City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 55.204.12.125
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14106
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;55.204.12.125. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022700 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 01:35:19 CST 2025
;; MSG SIZE rcvd: 106Host 125.12.204.55.in-addr.arpa not found: 2(SERVFAIL)
server can't find 55.204.12.125.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 62.210.149.30 | attackbots | \[2019-08-19 16:54:54\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-19T16:54:54.511-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="89720012342186069",SessionID="0x7ff4d0348688",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.149.30/59018",ACLName="no_extension_match" \[2019-08-19 16:55:10\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-19T16:55:10.923-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="89730012342186069",SessionID="0x7ff4d09702e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.149.30/56837",ACLName="no_extension_match" \[2019-08-19 17:04:47\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-19T17:04:47.513-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="99080012342186069",SessionID="0x7ff4d07952f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.149.30/52501",ACLName=" |
2019-08-20 05:12:48 |
| 13.231.198.126 | attackspambots | Aug 19 19:58:04 MK-Soft-VM3 sshd\[9917\]: Invalid user mmi from 13.231.198.126 port 26602 Aug 19 19:58:04 MK-Soft-VM3 sshd\[9917\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.231.198.126 Aug 19 19:58:06 MK-Soft-VM3 sshd\[9917\]: Failed password for invalid user mmi from 13.231.198.126 port 26602 ssh2 ... |
2019-08-20 05:18:31 |
| 89.248.172.85 | attackspam | firewall-block, port(s): 8930/tcp, 8932/tcp |
2019-08-20 05:22:50 |
| 49.88.112.78 | attackbotsspam | Aug 19 23:39:07 eventyay sshd[5398]: Failed password for root from 49.88.112.78 port 46690 ssh2 Aug 19 23:39:16 eventyay sshd[5400]: Failed password for root from 49.88.112.78 port 47369 ssh2 ... |
2019-08-20 05:41:04 |
| 88.247.194.53 | attackspam | Aug 19 18:32:05 xb3 sshd[25009]: reveeclipse mapping checking getaddrinfo for 88.247.194.53.static.ttnet.com.tr [88.247.194.53] failed - POSSIBLE BREAK-IN ATTEMPT! Aug 19 18:32:07 xb3 sshd[25009]: Failed password for invalid user rudy from 88.247.194.53 port 47928 ssh2 Aug 19 18:32:08 xb3 sshd[25009]: Received disconnect from 88.247.194.53: 11: Bye Bye [preauth] Aug 19 18:48:55 xb3 sshd[30557]: reveeclipse mapping checking getaddrinfo for 88.247.194.53.static.ttnet.com.tr [88.247.194.53] failed - POSSIBLE BREAK-IN ATTEMPT! Aug 19 18:48:57 xb3 sshd[30557]: Failed password for invalid user test from 88.247.194.53 port 36936 ssh2 Aug 19 18:48:57 xb3 sshd[30557]: Received disconnect from 88.247.194.53: 11: Bye Bye [preauth] Aug 19 18:53:06 xb3 sshd[29243]: reveeclipse mapping checking getaddrinfo for 88.247.194.53.static.ttnet.com.tr [88.247.194.53] failed - POSSIBLE BREAK-IN ATTEMPT! Aug 19 18:53:09 xb3 sshd[29243]: Failed password for invalid user denis from 88.247.194.53........ ------------------------------- |
2019-08-20 05:50:20 |
| 80.220.94.102 | attackspam | CMS probe |
2019-08-20 05:35:24 |
| 117.222.126.137 | attack | Aug 19 20:55:42 vserver sshd\[19883\]: Failed password for root from 117.222.126.137 port 46852 ssh2Aug 19 20:55:48 vserver sshd\[19883\]: Failed password for root from 117.222.126.137 port 46852 ssh2Aug 19 20:55:50 vserver sshd\[19883\]: Failed password for root from 117.222.126.137 port 46852 ssh2Aug 19 20:55:56 vserver sshd\[19883\]: Failed password for root from 117.222.126.137 port 46852 ssh2 ... |
2019-08-20 05:45:39 |
| 203.151.93.42 | attack | WordPress wp-login brute force :: 203.151.93.42 0.060 BYPASS [20/Aug/2019:04:55:57 1000] [censored_4] "POST /wp-login.php HTTP/1.1" 200 3989 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-08-20 05:45:06 |
| 46.101.205.211 | attackspam | Aug 19 10:12:41 kapalua sshd\[18473\]: Invalid user pay_pal from 46.101.205.211 Aug 19 10:12:41 kapalua sshd\[18473\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.205.211 Aug 19 10:12:43 kapalua sshd\[18473\]: Failed password for invalid user pay_pal from 46.101.205.211 port 37446 ssh2 Aug 19 10:16:47 kapalua sshd\[18889\]: Invalid user ispapps from 46.101.205.211 Aug 19 10:16:47 kapalua sshd\[18889\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.205.211 |
2019-08-20 05:29:13 |
| 188.166.246.46 | attackbots | Aug 20 00:51:45 yabzik sshd[6784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.246.46 Aug 20 00:51:47 yabzik sshd[6784]: Failed password for invalid user mark from 188.166.246.46 port 46648 ssh2 Aug 20 00:56:21 yabzik sshd[8404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.246.46 |
2019-08-20 05:58:33 |
| 120.131.3.66 | attackbots | ssh intrusion attempt |
2019-08-20 05:38:04 |
| 80.211.51.116 | attack | Aug 19 10:50:18 kapalua sshd\[22349\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.51.116 user=root Aug 19 10:50:20 kapalua sshd\[22349\]: Failed password for root from 80.211.51.116 port 40324 ssh2 Aug 19 10:54:40 kapalua sshd\[22807\]: Invalid user lxd from 80.211.51.116 Aug 19 10:54:40 kapalua sshd\[22807\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.51.116 Aug 19 10:54:42 kapalua sshd\[22807\]: Failed password for invalid user lxd from 80.211.51.116 port 58714 ssh2 |
2019-08-20 05:40:45 |
| 167.71.203.150 | attackbots | Aug 19 23:01:22 OPSO sshd\[21751\]: Invalid user git_user from 167.71.203.150 port 51484 Aug 19 23:01:22 OPSO sshd\[21751\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.203.150 Aug 19 23:01:24 OPSO sshd\[21751\]: Failed password for invalid user git_user from 167.71.203.150 port 51484 ssh2 Aug 19 23:08:35 OPSO sshd\[22694\]: Invalid user cumulus from 167.71.203.150 port 48374 Aug 19 23:08:35 OPSO sshd\[22694\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.203.150 |
2019-08-20 05:12:20 |
| 43.248.20.129 | attack | Attempts to probe for or exploit a Drupal site on url: /wp-login.php. Reported by the module https://www.drupal.org/project/abuseipdb. |
2019-08-20 05:54:20 |
| 167.99.75.174 | attackbots | Aug 19 23:28:53 v22018076622670303 sshd\[11045\]: Invalid user ubuntu from 167.99.75.174 port 37550 Aug 19 23:28:53 v22018076622670303 sshd\[11045\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.75.174 Aug 19 23:28:55 v22018076622670303 sshd\[11045\]: Failed password for invalid user ubuntu from 167.99.75.174 port 37550 ssh2 ... |
2019-08-20 05:51:10 |