City: Lentiai
Region: Regione del Veneto
Country: Italy
Internet Service Provider: Vodafone
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.44.93.96
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62877
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;2.44.93.96. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021002 1800 900 604800 86400
;; Query time: 42 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 11 10:02:53 CST 2025
;; MSG SIZE rcvd: 103
96.93.44.2.in-addr.arpa domain name pointer net-2-44-93-96.cust.vodafonedsl.it.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
96.93.44.2.in-addr.arpa name = net-2-44-93-96.cust.vodafonedsl.it.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 59.44.152.108 | attackbots | Oct 26 09:00:25 firewall sshd[4524]: Invalid user avendoria from 59.44.152.108 Oct 26 09:00:26 firewall sshd[4524]: Failed password for invalid user avendoria from 59.44.152.108 port 42322 ssh2 Oct 26 09:05:45 firewall sshd[4640]: Invalid user pq from 59.44.152.108 ... |
2019-10-26 20:15:23 |
| 145.239.83.89 | attackspam | Invalid user nan from 145.239.83.89 port 59328 |
2019-10-26 20:03:05 |
| 92.86.179.186 | attackbotsspam | Invalid user jp from 92.86.179.186 port 43250 |
2019-10-26 20:05:29 |
| 172.81.250.132 | attackspambots | Oct 26 02:00:56 hpm sshd\[13596\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.250.132 user=root Oct 26 02:00:58 hpm sshd\[13596\]: Failed password for root from 172.81.250.132 port 54492 ssh2 Oct 26 02:05:41 hpm sshd\[13964\]: Invalid user user from 172.81.250.132 Oct 26 02:05:41 hpm sshd\[13964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.250.132 Oct 26 02:05:43 hpm sshd\[13964\]: Failed password for invalid user user from 172.81.250.132 port 60992 ssh2 |
2019-10-26 20:16:50 |
| 151.80.144.255 | attackspam | *Port Scan* detected from 151.80.144.255 (FR/France/255.ip-151-80-144.eu). 4 hits in the last 240 seconds |
2019-10-26 20:02:24 |
| 183.16.209.174 | attack | [portscan] Port scan |
2019-10-26 20:11:50 |
| 185.153.208.26 | attack | 2019-10-26T14:17:47.970277scmdmz1 sshd\[1749\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.153.208.26 user=root 2019-10-26T14:17:49.282364scmdmz1 sshd\[1749\]: Failed password for root from 185.153.208.26 port 35274 ssh2 2019-10-26T14:22:02.076203scmdmz1 sshd\[2158\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.153.208.26 user=root ... |
2019-10-26 20:24:58 |
| 45.82.153.76 | attack | 2019-10-26 13:42:04 dovecot_login authenticator failed for \(\[45.82.153.76\]\) \[45.82.153.76\]: 535 Incorrect authentication data \(set_id=backup@opso.it\) 2019-10-26 13:42:13 dovecot_login authenticator failed for \(\[45.82.153.76\]\) \[45.82.153.76\]: 535 Incorrect authentication data \(set_id=backup\) 2019-10-26 13:44:07 dovecot_login authenticator failed for \(\[45.82.153.76\]\) \[45.82.153.76\]: 535 Incorrect authentication data \(set_id=bt@opso.it\) 2019-10-26 13:44:15 dovecot_login authenticator failed for \(\[45.82.153.76\]\) \[45.82.153.76\]: 535 Incorrect authentication data \(set_id=bt\) 2019-10-26 13:50:12 dovecot_login authenticator failed for \(\[45.82.153.76\]\) \[45.82.153.76\]: 535 Incorrect authentication data \(set_id=admin@nophost.com\) |
2019-10-26 20:02:46 |
| 222.128.11.26 | attack | $f2bV_matches_ltvn |
2019-10-26 19:49:47 |
| 200.98.200.192 | attack | Honeypot attack, port: 445, PTR: 200-98-200-192.clouduol.com.br. |
2019-10-26 19:52:32 |
| 145.239.10.217 | attackspambots | 2019-10-26T07:30:12.698554ns525875 sshd\[6736\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3088253.ip-145-239-10.eu user=root 2019-10-26T07:30:14.741343ns525875 sshd\[6736\]: Failed password for root from 145.239.10.217 port 50020 ssh2 2019-10-26T07:34:12.510762ns525875 sshd\[11684\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3088253.ip-145-239-10.eu user=root 2019-10-26T07:34:14.496562ns525875 sshd\[11684\]: Failed password for root from 145.239.10.217 port 33940 ssh2 ... |
2019-10-26 19:57:43 |
| 86.62.74.243 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2019-10-26 19:59:34 |
| 45.6.93.222 | attackbotsspam | Oct 26 01:48:30 wbs sshd\[18953\]: Invalid user devhdfc from 45.6.93.222 Oct 26 01:48:30 wbs sshd\[18953\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.6.93.222 Oct 26 01:48:32 wbs sshd\[18953\]: Failed password for invalid user devhdfc from 45.6.93.222 port 33502 ssh2 Oct 26 01:53:16 wbs sshd\[19338\]: Invalid user Qinghe_IDC from 45.6.93.222 Oct 26 01:53:16 wbs sshd\[19338\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.6.93.222 |
2019-10-26 19:58:46 |
| 39.108.172.75 | attack | xmlrpc attack |
2019-10-26 20:01:37 |
| 107.173.191.123 | attack | Honeypot attack, port: 445, PTR: 107-173-191-123-host.colocrossing.com. |
2019-10-26 20:03:54 |