City: Jeddah
Region: Makkah
Country: Saudi Arabia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.154.79.135
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28758
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;142.154.79.135. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022602 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 27 09:44:00 CST 2025
;; MSG SIZE rcvd: 107Host 135.79.154.142.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 135.79.154.142.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 190.217.96.55 | attackbotsspam | Unauthorized connection attempt from IP address 190.217.96.55 on Port 445(SMB) |
2019-12-11 07:14:03 |
| 69.229.6.31 | attack | Dec 6 22:08:31 mail sshd[21908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.229.6.31 user=www-data Dec 6 22:08:33 mail sshd[21908]: Failed password for www-data from 69.229.6.31 port 33884 ssh2 Dec 6 22:08:34 mail sshd[21908]: Received disconnect from 69.229.6.31: 11: Bye Bye [preauth] Dec 6 22:28:32 mail sshd[22377]: Failed password for invalid user lcruz from 69.229.6.31 port 40508 ssh2 Dec 6 22:28:32 mail sshd[22377]: Received disconnect from 69.229.6.31: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=69.229.6.31 |
2019-12-11 07:42:06 |
| 177.67.27.45 | attackbotsspam | Unauthorised access (Dec 10) SRC=177.67.27.45 LEN=52 TTL=116 ID=22726 DF TCP DPT=445 WINDOW=8192 SYN |
2019-12-11 07:25:44 |
| 213.6.172.134 | attack | 12/10/2019-22:07:12.995872 213.6.172.134 Protocol: 6 ET COMPROMISED Known Compromised or Hostile Host Traffic group 20 |
2019-12-11 07:34:26 |
| 212.156.132.182 | attackbotsspam | Invalid user squid from 212.156.132.182 port 44732 |
2019-12-11 07:40:49 |
| 58.126.201.20 | attack | Dec 10 15:18:23 TORMINT sshd\[24623\]: Invalid user test from 58.126.201.20 Dec 10 15:18:23 TORMINT sshd\[24623\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.126.201.20 Dec 10 15:18:25 TORMINT sshd\[24623\]: Failed password for invalid user test from 58.126.201.20 port 56950 ssh2 ... |
2019-12-11 07:39:18 |
| 82.102.173.83 | attackspam | Port scan: Attack repeated for 24 hours |
2019-12-11 07:07:22 |
| 89.248.174.205 | attackbots | 12/10/2019-17:56:15.173642 89.248.174.205 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-12-11 07:06:19 |
| 14.225.11.25 | attackbotsspam | Dec 10 08:30:04 hpm sshd\[25161\]: Invalid user alexa from 14.225.11.25 Dec 10 08:30:04 hpm sshd\[25161\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.225.11.25 Dec 10 08:30:06 hpm sshd\[25161\]: Failed password for invalid user alexa from 14.225.11.25 port 33594 ssh2 Dec 10 08:36:48 hpm sshd\[25823\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.225.11.25 user=root Dec 10 08:36:50 hpm sshd\[25823\]: Failed password for root from 14.225.11.25 port 40882 ssh2 |
2019-12-11 07:40:30 |
| 142.93.214.20 | attackspam | Dec 10 22:36:35 server sshd\[31964\]: Invalid user guest from 142.93.214.20 Dec 10 22:36:35 server sshd\[31964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.214.20 Dec 10 22:36:37 server sshd\[31964\]: Failed password for invalid user guest from 142.93.214.20 port 57346 ssh2 Dec 10 22:43:41 server sshd\[1288\]: Invalid user tanja from 142.93.214.20 Dec 10 22:43:41 server sshd\[1288\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.214.20 ... |
2019-12-11 07:16:23 |
| 195.3.147.47 | attackspambots | 2019-12-10T20:33:32.231534Z \[cowrie.ssh.factory.CowrieSSHFactory\] New connection: 195.3.147.47:46076 \(107.175.91.48:22\) \[session: c8be3102a7fb\] 2019-12-10T21:19:54.084160Z \[cowrie.ssh.factory.CowrieSSHFactory\] New connection: 195.3.147.47:52488 \(107.175.91.48:22\) \[session: 70bb2e8f0e9c\] ... |
2019-12-11 07:24:59 |
| 66.42.92.180 | attackbots | ET SCAN MS Terminal Server Traffic on Non-standard Port - port: 1000 proto: TCP cat: Attempted Information Leak |
2019-12-11 07:08:53 |
| 176.31.100.19 | attack | 2019-12-10T23:06:27.404319stark.klein-stark.info sshd\[1951\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns388913.ip-176-31-100.eu user=mysql 2019-12-10T23:06:29.897033stark.klein-stark.info sshd\[1951\]: Failed password for mysql from 176.31.100.19 port 33074 ssh2 2019-12-10T23:15:40.867430stark.klein-stark.info sshd\[2640\]: Invalid user hingtgen from 176.31.100.19 port 37908 2019-12-10T23:15:40.874659stark.klein-stark.info sshd\[2640\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns388913.ip-176-31-100.eu ... |
2019-12-11 07:28:48 |
| 178.141.254.190 | attackspam | Unauthorized connection attempt from IP address 178.141.254.190 on Port 445(SMB) |
2019-12-11 07:21:14 |
| 51.15.23.27 | attack | ET SCAN MS Terminal Server Traffic on Non-standard Port - port: 1000 proto: TCP cat: Attempted Information Leak |
2019-12-11 07:10:19 |