City: Atessa
Region: Regione Abruzzo
Country: Italy
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '85.46.231.16 - 85.46.231.23'
% Abuse contact for '85.46.231.16 - 85.46.231.23' is 'abuse@business.telecomitalia.it'
inetnum: 85.46.231.16 - 85.46.231.23
netname: FARMATREINFORMATICASRL
descr: FARMA TRE INFORMATICA SRL
country: IT
admin-c: RV2441-RIPE
tech-c: RV2441-RIPE
status: ASSIGNED PA
mnt-by: INTERB-MNT
created: 2005-10-04T10:04:08Z
last-modified: 2020-04-09T12:59:09Z
source: RIPE # Filtered
person: ROBERTO VIGNALI
address: FARMA TRE INFORMATICA SRL
address: VIA N. SAURO 2
address: 41058 VIGNOLA
address: Italy
phone: +39444557183
fax-no: +3959704905
nic-hdl: RV2441-RIPE
created: 2006-06-08T23:21:27Z
last-modified: 2020-06-04T01:58:53Z
source: RIPE
mnt-by: INTERB-MNT
% Information related to '85.46.128.0/17AS3269'
route: 85.46.128.0/17
descr: INTERBUSINESS
origin: AS3269
remarks: ************************************************
remarks: * Pay attention *
remarks: * Any communication sent to email different *
remarks: * from the following will be ignored! *
remarks: * Any abuse reports, please send them to *
remarks: * abuse@business.telecomitalia.it *
remarks: ************************************************
mnt-by: INTERB-MNT
created: 2005-08-18T09:45:09Z
last-modified: 2005-08-18T09:45:09Z
source: RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.121.2 (SHETLAND)
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.46.231.23
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3928
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;85.46.231.23. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026032201 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 23 08:12:22 CST 2026
;; MSG SIZE rcvd: 105
23.231.46.85.in-addr.arpa domain name pointer host-85-46-231-23.business.telecomitalia.it.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
23.231.46.85.in-addr.arpa name = host-85-46-231-23.business.telecomitalia.it.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 190.179.0.26 | attackspambots | Honeypot attack, port: 5555, PTR: 190-179-0-26.speedy.com.ar. |
2020-09-07 20:57:15 |
| 140.143.207.57 | attackspam | (sshd) Failed SSH login from 140.143.207.57 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 7 01:09:06 server sshd[19526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.207.57 user=root Sep 7 01:09:08 server sshd[19526]: Failed password for root from 140.143.207.57 port 41294 ssh2 Sep 7 01:28:02 server sshd[24811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.207.57 user=root Sep 7 01:28:04 server sshd[24811]: Failed password for root from 140.143.207.57 port 47390 ssh2 Sep 7 01:33:32 server sshd[26289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.207.57 user=root |
2020-09-07 20:34:22 |
| 112.85.42.89 | attack | Sep 7 14:54:58 piServer sshd[28683]: Failed password for root from 112.85.42.89 port 13086 ssh2 Sep 7 14:55:01 piServer sshd[28683]: Failed password for root from 112.85.42.89 port 13086 ssh2 Sep 7 14:55:05 piServer sshd[28683]: Failed password for root from 112.85.42.89 port 13086 ssh2 ... |
2020-09-07 21:03:34 |
| 112.28.172.63 | attackspam | Honeypot attack, port: 5555, PTR: PTR record not found |
2020-09-07 20:27:15 |
| 178.62.115.86 | attackbotsspam | (sshd) Failed SSH login from 178.62.115.86 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 7 07:19:12 server sshd[6626]: Invalid user amandabackup from 178.62.115.86 port 57680 Sep 7 07:19:13 server sshd[6626]: Failed password for invalid user amandabackup from 178.62.115.86 port 57680 ssh2 Sep 7 07:28:21 server sshd[10467]: Invalid user dim from 178.62.115.86 port 39368 Sep 7 07:28:22 server sshd[10467]: Failed password for invalid user dim from 178.62.115.86 port 39368 ssh2 Sep 7 07:31:32 server sshd[11417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.115.86 user=root |
2020-09-07 20:58:07 |
| 93.103.153.194 | attack | 20/9/6@12:55:08: FAIL: IoT-SSH address from=93.103.153.194 ... |
2020-09-07 20:28:39 |
| 138.197.175.236 | attack | SIP/5060 Probe, BF, Hack - |
2020-09-07 20:31:48 |
| 85.209.0.253 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2020-09-07 21:00:46 |
| 37.187.54.45 | attackbotsspam | Sep 7 12:36:18 nextcloud sshd\[9425\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.54.45 user=root Sep 7 12:36:20 nextcloud sshd\[9425\]: Failed password for root from 37.187.54.45 port 44988 ssh2 Sep 7 12:39:47 nextcloud sshd\[12371\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.54.45 user=root |
2020-09-07 20:38:26 |
| 218.92.0.172 | attackspam | $f2bV_matches |
2020-09-07 20:43:29 |
| 45.142.120.49 | attackbots | 2020-09-07 15:46:22 dovecot_login authenticator failed for \(User\) \[45.142.120.49\]: 535 Incorrect authentication data \(set_id=demo03@org.ua\)2020-09-07 15:47:06 dovecot_login authenticator failed for \(User\) \[45.142.120.49\]: 535 Incorrect authentication data \(set_id=dick@org.ua\)2020-09-07 15:47:50 dovecot_login authenticator failed for \(User\) \[45.142.120.49\]: 535 Incorrect authentication data \(set_id=wp_screen_options@org.ua\) ... |
2020-09-07 20:48:59 |
| 117.61.241.147 | attack | 20/9/6@19:20:51: FAIL: Alarm-Network address from=117.61.241.147 ... |
2020-09-07 20:36:51 |
| 171.221.210.158 | attackbotsspam | 171.221.210.158 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 7 06:07:18 server5 sshd[13322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.16.211.200 user=root Sep 7 06:12:34 server5 sshd[15818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.221.210.158 user=root Sep 7 06:06:23 server5 sshd[12620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.20.90.63 user=root Sep 7 06:06:25 server5 sshd[12620]: Failed password for root from 14.20.90.63 port 35774 ssh2 Sep 7 06:10:57 server5 sshd[15029]: Failed password for root from 144.34.193.83 port 60898 ssh2 Sep 7 06:07:19 server5 sshd[13322]: Failed password for root from 112.16.211.200 port 51734 ssh2 IP Addresses Blocked: 112.16.211.200 (CN/China/-) |
2020-09-07 20:52:38 |
| 45.142.120.89 | attackbotsspam | Sep 7 14:34:41 relay postfix/smtpd\[14381\]: warning: unknown\[45.142.120.89\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 7 14:35:13 relay postfix/smtpd\[17695\]: warning: unknown\[45.142.120.89\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 7 14:35:55 relay postfix/smtpd\[12351\]: warning: unknown\[45.142.120.89\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 7 14:36:28 relay postfix/smtpd\[12361\]: warning: unknown\[45.142.120.89\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 7 14:37:09 relay postfix/smtpd\[11090\]: warning: unknown\[45.142.120.89\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-09-07 20:45:36 |
| 218.92.0.133 | attackspambots | Icarus honeypot on github |
2020-09-07 20:22:27 |