City: unknown
Region: unknown
Country: Lithuania
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.190.54.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50993
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;213.190.54.55. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021701 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 05:05:54 CST 2025
;; MSG SIZE rcvd: 10655.54.190.213.in-addr.arpa domain name pointer 213-190-54-55.static.zebra.lt.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
55.54.190.213.in-addr.arpa name = 213-190-54-55.static.zebra.lt.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 5.1.88.50 | attack | Sep 21 18:36:48 Ubuntu-1404-trusty-64-minimal sshd\[32552\]: Invalid user mailman from 5.1.88.50 Sep 21 18:36:48 Ubuntu-1404-trusty-64-minimal sshd\[32552\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.1.88.50 Sep 21 18:36:50 Ubuntu-1404-trusty-64-minimal sshd\[32552\]: Failed password for invalid user mailman from 5.1.88.50 port 52676 ssh2 Sep 21 18:48:04 Ubuntu-1404-trusty-64-minimal sshd\[7807\]: Invalid user rubystar from 5.1.88.50 Sep 21 18:48:04 Ubuntu-1404-trusty-64-minimal sshd\[7807\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.1.88.50 |
2019-09-22 02:31:04 |
| 192.236.199.81 | attackspambots | Sep 21 15:20:10 mxgate1 postfix/postscreen[17247]: CONNECT from [192.236.199.81]:33193 to [176.31.12.44]:25 Sep 21 15:20:10 mxgate1 postfix/dnsblog[17445]: addr 192.236.199.81 listed by domain zen.spamhaus.org as 127.0.0.3 Sep 21 15:20:10 mxgate1 postfix/postscreen[17247]: PREGREET 30 after 0.11 from [192.236.199.81]:33193: EHLO 02d6fff2.backheroo.best Sep 21 15:20:10 mxgate1 postfix/dnsblog[17446]: addr 192.236.199.81 listed by domain b.barracudacentral.org as 127.0.0.2 Sep 21 15:20:10 mxgate1 postfix/postscreen[17247]: DNSBL rank 3 for [192.236.199.81]:33193 Sep x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=192.236.199.81 |
2019-09-22 02:43:01 |
| 61.172.236.166 | attackspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-21 11:37:59,530 INFO [amun_request_handler] PortScan Detected on Port: 445 (61.172.236.166) |
2019-09-22 03:00:48 |
| 91.121.211.59 | attackbotsspam | Jan 25 15:36:39 vtv3 sshd\[769\]: Invalid user ftpadmin from 91.121.211.59 port 49600 Jan 25 15:36:39 vtv3 sshd\[769\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.211.59 Jan 25 15:36:40 vtv3 sshd\[769\]: Failed password for invalid user ftpadmin from 91.121.211.59 port 49600 ssh2 Jan 25 15:40:34 vtv3 sshd\[2149\]: Invalid user developer from 91.121.211.59 port 51954 Jan 25 15:40:34 vtv3 sshd\[2149\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.211.59 Feb 4 09:04:16 vtv3 sshd\[305\]: Invalid user mysql2 from 91.121.211.59 port 40978 Feb 4 09:04:16 vtv3 sshd\[305\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.211.59 Feb 4 09:04:18 vtv3 sshd\[305\]: Failed password for invalid user mysql2 from 91.121.211.59 port 40978 ssh2 Feb 4 09:08:29 vtv3 sshd\[1811\]: Invalid user vyos from 91.121.211.59 port 44986 Feb 4 09:08:29 vtv3 sshd\[1811\]: pam_unix\( |
2019-09-22 02:32:17 |
| 109.100.179.205 | attackspambots | Automatic report - Port Scan Attack |
2019-09-22 02:35:09 |
| 37.59.224.39 | attackbotsspam | Sep 21 20:38:48 meumeu sshd[30408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.224.39 Sep 21 20:38:51 meumeu sshd[30408]: Failed password for invalid user ftpuser from 37.59.224.39 port 41352 ssh2 Sep 21 20:42:51 meumeu sshd[31041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.224.39 ... |
2019-09-22 02:43:38 |
| 79.11.181.225 | attack | Sep 21 08:03:59 lcprod sshd\[19057\]: Invalid user sebastiao from 79.11.181.225 Sep 21 08:03:59 lcprod sshd\[19057\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host225-181-static.11-79-b.business.telecomitalia.it Sep 21 08:04:00 lcprod sshd\[19057\]: Failed password for invalid user sebastiao from 79.11.181.225 port 62358 ssh2 Sep 21 08:09:29 lcprod sshd\[19622\]: Invalid user db2fenc1 from 79.11.181.225 Sep 21 08:09:29 lcprod sshd\[19622\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host225-181-static.11-79-b.business.telecomitalia.it |
2019-09-22 02:22:23 |
| 200.196.253.251 | attack | Sep 21 14:25:08 xtremcommunity sshd\[329476\]: Invalid user changeme from 200.196.253.251 port 53574 Sep 21 14:25:08 xtremcommunity sshd\[329476\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.253.251 Sep 21 14:25:10 xtremcommunity sshd\[329476\]: Failed password for invalid user changeme from 200.196.253.251 port 53574 ssh2 Sep 21 14:30:10 xtremcommunity sshd\[329627\]: Invalid user ohh from 200.196.253.251 port 38996 Sep 21 14:30:10 xtremcommunity sshd\[329627\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.253.251 ... |
2019-09-22 02:40:26 |
| 81.245.82.33 | attack | fail2ban |
2019-09-22 02:55:31 |
| 203.195.204.142 | attackspambots | Sep 21 14:47:25 TORMINT sshd\[31185\]: Invalid user alex from 203.195.204.142 Sep 21 14:47:25 TORMINT sshd\[31185\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.204.142 Sep 21 14:47:26 TORMINT sshd\[31185\]: Failed password for invalid user alex from 203.195.204.142 port 52034 ssh2 ... |
2019-09-22 02:59:26 |
| 181.44.119.183 | attack | Brute Force attack - banned by Fail2Ban |
2019-09-22 02:49:37 |
| 197.156.72.154 | attack | Automatic report - Banned IP Access |
2019-09-22 03:02:05 |
| 139.215.217.181 | attackbotsspam | SSH invalid-user multiple login attempts |
2019-09-22 02:16:08 |
| 61.58.182.250 | attackspam | port scan and connect, tcp 23 (telnet) |
2019-09-22 02:53:39 |
| 61.69.78.78 | attack | Sep 21 14:53:00 fr01 sshd[3940]: Invalid user vmware from 61.69.78.78 ... |
2019-09-22 02:26:40 |