212.48.74.8 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
212.48.74.27	attackbots	Oct 11 22:35:34 web-01 postfix/smtpd[5375]: NOQUEUE: reject: RCPT from heat.forensic-accounting-information.com[185.245.218.60]: 550 5.1.1 : Recipient address rejected: User unknown in virtual mailbox table; from= to= proto=ESMTP helo=	2020-10-13 02:10:46
212.48.74.27	attackspambots	Oct 11 22:35:34 web-01 postfix/smtpd[5375]: NOQUEUE: reject: RCPT from heat.forensic-accounting-information.com[185.245.218.60]: 550 5.1.1 : Recipient address rejected: User unknown in virtual mailbox table; from= to= proto=ESMTP helo=	2020-10-12 17:35:56

Type

Details

Datetime

212.48.74.27

attackbots

Oct 11 22:35:34 web-01 postfix/smtpd[5375]: NOQUEUE: reject: RCPT from heat.forensic-accounting-information.com[185.245.218.60]: 550 5.1.1 : Recipient address rejected: User unknown in virtual mailbox table; from= to= proto=ESMTP helo=

2020-10-13 02:10:46

212.48.74.27

attackspambots

Oct 11 22:35:34 web-01 postfix/smtpd[5375]: NOQUEUE: reject: RCPT from heat.forensic-accounting-information.com[185.245.218.60]: 550 5.1.1 : Recipient address rejected: User unknown in virtual mailbox table; from= to= proto=ESMTP helo=

2020-10-12 17:35:56

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 212.48.74.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6111
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;212.48.74.8.			IN	A

;; AUTHORITY SECTION:
.			403	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 19 01:34:43 CST 2022
;; MSG SIZE  rcvd: 104

