Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Offlaga

Region: Lombardy

Country: Italy

Internet Service Provider: Telecom Italia S.p.A.

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attack
2020-05-29T23:50:58.838039sd-86998 sshd[14358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=host13-99-dynamic.24-79-r.retail.telecomitalia.it  user=root
2020-05-29T23:51:00.252912sd-86998 sshd[14358]: Failed password for root from 79.24.99.13 port 59383 ssh2
2020-05-29T23:57:16.996575sd-86998 sshd[15435]: Invalid user UBNT from 79.24.99.13 port 49621
2020-05-29T23:57:17.000057sd-86998 sshd[15435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=host13-99-dynamic.24-79-r.retail.telecomitalia.it
2020-05-29T23:57:16.996575sd-86998 sshd[15435]: Invalid user UBNT from 79.24.99.13 port 49621
2020-05-29T23:57:18.641132sd-86998 sshd[15435]: Failed password for invalid user UBNT from 79.24.99.13 port 49621 ssh2
...
2020-05-30 07:04:32
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 79.24.99.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45217
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;79.24.99.13.			IN	A

;; AUTHORITY SECTION:
.			519	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052901 1800 900 604800 86400

;; Query time: 109 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 30 07:04:29 CST 2020
;; MSG SIZE  rcvd: 115
Host info
13.99.24.79.in-addr.arpa domain name pointer host13-99-dynamic.24-79-r.retail.telecomitalia.it.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
13.99.24.79.in-addr.arpa	name = host13-99-dynamic.24-79-r.retail.telecomitalia.it.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
103.228.221.156 attack
PHI,WP GET /wp-login.php
2019-07-14 06:35:49
79.137.72.171 attack
SSH Brute-Force reported by Fail2Ban
2019-07-14 06:41:08
31.184.238.120 attackspambots
Looking for resource vulnerabilities
2019-07-14 07:02:53
162.243.158.185 attackspambots
Jul 13 23:32:48 minden010 sshd[23615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.158.185
Jul 13 23:32:50 minden010 sshd[23615]: Failed password for invalid user fcweb from 162.243.158.185 port 45940 ssh2
Jul 13 23:40:33 minden010 sshd[26566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.158.185
...
2019-07-14 06:50:31
5.234.232.0 attackbots
Automatic report - Port Scan Attack
2019-07-14 06:47:24
149.129.226.94 attackbotsspam
Automatic report - Port Scan Attack
2019-07-14 06:46:07
158.181.169.41 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-13 13:30:07,914 INFO [shellcode_manager] (158.181.169.41) no match, writing hexdump (e2968a44895a5387527254d62d45eaa2 :2503763) - MS17010 (EternalBlue)
2019-07-14 06:35:03
141.255.0.141 attack
Automatic report - Port Scan Attack
2019-07-14 06:54:39
46.101.127.49 attackbotsspam
Jul 14 01:43:20 srv-4 sshd\[26041\]: Invalid user support from 46.101.127.49
Jul 14 01:43:20 srv-4 sshd\[26041\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.127.49
Jul 14 01:43:22 srv-4 sshd\[26041\]: Failed password for invalid user support from 46.101.127.49 port 60724 ssh2
...
2019-07-14 07:05:36
1.165.101.39 attackbotsspam
firewall-block, port(s): 23/tcp
2019-07-14 07:13:54
186.232.143.192 attackspam
failed_logins
2019-07-14 07:04:07
217.112.128.126 attackspambots
Postfix DNSBL listed. Trying to send SPAM.
2019-07-14 07:00:29
117.156.241.161 attack
Jul 14 01:15:20 dedicated sshd[11083]: Invalid user soporte from 117.156.241.161 port 48187
2019-07-14 07:16:40
124.47.21.22 attack
Telnet Server BruteForce Attack
2019-07-14 07:05:11
37.117.246.113 attack
Lines containing failures of 37.117.246.113
Jul 12 15:43:21 mellenthin postfix/smtpd[29571]: connect from net-37-117-246-113.cust.vodafonedsl.hostname[37.117.246.113]
Jul x@x
Jul 12 15:43:22 mellenthin postfix/smtpd[29571]: lost connection after DATA from net-37-117-246-113.cust.vodafonedsl.hostname[37.117.246.113]
Jul 12 15:43:22 mellenthin postfix/smtpd[29571]: disconnect from net-37-117-246-113.cust.vodafonedsl.hostname[37.117.246.113] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4
Jul 13 16:56:50 mellenthin postfix/smtpd[5627]: connect from net-37-117-246-113.cust.vodafonedsl.hostname[37.117.246.113]
Jul x@x
Jul 13 16:56:50 mellenthin postfix/smtpd[5627]: lost connection after DATA from net-37-117-246-113.cust.vodafonedsl.hostname[37.117.246.113]
Jul 13 16:56:50 mellenthin postfix/smtpd[5627]: disconnect from net-37-117-246-113.cust.vodafonedsl.hostname[37.117.246.113] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4


........
-----------------------------------------------
https://www.blocklist.de/en/view.htm
2019-07-14 07:17:39

Recently Reported IPs

114.143.145.86 31.180.206.43 37.49.226.107 83.223.95.240
117.121.19.109 75.222.164.171 1.205.229.238 116.20.24.177
187.174.241.194 92.213.109.199 104.220.109.120 185.59.111.210
170.49.117.122 73.230.73.162 151.18.101.208 115.125.121.109
185.172.110.248 134.50.117.143 59.14.109.134 91.53.196.253