195.154.55.138

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
195.154.55.102	attack	195.154.55.102 - - [18/Aug/2020:05:47:58 +0200] "GET /wp-login.php HTTP/1.1" 200 8775 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 195.154.55.102 - - [18/Aug/2020:05:47:59 +0200] "POST /wp-login.php HTTP/1.1" 200 9026 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 195.154.55.102 - - [18/Aug/2020:05:47:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-18 19:40:20
195.154.55.102	attackbots	[munged]::443 195.154.55.102 - - [09/Aug/2020:05:54:16 +0200] "POST /[munged]: HTTP/1.1" 200 8145 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 195.154.55.102 - - [09/Aug/2020:05:54:18 +0200] "POST /[munged]: HTTP/1.1" 200 8133 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 195.154.55.102 - - [09/Aug/2020:05:54:18 +0200] "POST /[munged]: HTTP/1.1" 200 8144 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 195.154.55.102 - - [09/Aug/2020:05:54:18 +0200] "POST /[munged]: HTTP/1.1" 200 8174 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 195.154.55.102 - - [09/Aug/2020:05:54:20 +0200] "POST /[munged]: HTTP/1.1" 200 8134 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 195.154.55.102 - - [09/Aug/2020:05:54:20 +0200] "POST /[munged]: HTTP/1.1" 200 8174 "-" "Mozilla/5.0 (X11	2020-08-09 13:38:35
195.154.55.102	attackbots	$f2bV_matches	2020-08-08 19:45:18
195.154.55.174	attack	Aug 18 22:50:49 ms-srv sshd[50180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.55.174 Aug 18 22:50:52 ms-srv sshd[50180]: Failed password for invalid user nate from 195.154.55.174 port 53388 ssh2	2020-02-03 00:48:23
195.154.55.174	attack	Sep 23 13:21:24 php1 sshd\[15059\]: Invalid user agencia from 195.154.55.174 Sep 23 13:21:24 php1 sshd\[15059\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=temp.intempora.com Sep 23 13:21:26 php1 sshd\[15059\]: Failed password for invalid user agencia from 195.154.55.174 port 40308 ssh2 Sep 23 13:25:11 php1 sshd\[15513\]: Invalid user agnieszka from 195.154.55.174 Sep 23 13:25:11 php1 sshd\[15513\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=temp.intempora.com	2019-09-24 08:23:42
195.154.55.174	attack	Sep 2 15:12:30 mail sshd\[13469\]: Failed password for invalid user transfer from 195.154.55.174 port 38906 ssh2 Sep 2 15:16:10 mail sshd\[14143\]: Invalid user sinus1 from 195.154.55.174 port 53604 Sep 2 15:16:10 mail sshd\[14143\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.55.174 Sep 2 15:16:12 mail sshd\[14143\]: Failed password for invalid user sinus1 from 195.154.55.174 port 53604 ssh2 Sep 2 15:19:57 mail sshd\[14656\]: Invalid user radu from 195.154.55.174 port 40064 Sep 2 15:19:57 mail sshd\[14656\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.55.174	2019-09-03 03:35:55
195.154.55.174	attack	Aug 26 03:34:48 server sshd\[13933\]: Invalid user pcap from 195.154.55.174 port 37752 Aug 26 03:34:48 server sshd\[13933\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.55.174 Aug 26 03:34:50 server sshd\[13933\]: Failed password for invalid user pcap from 195.154.55.174 port 37752 ssh2 Aug 26 03:38:35 server sshd\[23064\]: Invalid user yang from 195.154.55.174 port 55630 Aug 26 03:38:35 server sshd\[23064\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.55.174	2019-08-26 09:04:37
195.154.55.174	attackbots	Aug 13 23:25:02 mail sshd\[18701\]: Invalid user emily from 195.154.55.174 port 53654 Aug 13 23:25:02 mail sshd\[18701\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.55.174 ...	2019-08-14 06:40:51
195.154.55.174	attack	Aug 4 08:17:26 *** sshd[24616]: Invalid user famille from 195.154.55.174	2019-08-04 17:16:06
195.154.55.174	attack	Jul 29 03:31:03 mail sshd\[18560\]: Invalid user wangfeng from 195.154.55.174 port 59058 Jul 29 03:31:03 mail sshd\[18560\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.55.174 Jul 29 03:31:06 mail sshd\[18560\]: Failed password for invalid user wangfeng from 195.154.55.174 port 59058 ssh2 Jul 29 03:34:57 mail sshd\[19015\]: Invalid user foolish from 195.154.55.174 port 52670 Jul 29 03:34:57 mail sshd\[19015\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.55.174	2019-07-29 12:33:23
195.154.55.174	attackbotsspam	2019-07-26T19:13:19.229625abusebot.cloudsearch.cf sshd\[1064\]: Invalid user 112233445566 from 195.154.55.174 port 40856	2019-07-27 03:52:26

