City: unknown
Region: unknown
Country: United States
Internet Service Provider: DigitalOcean LLC
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspambots | Jun 12 20:45:41 ms-srv sshd[25273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.199.106.55 Jun 12 20:45:43 ms-srv sshd[25273]: Failed password for invalid user dave from 198.199.106.55 port 42156 ssh2 |
2020-03-10 07:02:19 |
| attackbotsspam | 'Fail2Ban' |
2019-07-01 10:57:06 |
| attackbots | Jun 28 12:42:35 MK-Soft-VM5 sshd\[17291\]: Invalid user ubuntu from 198.199.106.55 port 34384 Jun 28 12:42:35 MK-Soft-VM5 sshd\[17291\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.199.106.55 Jun 28 12:42:37 MK-Soft-VM5 sshd\[17291\]: Failed password for invalid user ubuntu from 198.199.106.55 port 34384 ssh2 ... |
2019-06-28 21:27:35 |
| attackspambots | 27.06.2019 13:10:45 SSH access blocked by firewall |
2019-06-27 21:55:59 |
| attack | $f2bV_matches |
2019-06-27 13:14:02 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 198.199.106.97 | attackspambots | 264/tcp 8080/tcp 2525/tcp... [2019-06-13/08-12]65pkt,55pt.(tcp),4pt.(udp) |
2019-08-14 20:51:19 |
| 198.199.106.97 | attackbots | 3389/tcp 88/tcp 16203/tcp... [2019-05-03/07-03]49pkt,38pt.(tcp),6pt.(udp) |
2019-07-04 05:55:58 |
| 198.199.106.97 | attack | Automatic report - Web App Attack |
2019-06-26 01:42:58 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 198.199.106.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40412
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;198.199.106.55. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019061201 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jun 13 04:19:43 CST 2019
;; MSG SIZE rcvd: 118
55.106.199.198.in-addr.arpa domain name pointer box2.mzero.space.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
55.106.199.198.in-addr.arpa name = box2.mzero.space.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 83.17.17.198 | attack | Automatic report - Port Scan Attack |
2020-10-08 02:16:41 |
| 106.12.98.182 | attackbotsspam | Oct 7 20:03:13 xeon sshd[64940]: Failed password for root from 106.12.98.182 port 51034 ssh2 |
2020-10-08 02:15:29 |
| 148.72.207.135 | attackbotsspam | probing for vulnerabilities, found a honeypot |
2020-10-08 02:26:54 |
| 14.160.52.130 | attack | 1602016722 - 10/06/2020 22:38:42 Host: 14.160.52.130/14.160.52.130 Port: 445 TCP Blocked ... |
2020-10-08 02:34:02 |
| 63.41.9.207 | attackspambots | Dear user, The IP address [63.41.9.207] experienced 2 failed attempts when attempting to log into SSH running on AstroParrotsNAS within 5 minutes, and was blocked at Tue Oct 6 14:20:32 2020. From AstroParrotsNAS |
2020-10-08 02:33:47 |
| 189.125.93.48 | attack | Banned for a week because repeated abuses, for example SSH, but not only |
2020-10-08 02:31:59 |
| 78.112.113.121 | attackbots | Attacking our email server |
2020-10-08 02:21:54 |
| 94.191.71.246 | attackspam | 2020-10-07T18:01:17.831005Z bcf980c584b4 New connection: 94.191.71.246:47652 (172.17.0.5:2222) [session: bcf980c584b4] 2020-10-07T18:05:46.311307Z 190fa3747a49 New connection: 94.191.71.246:36598 (172.17.0.5:2222) [session: 190fa3747a49] |
2020-10-08 02:50:18 |
| 103.145.13.230 | attackbots | - Port=5060 |
2020-10-08 02:38:52 |
| 167.71.47.142 | attackbots | $f2bV_matches |
2020-10-08 02:29:27 |
| 157.245.163.0 | attack | firewall-block, port(s): 26894/tcp |
2020-10-08 02:25:10 |
| 78.17.124.28 | attack | SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: sky-78-17-124-28.bas512.cwt.btireland.net. |
2020-10-08 02:22:50 |
| 212.83.164.138 | attackspambots | Try to connect to SIP server using false credentials |
2020-10-08 02:23:08 |
| 5.182.211.238 | attack | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-10-08 02:45:19 |
| 187.12.167.85 | attackbots | SSH brute-force attempt |
2020-10-08 02:23:43 |