213.45.185.185

Basic Info

City: Brescia

Region: Lombardy

Country: Italy

Internet Service Provider: Telecom Italia S.p.A.

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Mar 13 22:15:57 mail sshd[7888]: Invalid user pi from 213.45.185.185 Mar 13 22:15:57 mail sshd[7889]: Invalid user pi from 213.45.185.185 Mar 13 22:15:57 mail sshd[7888]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.45.185.185 Mar 13 22:15:57 mail sshd[7888]: Invalid user pi from 213.45.185.185 Mar 13 22:15:59 mail sshd[7888]: Failed password for invalid user pi from 213.45.185.185 port 51470 ssh2 Mar 13 22:15:57 mail sshd[7889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.45.185.185 Mar 13 22:15:57 mail sshd[7889]: Invalid user pi from 213.45.185.185 Mar 13 22:15:59 mail sshd[7889]: Failed password for invalid user pi from 213.45.185.185 port 51472 ssh2 ...	2020-03-14 06:27:22

Type

Details

Datetime

attack

Mar 13 22:15:57 mail sshd[7888]: Invalid user pi from 213.45.185.185
Mar 13 22:15:57 mail sshd[7889]: Invalid user pi from 213.45.185.185
Mar 13 22:15:57 mail sshd[7888]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.45.185.185
Mar 13 22:15:57 mail sshd[7888]: Invalid user pi from 213.45.185.185
Mar 13 22:15:59 mail sshd[7888]: Failed password for invalid user pi from 213.45.185.185 port 51470 ssh2
Mar 13 22:15:57 mail sshd[7889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.45.185.185
Mar 13 22:15:57 mail sshd[7889]: Invalid user pi from 213.45.185.185
Mar 13 22:15:59 mail sshd[7889]: Failed password for invalid user pi from 213.45.185.185 port 51472 ssh2
...

2020-03-14 06:27:22

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.45.185.185
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21897
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;213.45.185.185.			IN	A

;; AUTHORITY SECTION:
.			232	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031301 1800 900 604800 86400

;; Query time: 107 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 14 06:27:19 CST 2020
;; MSG SIZE  rcvd: 118

Host info

185.185.45.213.in-addr.arpa domain name pointer host185-185-dynamic.45-213-r.retail.telecomitalia.it.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
185.185.45.213.in-addr.arpa	name = host185-185-dynamic.45-213-r.retail.telecomitalia.it.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
157.51.223.107	attackspambots	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-22 04:51:52
222.186.175.23	attackbotsspam	Unauthorized connection attempt detected from IP address 222.186.175.23 to port 22 [J]	2020-01-22 05:06:21
177.105.157.97	attack	Honeypot attack, port: 445, PTR: 177-105-157-97.aranet.net.	2020-01-22 04:35:12
95.132.204.64	attackbots	Honeypot attack, port: 5555, PTR: 64-204-132-95.pool.ukrtel.net.	2020-01-22 04:42:38
66.55.76.184	attack	Jan 21 13:55:41 grey postfix/smtpd\[23443\]: NOQUEUE: reject: RCPT from unknown\[66.55.76.184\]: 554 5.7.1 Service unavailable\; Client host \[66.55.76.184\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[66.55.76.184\]\; from=\<5465-491-383329-923-principal=learning-steps.com@mail.unlock1.rest\> to=\ proto=ESMTP helo=\ ...	2020-01-22 04:57:40
201.2.2.138	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-22 04:55:35
122.117.99.77	attack	Honeypot attack, port: 81, PTR: 122-117-99-77.HINET-IP.hinet.net.	2020-01-22 05:03:30
197.50.55.6	attackspam	Honeypot attack, port: 445, PTR: host-197.50.55.6.tedata.net.	2020-01-22 04:55:54
213.158.51.143	attack	Unauthorized connection attempt detected from IP address 213.158.51.143 to port 5555 [J]	2020-01-22 04:31:00
187.0.185.10	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-22 04:43:54
95.78.251.116	attackspambots	Unauthorized connection attempt detected from IP address 95.78.251.116 to port 2220 [J]	2020-01-22 04:31:50
45.125.12.154	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-01-22 04:32:42
190.11.32.207	attackspambots	Jan 21 21:01:49 localhost sshd\[111015\]: Invalid user unity from 190.11.32.207 port 41664 Jan 21 21:01:49 localhost sshd\[111015\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.11.32.207 Jan 21 21:01:50 localhost sshd\[111015\]: Failed password for invalid user unity from 190.11.32.207 port 41664 ssh2 Jan 21 21:03:41 localhost sshd\[111048\]: Invalid user apache from 190.11.32.207 port 50934 Jan 21 21:03:41 localhost sshd\[111048\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.11.32.207 ...	2020-01-22 05:07:11
182.69.58.212	attackbots	Honeypot attack, port: 445, PTR: abts-north-dynamic-212.58.69.182.airtelbroadband.in.	2020-01-22 04:29:08
168.197.31.12	attackspambots	Jan 21 10:49:25 eddieflores sshd\[13290\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.197.31.12 user=root Jan 21 10:49:27 eddieflores sshd\[13290\]: Failed password for root from 168.197.31.12 port 37200 ssh2 Jan 21 10:53:36 eddieflores sshd\[13911\]: Invalid user charles from 168.197.31.12 Jan 21 10:53:36 eddieflores sshd\[13911\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.197.31.12 Jan 21 10:53:38 eddieflores sshd\[13911\]: Failed password for invalid user charles from 168.197.31.12 port 52822 ssh2	2020-01-22 04:57:15

Recently Reported IPs

84.244.67.101	248.144.58.29	155.237.202.129	87.135.70.78
100.231.182.102	190.200.187.67	67.67.171.20	83.242.106.163
165.16.37.150	188.108.207.152	125.9.96.198	52.43.44.237
96.32.50.146	40.137.210.61	32.71.246.25	86.82.6.40
80.235.53.181	134.3.243.149	201.44.189.210	61.246.93.63