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 195.154.55.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14117
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;195.154.55.138.			IN	A

;; AUTHORITY SECTION:
.			525	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021301 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 14 11:17:10 CST 2022
;; MSG SIZE  rcvd: 107

Host info

138.55.154.195.in-addr.arpa domain name pointer dmt.fixyourissue.site.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
138.55.154.195.in-addr.arpa	name = dmt.fixyourissue.site.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.13.8.112	attackbotsspam	Sep 10 18:11:07 dedicated sshd[30671]: Invalid user webmaster from 106.13.8.112 port 51038	2019-09-11 02:04:24
217.112.128.130	attackspam	Spam mails sent to address hacked/leaked from Nexus Mods in July 2013	2019-09-11 01:31:03
218.98.26.182	attackbots	Sep 10 07:27:48 auw2 sshd\[13423\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.26.182 user=root Sep 10 07:27:50 auw2 sshd\[13423\]: Failed password for root from 218.98.26.182 port 25310 ssh2 Sep 10 07:27:57 auw2 sshd\[13433\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.26.182 user=root Sep 10 07:27:59 auw2 sshd\[13433\]: Failed password for root from 218.98.26.182 port 51328 ssh2 Sep 10 07:28:05 auw2 sshd\[13443\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.26.182 user=root	2019-09-11 01:30:17
167.71.217.12	attackbotsspam	Sep 10 06:53:16 hiderm sshd\[10793\]: Invalid user ansible from 167.71.217.12 Sep 10 06:53:16 hiderm sshd\[10793\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.217.12 Sep 10 06:53:17 hiderm sshd\[10793\]: Failed password for invalid user ansible from 167.71.217.12 port 42276 ssh2 Sep 10 07:00:01 hiderm sshd\[12364\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.217.12 user=mysql Sep 10 07:00:03 hiderm sshd\[12364\]: Failed password for mysql from 167.71.217.12 port 47914 ssh2	2019-09-11 01:08:13
118.172.109.252	attackbots	Unauthorized connection attempt from IP address 118.172.109.252 on Port 445(SMB)	2019-09-11 02:12:25
96.82.74.134	attack	SMTP/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	2019-09-11 02:13:37
222.186.30.59	attack	Sep 10 18:55:39 localhost sshd\[6888\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.59 user=root Sep 10 18:55:41 localhost sshd\[6888\]: Failed password for root from 222.186.30.59 port 14043 ssh2 Sep 10 18:55:43 localhost sshd\[6888\]: Failed password for root from 222.186.30.59 port 14043 ssh2	2019-09-11 01:13:09
49.234.206.45	attack	Sep 10 05:41:23 hiderm sshd\[3527\]: Invalid user developer from 49.234.206.45 Sep 10 05:41:23 hiderm sshd\[3527\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.206.45 Sep 10 05:41:25 hiderm sshd\[3527\]: Failed password for invalid user developer from 49.234.206.45 port 49334 ssh2 Sep 10 05:49:17 hiderm sshd\[4268\]: Invalid user radio from 49.234.206.45 Sep 10 05:49:17 hiderm sshd\[4268\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.206.45	2019-09-11 02:14:13
103.221.252.46	attackspam	F2B jail: sshd. Time: 2019-09-10 19:31:14, Reported by: VKReport	2019-09-11 01:45:22
80.82.78.85	attack	1 pkts, ports: TCP:25	2019-09-11 02:10:02
113.116.59.217	attack	2019-09-10T13:28:04.624789 X postfix/smtpd[57543]: NOQUEUE: reject: RCPT from unknown[113.116.59.217]: 554 5.7.1 Service unavailable; Client host [113.116.59.217] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?113.116.59.217; from= to= proto=ESMTP helo=	2019-09-11 00:58:22
113.176.88.10	attackspam	Sep 10 16:54:07 smtp postfix/smtpd[69394]: NOQUEUE: reject: RCPT from unknown[113.176.88.10]: 554 5.7.1 Service unavailable; Client host [113.176.88.10] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?113.176.88.10; from= to= proto=ESMTP helo= ...	2019-09-11 02:03:39
104.197.231.64	attackspambots	WordPress wp-login brute force :: 104.197.231.64 0.304 BYPASS [10/Sep/2019:23:58:09 1000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-09-11 00:56:07
185.216.132.15	attackspambots	SSH Bruteforce	2019-09-11 01:14:52
217.12.113.142	attackbotsspam	Unauthorized connection attempt from IP address 217.12.113.142 on Port 445(SMB)	2019-09-11 02:19:22

Recently Reported IPs

195.181.65.84	195.18.23.217	195.181.81.105	195.181.170.77
195.182.133.107	195.181.95.26	195.181.95.217	195.181.91.175
195.181.94.109	195.201.175.102	195.222.125.3	195.68.129.174
195.74.72.41	195.9.26.74	196.154.148.182	196.185.81.34
196.127.150.212	196.188.49.188	196.188.126.159	196.153.36.218