City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 38.0.138.153
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;38.0.138.153. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022703 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 11:31:09 CST 2025
;; MSG SIZE rcvd: 105Host 153.138.0.38.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 153.138.0.38.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 51.68.121.235 | attack | May 22 09:03:38 lukav-desktop sshd\[6255\]: Invalid user mssql from 51.68.121.235 May 22 09:03:38 lukav-desktop sshd\[6255\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.121.235 May 22 09:03:40 lukav-desktop sshd\[6255\]: Failed password for invalid user mssql from 51.68.121.235 port 42194 ssh2 May 22 09:07:02 lukav-desktop sshd\[23286\]: Invalid user yfj from 51.68.121.235 May 22 09:07:02 lukav-desktop sshd\[23286\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.121.235 |
2020-05-22 14:15:36 |
| 185.173.35.61 | attack | May 22 07:08:13 debian-2gb-nbg1-2 kernel: \[12382911.769406\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.173.35.61 DST=195.201.40.59 LEN=30 TOS=0x00 PREC=0x00 TTL=239 ID=54321 PROTO=UDP SPT=63314 DPT=5632 LEN=10 |
2020-05-22 13:51:09 |
| 139.199.248.199 | attackspam | Invalid user tgu from 139.199.248.199 port 49099 |
2020-05-22 14:29:06 |
| 49.232.161.243 | attackbots | May 22 11:29:21 webhost01 sshd[20812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.161.243 May 22 11:29:23 webhost01 sshd[20812]: Failed password for invalid user ljh from 49.232.161.243 port 59528 ssh2 ... |
2020-05-22 13:59:52 |
| 85.209.0.100 | attackspam | Failed password for invalid user from 85.209.0.100 port 16992 ssh2 |
2020-05-22 13:50:53 |
| 167.114.98.229 | attackspam | $f2bV_matches |
2020-05-22 14:07:42 |
| 112.85.42.174 | attackspambots | May 22 07:50:06 santamaria sshd\[28468\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.174 user=root May 22 07:50:08 santamaria sshd\[28468\]: Failed password for root from 112.85.42.174 port 32236 ssh2 May 22 07:50:24 santamaria sshd\[28472\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.174 user=root ... |
2020-05-22 13:52:07 |
| 111.92.61.116 | attackbots | Port probing on unauthorized port 1433 |
2020-05-22 13:54:50 |
| 150.158.104.229 | attackbots | Invalid user je from 150.158.104.229 port 55364 |
2020-05-22 14:00:38 |
| 36.133.5.170 | attack | May 21 08:42:10 Tower sshd[30682]: refused connect from 41.111.135.199 (41.111.135.199) May 21 23:56:02 Tower sshd[30682]: Connection from 36.133.5.170 port 60378 on 192.168.10.220 port 22 rdomain "" May 21 23:56:04 Tower sshd[30682]: Invalid user sxx from 36.133.5.170 port 60378 May 21 23:56:04 Tower sshd[30682]: error: Could not get shadow information for NOUSER May 21 23:56:04 Tower sshd[30682]: Failed password for invalid user sxx from 36.133.5.170 port 60378 ssh2 May 21 23:56:04 Tower sshd[30682]: Received disconnect from 36.133.5.170 port 60378:11: Bye Bye [preauth] May 21 23:56:04 Tower sshd[30682]: Disconnected from invalid user sxx 36.133.5.170 port 60378 [preauth] |
2020-05-22 14:22:08 |
| 115.159.185.71 | attackbotsspam | Invalid user lxk from 115.159.185.71 port 57774 |
2020-05-22 14:21:25 |
| 106.75.7.123 | attackbotsspam | Invalid user wyu from 106.75.7.123 port 25365 |
2020-05-22 14:02:00 |
| 218.92.0.190 | attack | May 22 06:42:10 srv-ubuntu-dev3 sshd[116046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.190 user=root May 22 06:42:11 srv-ubuntu-dev3 sshd[116046]: Failed password for root from 218.92.0.190 port 34881 ssh2 May 22 06:42:15 srv-ubuntu-dev3 sshd[116046]: Failed password for root from 218.92.0.190 port 34881 ssh2 May 22 06:42:10 srv-ubuntu-dev3 sshd[116046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.190 user=root May 22 06:42:11 srv-ubuntu-dev3 sshd[116046]: Failed password for root from 218.92.0.190 port 34881 ssh2 May 22 06:42:15 srv-ubuntu-dev3 sshd[116046]: Failed password for root from 218.92.0.190 port 34881 ssh2 May 22 06:42:10 srv-ubuntu-dev3 sshd[116046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.190 user=root May 22 06:42:11 srv-ubuntu-dev3 sshd[116046]: Failed password for root from 218.92.0.190 port 34881 ssh2 M ... |
2020-05-22 14:05:55 |
| 92.190.153.246 | attack | May 22 07:09:29 srv-ubuntu-dev3 sshd[121479]: Invalid user inlog from 92.190.153.246 May 22 07:09:29 srv-ubuntu-dev3 sshd[121479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.190.153.246 May 22 07:09:29 srv-ubuntu-dev3 sshd[121479]: Invalid user inlog from 92.190.153.246 May 22 07:09:31 srv-ubuntu-dev3 sshd[121479]: Failed password for invalid user inlog from 92.190.153.246 port 47218 ssh2 May 22 07:13:05 srv-ubuntu-dev3 sshd[122154]: Invalid user plg from 92.190.153.246 May 22 07:13:05 srv-ubuntu-dev3 sshd[122154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.190.153.246 May 22 07:13:05 srv-ubuntu-dev3 sshd[122154]: Invalid user plg from 92.190.153.246 May 22 07:13:08 srv-ubuntu-dev3 sshd[122154]: Failed password for invalid user plg from 92.190.153.246 port 51830 ssh2 May 22 07:16:51 srv-ubuntu-dev3 sshd[122926]: Invalid user kjv from 92.190.153.246 ... |
2020-05-22 14:07:16 |
| 95.110.154.101 | attackbotsspam | DATE:2020-05-22 07:43:12, IP:95.110.154.101, PORT:ssh SSH brute force auth (docker-dc) |
2020-05-22 14:12:21 |