149.3.145.198 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Italy

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.3.145.198
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32817
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;149.3.145.198.			IN	A

;; AUTHORITY SECTION:
.			459	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 26 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 12:50:04 CST 2022
;; MSG SIZE  rcvd: 106

Host info

198.145.3.149.in-addr.arpa domain name pointer cvh0129.ergonet.host.
198.145.3.149.in-addr.arpa domain name pointer smtpserver04deb.ergonet.it.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
198.145.3.149.in-addr.arpa	name = smtpserver04deb.ergonet.it.
198.145.3.149.in-addr.arpa	name = cvh0129.ergonet.host.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
24.178.76.242	attackspam	Honeypot attack, port: 81, PTR: 024-178-076-242.res.spectrum.com.	2020-09-17 15:10:48
178.209.71.119	attackbots	Unauthorized connection attempt from IP address 178.209.71.119 on Port 445(SMB)	2020-09-17 15:19:54
120.53.117.206	attack	RDP Bruteforce	2020-09-17 15:32:36
209.126.151.122	attackbotsspam	port scan and connect, tcp 80 (http)	2020-09-17 15:11:13
62.28.222.221	attackbots	Sep 17 08:55:05 piServer sshd[30581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.28.222.221 Sep 17 08:55:07 piServer sshd[30581]: Failed password for invalid user dario from 62.28.222.221 port 31069 ssh2 Sep 17 08:59:02 piServer sshd[31130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.28.222.221 ...	2020-09-17 15:13:45
106.54.42.50	attack	RDP Bruteforce	2020-09-17 15:34:40
134.175.100.217	attackspam	Port probing on unauthorized port 3389	2020-09-17 15:31:33
178.128.221.85	attack	Invalid user Usuario from 178.128.221.85 port 42762	2020-09-17 15:30:10
37.120.153.210	attackbots	[2020-09-16 17:25:01] NOTICE[1239] chan_sip.c: Registration from '"171"' failed for '37.120.153.210:22977' - Wrong password [2020-09-16 17:25:01] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-16T17:25:01.866-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="171",SessionID="0x7f4d480d6c18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.120.153.210/22977",Challenge="7ab7eb6e",ReceivedChallenge="7ab7eb6e",ReceivedHash="a23281c4ab54b8f5e3daf95335e418f1" [2020-09-16 17:25:09] NOTICE[1239] chan_sip.c: Registration from '"173"' failed for '37.120.153.210:51970' - Wrong password [2020-09-16 17:25:09] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-16T17:25:09.883-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="173",SessionID="0x7f4d481972d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.1 ...	2020-09-17 15:08:48
211.87.178.161	attack	2020-09-17T08:29:32.555938vps773228.ovh.net sshd[28278]: Failed password for root from 211.87.178.161 port 40704 ssh2 2020-09-17T08:32:58.138391vps773228.ovh.net sshd[28310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.87.178.161 user=root 2020-09-17T08:33:00.246305vps773228.ovh.net sshd[28310]: Failed password for root from 211.87.178.161 port 53000 ssh2 2020-09-17T08:36:17.596337vps773228.ovh.net sshd[28362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.87.178.161 user=root 2020-09-17T08:36:20.025388vps773228.ovh.net sshd[28362]: Failed password for root from 211.87.178.161 port 37060 ssh2 ...	2020-09-17 15:25:41
193.252.105.113	attackbots	RDP Bruteforce	2020-09-17 15:27:27
116.138.49.183	attackspam	Telnet/23 MH Probe, Scan, BF, Hack -	2020-09-17 15:34:18
103.16.228.135	attack	RDP Bruteforce	2020-09-17 15:35:05
195.239.66.228	attackbotsspam	RDP Bruteforce	2020-09-17 15:43:34
68.183.226.209	attackspambots	DATE:2020-09-17 07:14:38, IP:68.183.226.209, PORT:ssh SSH brute force auth (docker-dc)	2020-09-17 15:23:33

Recently Reported IPs

149.28.90.144	149.3.27.4	149.28.71.202	149.3.170.197
149.34.16.128	149.3.101.179	149.34.18.16	149.34.21.254
149.34.3.19	149.47.132.157	149.47.9.231	149.4.99.39
149.36.239.106	149.5.244.137	149.5.187.205	149.5.244.147
149.5.224.212	149.5.244.37	149.5.224.243	149.5.24.115