City: unknown
Region: unknown
Country: Italy
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.92.44.85
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14594
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;94.92.44.85. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012100 1800 900 604800 86400
;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 00:41:59 CST 2025
;; MSG SIZE rcvd: 10485.44.92.94.in-addr.arpa domain name pointer host-94-92-44-85.business.telecomitalia.it.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
85.44.92.94.in-addr.arpa name = host-94-92-44-85.business.telecomitalia.it.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 79.157.217.179 | attack | SSH brute-force: detected 6 distinct usernames within a 24-hour window. |
2019-11-26 08:43:25 |
| 40.85.84.2 | attack | Brute forcing RDP port 3389 |
2019-11-26 08:49:32 |
| 69.25.27.112 | attackbots | TCP Port Scanning |
2019-11-26 08:30:15 |
| 212.0.149.87 | attackspambots | Unauthorized connection attempt from IP address 212.0.149.87 on Port 445(SMB) |
2019-11-26 08:27:50 |
| 112.123.72.36 | attackbots | port scan/probe/communication attempt; port 23 |
2019-11-26 08:26:24 |
| 159.203.197.15 | attackspam | 159.203.197.15 was recorded 5 times by 5 hosts attempting to connect to the following ports: 27019. Incident counter (4h, 24h, all-time): 5, 5, 129 |
2019-11-26 08:19:09 |
| 112.105.255.227 | attackbots | port scan/probe/communication attempt; port 23 |
2019-11-26 08:33:33 |
| 196.223.152.38 | attackbotsspam | Unauthorized connection attempt from IP address 196.223.152.38 on Port 445(SMB) |
2019-11-26 08:38:10 |
| 54.37.14.3 | attackspambots | Nov 26 05:26:12 gw1 sshd[30557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.14.3 Nov 26 05:26:15 gw1 sshd[30557]: Failed password for invalid user xenesis from 54.37.14.3 port 59760 ssh2 ... |
2019-11-26 08:39:31 |
| 192.243.114.182 | attack | Nov 25 23:44:39 |
2019-11-26 08:45:36 |
| 180.159.206.229 | attackbots | Unauthorized connection attempt from IP address 180.159.206.229 on Port 445(SMB) |
2019-11-26 08:26:38 |
| 49.206.26.136 | attackbots | Unauthorized connection attempt from IP address 49.206.26.136 on Port 445(SMB) |
2019-11-26 08:35:05 |
| 218.92.0.168 | attackspam | Nov 26 05:39:21 gw1 sshd[31024]: Failed password for root from 218.92.0.168 port 10234 ssh2 Nov 26 05:39:32 gw1 sshd[31024]: error: maximum authentication attempts exceeded for root from 218.92.0.168 port 10234 ssh2 [preauth] ... |
2019-11-26 08:39:47 |
| 112.85.42.179 | attackspambots | 2019-11-26T00:08:14.428733hub.schaetter.us sshd\[17837\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.179 user=root 2019-11-26T00:08:16.141102hub.schaetter.us sshd\[17837\]: Failed password for root from 112.85.42.179 port 1676 ssh2 2019-11-26T00:08:19.504258hub.schaetter.us sshd\[17837\]: Failed password for root from 112.85.42.179 port 1676 ssh2 2019-11-26T00:08:22.282738hub.schaetter.us sshd\[17837\]: Failed password for root from 112.85.42.179 port 1676 ssh2 2019-11-26T00:08:25.470551hub.schaetter.us sshd\[17837\]: Failed password for root from 112.85.42.179 port 1676 ssh2 ... |
2019-11-26 08:28:30 |
| 178.128.22.249 | attackbotsspam | Nov 26 01:29:42 andromeda sshd\[28905\]: Invalid user shippen from 178.128.22.249 port 32827 Nov 26 01:29:42 andromeda sshd\[28905\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.22.249 Nov 26 01:29:44 andromeda sshd\[28905\]: Failed password for invalid user shippen from 178.128.22.249 port 32827 ssh2 |
2019-11-26 08:37:21 |