2.45.70.19 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.45.70.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42983
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;2.45.70.19.			IN	A

;; AUTHORITY SECTION:
.			138	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021301 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 14 11:19:02 CST 2022
;; MSG SIZE  rcvd: 103

Host info

19.70.45.2.in-addr.arpa domain name pointer net-2-45-70-19.cust.vodafonedsl.it.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
19.70.45.2.in-addr.arpa	name = net-2-45-70-19.cust.vodafonedsl.it.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
117.240.89.18	attackbots	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	2020-09-06 19:45:15
51.210.52.220	attackspambots	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: ip220.ip-51-210-52.eu.	2020-09-06 19:47:34
122.51.167.43	attack	Sep 6 09:39:53 fhem-rasp sshd[20698]: Failed password for root from 122.51.167.43 port 59428 ssh2 Sep 6 09:39:53 fhem-rasp sshd[20698]: Disconnected from authenticating user root 122.51.167.43 port 59428 [preauth] ...	2020-09-06 19:23:14
182.61.12.58	attackbots	firewall-block, port(s): 17160/tcp	2020-09-06 19:44:42
80.169.101.204	attackbotsspam	Sep 5 18:39:23 xxxx sshd[30698]: Invalid user admin from 80.169.101.204 Sep 5 18:39:23 xxxx sshd[30698]: Failed none for invalid user admin from 80.169.101.204 port 35822 ssh2 Sep 5 18:39:23 xxxx sshd[30698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.169.101.204 Sep 5 18:39:25 xxxx sshd[30698]: Failed password for invalid user admin from 80.169.101.204 port 35822 ssh2 Sep 5 18:39:25 xxxx sshd[30700]: Invalid user admin from 80.169.101.204 Sep 5 18:39:25 xxxx sshd[30700]: Failed none for invalid user admin from 80.169.101.204 port 35887 ssh2 Sep 5 18:39:25 xxxx sshd[30700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.169.101.204 Sep 5 18:39:27 xxxx sshd[30700]: Failed password for invalid user admin from 80.169.101.204 port 35887 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=80.169.101.204	2020-09-06 19:43:19
14.177.219.246	attackbotsspam	1599324071 - 09/05/2020 18:41:11 Host: 14.177.219.246/14.177.219.246 Port: 445 TCP Blocked	2020-09-06 19:42:51
157.245.78.30	attackbots	Tried our host z.	2020-09-06 19:37:59
187.106.81.102	attack	Sep 6 12:21:28 marvibiene sshd[28517]: Failed password for root from 187.106.81.102 port 55184 ssh2 Sep 6 12:26:03 marvibiene sshd[28725]: Failed password for root from 187.106.81.102 port 34794 ssh2	2020-09-06 19:50:12
27.63.162.253	attackbots	1599324069 - 09/05/2020 18:41:09 Host: 27.63.162.253/27.63.162.253 Port: 445 TCP Blocked	2020-09-06 19:43:44
103.205.180.57	attack	TCP (SYN) 103.205.180.57:45205 -> port 1433, len 44	2020-09-06 19:52:56
178.67.193.255	attackspam	1599324063 - 09/05/2020 18:41:03 Host: 178.67.193.255/178.67.193.255 Port: 445 TCP Blocked	2020-09-06 19:45:50
212.83.163.170	attackbots	[2020-09-06 07:16:59] NOTICE[1194] chan_sip.c: Registration from '"896"' failed for '212.83.163.170:6433' - Wrong password [2020-09-06 07:16:59] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-06T07:16:59.137-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="896",SessionID="0x7f2ddc1b7848",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.163.170/6433",Challenge="1009cb66",ReceivedChallenge="1009cb66",ReceivedHash="48c8e5fec3a9e292fd3162539a8ec5c4" [2020-09-06 07:17:34] NOTICE[1194] chan_sip.c: Registration from '"892"' failed for '212.83.163.170:6262' - Wrong password [2020-09-06 07:17:34] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-06T07:17:34.166-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="892",SessionID="0x7f2ddc00cc78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83. ...	2020-09-06 19:39:59
151.236.59.142	attackbots	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-09-06 19:26:08
37.187.3.53	attackspam	$f2bV_matches	2020-09-06 19:29:52
46.229.168.143	attackspam	[Sat Sep 05 23:41:14.031663 2020] [:error] [pid 23059:tid 140327520270080] [client 46.229.168.143:45324] [client 46.229.168.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "((?:[~!@#\\\\$%\\\\^&\\\\\\\$\\\$\\\\-\\\\+=\\\\{\\\\}\\\\[\\\\]\\\\\|:;\"'\\xc2\\xb4\\xe2\\x80\\x99\\xe2\\x80\\x98`<>][^~!@#\\\\$%\\\\^&\\\\\\\$\\\$\\\\-\\\\+=\\\\{\\\\}\\\\[\\\\]\\\\\|:;\"'\\xc2\\xb4\\xe2\\x80\\x99\\xe2\\x80\\x98`<>]*?){12})" at ARGS:id. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "1255"] [id "942430"] [msg "Restricted SQL Character Anomaly Detection (args): # of special characters exceeded (12)"] [data "Matched Data: :prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal- found within ARGS:id: 555555659:prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-26-april-02-mei-2017"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi ...	2020-09-06 19:41:36

Recently Reported IPs

2.50.164.236	2.55.103.238	2.35.23.254	2.236.51.23
2.50.44.238	2.42.132.63	2.57.122.84	2.87.234.216
2.87.131.144	2.86.173.81	20.106.90.127	20.124.2.200
20.122.192.15	2.92.56.222	2.87.207.26	20.206.100.205
20.190.4.251	20.191.46.109	20.55.67.43	20.206.130.235