57.174.88.185.in-addr.arpa domain name pointer to55.rolestoknow.com.
Nslookup info:
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
57.174.88.185.in-addr.arpa name = to55.rolestoknow.com.
Authoritative answers can be found from:
May 26 09:31:42 server pure-ftpd: (?@46.161.27.219) [WARNING] Authentication failed for user [xpandity]
May 26 09:31:48 server pure-ftpd: (?@46.161.27.219) [WARNING] Authentication failed for user [xpandity.com]
May 26 09:31:55 server pure-ftpd: (?@46.161.27.219) [WARNING] Authentication failed for user [admin@xpandity.com]
...
SmallBizIT.US 22 packets to tcp(1774,3152,4706,6127,15510,21622,22540,24727,24840,28083,32245,33474,36156,36558,40160,40704,43714,49487,60398,60584,62593,64716)
May 26 12:02:28 ucs sshd\[26508\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.39 user=root
May 26 12:02:29 ucs sshd\[26506\]: error: PAM: User not known to the underlying authentication module for root from 222.186.52.39
May 26 12:02:30 ucs sshd\[26509\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.39 user=root
...