212.220.45.11 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: J/S Co. Grancombank

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Dec 24 14:08:47 ms-srv sshd[29180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.220.45.11 user=root Dec 24 14:08:49 ms-srv sshd[29180]: Failed password for invalid user root from 212.220.45.11 port 46037 ssh2	2020-02-15 23:10:40

Type

Details

Datetime

attackspam

Dec 24 14:08:47 ms-srv sshd[29180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.220.45.11  user=root
Dec 24 14:08:49 ms-srv sshd[29180]: Failed password for invalid user root from 212.220.45.11 port 46037 ssh2

2020-02-15 23:10:40

Comments on same subnet:

IP	Type	Details	Datetime
212.220.45.111	attackbots	445/tcp [2019-11-01]1pkt	2019-11-02 07:18:23
212.220.45.20	attackspam	Unauthorized connection attempt from IP address 212.220.45.20 on Port 445(SMB)	2019-09-23 08:30:44

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 212.220.45.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31754
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;212.220.45.11.			IN	A

;; AUTHORITY SECTION:
.			346	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021500 1800 900 604800 86400

;; Query time: 784 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 23:10:32 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 11.45.220.212.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 11.45.220.212.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
192.254.70.226	attackspam	Port 1433 Scan	2019-10-09 07:12:03
190.207.234.205	attackspambots	Unauthorized connection attempt from IP address 190.207.234.205 on Port 445(SMB)	2019-10-09 06:42:42
179.198.111.111	attackbots	Unauthorized connection attempt from IP address 179.198.111.111 on Port 445(SMB)	2019-10-09 06:57:16
123.201.20.30	attackbots	Oct 8 22:16:38 vps647732 sshd[17152]: Failed password for root from 123.201.20.30 port 56291 ssh2 ...	2019-10-09 06:48:09
46.101.27.6	attack	SSH Bruteforce attempt	2019-10-09 06:58:16
213.248.164.76	attack	Port 1433 Scan	2019-10-09 06:48:48
41.38.251.106	attackspam	Unauthorized connection attempt from IP address 41.38.251.106 on Port 445(SMB)	2019-10-09 07:09:51
106.12.131.5	attack	Oct 9 00:05:18 MainVPS sshd[5955]: Invalid user Inferno_123 from 106.12.131.5 port 48640 Oct 9 00:05:18 MainVPS sshd[5955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.131.5 Oct 9 00:05:18 MainVPS sshd[5955]: Invalid user Inferno_123 from 106.12.131.5 port 48640 Oct 9 00:05:20 MainVPS sshd[5955]: Failed password for invalid user Inferno_123 from 106.12.131.5 port 48640 ssh2 Oct 9 00:09:06 MainVPS sshd[6282]: Invalid user Snap123 from 106.12.131.5 port 49146 ...	2019-10-09 07:20:24
185.53.88.102	attackspambots	\[2019-10-08 18:59:53\] NOTICE\[1887\] chan_sip.c: Registration from '"602" \' failed for '185.53.88.102:5501' - Wrong password \[2019-10-08 18:59:53\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-08T18:59:53.101-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="602",SessionID="0x7fc3ad563028",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.102/5501",Challenge="48287b02",ReceivedChallenge="48287b02",ReceivedHash="d491a9a5e4f7fd1456a3f4b35538153c" \[2019-10-08 18:59:53\] NOTICE\[1887\] chan_sip.c: Registration from '"602" \' failed for '185.53.88.102:5501' - Wrong password \[2019-10-08 18:59:53\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-08T18:59:53.202-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="602",SessionID="0x7fc3acc3d768",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.	2019-10-09 07:00:36
181.63.245.127	attackbotsspam	SSH Brute-Force reported by Fail2Ban	2019-10-09 07:07:09
49.235.86.100	attackspambots	Oct 9 02:58:05 areeb-Workstation sshd[9443]: Failed password for root from 49.235.86.100 port 51874 ssh2 ...	2019-10-09 07:04:02
181.196.48.26	attackspam	Unauthorized connection attempt from IP address 181.196.48.26 on Port 445(SMB)	2019-10-09 07:23:56
211.193.48.2	attackspambots	Port 1433 Scan	2019-10-09 06:53:45
191.32.146.220	attackbots	Unauthorized connection attempt from IP address 191.32.146.220 on Port 445(SMB)	2019-10-09 07:21:27
45.114.244.56	attackbots	Bruteforce on SSH Honeypot	2019-10-09 06:59:37

Recently Reported IPs

118.43.180.24	1.175.126.179	212.129.62.174	212.129.2.62
167.99.109.255	118.43.168.114	191.37.149.102	118.43.145.52
91.202.252.118	212.117.65.10	188.162.195.238	212.115.244.13
212.114.63.44	212.114.60.199	118.43.131.51	212.114.59.55
81.155.188.6	62.168.153.222	212.114.57.33	165.35.17.24