213.215.115.94

Basic Info

City: Nitra

Region: Nitra

Country: Slovakia

Internet Service Provider: SWAN a.s.

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	$f2bV_matches	2020-02-26 22:57:43
attackbots	Dec 21 21:35:35 v22018076622670303 sshd\[16133\]: Invalid user valerie from 213.215.115.94 port 54708 Dec 21 21:35:35 v22018076622670303 sshd\[16133\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.215.115.94 Dec 21 21:35:37 v22018076622670303 sshd\[16133\]: Failed password for invalid user valerie from 213.215.115.94 port 54708 ssh2 ...	2019-12-22 04:48:41

Type

Details

Datetime

attack

$f2bV_matches

2020-02-26 22:57:43

attackbots

Dec 21 21:35:35 v22018076622670303 sshd\[16133\]: Invalid user valerie from 213.215.115.94 port 54708
Dec 21 21:35:35 v22018076622670303 sshd\[16133\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.215.115.94
Dec 21 21:35:37 v22018076622670303 sshd\[16133\]: Failed password for invalid user valerie from 213.215.115.94 port 54708 ssh2
...

2019-12-22 04:48:41

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.215.115.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27780
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;213.215.115.94.			IN	A

;; AUTHORITY SECTION:
.			359	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122101 1800 900 604800 86400

;; Query time: 455 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 22 04:48:38 CST 2019
;; MSG SIZE  rcvd: 118

Host info

94.115.215.213.in-addr.arpa domain name pointer vps090.nameserver.sk.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
94.115.215.213.in-addr.arpa	name = vps090.nameserver.sk.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
69.55.49.187	attackbotsspam	Oct 11 15:19:42 ns392434 sshd[3986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.187 user=root Oct 11 15:19:44 ns392434 sshd[3986]: Failed password for root from 69.55.49.187 port 40846 ssh2 Oct 11 15:25:10 ns392434 sshd[4076]: Invalid user buser from 69.55.49.187 port 39188 Oct 11 15:25:10 ns392434 sshd[4076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.187 Oct 11 15:25:10 ns392434 sshd[4076]: Invalid user buser from 69.55.49.187 port 39188 Oct 11 15:25:12 ns392434 sshd[4076]: Failed password for invalid user buser from 69.55.49.187 port 39188 ssh2 Oct 11 15:28:27 ns392434 sshd[4341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.55.49.187 user=root Oct 11 15:28:29 ns392434 sshd[4341]: Failed password for root from 69.55.49.187 port 44842 ssh2 Oct 11 15:31:51 ns392434 sshd[4674]: Invalid user kurt from 69.55.49.187 port 50512	2020-10-11 21:54:19
174.219.130.141	attack	Brute forcing email accounts	2020-10-11 21:19:46
41.33.126.139	attack	Port Scan: TCP/443	2020-10-11 21:42:28
93.64.5.34	attackspambots	Oct 11 11:16:25 l03 sshd[26967]: Invalid user system from 93.64.5.34 port 1499 ...	2020-10-11 21:56:09
185.200.118.73	attackbots	ET DROP Dshield Block Listed Source group 1 - port: 1194 proto: udp cat: Misc Attackbytes: 60	2020-10-11 21:44:20
95.59.171.230	attackspam	Brute forcing RDP port 3389	2020-10-11 21:35:31
164.100.13.91	attackbotsspam	E-Mail Spam (RBL) [REJECTED]	2020-10-11 21:25:35
112.85.42.110	attackspam	Oct 11 15:24:47 abendstille sshd\[5814\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.110 user=root Oct 11 15:24:49 abendstille sshd\[5814\]: Failed password for root from 112.85.42.110 port 8266 ssh2 Oct 11 15:25:02 abendstille sshd\[5814\]: Failed password for root from 112.85.42.110 port 8266 ssh2 Oct 11 15:25:06 abendstille sshd\[6239\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.110 user=root Oct 11 15:25:07 abendstille sshd\[6239\]: Failed password for root from 112.85.42.110 port 63488 ssh2 ...	2020-10-11 21:27:52
201.122.102.21	attackspam	2020-10-11T11:07:21+0200 Failed SSH Authentication/Brute Force Attack. (Server 5)	2020-10-11 21:23:23
116.12.52.141	attackspambots	SSH login attempts.	2020-10-11 21:46:52
45.129.33.8	attackspambots	TCP (SYN) 45.129.33.8:54139 -> port 30117, len 44	2020-10-11 21:37:36
46.142.164.107	attackspambots	TCP (SYN) 46.142.164.107:35736 -> port 22, len 44	2020-10-11 21:40:55
200.41.172.203	attackspam	php WP PHPmyadamin ABUSE blocked for 12h	2020-10-11 21:25:52
203.251.11.118	attackbotsspam	2020-10-11T09:32:11.076946server.espacesoutien.com sshd[32223]: Failed password for invalid user sales from 203.251.11.118 port 34104 ssh2 2020-10-11T09:36:12.046147server.espacesoutien.com sshd[448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.251.11.118 user=root 2020-10-11T09:36:13.270465server.espacesoutien.com sshd[448]: Failed password for root from 203.251.11.118 port 39548 ssh2 2020-10-11T09:40:10.615287server.espacesoutien.com sshd[1231]: Invalid user james from 203.251.11.118 port 45006 ...	2020-10-11 21:18:13
52.142.9.209	attackspambots	Oct 11 12:52:08 localhost sshd[90964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.142.9.209 user=root Oct 11 12:52:10 localhost sshd[90964]: Failed password for root from 52.142.9.209 port 1088 ssh2 Oct 11 12:56:07 localhost sshd[91510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.142.9.209 user=root Oct 11 12:56:09 localhost sshd[91510]: Failed password for root from 52.142.9.209 port 1088 ssh2 Oct 11 13:00:15 localhost sshd[92105]: Invalid user test from 52.142.9.209 port 1089 ...	2020-10-11 21:24:14

Recently Reported IPs

54.151.171.8	27.45.106.48	190.75.157.211	176.15.103.233
17.94.165.85	68.200.14.199	190.32.9.169	143.117.196.36
72.175.29.178	88.227.104.205	158.147.246.76	84.185.39.37
94.41.75.200	202.122.37.161	118.199.190.174	229.133.222.117
200.189.44.210	61.77.228.193	131.191.154.214	83.23.49.128