City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 55.139.112.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30468
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;55.139.112.53. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021800 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 23:15:53 CST 2025
;; MSG SIZE rcvd: 106Host 53.112.139.55.in-addr.arpa not found: 2(SERVFAIL)
server can't find 55.139.112.53.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 188.191.232.205 | attack | Unauthorized connection attempt from IP address 188.191.232.205 on Port 445(SMB) |
2019-10-06 01:15:03 |
| 81.2.195.183 | attackspam | xmlrpc attack |
2019-10-06 00:49:57 |
| 107.173.231.135 | attackbotsspam | Oct 4 19:54:36 localhost kernel: [3971095.102461] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=107.173.231.135 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=30304 PROTO=TCP SPT=58919 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 4 19:54:36 localhost kernel: [3971095.102494] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=107.173.231.135 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=30304 PROTO=TCP SPT=58919 DPT=445 SEQ=1412110243 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 5 07:34:02 localhost kernel: [4013061.423494] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=107.173.231.135 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=8727 PROTO=TCP SPT=46531 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 5 07:34:02 localhost kernel: [4013061.423521] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=107.173.231.135 DST=[mungedIP2] LEN=40 TOS=0x00 |
2019-10-06 00:33:24 |
| 221.122.78.202 | attackspambots | Oct 5 02:56:31 php1 sshd\[25949\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.122.78.202 user=root Oct 5 02:56:33 php1 sshd\[25949\]: Failed password for root from 221.122.78.202 port 57812 ssh2 Oct 5 03:00:14 php1 sshd\[26444\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.122.78.202 user=root Oct 5 03:00:17 php1 sshd\[26444\]: Failed password for root from 221.122.78.202 port 6728 ssh2 Oct 5 03:04:00 php1 sshd\[26805\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.122.78.202 user=root |
2019-10-06 00:45:10 |
| 123.214.186.186 | attackspam | 2019-10-05T22:21:41.873769enmeeting.mahidol.ac.th sshd\[1598\]: User root from 123.214.186.186 not allowed because not listed in AllowUsers 2019-10-05T22:21:41.997209enmeeting.mahidol.ac.th sshd\[1598\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.214.186.186 user=root 2019-10-05T22:21:44.233539enmeeting.mahidol.ac.th sshd\[1598\]: Failed password for invalid user root from 123.214.186.186 port 54368 ssh2 ... |
2019-10-06 00:53:08 |
| 2001:8d8:976:91d6:4de9:c9eb:e70:1 | attackbots | WordPress wp-login brute force :: 2001:8d8:976:91d6:4de9:c9eb:e70:1 0.092 BYPASS [05/Oct/2019:21:32:53 1000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 4630 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-10-06 01:10:47 |
| 49.234.44.48 | attackbots | Oct 5 04:53:35 php1 sshd\[21747\]: Invalid user Gas123 from 49.234.44.48 Oct 5 04:53:35 php1 sshd\[21747\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.44.48 Oct 5 04:53:37 php1 sshd\[21747\]: Failed password for invalid user Gas123 from 49.234.44.48 port 54947 ssh2 Oct 5 04:59:00 php1 sshd\[22254\]: Invalid user Q1w2e3r4t5 from 49.234.44.48 Oct 5 04:59:00 php1 sshd\[22254\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.44.48 |
2019-10-06 01:00:07 |
| 45.154.255.44 | attackbots | WordPress login Brute force / Web App Attack on client site. |
2019-10-06 00:35:52 |
| 213.148.213.99 | attackspambots | Oct 5 18:25:09 pkdns2 sshd\[41490\]: Invalid user P4ssw0rt_111 from 213.148.213.99Oct 5 18:25:11 pkdns2 sshd\[41490\]: Failed password for invalid user P4ssw0rt_111 from 213.148.213.99 port 53964 ssh2Oct 5 18:25:30 pkdns2 sshd\[41497\]: Invalid user P@$$w0rt1! from 213.148.213.99Oct 5 18:25:32 pkdns2 sshd\[41497\]: Failed password for invalid user P@$$w0rt1! from 213.148.213.99 port 54494 ssh2Oct 5 18:25:51 pkdns2 sshd\[41501\]: Invalid user Passwort@2016 from 213.148.213.99Oct 5 18:25:53 pkdns2 sshd\[41501\]: Failed password for invalid user Passwort@2016 from 213.148.213.99 port 55168 ssh2 ... |
2019-10-06 01:08:31 |
| 41.210.4.106 | attack | Chat Spam |
2019-10-06 01:15:35 |
| 207.148.127.239 | attackbotsspam | WordPress wp-login brute force :: 207.148.127.239 0.040 BYPASS [05/Oct/2019:21:33:57 1000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 4630 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-10-06 00:35:08 |
| 46.214.123.55 | attackbotsspam | Automatic report - Port Scan Attack |
2019-10-06 01:04:51 |
| 176.100.102.208 | attackbotsspam | Oct 5 06:38:00 tdfoods sshd\[3257\]: Invalid user Bizz2017 from 176.100.102.208 Oct 5 06:38:00 tdfoods sshd\[3257\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.100.102.208 Oct 5 06:38:03 tdfoods sshd\[3257\]: Failed password for invalid user Bizz2017 from 176.100.102.208 port 27673 ssh2 Oct 5 06:42:00 tdfoods sshd\[3695\]: Invalid user Net@2017 from 176.100.102.208 Oct 5 06:42:00 tdfoods sshd\[3695\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.100.102.208 |
2019-10-06 00:50:49 |
| 198.144.184.34 | attackspam | Oct 5 18:38:54 vps01 sshd[5554]: Failed password for root from 198.144.184.34 port 51253 ssh2 |
2019-10-06 01:09:44 |
| 45.124.4.98 | attackbotsspam | Unauthorized connection attempt from IP address 45.124.4.98 on Port 445(SMB) |
2019-10-06 01:11:34 |