0.48.139.			IN	A

;; AUTHORITY SECTION:
.			269	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020070700 1800 900 604800 86400

;; Query time: 131 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jul 07 17:57:05 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 139.48.0.170.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.48.0.170.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
61.158.186.84	attackspam	Brute force attack stopped by firewall	2019-06-27 10:05:12
14.169.132.116	attackbotsspam	Jun 27 01:52:00 elektron postfix/smtpd\[25017\]: NOQUEUE: reject: RCPT from unknown\[14.169.132.116\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[14.169.132.116\]\; from=\ to=\ proto=ESMTP helo=\<\[185.180.222.147\]\> Jun 27 01:52:01 elektron postfix/smtpd\[25017\]: NOQUEUE: reject: RCPT from unknown\[14.169.132.116\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[14.169.132.116\]\; from=\ to=\ proto=ESMTP helo=\<\[185.180.222.147\]\> Jun 27 01:52:01 elektron postfix/smtpd\[25017\]: NOQUEUE: reject: RCPT from unknown\[14.169.132.116\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[14.169.132.116\]\; from=\ to=\ proto=ESMTP helo=\<\[185.180.222.147\]\> Jun 27 01:52:01 elektron postfix/smtpd\[25017\]: NOQUEUE: reject: RCPT from unknown\[14.169.132.116\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[14.169.132.116\]\; from=\	2019-06-27 09:58:12
221.224.114.229	attackspam	Brute force attack stopped by firewall	2019-06-27 10:03:55
222.187.41.10	attackbotsspam	Brute force attack to crack SMTP password (port 25 / 587)	2019-06-27 10:02:32
46.229.168.130	attack	Brute force attack stopped by firewall	2019-06-27 10:14:37
220.167.100.60	attack	vps1:sshd-InvalidUser	2019-06-27 10:23:21
120.209.233.191	attackspam	Brute force attack stopped by firewall	2019-06-27 10:01:07
60.173.79.120	attackspam	Brute force attack stopped by firewall	2019-06-27 09:55:04
162.144.72.163	attack	Jun 27 02:27:43 marvibiene sshd[46071]: Invalid user user from 162.144.72.163 port 56016 Jun 27 02:27:43 marvibiene sshd[46071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.144.72.163 Jun 27 02:27:43 marvibiene sshd[46071]: Invalid user user from 162.144.72.163 port 56016 Jun 27 02:27:45 marvibiene sshd[46071]: Failed password for invalid user user from 162.144.72.163 port 56016 ssh2 ...	2019-06-27 10:35:40
62.4.14.206	attackspambots	Brute force attack stopped by firewall	2019-06-27 10:16:53
36.66.235.70	attackspambots	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-06-26 02:16:08,830 INFO [shellcode_manager] (36.66.235.70) no match, writing hexdump (83a2344dcd8e83e3f32523758980b35a :2337261) - MS17010 (EternalBlue)	2019-06-27 10:01:35
115.165.0.224	attackspambots	Jun 27 01:27:33 vps647732 sshd[10444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.165.0.224 Jun 27 01:27:34 vps647732 sshd[10444]: Failed password for invalid user 1q from 115.165.0.224 port 48162 ssh2 ...	2019-06-27 10:24:16
5.9.66.153	attack	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	2019-06-27 10:14:59
46.229.168.134	attackbots	Brute force attack stopped by firewall	2019-06-27 10:10:31
110.170.40.252	attackbotsspam	Jun 27 00:51:24 nextcloud sshd\[21526\]: Invalid user cezar from 110.170.40.252 Jun 27 00:51:24 nextcloud sshd\[21526\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.170.40.252 Jun 27 00:51:26 nextcloud sshd\[21526\]: Failed password for invalid user cezar from 110.170.40.252 port 36044 ssh2 ...	2019-06-27 10:21:04

Recently Reported IPs

7.13.70.105	127.11.68.34	230.94.189.117	243.20.77.75
170.233.69.102	172.82.239.23	172.82.239.21	78.209.25.177
172.82.230.4	244.121.235.181	121.104.56.139	66.107.8.161
172.82.230.3	231.148.4.207	141.115.148.250	219.124.154.22
95.166.62.145	149.72.35.126	28.2.147.118	168.113.141.197