City: Turin
Region: Piedmont
Country: Italy
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.91.45.211
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38708
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;94.91.45.211. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021902 1800 900 604800 86400
;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 09:48:07 CST 2025
;; MSG SIZE rcvd: 105
211.45.91.94.in-addr.arpa domain name pointer host-94-91-45-211.business.telecomitalia.it.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
211.45.91.94.in-addr.arpa name = host-94-91-45-211.business.telecomitalia.it.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 212.83.177.142 | attackbots | Automatic report - XMLRPC Attack |
2020-01-02 04:08:44 |
| 222.88.203.42 | attack | Unauthorized connection attempt from IP address 222.88.203.42 on Port 445(SMB) |
2020-01-02 04:20:18 |
| 148.70.101.245 | attackspam | Jan 1 20:50:53 MK-Soft-VM7 sshd[22486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.101.245 Jan 1 20:50:55 MK-Soft-VM7 sshd[22486]: Failed password for invalid user audie from 148.70.101.245 port 59732 ssh2 ... |
2020-01-02 04:07:20 |
| 113.162.161.160 | attackbots | Jan 01 08:22:38 askasleikir sshd[323791]: Failed password for invalid user admin from 113.162.161.160 port 43673 ssh2 |
2020-01-02 04:33:06 |
| 185.53.88.21 | attackbots | \[2020-01-01 15:13:46\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-01-01T15:13:46.727-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="011972595778361",SessionID="0x7f0fb4a1daa8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.21/5070",ACLName="no_extension_match" \[2020-01-01 15:15:30\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-01-01T15:15:30.640-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="972595778361",SessionID="0x7f0fb4a5a908",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.21/5082",ACLName="no_extension_match" \[2020-01-01 15:21:51\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-01-01T15:21:51.021-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011972595778361",SessionID="0x7f0fb447f838",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.21/5078",ACLName="no_extension_m |
2020-01-02 04:27:22 |
| 121.166.187.237 | attack | 2020-01-01T17:54:59.213000vps751288.ovh.net sshd\[15335\]: Invalid user guest123 from 121.166.187.237 port 40942 2020-01-01T17:54:59.221583vps751288.ovh.net sshd\[15335\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.166.187.237 2020-01-01T17:55:00.569914vps751288.ovh.net sshd\[15335\]: Failed password for invalid user guest123 from 121.166.187.237 port 40942 ssh2 2020-01-01T17:58:12.532899vps751288.ovh.net sshd\[15341\]: Invalid user applea from 121.166.187.237 port 40830 2020-01-01T17:58:12.542311vps751288.ovh.net sshd\[15341\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.166.187.237 |
2020-01-02 03:56:53 |
| 131.196.8.36 | attackbotsspam | port scan and connect, tcp 23 (telnet) |
2020-01-02 04:31:23 |
| 14.254.104.139 | attack | Unauthorized connection attempt from IP address 14.254.104.139 on Port 445(SMB) |
2020-01-02 04:12:42 |
| 89.248.168.202 | attackbotsspam | Jan 1 20:31:12 debian-2gb-nbg1-2 kernel: \[166403.852957\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=89.248.168.202 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=30570 PROTO=TCP SPT=48612 DPT=5117 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-01-02 03:59:27 |
| 27.76.0.86 | attackspam | none |
2020-01-02 04:21:50 |
| 112.35.76.1 | attack | Dec 31 13:29:32 reporting2 sshd[2524]: Invalid user sasuke from 112.35.76.1 Dec 31 13:29:32 reporting2 sshd[2524]: Failed password for invalid user sasuke from 112.35.76.1 port 53844 ssh2 Dec 31 13:43:48 reporting2 sshd[8682]: Invalid user guest from 112.35.76.1 Dec 31 13:43:49 reporting2 sshd[8682]: Failed password for invalid user guest from 112.35.76.1 port 35922 ssh2 Dec 31 13:47:31 reporting2 sshd[10523]: Invalid user asterisk from 112.35.76.1 Dec 31 13:47:31 reporting2 sshd[10523]: Failed password for invalid user asterisk from 112.35.76.1 port 33824 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=112.35.76.1 |
2020-01-02 03:59:08 |
| 61.2.99.109 | attackbotsspam | Jan 01 08:22:48 askasleikir sshd[323800]: Failed password for invalid user admin from 61.2.99.109 port 59015 ssh2 |
2020-01-02 04:30:28 |
| 23.92.225.228 | attackspam | Jan 1 17:43:47 master sshd[5908]: Failed password for invalid user monitor from 23.92.225.228 port 49730 ssh2 |
2020-01-02 04:36:07 |
| 36.85.217.81 | attackbots | Unauthorized connection attempt from IP address 36.85.217.81 on Port 445(SMB) |
2020-01-02 04:27:51 |
| 124.156.121.233 | attackspam | Jan 1 17:58:25 *** sshd[16956]: Invalid user applmgr from 124.156.121.233 |
2020-01-02 04:13:05 |