45.16.78.215 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: AT&T Corp.

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	2020-06-29T16:32:38.615558mail.standpoint.com.ua sshd[2944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45-16-78-215.lightspeed.tukrga.sbcglobal.net 2020-06-29T16:32:38.612682mail.standpoint.com.ua sshd[2944]: Invalid user postgres from 45.16.78.215 port 40752 2020-06-29T16:32:40.634600mail.standpoint.com.ua sshd[2944]: Failed password for invalid user postgres from 45.16.78.215 port 40752 ssh2 2020-06-29T16:35:47.683388mail.standpoint.com.ua sshd[3419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45-16-78-215.lightspeed.tukrga.sbcglobal.net user=root 2020-06-29T16:35:49.662465mail.standpoint.com.ua sshd[3419]: Failed password for root from 45.16.78.215 port 40058 ssh2 ...	2020-06-30 00:11:03
attack	Jun 25 20:20:04 dev0-dcde-rnet sshd[16987]: Failed password for root from 45.16.78.215 port 58724 ssh2 Jun 25 20:26:01 dev0-dcde-rnet sshd[17050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.16.78.215 Jun 25 20:26:03 dev0-dcde-rnet sshd[17050]: Failed password for invalid user user1 from 45.16.78.215 port 56308 ssh2	2020-06-26 03:40:32
attackspam	SSH invalid-user multiple login try	2020-06-21 22:59:38

Type

Details

Datetime

attackspam

2020-06-29T16:32:38.615558mail.standpoint.com.ua sshd[2944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45-16-78-215.lightspeed.tukrga.sbcglobal.net
2020-06-29T16:32:38.612682mail.standpoint.com.ua sshd[2944]: Invalid user postgres from 45.16.78.215 port 40752
2020-06-29T16:32:40.634600mail.standpoint.com.ua sshd[2944]: Failed password for invalid user postgres from 45.16.78.215 port 40752 ssh2
2020-06-29T16:35:47.683388mail.standpoint.com.ua sshd[3419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45-16-78-215.lightspeed.tukrga.sbcglobal.net  user=root
2020-06-29T16:35:49.662465mail.standpoint.com.ua sshd[3419]: Failed password for root from 45.16.78.215 port 40058 ssh2
...

2020-06-30 00:11:03

attack

Jun 25 20:20:04 dev0-dcde-rnet sshd[16987]: Failed password for root from 45.16.78.215 port 58724 ssh2
Jun 25 20:26:01 dev0-dcde-rnet sshd[17050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.16.78.215
Jun 25 20:26:03 dev0-dcde-rnet sshd[17050]: Failed password for invalid user user1 from 45.16.78.215 port 56308 ssh2

2020-06-26 03:40:32

attackspam

SSH invalid-user multiple login try

2020-06-21 22:59:38

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.16.78.215
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31561
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.16.78.215.			IN	A

;; AUTHORITY SECTION:
.			476	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020062100 1800 900 604800 86400

;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 21 22:59:32 CST 2020
;; MSG SIZE  rcvd: 116

Host info

215.78.16.45.in-addr.arpa domain name pointer 45-16-78-215.lightspeed.tukrga.sbcglobal.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
215.78.16.45.in-addr.arpa	name = 45-16-78-215.lightspeed.tukrga.sbcglobal.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
24.48.223.22	attack	55101/udp [2020-10-02]1pkt	2020-10-04 07:56:05
218.89.77.105	attack	IP 218.89.77.105 attacked honeypot on port: 1433 at 10/3/2020 12:46:27 PM	2020-10-04 08:08:04
14.226.229.83	attack	Oct 2 17:37:39 firewall sshd[2658]: Invalid user admin from 14.226.229.83 Oct 2 17:37:41 firewall sshd[2658]: Failed password for invalid user admin from 14.226.229.83 port 43922 ssh2 Oct 2 17:37:48 firewall sshd[2660]: Invalid user admin from 14.226.229.83 ...	2020-10-04 08:22:07
106.75.169.24	attackbots	Invalid user server from 106.75.169.24 port 42288	2020-10-04 08:21:06
36.156.156.150	attack	Oct 3 08:49:24 web9 sshd\[9265\]: Invalid user upload from 36.156.156.150 Oct 3 08:49:24 web9 sshd\[9265\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.156.156.150 Oct 3 08:49:26 web9 sshd\[9265\]: Failed password for invalid user upload from 36.156.156.150 port 50330 ssh2 Oct 3 08:52:43 web9 sshd\[9647\]: Invalid user oficina from 36.156.156.150 Oct 3 08:52:43 web9 sshd\[9647\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.156.156.150	2020-10-04 08:05:14
212.83.148.177	attackspambots	[2020-10-03 19:31:43] NOTICE[1182] chan_sip.c: Registration from '"242"' failed for '212.83.148.177:6145' - Wrong password [2020-10-03 19:31:43] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-03T19:31:43.657-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="242",SessionID="0x7f22f8572958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.148.177/6145",Challenge="7b0a03da",ReceivedChallenge="7b0a03da",ReceivedHash="f9fa82c794bfb54fea7d2824e191af1a" [2020-10-03 19:34:05] NOTICE[1182] chan_sip.c: Registration from '"243"' failed for '212.83.148.177:6214' - Wrong password [2020-10-03 19:34:05] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-03T19:34:05.389-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="243",SessionID="0x7f22f828a178",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83. ...	2020-10-04 07:58:54
203.217.140.77	attackbotsspam	$f2bV_matches	2020-10-04 08:01:33
171.88.46.249	attack	SSH Brute Force	2020-10-04 07:47:35
120.11.78.78	attack	TCP (SYN) 120.11.78.78:48997 -> port 23, len 44	2020-10-04 08:02:28
77.69.82.176	attack	Telnet Server BruteForce Attack	2020-10-04 08:20:28
79.132.201.178	attack	23/tcp [2020-10-02]1pkt	2020-10-04 08:11:18
154.8.216.77	attackbotsspam	Oct 3 22:57:35 vpn01 sshd[27194]: Failed password for root from 154.8.216.77 port 49616 ssh2 Oct 3 23:07:10 vpn01 sshd[27389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.8.216.77 ...	2020-10-04 08:04:54
192.241.238.218	attack	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-10-04 08:20:55
92.55.189.115	attackbotsspam	445/tcp 445/tcp [2020-10-02]2pkt	2020-10-04 07:52:44
177.37.127.221	attackbotsspam	445/tcp [2020-10-02]1pkt	2020-10-04 08:13:13

Recently Reported IPs

203.78.119.254	54.160.254.115	166.208.11.127	227.255.52.140
150.78.201.16	146.130.129.2	57.106.154.230	176.98.65.43
180.141.140.50	237.221.47.99	184.22.113.207	135.88.253.251
92.206.38.116	67.79.62.91	96.248.160.43	131.238.136.33
189.57.198.41	55.201.199.236	180.202.74.216	45.153.242.163