City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 5.175.196.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53880
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;5.175.196.139. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012201 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 11:51:42 CST 2025
;; MSG SIZE rcvd: 106
139.196.175.5.in-addr.arpa domain name pointer mail2.hiperprodutos.uni.me.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
139.196.175.5.in-addr.arpa name = mail2.hiperprodutos.uni.me.
Authoritative answers can be found from:
IP | Type | Details | Datetime |
---|---|---|---|
185.222.211.246 | attackspam | $f2bV_matches |
2019-07-16 16:57:49 |
123.21.198.4 | attackbots | MagicSpam Rule: valid_helo_domain; Spammer IP: 123.21.198.4 |
2019-07-16 16:41:57 |
82.64.8.132 | attack | Jul 16 09:28:30 shared02 sshd[7516]: Invalid user mao from 82.64.8.132 Jul 16 09:28:30 shared02 sshd[7516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.64.8.132 Jul 16 09:28:32 shared02 sshd[7516]: Failed password for invalid user mao from 82.64.8.132 port 37144 ssh2 Jul 16 09:28:32 shared02 sshd[7516]: Received disconnect from 82.64.8.132 port 37144:11: Bye Bye [preauth] Jul 16 09:28:32 shared02 sshd[7516]: Disconnected from 82.64.8.132 port 37144 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=82.64.8.132 |
2019-07-16 17:09:25 |
37.187.12.126 | attackbots | Jul 16 09:15:26 animalibera sshd[8437]: Invalid user uno from 37.187.12.126 port 33278 ... |
2019-07-16 17:28:10 |
185.222.211.245 | attackbots | Jul 16 10:36:25 relay postfix/smtpd\[9273\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.245\]: 554 5.7.1 \ |
2019-07-16 16:45:23 |
110.44.123.47 | attackbotsspam | Jul 16 10:15:57 minden010 sshd[6368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.44.123.47 Jul 16 10:15:59 minden010 sshd[6368]: Failed password for invalid user bg from 110.44.123.47 port 58488 ssh2 Jul 16 10:21:50 minden010 sshd[8327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.44.123.47 ... |
2019-07-16 17:19:33 |
111.67.43.104 | attackbotsspam | Jul 15 20:13:49 box kernel: [1329054.377955] [UFW BLOCK] IN=eth0 OUT= MAC=[munged] SRC=111.67.43.104 DST=[munged] LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=26903 DF PROTO=TCP SPT=51414 DPT=65353 WINDOW=8192 RES=0x00 SYN URGP=0 Jul 15 20:13:52 box kernel: [1329057.452242] [UFW BLOCK] IN=eth0 OUT= MAC=[munged] SRC=111.67.43.104 DST=[munged] LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=5006 DF PROTO=TCP SPT=51414 DPT=65353 WINDOW=8192 RES=0x00 SYN URGP=0 Jul 15 20:13:58 box kernel: [1329063.458481] [UFW BLOCK] IN=eth0 OUT= MAC=[munged] SRC=111.67.43.104 DST=[munged] LEN=48 TOS=0x00 PREC=0x00 TTL=118 ID=11930 DF PROTO=TCP SPT=51414 DPT=65353 WINDOW=8192 RES=0x00 SYN URGP=0 Jul 16 03:31:06 box kernel: [1355290.761223] [UFW BLOCK] IN=eth0 OUT= MAC=[munged] SRC=111.67.43.104 DST=[munged] LEN=52 TOS=0x00 PREC=0x00 TTL=118 ID=31517 DF PROTO=TCP SPT=59078 DPT=65353 WINDOW=8192 RES=0x00 SYN URGP=0 Jul 16 03:31:09 box kernel: [1355293.791141] [UFW BLOCK] IN=eth0 OUT= MAC=[munged] SRC=111.67.43.104 DST=[munged] LEN=52 TOS=0x00 PR |
2019-07-16 17:05:03 |
88.121.72.24 | attackbotsspam | Jul 16 11:07:41 OPSO sshd\[21079\]: Invalid user jenkins from 88.121.72.24 port 33998 Jul 16 11:07:41 OPSO sshd\[21079\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.121.72.24 Jul 16 11:07:43 OPSO sshd\[21079\]: Failed password for invalid user jenkins from 88.121.72.24 port 33998 ssh2 Jul 16 11:14:44 OPSO sshd\[22009\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.121.72.24 user=root Jul 16 11:14:46 OPSO sshd\[22009\]: Failed password for root from 88.121.72.24 port 33286 ssh2 |
2019-07-16 17:20:24 |
197.54.168.61 | attackbots | Automatic report - Port Scan Attack |
2019-07-16 17:22:26 |
115.73.25.215 | attackspambots | Unauthorised access (Jul 16) SRC=115.73.25.215 LEN=52 TTL=111 ID=5950 DF TCP DPT=445 WINDOW=8192 SYN |
2019-07-16 17:06:18 |
202.162.199.8 | attack | Automatic report - Port Scan Attack |
2019-07-16 17:22:07 |
193.9.114.139 | attack | Jul 16 10:23:02 MK-Soft-Root2 sshd\[4928\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.9.114.139 user=root Jul 16 10:23:04 MK-Soft-Root2 sshd\[4928\]: Failed password for root from 193.9.114.139 port 35120 ssh2 Jul 16 10:23:06 MK-Soft-Root2 sshd\[4928\]: Failed password for root from 193.9.114.139 port 35120 ssh2 ... |
2019-07-16 17:12:02 |
197.35.164.111 | attackspam | firewall-block, port(s): 23/tcp |
2019-07-16 16:53:59 |
203.177.80.56 | attack | DATE:2019-07-16 03:31:11, IP:203.177.80.56, PORT:1433 - MSSQL brute force auth on a honeypot server (epe-dc) |
2019-07-16 17:04:12 |
68.183.133.21 | attackbotsspam | Jul 16 09:45:45 MainVPS sshd[871]: Invalid user lab from 68.183.133.21 port 50938 Jul 16 09:45:45 MainVPS sshd[871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.133.21 Jul 16 09:45:45 MainVPS sshd[871]: Invalid user lab from 68.183.133.21 port 50938 Jul 16 09:45:47 MainVPS sshd[871]: Failed password for invalid user lab from 68.183.133.21 port 50938 ssh2 Jul 16 09:50:22 MainVPS sshd[1274]: Invalid user mike from 68.183.133.21 port 50626 ... |
2019-07-16 17:09:58 |