City: Chicago
Region: Illinois
Country: United States
Internet Service Provider: AT&T
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 12.41.16.38
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52978
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;12.41.16.38. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025031701 1800 900 604800 86400
;; Query time: 40 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 18 11:31:55 CST 2025
;; MSG SIZE rcvd: 104Host 38.16.41.12.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 38.16.41.12.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 60.30.73.250 | attack | 21 attempts against mh-ssh on cloud.magehost.pro |
2019-12-15 13:39:31 |
| 14.254.244.113 | attackbotsspam | Unauthorized connection attempt detected from IP address 14.254.244.113 to port 445 |
2019-12-15 13:13:56 |
| 112.85.42.188 | attack | Dec 15 10:48:21 areeb-Workstation sshd[11899]: Failed password for root from 112.85.42.188 port 23427 ssh2 ... |
2019-12-15 13:29:16 |
| 139.162.123.103 | attackspambots | firewall-block, port(s): 34567/tcp |
2019-12-15 13:36:23 |
| 193.112.9.189 | attack | Dec 15 06:58:51 sauna sshd[116465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.9.189 Dec 15 06:58:52 sauna sshd[116465]: Failed password for invalid user kutten from 193.112.9.189 port 34068 ssh2 ... |
2019-12-15 13:11:17 |
| 139.59.27.43 | attackbotsspam | Lines containing failures of 139.59.27.43 Dec 14 00:21:39 icinga sshd[15509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.27.43 user=r.r Dec 14 00:21:42 icinga sshd[15509]: Failed password for r.r from 139.59.27.43 port 57262 ssh2 Dec 14 00:21:42 icinga sshd[15509]: Received disconnect from 139.59.27.43 port 57262:11: Bye Bye [preauth] Dec 14 00:21:42 icinga sshd[15509]: Disconnected from authenticating user r.r 139.59.27.43 port 57262 [preauth] Dec 14 00:30:15 icinga sshd[17958]: Invalid user grixti from 139.59.27.43 port 39464 Dec 14 00:30:15 icinga sshd[17958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.27.43 Dec 14 00:30:17 icinga sshd[17958]: Failed password for invalid user grixti from 139.59.27.43 port 39464 ssh2 Dec 14 00:30:17 icinga sshd[17958]: Received disconnect from 139.59.27.43 port 39464:11: Bye Bye [preauth] Dec 14 00:30:17 icinga sshd[17958]: Disconne........ ------------------------------ |
2019-12-15 13:34:10 |
| 96.238.8.189 | attackspam | php WP PHPmyadamin ABUSE blocked for 12h |
2019-12-15 13:44:17 |
| 185.153.199.210 | attackspambots | Dec 15 06:58:26 pkdns2 sshd\[2887\]: Address 185.153.199.210 maps to server-185-153-199-210.cloudedic.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Dec 15 06:58:26 pkdns2 sshd\[2887\]: Invalid user 0 from 185.153.199.210Dec 15 06:58:32 pkdns2 sshd\[2887\]: Failed password for invalid user 0 from 185.153.199.210 port 12026 ssh2Dec 15 06:58:38 pkdns2 sshd\[2904\]: Address 185.153.199.210 maps to server-185-153-199-210.cloudedic.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Dec 15 06:58:38 pkdns2 sshd\[2904\]: Invalid user 22 from 185.153.199.210Dec 15 06:58:40 pkdns2 sshd\[2904\]: Failed password for invalid user 22 from 185.153.199.210 port 64739 ssh2 ... |
2019-12-15 13:17:29 |
| 188.165.20.73 | attackbots | Dec 14 19:08:42 php1 sshd\[3610\]: Invalid user morag from 188.165.20.73 Dec 14 19:08:42 php1 sshd\[3610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.20.73 Dec 14 19:08:45 php1 sshd\[3610\]: Failed password for invalid user morag from 188.165.20.73 port 48650 ssh2 Dec 14 19:13:56 php1 sshd\[4233\]: Invalid user test from 188.165.20.73 Dec 14 19:13:56 php1 sshd\[4233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.20.73 |
2019-12-15 13:24:38 |
| 74.208.239.79 | attack | Dec 15 05:53:36 vps691689 sshd[28285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.239.79 Dec 15 05:53:37 vps691689 sshd[28285]: Failed password for invalid user 1qaz2wsx3 from 74.208.239.79 port 43188 ssh2 ... |
2019-12-15 13:12:28 |
| 101.71.130.44 | attack | Dec 15 06:24:52 meumeu sshd[10969]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.71.130.44 Dec 15 06:24:54 meumeu sshd[10969]: Failed password for invalid user betzler from 101.71.130.44 port 6164 ssh2 Dec 15 06:30:39 meumeu sshd[14844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.71.130.44 ... |
2019-12-15 13:46:27 |
| 121.164.117.201 | attackbotsspam | Dec 15 05:51:35 heissa sshd\[18736\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.164.117.201 user=root Dec 15 05:51:37 heissa sshd\[18736\]: Failed password for root from 121.164.117.201 port 45200 ssh2 Dec 15 05:57:47 heissa sshd\[19614\]: Invalid user server from 121.164.117.201 port 53796 Dec 15 05:57:47 heissa sshd\[19614\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.164.117.201 Dec 15 05:57:49 heissa sshd\[19614\]: Failed password for invalid user server from 121.164.117.201 port 53796 ssh2 |
2019-12-15 13:52:32 |
| 114.98.239.5 | attackspambots | Dec 15 05:25:37 pi sshd\[30397\]: Failed password for invalid user Seven@123 from 114.98.239.5 port 40476 ssh2 Dec 15 05:34:27 pi sshd\[30817\]: Invalid user laurita from 114.98.239.5 port 40756 Dec 15 05:34:27 pi sshd\[30817\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.98.239.5 Dec 15 05:34:29 pi sshd\[30817\]: Failed password for invalid user laurita from 114.98.239.5 port 40756 ssh2 Dec 15 05:42:53 pi sshd\[31250\]: Invalid user password from 114.98.239.5 port 41024 ... |
2019-12-15 13:47:52 |
| 95.85.60.251 | attackbotsspam | Dec 14 18:51:30 eddieflores sshd\[13985\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.60.251 user=mysql Dec 14 18:51:32 eddieflores sshd\[13985\]: Failed password for mysql from 95.85.60.251 port 54476 ssh2 Dec 14 18:59:38 eddieflores sshd\[14751\]: Invalid user webmaster from 95.85.60.251 Dec 14 18:59:38 eddieflores sshd\[14751\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.60.251 Dec 14 18:59:39 eddieflores sshd\[14751\]: Failed password for invalid user webmaster from 95.85.60.251 port 34468 ssh2 |
2019-12-15 13:19:49 |
| 82.116.46.203 | attack | SSH Brute Force, server-1 sshd[20128]: Failed password for invalid user servers from 82.116.46.203 port 48904 ssh2 |
2019-12-15 13:45:34 |