Host info

8.74.48.212.in-addr.arpa domain name pointer server.rd.design.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
8.74.48.212.in-addr.arpa	name = server.rd.design.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
114.232.110.3	attackbots	Aug 10 08:31:26 myvps sshd[19037]: Failed password for root from 114.232.110.3 port 37844 ssh2 Aug 10 08:47:50 myvps sshd[29127]: Failed password for root from 114.232.110.3 port 39401 ssh2 ...	2020-08-10 16:00:18
78.128.113.116	attack	Aug 10 09:38:55 relay postfix/smtpd\[7043\]: warning: unknown\[78.128.113.116\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 10 09:48:36 relay postfix/smtpd\[7040\]: warning: unknown\[78.128.113.116\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 10 09:48:53 relay postfix/smtpd\[7026\]: warning: unknown\[78.128.113.116\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 10 09:48:54 relay postfix/smtpd\[7041\]: warning: unknown\[78.128.113.116\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 10 09:49:11 relay postfix/smtpd\[7040\]: warning: unknown\[78.128.113.116\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-08-10 15:53:10
212.70.149.3	attackspambots	Aug 10 09:37:32 galaxy event: galaxy/lswi: smtp: elianora@uni-potsdam.de [212.70.149.3] authentication failure using internet password Aug 10 09:37:51 galaxy event: galaxy/lswi: smtp: elianore@uni-potsdam.de [212.70.149.3] authentication failure using internet password Aug 10 09:38:10 galaxy event: galaxy/lswi: smtp: elias@uni-potsdam.de [212.70.149.3] authentication failure using internet password Aug 10 09:38:28 galaxy event: galaxy/lswi: smtp: elicia@uni-potsdam.de [212.70.149.3] authentication failure using internet password Aug 10 09:38:47 galaxy event: galaxy/lswi: smtp: elida@uni-potsdam.de [212.70.149.3] authentication failure using internet password ...	2020-08-10 15:42:08
106.51.227.10	attack	Aug 10 08:50:48 vpn01 sshd[12651]: Failed password for root from 106.51.227.10 port 37729 ssh2 ...	2020-08-10 16:07:20
191.241.160.83	attackbotsspam	Aug 10 05:02:56 mail.srvfarm.net postfix/smtps/smtpd[1295937]: warning: unknown[191.241.160.83]: SASL PLAIN authentication failed: Aug 10 05:02:56 mail.srvfarm.net postfix/smtps/smtpd[1295937]: lost connection after AUTH from unknown[191.241.160.83] Aug 10 05:07:44 mail.srvfarm.net postfix/smtps/smtpd[1295934]: warning: unknown[191.241.160.83]: SASL PLAIN authentication failed: Aug 10 05:07:44 mail.srvfarm.net postfix/smtps/smtpd[1295934]: lost connection after AUTH from unknown[191.241.160.83] Aug 10 05:11:11 mail.srvfarm.net postfix/smtps/smtpd[1295937]: warning: unknown[191.241.160.83]: SASL PLAIN authentication failed:	2020-08-10 15:43:11
121.46.244.194	attackspambots	Banned for a week because repeated abuses, for example SSH, but not only	2020-08-10 16:03:36
45.14.149.38	attackspambots	TCP (SYN) 45.14.149.38:42618 -> port 10938, len 44	2020-08-10 15:56:36
149.72.94.234	attackspambots	Aug 10 07:48:51 mail.srvfarm.net postfix/smtpd[1513275]: NOQUEUE: reject: RCPT from unknown[149.72.94.234]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Aug 10 07:48:51 mail.srvfarm.net postfix/smtpd[1513275]: lost connection after RCPT from unknown[149.72.94.234] Aug 10 07:50:55 mail.srvfarm.net postfix/smtpd[1512062]: NOQUEUE: reject: RCPT from unknown[149.72.94.234]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Aug 10 07:50:56 mail.srvfarm.net postfix/smtpd[1512062]: lost connection after RCPT from unknown[149.72.94.234] Aug 10 07:51:11 mail.srvfarm.net postfix/smtpd[1511682]: NOQUEUE: reject: RCPT from unknown[149	2020-08-10 15:36:26
177.44.21.180	attackbots	Aug 10 05:40:16 mail.srvfarm.net postfix/smtps/smtpd[1314323]: warning: unknown[177.44.21.180]: SASL PLAIN authentication failed: Aug 10 05:40:17 mail.srvfarm.net postfix/smtps/smtpd[1314323]: lost connection after AUTH from unknown[177.44.21.180] Aug 10 05:42:33 mail.srvfarm.net postfix/smtps/smtpd[1313846]: warning: unknown[177.44.21.180]: SASL PLAIN authentication failed: Aug 10 05:42:33 mail.srvfarm.net postfix/smtps/smtpd[1313846]: lost connection after AUTH from unknown[177.44.21.180] Aug 10 05:49:00 mail.srvfarm.net postfix/smtps/smtpd[1315938]: warning: unknown[177.44.21.180]: SASL PLAIN authentication failed:	2020-08-10 15:34:48
141.98.80.67	attackbots	Aug 10 08:39:19 mail.srvfarm.net postfix/smtpd[1534749]: warning: unknown[141.98.80.67]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 10 08:39:19 mail.srvfarm.net postfix/smtpd[1534749]: lost connection after AUTH from unknown[141.98.80.67] Aug 10 08:39:24 mail.srvfarm.net postfix/smtpd[1533664]: lost connection after AUTH from unknown[141.98.80.67] Aug 10 08:39:30 mail.srvfarm.net postfix/smtpd[1533740]: lost connection after AUTH from unknown[141.98.80.67] Aug 10 08:39:37 mail.srvfarm.net postfix/smtpd[1533664]: warning: unknown[141.98.80.67]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-08-10 15:36:42
168.245.23.182	attackspam	Aug 10 05:03:38 mail.srvfarm.net postfix/smtpd[1293369]: lost connection after RCPT from xvfrktbs.outbound-mail.sendgrid.net[168.245.23.182] Aug 10 05:04:14 mail.srvfarm.net postfix/smtpd[1293367]: lost connection after RCPT from xvfrktbs.outbound-mail.sendgrid.net[168.245.23.182] Aug 10 05:05:29 mail.srvfarm.net postfix/smtpd[1310341]: lost connection after RCPT from xvfrktbs.outbound-mail.sendgrid.net[168.245.23.182] Aug 10 05:07:05 mail.srvfarm.net postfix/smtpd[1310405]: lost connection after RCPT from xvfrktbs.outbound-mail.sendgrid.net[168.245.23.182] Aug 10 05:09:10 mail.srvfarm.net postfix/smtpd[1310407]: lost connection after RCPT from xvfrktbs.outbound-mail.sendgrid.net[168.245.23.182]	2020-08-10 15:48:56
185.234.218.85	attackbotsspam	2020-08-10 06:19:33 auth_plain authenticator failed for (gameplay-club.com.ua) [185.234.218.85]: 535 Incorrect authentication data (set_id=tim@gameplay-club.com.ua) 2020-08-10 07:01:01 auth_plain authenticator failed for (gameplay-club.com.ua) [185.234.218.85]: 535 Incorrect authentication data (set_id=john@gameplay-club.com.ua) ...	2020-08-10 15:45:35
81.68.135.238	attack	Aug 10 05:43:33 minden010 sshd[4662]: Failed password for root from 81.68.135.238 port 36240 ssh2 Aug 10 05:48:14 minden010 sshd[6222]: Failed password for root from 81.68.135.238 port 45442 ssh2 ...	2020-08-10 15:39:49
149.72.232.105	attackspam	Aug 10 07:15:15 mail.srvfarm.net postfix/smtpd[1492344]: lost connection after RCPT from wrqvzvsw.outbound-mail.sendgrid.net[149.72.232.105] Aug 10 07:16:31 mail.srvfarm.net postfix/smtpd[1492555]: lost connection after RCPT from wrqvzvsw.outbound-mail.sendgrid.net[149.72.232.105] Aug 10 07:17:37 mail.srvfarm.net postfix/smtpd[1506560]: lost connection after RCPT from wrqvzvsw.outbound-mail.sendgrid.net[149.72.232.105] Aug 10 07:19:11 mail.srvfarm.net postfix/smtpd[1506808]: lost connection after RCPT from wrqvzvsw.outbound-mail.sendgrid.net[149.72.232.105] Aug 10 07:21:16 mail.srvfarm.net postfix/smtpd[1493789]: lost connection after RCPT from wrqvzvsw.outbound-mail.sendgrid.net[149.72.232.105]	2020-08-10 15:35:54
150.116.36.211	attack	Telnet/23 MH Probe, Scan, BF, Hack -	2020-08-10 15:49:42

Recently Reported IPs

212.48.71.52	212.48.68.54	212.48.70.73	212.48.75.56
212.48.78.95	212.48.85.112	212.48.85.240	212.48.85.152
212.48.84.202	212.48.80.240	212.5.143.208	212.48.98.22
212.49.87.70	212.5.125.178	212.5.8.39	212.5.66.66
212.5.221.8	212.51.28.106	212.51.62.228	212.51.30.86