City: unknown
Region: unknown
Country: Switzerland
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.4.87.125
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46836
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;85.4.87.125.			IN	A
;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012700 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 27 19:28:24 CST 2025
;; MSG SIZE  rcvd: 104125.87.4.85.in-addr.arpa domain name pointer 125.87.4.85.dynamic.cust.swisscom.net.Server:		183.60.83.19
Address:	183.60.83.19#53
Non-authoritative answer:
125.87.4.85.in-addr.arpa	name = 125.87.4.85.dynamic.cust.swisscom.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime | 
|---|---|---|---|
| 183.80.98.153 | attackspambots | Telnet Server BruteForce Attack | 2019-11-19 22:55:43 | 
| 45.227.253.210 | attackspambots | Nov 19 15:39:41 relay postfix/smtpd\[28636\]: warning: unknown\[45.227.253.210\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 19 15:40:54 relay postfix/smtpd\[25462\]: warning: unknown\[45.227.253.210\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 19 15:41:01 relay postfix/smtpd\[29969\]: warning: unknown\[45.227.253.210\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 19 15:42:49 relay postfix/smtpd\[29965\]: warning: unknown\[45.227.253.210\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 19 15:42:56 relay postfix/smtpd\[25462\]: warning: unknown\[45.227.253.210\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... | 2019-11-19 22:45:55 | 
| 129.211.41.162 | attack | Nov 19 09:03:35 TORMINT sshd\[704\]: Invalid user home from 129.211.41.162 Nov 19 09:03:35 TORMINT sshd\[704\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.41.162 Nov 19 09:03:36 TORMINT sshd\[704\]: Failed password for invalid user home from 129.211.41.162 port 44476 ssh2 ... | 2019-11-19 22:25:25 | 
| 104.148.21.248 | attack | Nov 19 13:47:22 mxgate1 postfix/postscreen[7608]: CONNECT from [104.148.21.248]:33592 to [176.31.12.44]:25 Nov 19 13:47:22 mxgate1 postfix/dnsblog[7610]: addr 104.148.21.248 listed by domain zen.spamhaus.org as 127.0.0.3 Nov 19 13:47:22 mxgate1 postfix/dnsblog[7609]: addr 104.148.21.248 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 19 13:47:28 mxgate1 postfix/postscreen[7608]: DNSBL rank 3 for [104.148.21.248]:33592 Nov x@x Nov 19 13:47:29 mxgate1 postfix/postscreen[7608]: DISCONNECT [104.148.21.248]:33592 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=104.148.21.248 | 2019-11-19 22:51:50 | 
| 222.186.169.194 | attack | Nov 19 15:24:11 herz-der-gamer sshd[25207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194 user=root Nov 19 15:24:13 herz-der-gamer sshd[25207]: Failed password for root from 222.186.169.194 port 43516 ssh2 ... | 2019-11-19 22:28:07 | 
| 13.77.142.89 | attackspambots | Nov 19 15:06:55 MK-Soft-VM3 sshd[23907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.77.142.89 Nov 19 15:06:58 MK-Soft-VM3 sshd[23907]: Failed password for invalid user info from 13.77.142.89 port 56108 ssh2 ... | 2019-11-19 22:30:00 | 
| 164.132.226.103 | attackbots | schuetzenmusikanten.de 164.132.226.103 \[19/Nov/2019:15:17:58 +0100\] "POST /wp-login.php HTTP/1.1" 200 6379 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" schuetzenmusikanten.de 164.132.226.103 \[19/Nov/2019:15:17:59 +0100\] "POST /wp-login.php HTTP/1.1" 200 6348 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" schuetzenmusikanten.de 164.132.226.103 \[19/Nov/2019:15:17:59 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4112 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" | 2019-11-19 23:01:01 | 
