This IP address has been reported a total of
27
times from
24 distinct
sources.
79.12.60.109 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Czechia
with 5
reports;
Germany
with 5
reports;
France
with 5
reports.
The most common categories in these recent reports were:
Brute-Force
14
times;
SSH
12
times;
Web App Attack
8
times;
Port Scan
6
times;
Hacking
4
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW (TCP on 23)
Source port: 63996
TTL: 51
Packet length: 44
TOS: 0x00
This report (for ...
show moreBlocked by UFW (TCP on 23)
Source port: 63996
TTL: 51
Packet length: 44
TOS: 0x00
This report (for 79.12.60.109) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
(wpscan) WordPress probe detected from 79.12.60.109 (IT/Italy/host-79-12-60-109.retail.telecomitalia ...
show more(wpscan) WordPress probe detected from 79.12.60.109 (IT/Italy/host-79-12-60-109.retail.telecomitalia.it)
show less
Failed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 17/100 (low) ...
show moreFailed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 17/100 (low) | Phase: reconnaissance (pre-auth probing / scanning)
Failed auth: 19 (5 bad password, 14 invalid user) | 0 success | 31 total SSH log events | seen on 1 sensor(s)
Origin: Italy (IT) | AS3269 Telecom Italia S.p.A. | 79.12.60.0/24
First seen: 2026-10-10 06:36:31 UTC | Last seen: 2026-10-10 06:44:53 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
2026-10-10 05:52:27,176 quad proftpd[3565901] 2a03:4000:3e:312:360a:466c:8ea1:45b9 (host-79-12-60-10 ...
show more2026-10-10 05:52:27,176 quad proftpd[3565901] 2a03:4000:3e:312:360a:466c:8ea1:45b9 (host-79-12-60-109.retail.telecomitalia.it[79.12.60.109]): USER admin: no such user found from host-79-12-60-109.retail.telecomitalia.it [79.12.60.109] to 2.56.97.107:22
show less
2026-10-10T07:40:11.485040+02:00 fangorn sshd[97294]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-10-10T07:40:11.485040+02:00 fangorn sshd[97294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.12.60.109
2026-10-10T07:40:12.935812+02:00 fangorn sshd[97294]: Failed password for invalid user admin from 79.12.60.109 port 41332 ssh2
2026-10-10T07:40:52.062827+02:00 fangorn sshd[97367]: Invalid user user from 79.12.60.109 port 56070
...
show less
Brute-Force
SSH
Anonymous
2026-10-10T07:15:59+02:00 lb-1 sshd[205495]: Failed password for invalid user admin from 79.12.60.10 ...
show more2026-10-10T07:15:59+02:00 lb-1 sshd[205495]: Failed password for invalid user admin from 79.12.60.109 port 53674 ssh2
2026-10-10T07:16:35+02:00 lb-1 sshd[205593]: Invalid user user from 79.12.60.109 port 41412
2026-10-10T07:16:35+02:00 lb-1 sshd[205593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.12.60.109
2026-10-10T07:16:38+02:00 lb-1 sshd[205593]: Failed password for invalid user user from 79.12.60.109 port 41412 ssh2
...
show less
SSH Brute force: 52 attempts were recorded from 79.12.60.109
2026-10-10T05:19:19+02:00 Connection cl ...
show moreSSH Brute force: 52 attempts were recorded from 79.12.60.109
2026-10-10T05:19:19+02:00 Connection closed by authenticating user root 79.12.60.109 port 54850 [preauth]
2026-10-10T05:20:00+02:00 Connection closed by authenticating user root 79.12.60.109 port 41946 [preauth]
2026-10-10T05:20:44+02:00 Connection closed by authenticating user root 79.12.60.109 port 58024 [preauth]
2026-10-10T05:21:21+02:00 Invalid user ubuntu from 79.12.60.109 port 46220
2026-10-10T05:22:01+02:00 Invalid user user from 79.12.60.109 port 34320
2026-10-10T05:22:47+02:00 Connection closed by authenticating user root 79.12.60.109 port 50334 [preauth]
2026-10-10T05:23:27+02:00 Connection closed by authenticating user root 79.12.60.109 port 38130 [preauth]
2026-10-10T05:24:10+02:00 Connection closed by authenticating user root 79.12.60.109 port 53480 [preauth]
2026-10-10T05:24:52+02:00 Connection closed by authenti
show less
SSH Brute force: 121 attempts were recorded from 79.12.60.109
2026-10-10T03:49:26+02:00 Connection c ...
show moreSSH Brute force: 121 attempts were recorded from 79.12.60.109
2026-10-10T03:49:26+02:00 Connection closed by authenticating user root 79.12.60.109 port 50102 [preauth]
2026-10-10T03:50:07+02:00 Invalid user teamspeak from 79.12.60.109 port 37054
2026-10-10T03:50:58+02:00 Connection closed by authenticating user root 79.12.60.109 port 52560 [preauth]
2026-10-10T03:51:48+02:00 Connection closed by authenticating user root 79.12.60.109 port 40750 [preauth]
2026-10-10T03:52:32+02:00 Connection closed by authenticating user root 79.12.60.109 port 57388 [preauth]
2026-10-10T03:53:18+02:00 Connection closed by authenticating user root 79.12.60.109 port 44050 [preauth]
2026-10-10T03:54:01+02:00 Connection closed by authenticating user root 79.12.60.109 port 59326 [preauth]
2026-10-10T03:54:47+02:00 Connection closed by authenticating user root 79.12.60.109 port 46214 [preauth]
2026-10-10T03:55:4
show less
Brute-Force
SSH
Anonymous
denied traffic to a honeypot network. destination port 23.
SSH Brute force: 116 attempts were recorded from 79.12.60.109
2026-10-10T02:19:14+02:00 Invalid user ...
show moreSSH Brute force: 116 attempts were recorded from 79.12.60.109
2026-10-10T02:19:14+02:00 Invalid user teste from 79.12.60.109 port 37172
2026-10-10T02:20:09+02:00 Connection closed by authenticating user root 79.12.60.109 port 52888 [preauth]
2026-10-10T02:20:52+02:00 Connection closed by authenticating user root 79.12.60.109 port 42638 [preauth]
2026-10-10T02:21:30+02:00 Invalid user deploy from 79.12.60.109 port 57836
2026-10-10T02:22:13+02:00 Invalid user debian from 79.12.60.109 port 44426
2026-10-10T02:22:59+02:00 Invalid user media from 79.12.60.109 port 59580
2026-10-10T02:23:51+02:00 Connection closed by authenticating user root 79.12.60.109 port 47148 [preauth]
2026-10-10T02:24:33+02:00 Invalid user debian from 79.12.60.109 port 35012
2026-10-10T02:25:17+02:00 Invalid user admin from 79.12.60.109 port 50964
2026-10-10T02:26:01+02:00 Invalid user deploy from 79.12.60.109 port 3809
show less
