City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 169.12.3.38
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65350
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;169.12.3.38. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022301 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 24 13:10:21 CST 2025
;; MSG SIZE rcvd: 104Host 38.3.12.169.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 38.3.12.169.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 129.213.40.57 | attack | SSH Bruteforce |
2019-11-16 01:16:24 |
| 106.38.108.28 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-11-16 00:52:21 |
| 132.232.191.141 | attackbots | Automatic report - Web App Attack |
2019-11-16 00:38:59 |
| 210.92.91.223 | attackspam | Nov 15 16:16:54 cavern sshd[6168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.92.91.223 |
2019-11-16 00:51:42 |
| 162.241.32.152 | attack | Nov 15 15:52:33 localhost sshd\[43819\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.241.32.152 user=root Nov 15 15:52:35 localhost sshd\[43819\]: Failed password for root from 162.241.32.152 port 49718 ssh2 Nov 15 15:56:24 localhost sshd\[43912\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.241.32.152 user=root Nov 15 15:56:26 localhost sshd\[43912\]: Failed password for root from 162.241.32.152 port 57994 ssh2 Nov 15 16:00:11 localhost sshd\[44033\]: Invalid user second from 162.241.32.152 port 38038 ... |
2019-11-16 01:05:03 |
| 45.82.153.133 | attack | 2019-11-15 17:49:26 dovecot_login authenticator failed for \(\[45.82.153.133\]\) \[45.82.153.133\]: 535 Incorrect authentication data \(set_id=support@nopcommerce.it\) 2019-11-15 17:49:36 dovecot_login authenticator failed for \(\[45.82.153.133\]\) \[45.82.153.133\]: 535 Incorrect authentication data 2019-11-15 17:49:48 dovecot_login authenticator failed for \(\[45.82.153.133\]\) \[45.82.153.133\]: 535 Incorrect authentication data 2019-11-15 17:49:55 dovecot_login authenticator failed for \(\[45.82.153.133\]\) \[45.82.153.133\]: 535 Incorrect authentication data 2019-11-15 17:50:09 dovecot_login authenticator failed for \(\[45.82.153.133\]\) \[45.82.153.133\]: 535 Incorrect authentication data |
2019-11-16 00:57:51 |
| 208.68.39.164 | attack | 2019-11-15T08:28:40.4785051495-001 sshd\[12226\]: Failed password for invalid user vcsa from 208.68.39.164 port 34726 ssh2 2019-11-15T09:28:44.0957461495-001 sshd\[14362\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.68.39.164 user=mysql 2019-11-15T09:28:46.6756501495-001 sshd\[14362\]: Failed password for mysql from 208.68.39.164 port 54194 ssh2 2019-11-15T09:32:42.2038331495-001 sshd\[14518\]: Invalid user shimokawa from 208.68.39.164 port 35402 2019-11-15T09:32:42.2116651495-001 sshd\[14518\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.68.39.164 2019-11-15T09:32:43.7982521495-001 sshd\[14518\]: Failed password for invalid user shimokawa from 208.68.39.164 port 35402 ssh2 ... |
2019-11-16 01:08:12 |
| 111.230.105.196 | attackspam | Nov 15 13:50:40 firewall sshd[26158]: Invalid user neghin from 111.230.105.196 Nov 15 13:50:42 firewall sshd[26158]: Failed password for invalid user neghin from 111.230.105.196 port 44076 ssh2 Nov 15 13:56:54 firewall sshd[26286]: Invalid user operator from 111.230.105.196 ... |
2019-11-16 01:20:40 |
| 185.247.140.245 | attackbots | Nov 15 17:11:17 vps666546 sshd\[29190\]: Invalid user test123 from 185.247.140.245 port 49614 Nov 15 17:11:17 vps666546 sshd\[29190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.247.140.245 Nov 15 17:11:19 vps666546 sshd\[29190\]: Failed password for invalid user test123 from 185.247.140.245 port 49614 ssh2 Nov 15 17:16:08 vps666546 sshd\[29404\]: Invalid user lowen from 185.247.140.245 port 58542 Nov 15 17:16:08 vps666546 sshd\[29404\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.247.140.245 ... |
2019-11-16 00:39:56 |
| 106.215.34.23 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-11-16 00:54:54 |
| 92.118.38.38 | attack | Nov 15 17:51:55 andromeda postfix/smtpd\[34004\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: authentication failure Nov 15 17:52:15 andromeda postfix/smtpd\[30270\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: authentication failure Nov 15 17:52:19 andromeda postfix/smtpd\[34702\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: authentication failure Nov 15 17:52:31 andromeda postfix/smtpd\[30270\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: authentication failure Nov 15 17:52:51 andromeda postfix/smtpd\[34702\]: warning: unknown\[92.118.38.38\]: SASL LOGIN authentication failed: authentication failure |
2019-11-16 01:07:13 |
| 109.122.80.234 | attackbotsspam | postfix |
2019-11-16 00:36:56 |
| 128.199.123.170 | attackbots | Nov 15 17:23:04 lnxded64 sshd[29395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.123.170 Nov 15 17:23:06 lnxded64 sshd[29395]: Failed password for invalid user admin from 128.199.123.170 port 46942 ssh2 Nov 15 17:27:05 lnxded64 sshd[30345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.123.170 |
2019-11-16 00:36:38 |
| 159.89.1.19 | attackbotsspam | MYH,DEF GET /wp/wp-login.php |
2019-11-16 01:21:42 |
| 159.65.159.1 | attack | Nov 15 09:43:40 Tower sshd[963]: Connection from 159.65.159.1 port 38972 on 192.168.10.220 port 22 Nov 15 09:43:41 Tower sshd[963]: Invalid user zimbra from 159.65.159.1 port 38972 Nov 15 09:43:41 Tower sshd[963]: error: Could not get shadow information for NOUSER Nov 15 09:43:41 Tower sshd[963]: Failed password for invalid user zimbra from 159.65.159.1 port 38972 ssh2 Nov 15 09:43:42 Tower sshd[963]: Received disconnect from 159.65.159.1 port 38972:11: Normal Shutdown, Thank you for playing [preauth] Nov 15 09:43:42 Tower sshd[963]: Disconnected from invalid user zimbra 159.65.159.1 port 38972 [preauth] |
2019-11-16 00:45:35 |