City: Casoria
Region: Regione Campania
Country: Italy
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.45.158.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49225
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;85.45.158.16. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022000 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 18:59:11 CST 2025
;; MSG SIZE rcvd: 105
16.158.45.85.in-addr.arpa domain name pointer host-85-45-158-16.business.telecomitalia.it.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
16.158.45.85.in-addr.arpa name = host-85-45-158-16.business.telecomitalia.it.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.175.93.14 | attack | 11/12/2019-01:38:51.555813 185.175.93.14 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-11-12 14:45:33 |
| 1.55.241.4 | attackspam | postfix (unknown user, SPF fail or relay access denied) |
2019-11-12 14:04:02 |
| 93.191.157.11 | attack | Nov 12 07:01:08 pornomens sshd\[11760\]: Invalid user ubuntu from 93.191.157.11 port 52668 Nov 12 07:01:08 pornomens sshd\[11760\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.191.157.11 Nov 12 07:01:10 pornomens sshd\[11760\]: Failed password for invalid user ubuntu from 93.191.157.11 port 52668 ssh2 ... |
2019-11-12 14:19:59 |
| 163.172.207.104 | attackbotsspam | \[2019-11-12 00:35:44\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-12T00:35:44.129-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="972592277524",SessionID="0x7fdf2c6dc768",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.207.104/65495",ACLName="no_extension_match" \[2019-11-12 00:40:27\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-12T00:40:27.753-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="8011972592277524",SessionID="0x7fdf2c003608",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.207.104/49683",ACLName="no_extension_match" \[2019-11-12 00:44:38\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-12T00:44:38.266-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="7011972592277524",SessionID="0x7fdf2c003608",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.207.104/49761",ACLName="n |
2019-11-12 14:28:28 |
| 104.254.92.54 | attack | (From osburn.georgia@msn.com) Would you like to post your business on thousands of advertising sites monthly? Pay one flat rate and get virtually unlimited traffic to your site forever! Check out our site for details: http://www.postmyads.tech |
2019-11-12 13:58:36 |
| 182.126.75.145 | attackbots | Fail2Ban Ban Triggered |
2019-11-12 14:11:42 |
| 139.59.79.56 | attackspam | Nov 12 07:40:24 icinga sshd[19891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.79.56 Nov 12 07:40:26 icinga sshd[19891]: Failed password for invalid user qhsupport from 139.59.79.56 port 46810 ssh2 ... |
2019-11-12 14:42:37 |
| 45.165.19.191 | attack | Automatic report - Port Scan Attack |
2019-11-12 14:17:40 |
| 143.137.250.207 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/143.137.250.207/ BR - 1H : (122) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : BR NAME ASN : ASN264069 IP : 143.137.250.207 CIDR : 143.137.248.0/22 PREFIX COUNT : 3 UNIQUE IP COUNT : 2048 ATTACKS DETECTED ASN264069 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-11-12 05:57:26 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-12 14:06:15 |
| 23.83.238.201 | attack | Nov 12 07:03:05 root sshd[18138]: Failed password for bin from 23.83.238.201 port 58450 ssh2 Nov 12 07:09:44 root sshd[18242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.83.238.201 Nov 12 07:09:46 root sshd[18242]: Failed password for invalid user info from 23.83.238.201 port 38328 ssh2 ... |
2019-11-12 14:20:30 |
| 139.198.191.217 | attackbots | Nov 12 06:27:49 ns382633 sshd\[618\]: Invalid user krotish from 139.198.191.217 port 60130 Nov 12 06:27:49 ns382633 sshd\[618\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.191.217 Nov 12 06:27:51 ns382633 sshd\[618\]: Failed password for invalid user krotish from 139.198.191.217 port 60130 ssh2 Nov 12 06:39:20 ns382633 sshd\[2685\]: Invalid user bdos from 139.198.191.217 port 42524 Nov 12 06:39:20 ns382633 sshd\[2685\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.191.217 |
2019-11-12 14:04:44 |
| 222.186.173.154 | attack | 2019-11-11T19:11:51.153608homeassistant sshd[31092]: Failed password for root from 222.186.173.154 port 17086 ssh2 2019-11-12T06:13:18.727689homeassistant sshd[2333]: Failed none for root from 222.186.173.154 port 29002 ssh2 ... |
2019-11-12 14:14:19 |
| 46.38.144.146 | attackbots | 2019-11-12T07:39:59.406725mail01 postfix/smtpd[28937]: warning: unknown[46.38.144.146]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-12T07:40:00.407754mail01 postfix/smtpd[21953]: warning: unknown[46.38.144.146]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-12T07:40:10.358395mail01 postfix/smtpd[31903]: warning: unknown[46.38.144.146]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-11-12 14:44:36 |
| 177.11.57.47 | attackspam | Automatic report - Port Scan Attack |
2019-11-12 14:21:35 |
| 222.186.175.202 | attackspambots | Nov 12 01:40:44 123flo sshd[19685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.202 user=root Nov 12 01:40:46 123flo sshd[19685]: Failed password for root from 222.186.175.202 port 14262 ssh2 |
2019-11-12 14:48:53 |