City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 57.48.3.194
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39748
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;57.48.3.194. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012901 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 03:55:04 CST 2025
;; MSG SIZE rcvd: 104Host 194.3.48.57.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 194.3.48.57.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.142.120.215 | attackbots | Sep 9 03:03:17 web02.agentur-b-2.de postfix/smtpd[1614257]: warning: unknown[45.142.120.215]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 9 03:03:59 web02.agentur-b-2.de postfix/smtpd[1616685]: warning: unknown[45.142.120.215]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 9 03:04:39 web02.agentur-b-2.de postfix/smtpd[1616011]: warning: unknown[45.142.120.215]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 9 03:05:18 web02.agentur-b-2.de postfix/smtpd[1616011]: warning: unknown[45.142.120.215]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 9 03:05:58 web02.agentur-b-2.de postfix/smtpd[1614257]: warning: unknown[45.142.120.215]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-09-12 01:25:45 |
| 64.225.119.164 | attack | Sep 11 17:49:00 sshgateway sshd\[19054\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.119.164 user=root Sep 11 17:49:02 sshgateway sshd\[19054\]: Failed password for root from 64.225.119.164 port 39592 ssh2 Sep 11 17:55:55 sshgateway sshd\[19896\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.119.164 user=root |
2020-09-12 01:48:36 |
| 172.82.239.21 | attackbots | Sep 10 15:28:43 mail.srvfarm.net postfix/smtpd[3138890]: lost connection after STARTTLS from r21.news.eu.rvca.com[172.82.239.21] Sep 10 15:29:52 mail.srvfarm.net postfix/smtpd[3138890]: lost connection after STARTTLS from r21.news.eu.rvca.com[172.82.239.21] Sep 10 15:30:57 mail.srvfarm.net postfix/smtpd[3142404]: lost connection after STARTTLS from r21.news.eu.rvca.com[172.82.239.21] Sep 10 15:33:28 mail.srvfarm.net postfix/smtpd[3138891]: lost connection after STARTTLS from r21.news.eu.rvca.com[172.82.239.21] Sep 10 15:34:36 mail.srvfarm.net postfix/smtpd[3138890]: lost connection after STARTTLS from r21.news.eu.rvca.com[172.82.239.21] |
2020-09-12 01:20:14 |
| 183.239.156.146 | attack | $f2bV_matches |
2020-09-12 01:50:52 |
| 218.92.0.168 | attackbotsspam | Sep 11 19:32:56 abendstille sshd\[24195\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.168 user=root Sep 11 19:32:58 abendstille sshd\[24195\]: Failed password for root from 218.92.0.168 port 16626 ssh2 Sep 11 19:33:16 abendstille sshd\[24472\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.168 user=root Sep 11 19:33:18 abendstille sshd\[24472\]: Failed password for root from 218.92.0.168 port 51453 ssh2 Sep 11 19:33:21 abendstille sshd\[24472\]: Failed password for root from 218.92.0.168 port 51453 ssh2 ... |
2020-09-12 01:49:38 |
| 172.82.239.23 | attack | Sep 10 15:28:43 mail.srvfarm.net postfix/smtpd[3126192]: lost connection after STARTTLS from r23.news.eu.rvca.com[172.82.239.23] Sep 10 15:29:52 mail.srvfarm.net postfix/smtpd[3138895]: lost connection after STARTTLS from r23.news.eu.rvca.com[172.82.239.23] Sep 10 15:30:58 mail.srvfarm.net postfix/smtpd[3142403]: lost connection after STARTTLS from r23.news.eu.rvca.com[172.82.239.23] Sep 10 15:33:28 mail.srvfarm.net postfix/smtpd[3142410]: lost connection after STARTTLS from r23.news.eu.rvca.com[172.82.239.23] Sep 10 15:34:34 mail.srvfarm.net postfix/smtpd[3123260]: lost connection after STARTTLS from r23.news.eu.rvca.com[172.82.239.23] |
2020-09-12 01:19:18 |
| 157.25.173.30 | attackspam | Sep 7 13:15:38 mail.srvfarm.net postfix/smtps/smtpd[1059471]: warning: unknown[157.25.173.30]: SASL PLAIN authentication failed: Sep 7 13:15:38 mail.srvfarm.net postfix/smtps/smtpd[1059471]: lost connection after AUTH from unknown[157.25.173.30] Sep 7 13:17:07 mail.srvfarm.net postfix/smtps/smtpd[1059065]: warning: unknown[157.25.173.30]: SASL PLAIN authentication failed: Sep 7 13:17:07 mail.srvfarm.net postfix/smtps/smtpd[1059065]: lost connection after AUTH from unknown[157.25.173.30] Sep 7 13:18:12 mail.srvfarm.net postfix/smtps/smtpd[1075325]: warning: unknown[157.25.173.30]: SASL PLAIN authentication failed: |
2020-09-12 01:22:34 |
