85.244.16.106 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Portugal

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
85.244.169.140	attack	(smtpauth) Failed SMTP AUTH login from 85.244.169.140 (PT/Portugal/bl11-169-140.dsl.telepac.pt): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-03-01 16:47:00 login authenticator failed for bl11-169-140.dsl.telepac.pt (ADMIN) [85.244.169.140]: 535 Incorrect authentication data (set_id=info@taninsanat.com)	2020-03-02 05:01:46
85.244.161.91	attackspam	Sun, 21 Jul 2019 18:27:55 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 06:32:02

Type

Details

Datetime

85.244.169.140

attack

(smtpauth) Failed SMTP AUTH login from 85.244.169.140 (PT/Portugal/bl11-169-140.dsl.telepac.pt): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-03-01 16:47:00 login authenticator failed for bl11-169-140.dsl.telepac.pt (ADMIN) [85.244.169.140]: 535 Incorrect authentication data (set_id=info@taninsanat.com)

2020-03-02 05:01:46

85.244.161.91

attackspam

Sun, 21 Jul 2019 18:27:55 +0000 likely compromised host or open proxy. ddos rate spidering

2019-07-22 06:32:02

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.244.16.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21253
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;85.244.16.106.			IN	A

;; AUTHORITY SECTION:
.			384	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022011101 1800 900 604800 86400

;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 12 05:54:37 CST 2022
;; MSG SIZE  rcvd: 106

Host info

106.16.244.85.in-addr.arpa domain name pointer bl11-16-106.dsl.telepac.pt.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
106.16.244.85.in-addr.arpa	name = bl11-16-106.dsl.telepac.pt.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.180.142	attack	18.08.2020 07:46:31 SSH access blocked by firewall	2020-08-18 15:49:04
51.178.41.60	attackbots	Aug 18 04:13:28 localhost sshd[24920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.ip-51-178-41.eu user=root Aug 18 04:13:30 localhost sshd[24920]: Failed password for root from 51.178.41.60 port 59589 ssh2 Aug 18 04:17:15 localhost sshd[25336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.ip-51-178-41.eu user=root Aug 18 04:17:17 localhost sshd[25336]: Failed password for root from 51.178.41.60 port 36492 ssh2 Aug 18 04:21:03 localhost sshd[25788]: Invalid user market from 51.178.41.60 port 41628 ...	2020-08-18 16:10:11
1.193.160.164	attackbotsspam	Aug 18 05:53:28 vm1 sshd[9434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.193.160.164 Aug 18 05:53:30 vm1 sshd[9434]: Failed password for invalid user admin from 1.193.160.164 port 29518 ssh2 ...	2020-08-18 15:50:27
175.123.253.220	attack	Invalid user hduser from 175.123.253.220 port 33328	2020-08-18 16:03:44
189.254.204.50	attack	Icarus honeypot on github	2020-08-18 16:16:07
193.228.91.123	attack	TCP (SYN) 193.228.91.123:38363 -> port 22, len 48	2020-08-18 16:01:23
54.37.86.192	attackbots	Banned for a week because repeated abuses, for example SSH, but not only	2020-08-18 15:58:30
129.211.66.71	attackspam	DATE:2020-08-18 10:17:26,IP:129.211.66.71,MATCHES:11,PORT:ssh	2020-08-18 16:25:21
185.91.142.202	attackbotsspam	Aug 18 08:50:30 ns381471 sshd[10629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.91.142.202 Aug 18 08:50:32 ns381471 sshd[10629]: Failed password for invalid user smbuser from 185.91.142.202 port 57192 ssh2	2020-08-18 16:11:26
118.69.55.101	attackbots	Invalid user student from 118.69.55.101 port 53898	2020-08-18 16:07:43
34.84.157.244	attack	34.84.157.244 - - [18/Aug/2020:08:41:05 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 34.84.157.244 - - [18/Aug/2020:08:52:44 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-18 16:09:26
91.103.248.23	attackbotsspam	2020-08-18T02:34:45.627462morrigan.ad5gb.com sshd[3509332]: Invalid user vbox from 91.103.248.23 port 41294 2020-08-18T02:34:47.529625morrigan.ad5gb.com sshd[3509332]: Failed password for invalid user vbox from 91.103.248.23 port 41294 ssh2	2020-08-18 16:19:37
45.134.179.243	attackbots	firewall-block, port(s): 3389/tcp	2020-08-18 16:20:45
51.75.64.187	attackbots	SSH invalid-user multiple login attempts	2020-08-18 15:44:28
159.65.158.30	attack	Banned for a week because repeated abuses, for example SSH, but not only	2020-08-18 16:18:34

Recently Reported IPs

96.173.215.249	223.143.216.81	109.160.245.179	46.237.159.47
143.29.2.45	59.116.47.255	179.164.60.165	149.1.234.79
76.126.91.200	240.178.43.156	164.214.7.143	52.103.192.131
42.49.200.79	125.172.3.149	159.127.162.105	19.176.150.50
71.132.213.12	119.43.78.150	36.13.10.135	244.78.180.119