City: unknown
Region: unknown
Country: Italy
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 5.97.199.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7331
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;5.97.199.245. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012401 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 25 04:49:19 CST 2025
;; MSG SIZE rcvd: 105
245.199.97.5.in-addr.arpa domain name pointer host-5-97-199-245.business.telecomitalia.it.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
245.199.97.5.in-addr.arpa name = host-5-97-199-245.business.telecomitalia.it.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 79.12.140.32 | attackbots | NAME : TELECOM-ADSL-POOL + e-mail abuse : abuse@retail.telecomitalia.it CIDR : 79.12.128.0/17 | STATUS : 403 {Looking for resource vulnerabilities} DDoS Attack IT - block certain countries :) IP: 79.12.140.32 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-08-27 06:27:45 |
| 64.246.165.200 | attackbots | Automatic report - Banned IP Access |
2019-08-27 06:00:36 |
| 139.59.14.210 | attackspam | Aug 26 22:13:23 ip-172-31-1-72 sshd\[729\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.14.210 user=root Aug 26 22:13:25 ip-172-31-1-72 sshd\[729\]: Failed password for root from 139.59.14.210 port 40646 ssh2 Aug 26 22:19:15 ip-172-31-1-72 sshd\[894\]: Invalid user resto from 139.59.14.210 Aug 26 22:19:15 ip-172-31-1-72 sshd\[894\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.14.210 Aug 26 22:19:17 ip-172-31-1-72 sshd\[894\]: Failed password for invalid user resto from 139.59.14.210 port 55946 ssh2 |
2019-08-27 06:25:11 |
| 218.84.117.90 | attackbots | Attempt to login to email server on IMAP service on 26-08-2019 17:43:28. |
2019-08-27 06:02:03 |
| 61.176.239.65 | attackspambots | Unauthorised access (Aug 26) SRC=61.176.239.65 LEN=40 TTL=49 ID=53048 TCP DPT=8080 WINDOW=35137 SYN |
2019-08-27 06:28:28 |
| 62.210.182.188 | attackbotsspam | [munged]::443 62.210.182.188 - - [26/Aug/2019:23:32:43 +0200] "POST /[munged]: HTTP/1.1" 200 8929 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:61.0.1) Gecko/20120101 Firefox/61.0.1" [munged]::443 62.210.182.188 - - [26/Aug/2019:23:32:43 +0200] "POST /[munged]: HTTP/1.1" 200 8929 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:61.0.1) Gecko/20120101 Firefox/61.0.1" |
2019-08-27 06:21:05 |
| 41.208.150.114 | attackspambots | $f2bV_matches |
2019-08-27 06:01:22 |
| 186.206.134.122 | attackspam | Aug 26 19:04:06 XXX sshd[50388]: Invalid user strenesse from 186.206.134.122 port 46782 |
2019-08-27 05:54:38 |
| 178.128.144.227 | attackspambots | Aug 26 22:08:05 tux-35-217 sshd\[31539\]: Invalid user zb from 178.128.144.227 port 52390 Aug 26 22:08:05 tux-35-217 sshd\[31539\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.144.227 Aug 26 22:08:07 tux-35-217 sshd\[31539\]: Failed password for invalid user zb from 178.128.144.227 port 52390 ssh2 Aug 26 22:12:13 tux-35-217 sshd\[31555\]: Invalid user super from 178.128.144.227 port 44426 Aug 26 22:12:13 tux-35-217 sshd\[31555\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.144.227 ... |
2019-08-27 06:23:52 |
| 189.39.242.129 | attackbots | 1566826211 - 08/26/2019 20:30:11 Host: 189.39.242.129.mar.com.br/189.39.242.129 Port: 23 TCP Blocked ... |
2019-08-27 06:07:12 |
| 51.75.123.85 | attackbots | Aug 27 03:08:43 localhost sshd[7100]: Invalid user minecraft from 51.75.123.85 port 59516 Aug 27 03:08:43 localhost sshd[7100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.85 Aug 27 03:08:43 localhost sshd[7100]: Invalid user minecraft from 51.75.123.85 port 59516 Aug 27 03:08:45 localhost sshd[7100]: Failed password for invalid user minecraft from 51.75.123.85 port 59516 ssh2 ... |
2019-08-27 06:02:32 |
| 88.89.54.108 | attackbotsspam | 2019-08-26T16:48:06.750459abusebot-3.cloudsearch.cf sshd\[20437\]: Invalid user library from 88.89.54.108 port 51938 |
2019-08-27 06:27:27 |
| 139.59.59.90 | attackbotsspam | Invalid user tanis from 139.59.59.90 port 10711 |
2019-08-27 06:20:38 |
| 188.214.104.146 | attackbotsspam | [ssh] SSH attack |
2019-08-27 05:54:16 |
| 122.152.210.200 | attack | Aug 26 05:23:38 tdfoods sshd\[9216\]: Invalid user jboss from 122.152.210.200 Aug 26 05:23:38 tdfoods sshd\[9216\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.152.210.200 Aug 26 05:23:40 tdfoods sshd\[9216\]: Failed password for invalid user jboss from 122.152.210.200 port 53432 ssh2 Aug 26 05:27:23 tdfoods sshd\[9530\]: Invalid user zhong from 122.152.210.200 Aug 26 05:27:24 tdfoods sshd\[9530\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.152.210.200 |
2019-08-27 05:47:38 |