City: unknown
Region: unknown
Country: Italy
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.45.90.231
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28222
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;2.45.90.231. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021500 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 22:36:12 CST 2025
;; MSG SIZE rcvd: 104231.90.45.2.in-addr.arpa domain name pointer net-2-45-90-231.cust.vodafonedsl.it.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
231.90.45.2.in-addr.arpa name = net-2-45-90-231.cust.vodafonedsl.it.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 148.101.199.23 | attack | fraudulent SSH attempt |
2019-12-14 07:55:38 |
| 49.88.112.114 | attackbotsspam | Dec 13 14:10:02 auw2 sshd\[8898\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root Dec 13 14:10:04 auw2 sshd\[8898\]: Failed password for root from 49.88.112.114 port 15597 ssh2 Dec 13 14:11:21 auw2 sshd\[9025\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root Dec 13 14:11:24 auw2 sshd\[9025\]: Failed password for root from 49.88.112.114 port 63202 ssh2 Dec 13 14:11:26 auw2 sshd\[9025\]: Failed password for root from 49.88.112.114 port 63202 ssh2 |
2019-12-14 08:12:17 |
| 31.193.141.32 | attackspambots | 31.193.141.32 - - [13/Dec/2019:23:56:31 +0000] "POST /wp-login.php HTTP/1.1" 200 5706 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 31.193.141.32 - - [13/Dec/2019:23:56:33 +0000] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-12-14 08:04:12 |
| 218.92.0.141 | attackspam | Dec 14 01:30:46 dedicated sshd[27884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.141 user=root Dec 14 01:30:48 dedicated sshd[27884]: Failed password for root from 218.92.0.141 port 7498 ssh2 |
2019-12-14 08:31:22 |
| 182.214.170.72 | attackbots | Dec 14 00:48:14 mail sshd[9437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.214.170.72 Dec 14 00:48:16 mail sshd[9437]: Failed password for invalid user rs from 182.214.170.72 port 41614 ssh2 Dec 14 00:54:10 mail sshd[10352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.214.170.72 |
2019-12-14 08:15:16 |
| 170.81.148.7 | attackbots | Dec 14 01:04:36 mail sshd[12635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.81.148.7 Dec 14 01:04:38 mail sshd[12635]: Failed password for invalid user harta from 170.81.148.7 port 44412 ssh2 Dec 14 01:11:04 mail sshd[13704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.81.148.7 |
2019-12-14 08:15:39 |
| 192.144.164.229 | attack | Dec 14 01:08:09 vps691689 sshd[2649]: Failed password for root from 192.144.164.229 port 42082 ssh2 Dec 14 01:14:48 vps691689 sshd[2827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.164.229 ... |
2019-12-14 08:20:50 |
| 139.199.21.245 | attackspambots | Dec 14 01:01:17 dedicated sshd[22784]: Invalid user manager from 139.199.21.245 port 59608 |
2019-12-14 08:08:43 |
| 103.254.120.222 | attackbots | Dec 13 13:50:07 hpm sshd\[24613\]: Invalid user noahgc987 from 103.254.120.222 Dec 13 13:50:07 hpm sshd\[24613\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.254.120.222 Dec 13 13:50:08 hpm sshd\[24613\]: Failed password for invalid user noahgc987 from 103.254.120.222 port 52742 ssh2 Dec 13 13:56:22 hpm sshd\[25267\]: Invalid user root123456788 from 103.254.120.222 Dec 13 13:56:22 hpm sshd\[25267\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.254.120.222 |
2019-12-14 08:10:02 |
| 51.38.234.54 | attack | Dec 13 23:46:27 zeus sshd[2795]: Failed password for root from 51.38.234.54 port 46278 ssh2 Dec 13 23:51:20 zeus sshd[2965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.234.54 Dec 13 23:51:22 zeus sshd[2965]: Failed password for invalid user ftp from 51.38.234.54 port 54216 ssh2 |
2019-12-14 08:29:01 |
| 196.52.43.64 | attack | Honeypot hit. |
2019-12-14 07:58:57 |
| 46.105.244.1 | attackspam | Dec 14 00:56:18 srv206 sshd[2735]: Invalid user denese from 46.105.244.1 Dec 14 00:56:18 srv206 sshd[2735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.105.244.1 Dec 14 00:56:18 srv206 sshd[2735]: Invalid user denese from 46.105.244.1 Dec 14 00:56:20 srv206 sshd[2735]: Failed password for invalid user denese from 46.105.244.1 port 43388 ssh2 ... |
2019-12-14 08:13:28 |
| 83.14.224.41 | attackbots | Unauthorized connection attempt detected from IP address 83.14.224.41 to port 81 |
2019-12-14 08:06:44 |
| 45.143.220.70 | attack | \[2019-12-13 18:55:08\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-13T18:55:08.714-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011441603976972",SessionID="0x7f0fb43e4dc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.70/62594",ACLName="no_extension_match" \[2019-12-13 18:55:48\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-13T18:55:48.414-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441603976972",SessionID="0x7f0fb473a038",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.70/58737",ACLName="no_extension_match" \[2019-12-13 18:56:27\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-13T18:56:27.713-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="441603976972",SessionID="0x7f0fb473a038",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.70/62437",ACLName="no_exten |
2019-12-14 08:06:15 |
| 70.241.246.196 | attackbotsspam | --- report --- Dec 13 16:19:53 sshd: Connection from 70.241.246.196 port 36932 Dec 13 16:19:55 sshd: Failed password for backup from 70.241.246.196 port 36932 ssh2 Dec 13 16:19:55 sshd: Received disconnect from 70.241.246.196: 11: Bye Bye [preauth] |
2019-12-14 07:56:11 |