| 104.236.112.52 | attack | 2019-11-19T13:47:51.925284host3.slimhost.com.ua sshd[401264]: Invalid user farthing from 104.236.112.52 port 55164 2019-11-19T13:47:51.934292host3.slimhost.com.ua sshd[401264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.112.52 2019-11-19T13:47:51.925284host3.slimhost.com.ua sshd[401264]: Invalid user farthing from 104.236.112.52 port 55164 2019-11-19T13:47:54.070054host3.slimhost.com.ua sshd[401264]: Failed password for invalid user farthing from 104.236.112.52 port 55164 ssh2 2019-11-19T13:58:12.883321host3.slimhost.com.ua sshd[409342]: Invalid user tl from 104.236.112.52 port 60256 2019-11-19T13:58:12.911729host3.slimhost.com.ua sshd[409342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.112.52 2019-11-19T13:58:12.883321host3.slimhost.com.ua sshd[409342]: Invalid user tl from 104.236.112.52 port 60256 2019-11-19T13:58:14.632113host3.slimhost.com.ua sshd[409342]: Failed password for ... | 2019-11-19 22:53:29 | 
| 94.132.98.59 | attack | Lines containing failures of 94.132.98.59 Nov 19 13:51:25 server01 postfix/smtpd[27684]: connect from a94-132-98-59.cpe.netcabo.pt[94.132.98.59] Nov x@x Nov x@x Nov 19 13:51:25 server01 postfix/policy-spf[27781]: : Policy action=550 Please see hxxp://www.openspf.org/Why?s=mfrom;id=e704c6e16%40orisline.es;ip=94.132.98.59;r=server01.2800km.de Nov x@x Nov 19 13:51:25 server01 postfix/smtpd[27684]: lost connection after DATA from a94-132-98-59.cpe.netcabo.pt[94.132.98.59] Nov 19 13:51:25 server01 postfix/smtpd[27684]: disconnect from a94-132-98-59.cpe.netcabo.pt[94.132.98.59] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=94.132.98.59 | 2019-11-19 23:05:14 | 
| 148.235.57.184 | attackbotsspam | 2019-11-19T15:08:22.759917tmaserv sshd\[19351\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.235.57.184 2019-11-19T15:08:24.890646tmaserv sshd\[19351\]: Failed password for invalid user solaris from 148.235.57.184 port 55800 ssh2 2019-11-19T16:09:28.417468tmaserv sshd\[22139\]: Invalid user yoyo from 148.235.57.184 port 41512 2019-11-19T16:09:28.421696tmaserv sshd\[22139\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.235.57.184 2019-11-19T16:09:30.497290tmaserv sshd\[22139\]: Failed password for invalid user yoyo from 148.235.57.184 port 41512 ssh2 2019-11-19T16:14:49.455255tmaserv sshd\[22487\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.235.57.184 user=root ... | 2019-11-19 22:22:43 | 
| 221.162.255.78 | attack | 2019-11-19T14:18:27.313463abusebot-5.cloudsearch.cf sshd\[30172\]: Invalid user bjorn from 221.162.255.78 port 47502 2019-11-19T14:18:27.318418abusebot-5.cloudsearch.cf sshd\[30172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.162.255.78 | 2019-11-19 22:35:24 | 
| 109.228.204.89 | attack | Nov 19 13:45:17 mxgate1 postfix/postscreen[7608]: CONNECT from [109.228.204.89]:37325 to [176.31.12.44]:25 Nov 19 13:45:17 mxgate1 postfix/dnsblog[7610]: addr 109.228.204.89 listed by domain zen.spamhaus.org as 127.0.0.11 Nov 19 13:45:17 mxgate1 postfix/dnsblog[7610]: addr 109.228.204.89 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 19 13:45:17 mxgate1 postfix/dnsblog[7611]: addr 109.228.204.89 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 19 13:45:17 mxgate1 postfix/dnsblog[7612]: addr 109.228.204.89 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 19 13:45:23 mxgate1 postfix/postscreen[7608]: DNSBL rank 4 for [109.228.204.89]:37325 Nov x@x Nov 19 13:45:25 mxgate1 postfix/postscreen[7608]: HANGUP after 2 from [109.228.204.89]:37325 in tests after SMTP handshake Nov 19 13:45:25 mxgate1 postfix/postscreen[7608]: DISCONNECT [109.228.204.89]:37325 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=109.228.204.89 | 2019-11-19 22:36:10 | 
| 154.70.208.66 | attackspam | Nov 19 14:23:30 game-panel sshd[18227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.70.208.66 Nov 19 14:23:31 game-panel sshd[18227]: Failed password for invalid user sherrard from 154.70.208.66 port 46504 ssh2 Nov 19 14:28:15 game-panel sshd[18355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.70.208.66 | 2019-11-19 22:33:57 | 
| 51.38.231.36 | attackbots | Nov 19 15:50:12 vps647732 sshd[14901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.231.36 Nov 19 15:50:14 vps647732 sshd[14901]: Failed password for invalid user presti from 51.38.231.36 port 37558 ssh2 ... | 2019-11-19 23:05:35 | 
| 103.221.221.120 | attackbotsspam | xmlrpc attack | 2019-11-19 22:24:37 |