| 175.139.3.41 | attackbots | 2020-09-11T14:58:45.256247www1-sb.mstrade.org sshd[557]: Failed password for invalid user mssql from 175.139.3.41 port 19810 ssh2 2020-09-11T15:07:23.942432www1-sb.mstrade.org sshd[1116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.139.3.41 user=root 2020-09-11T15:07:25.653516www1-sb.mstrade.org sshd[1116]: Failed password for root from 175.139.3.41 port 61313 ssh2 2020-09-11T15:15:49.646771www1-sb.mstrade.org sshd[1597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.139.3.41 user=root 2020-09-11T15:15:52.160171www1-sb.mstrade.org sshd[1597]: Failed password for root from 175.139.3.41 port 23315 ssh2 ... |
2020-09-12 01:38:48 |
| 159.89.196.75 | attackbots | (sshd) Failed SSH login from 159.89.196.75 (SG/Singapore/-): 10 in the last 3600 secs |
2020-09-12 01:53:41 |
| 10.200.77.175 | attack | Received: from 10.200.77.175 by atlas103.free.mail.ir2.yahoo.com with HTTP; Thu, 10 Sep 2020 13:49:06 +0000 Return-Path: <010001747846e4ef-e82af807-a135-478d-9248-09afeae6110c-000000@amazonses.com> Received: from 54.240.11.157 (EHLO a11-157.smtp-out.amazonses.com) by 10.200.77.175 with SMTPs; Thu, 10 Sep 2020 13:49:06 +0000 X-Originating-Ip: [54.240.11.157] Received-SPF: pass (domain of amazonses.com designates 54.240.11.157 as permitted sender) Authentication-Results: atlas103.free.mail.ir2.yahoo.com; dkim=pass header.i=@amazonses.com header.s=224i4yxa5dv7c2xz3womw6peuasteono; spf=pass smtp.mailfrom=amazonses.com; dmarc=unknown X-Apparently-To: aftpriv@yahoo.de; Thu, 10 Sep 2020 13:49:06 +0000 |
2020-09-12 01:47:25 |
| 178.174.172.251 | attackspambots | Port Scan detected! ... |
2020-09-12 01:38:08 |
| 185.14.184.143 | attackspam | Sep 11 18:06:17 sshgateway sshd\[21358\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.14.184.143 user=games Sep 11 18:06:20 sshgateway sshd\[21358\]: Failed password for games from 185.14.184.143 port 46754 ssh2 Sep 11 18:13:48 sshgateway sshd\[22238\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.14.184.143 user=root |
2020-09-12 01:40:07 |
| 62.210.194.9 | attackbotsspam | Sep 10 15:28:42 mail.srvfarm.net postfix/smtpd[3126192]: lost connection after STARTTLS from r9.news.eu.rvca.com[62.210.194.9] Sep 10 15:29:52 mail.srvfarm.net postfix/smtpd[3122971]: lost connection after STARTTLS from r9.news.eu.rvca.com[62.210.194.9] Sep 10 15:30:57 mail.srvfarm.net postfix/smtpd[3142403]: lost connection after STARTTLS from r9.news.eu.rvca.com[62.210.194.9] Sep 10 15:33:27 mail.srvfarm.net postfix/smtpd[3126191]: lost connection after STARTTLS from r9.news.eu.rvca.com[62.210.194.9] Sep 10 15:34:36 mail.srvfarm.net postfix/smtpd[3126191]: lost connection after STARTTLS from r9.news.eu.rvca.com[62.210.194.9] |
2020-09-12 01:24:26 |
| 159.89.47.106 | attackspambots | Lines containing failures of 159.89.47.106 (max 1000) Sep 8 23:11:50 UTC__SANYALnet-Labs__cac12 sshd[21926]: Connection from 159.89.47.106 port 36826 on 64.137.176.104 port 22 Sep 8 23:11:50 UTC__SANYALnet-Labs__cac12 sshd[21926]: User r.r from 159.89.47.106 not allowed because not listed in AllowUsers Sep 8 23:11:51 UTC__SANYALnet-Labs__cac12 sshd[21926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.47.106 user=r.r Sep 8 23:11:53 UTC__SANYALnet-Labs__cac12 sshd[21926]: Failed password for invalid user r.r from 159.89.47.106 port 36826 ssh2 Sep 8 23:11:53 UTC__SANYALnet-Labs__cac12 sshd[21926]: Received disconnect from 159.89.47.106 port 36826:11: Bye Bye [preauth] Sep 8 23:11:53 UTC__SANYALnet-Labs__cac12 sshd[21926]: Disconnected from 159.89.47.106 port 36826 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=159.89.47.106 |
2020-09-12 01:22:02 |
| 172.82.230.4 | attackspambots | Sep 10 15:28:44 mail.srvfarm.net postfix/smtpd[3138895]: lost connection after STARTTLS from r4.news.eu.rvca.com[172.82.230.4] Sep 10 15:29:53 mail.srvfarm.net postfix/smtpd[3122971]: lost connection after STARTTLS from r4.news.eu.rvca.com[172.82.230.4] Sep 10 15:30:58 mail.srvfarm.net postfix/smtpd[3142415]: lost connection after STARTTLS from r4.news.eu.rvca.com[172.82.230.4] Sep 10 15:33:26 mail.srvfarm.net postfix/smtpd[3126191]: lost connection after STARTTLS from r4.news.eu.rvca.com[172.82.230.4] Sep 10 15:34:34 mail.srvfarm.net postfix/smtpd[3142415]: lost connection after STARTTLS from r4.news.eu.rvca.com[172.82.230.4] |
2020-09-12 01:20:53 |