City: Naples
Region: Regione Campania
Country: Italy
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 79.59.94.35
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42998
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;79.59.94.35. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022301 1800 900 604800 86400
;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 24 09:20:59 CST 2025
;; MSG SIZE rcvd: 104
35.94.59.79.in-addr.arpa domain name pointer host-79-59-94-35.business.telecomitalia.it.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
35.94.59.79.in-addr.arpa name = host-79-59-94-35.business.telecomitalia.it.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 170.33.14.207 | attackspam | Port scanning |
2020-05-02 20:52:17 |
| 14.116.154.173 | attack | May 2 09:58:36 dns1 sshd[4389]: Failed password for root from 14.116.154.173 port 36992 ssh2 May 2 10:01:20 dns1 sshd[4564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.154.173 May 2 10:01:22 dns1 sshd[4564]: Failed password for invalid user pmm from 14.116.154.173 port 44856 ssh2 |
2020-05-02 21:04:16 |
| 203.215.48.78 | attackbotsspam | 2020-05-02T14:14:20.209334v220200467592115444 sshd[12137]: Invalid user vs from 203.215.48.78 port 60039 2020-05-02T14:14:20.216498v220200467592115444 sshd[12137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.215.48.78 2020-05-02T14:14:20.209334v220200467592115444 sshd[12137]: Invalid user vs from 203.215.48.78 port 60039 2020-05-02T14:14:22.784324v220200467592115444 sshd[12137]: Failed password for invalid user vs from 203.215.48.78 port 60039 ssh2 2020-05-02T14:16:31.387026v220200467592115444 sshd[12238]: Invalid user minecraft from 203.215.48.78 port 48090 ... |
2020-05-02 21:07:05 |
| 162.243.139.239 | attackbotsspam | Metasploit VxWorks WDB Agent Scanner Detection |
2020-05-02 20:40:59 |
| 46.105.255.31 | attackspambots | [2020-05-02 08:39:28] NOTICE[1170][C-000098d3] chan_sip.c: Call from '' (46.105.255.31:54244) to extension '5011441528628300' rejected because extension not found in context 'public'. [2020-05-02 08:39:28] SECURITY[1184] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-05-02T08:39:28.760-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="5011441528628300",SessionID="0x7f6c08674948",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.105.255.31/54244",ACLName="no_extension_match" [2020-05-02 08:41:37] NOTICE[1170][C-000098d9] chan_sip.c: Call from '' (46.105.255.31:57330) to extension '1011441528628300' rejected because extension not found in context 'public'. [2020-05-02 08:41:37] SECURITY[1184] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-05-02T08:41:37.973-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="1011441528628300",SessionID="0x7f6c08674948",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/ ... |
2020-05-02 20:48:45 |
| 153.36.110.43 | attackbots | May 2 14:06:19 ns382633 sshd\[1544\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.110.43 user=root May 2 14:06:22 ns382633 sshd\[1544\]: Failed password for root from 153.36.110.43 port 59574 ssh2 May 2 14:15:09 ns382633 sshd\[3086\]: Invalid user zack from 153.36.110.43 port 44568 May 2 14:15:09 ns382633 sshd\[3086\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.110.43 May 2 14:15:12 ns382633 sshd\[3086\]: Failed password for invalid user zack from 153.36.110.43 port 44568 ssh2 |
2020-05-02 20:59:59 |
| 210.242.193.130 | attackbotsspam | Unauthorized connection attempt from IP address 210.242.193.130 on Port 445(SMB) |
2020-05-02 21:06:45 |
| 159.89.201.59 | attack | May 2 06:25:41 server1 sshd\[9925\]: Failed password for root from 159.89.201.59 port 54916 ssh2 May 2 06:30:02 server1 sshd\[14876\]: Invalid user unturned from 159.89.201.59 May 2 06:30:02 server1 sshd\[14876\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.201.59 May 2 06:30:04 server1 sshd\[14876\]: Failed password for invalid user unturned from 159.89.201.59 port 51248 ssh2 May 2 06:34:24 server1 sshd\[31586\]: Invalid user ke from 159.89.201.59 ... |
2020-05-02 20:37:30 |
| 77.159.249.91 | attackspam | May 2 15:04:59 eventyay sshd[23565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.159.249.91 May 2 15:05:01 eventyay sshd[23565]: Failed password for invalid user virgilio from 77.159.249.91 port 36293 ssh2 May 2 15:09:11 eventyay sshd[23669]: Failed password for root from 77.159.249.91 port 60321 ssh2 ... |
2020-05-02 21:14:47 |
| 182.254.154.89 | attack | May 2 12:15:06 sshgateway sshd\[12983\]: Invalid user kd from 182.254.154.89 May 2 12:15:06 sshgateway sshd\[12983\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.254.154.89 May 2 12:15:08 sshgateway sshd\[12983\]: Failed password for invalid user kd from 182.254.154.89 port 60394 ssh2 |
2020-05-02 21:05:13 |
| 188.18.44.6 | attack | Unauthorized connection attempt from IP address 188.18.44.6 on Port 445(SMB) |
2020-05-02 21:10:13 |
| 195.154.42.51 | attackbotsspam | This client attempted to login to an administrator account on a Website, or abused from another resource. |
2020-05-02 21:12:18 |
| 219.136.243.47 | attack | $f2bV_matches |
2020-05-02 21:11:05 |
| 218.92.0.179 | attackspam | May 2 05:52:32 debian sshd[21556]: Unable to negotiate with 218.92.0.179 port 20673: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] May 2 08:27:18 debian sshd[30088]: Unable to negotiate with 218.92.0.179 port 27653: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] ... |
2020-05-02 20:47:25 |
| 188.106.146.151 | attack | May 2 17:40:26 gw1 sshd[17743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.106.146.151 May 2 17:40:28 gw1 sshd[17743]: Failed password for invalid user luky from 188.106.146.151 port 3838 ssh2 ... |
2020-05-02 21:06:10 |