City: unknown
Region: unknown
Country: Egypt
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.134.45.97
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5115
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;154.134.45.97. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022703 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 08:57:57 CST 2025
;; MSG SIZE rcvd: 106Host 97.45.134.154.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 97.45.134.154.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 121.7.127.92 | attack | Nov 9 07:29:12 icinga sshd[19434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.7.127.92 Nov 9 07:29:14 icinga sshd[19434]: Failed password for invalid user tytie from 121.7.127.92 port 36731 ssh2 ... |
2019-11-09 15:09:49 |
| 46.38.144.57 | attackspam | Nov 9 08:19:07 webserver postfix/smtpd\[15097\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 9 08:19:44 webserver postfix/smtpd\[15072\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 9 08:20:21 webserver postfix/smtpd\[15099\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 9 08:20:59 webserver postfix/smtpd\[14456\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 9 08:21:36 webserver postfix/smtpd\[15099\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-11-09 15:24:02 |
| 185.176.27.178 | attack | Triggered: repeated knocking on closed ports. |
2019-11-09 15:34:51 |
| 103.209.20.36 | attackspam | Nov 9 03:24:44 firewall sshd[21937]: Failed password for invalid user hcat from 103.209.20.36 port 55192 ssh2 Nov 9 03:29:20 firewall sshd[22079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.209.20.36 user=root Nov 9 03:29:22 firewall sshd[22079]: Failed password for root from 103.209.20.36 port 37048 ssh2 ... |
2019-11-09 15:04:54 |
| 140.143.16.248 | attackspam | Lines containing failures of 140.143.16.248 Nov 5 19:03:17 install sshd[17417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.16.248 user=r.r Nov 5 19:03:18 install sshd[17417]: Failed password for r.r from 140.143.16.248 port 47792 ssh2 Nov 5 19:03:18 install sshd[17417]: Received disconnect from 140.143.16.248 port 47792:11: Bye Bye [preauth] Nov 5 19:03:18 install sshd[17417]: Disconnected from authenticating user r.r 140.143.16.248 port 47792 [preauth] Nov 5 19:26:59 install sshd[21875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.16.248 user=r.r Nov 5 19:27:01 install sshd[21875]: Failed password for r.r from 140.143.16.248 port 38530 ssh2 Nov 5 19:27:02 install sshd[21875]: Received disconnect from 140.143.16.248 port 38530:11: Bye Bye [preauth] Nov 5 19:27:02 install sshd[21875]: Disconnected from authenticating user r.r 140.143.16.248 port 38530 [preaut........ ------------------------------ |
2019-11-09 15:21:58 |
| 144.91.93.239 | attack | 09.11.2019 06:34:56 Connection to port 5060 blocked by firewall |
2019-11-09 15:37:51 |
| 45.125.65.56 | attackspam | \[2019-11-09 01:52:19\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-09T01:52:19.119-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="3548601148185419002",SessionID="0x7fdf2c473798",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.125.65.56/59479",ACLName="no_extension_match" \[2019-11-09 01:52:37\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-09T01:52:37.489-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="3882801148893076004",SessionID="0x7fdf2cd1cd48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.125.65.56/61866",ACLName="no_extension_match" \[2019-11-09 01:52:55\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-09T01:52:55.119-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="3218501148814503018",SessionID="0x7fdf2c003608",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.125.65.56/57971",ACLNam |
2019-11-09 15:15:44 |
| 113.229.229.12 | attack | Unauthorised access (Nov 9) SRC=113.229.229.12 LEN=40 TTL=49 ID=43908 TCP DPT=8080 WINDOW=37033 SYN Unauthorised access (Nov 8) SRC=113.229.229.12 LEN=40 TTL=49 ID=7752 TCP DPT=8080 WINDOW=14371 SYN Unauthorised access (Nov 8) SRC=113.229.229.12 LEN=40 TTL=49 ID=36255 TCP DPT=8080 WINDOW=14030 SYN |
2019-11-09 15:10:22 |
| 222.186.190.92 | attackbotsspam | k+ssh-bruteforce |
2019-11-09 15:05:39 |
| 89.151.134.78 | attackbots | Nov 9 07:56:16 localhost sshd\[8715\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.151.134.78 user=root Nov 9 07:56:18 localhost sshd\[8715\]: Failed password for root from 89.151.134.78 port 54436 ssh2 Nov 9 08:00:17 localhost sshd\[8930\]: Invalid user 22 from 89.151.134.78 Nov 9 08:00:17 localhost sshd\[8930\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.151.134.78 Nov 9 08:00:18 localhost sshd\[8930\]: Failed password for invalid user 22 from 89.151.134.78 port 34882 ssh2 ... |
2019-11-09 15:30:23 |
| 183.111.125.199 | attackbotsspam | 2019-11-09T07:07:29.653150abusebot.cloudsearch.cf sshd\[12357\]: Invalid user hduser from 183.111.125.199 port 58294 |
2019-11-09 15:15:06 |
| 134.175.240.93 | attackspam | Nov 9 06:28:44 ip-172-31-62-245 sshd\[30123\]: Invalid user zhangyan from 134.175.240.93\ Nov 9 06:28:47 ip-172-31-62-245 sshd\[30123\]: Failed password for invalid user zhangyan from 134.175.240.93 port 57372 ssh2\ Nov 9 06:28:49 ip-172-31-62-245 sshd\[30125\]: Invalid user dff from 134.175.240.93\ Nov 9 06:28:51 ip-172-31-62-245 sshd\[30125\]: Failed password for invalid user dff from 134.175.240.93 port 59896 ssh2\ Nov 9 06:28:57 ip-172-31-62-245 sshd\[30127\]: Failed password for root from 134.175.240.93 port 34170 ssh2\ |
2019-11-09 15:24:49 |
| 89.183.95.27 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/89.183.95.27/ DE - 1H : (64) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : DE NAME ASN : ASN13045 IP : 89.183.95.27 CIDR : 89.183.0.0/16 PREFIX COUNT : 8 UNIQUE IP COUNT : 173824 ATTACKS DETECTED ASN13045 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-11-09 07:28:40 INFO : Port SSH 22 Scan Detected and Blocked by ADMIN - data recovery |
2019-11-09 15:35:32 |
| 110.139.126.130 | attackbots | Nov 5 06:46:02 olgosrv01 sshd[1101]: reveeclipse mapping checking getaddrinfo for 130.subnet110-139-126.speedy.telkom.net.id [110.139.126.130] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 5 06:46:02 olgosrv01 sshd[1101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.139.126.130 user=r.r Nov 5 06:46:04 olgosrv01 sshd[1101]: Failed password for r.r from 110.139.126.130 port 16278 ssh2 Nov 5 06:46:05 olgosrv01 sshd[1101]: Received disconnect from 110.139.126.130: 11: Bye Bye [preauth] Nov 5 06:51:03 olgosrv01 sshd[1462]: reveeclipse mapping checking getaddrinfo for 130.subnet110-139-126.speedy.telkom.net.id [110.139.126.130] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 5 06:51:03 olgosrv01 sshd[1462]: Invalid user apache from 110.139.126.130 Nov 5 06:51:03 olgosrv01 sshd[1462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.139.126.130 Nov 5 06:51:06 olgosrv01 sshd[1462]: Failed pass........ ------------------------------- |
2019-11-09 15:05:08 |
| 42.200.74.154 | attackbots | DATE:2019-11-09 07:28:37, IP:42.200.74.154, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) |
2019-11-09 15:38:19 |