5.2.55.19 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 5.2.55.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45125
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;5.2.55.19.			IN	A

;; AUTHORITY SECTION:
.			239	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021300 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 17:48:55 CST 2022
;; MSG SIZE  rcvd: 102

Host info

19.55.2.5.in-addr.arpa domain name pointer host-5-2-55-19.ugmk-telecom.ru.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
19.55.2.5.in-addr.arpa	name = host-5-2-55-19.ugmk-telecom.ru.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
45.172.108.73	attack	Sep 24 15:34:37 r.ca sshd[31187]: Failed password for invalid user arief from 45.172.108.73 port 55618 ssh2	2020-09-25 10:49:25
139.199.74.11	attack	(sshd) Failed SSH login from 139.199.74.11 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 24 21:21:30 server5 sshd[20350]: Invalid user user from 139.199.74.11 Sep 24 21:21:30 server5 sshd[20350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.74.11 Sep 24 21:21:32 server5 sshd[20350]: Failed password for invalid user user from 139.199.74.11 port 47070 ssh2 Sep 24 21:28:26 server5 sshd[23046]: Invalid user admin from 139.199.74.11 Sep 24 21:28:26 server5 sshd[23046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.74.11	2020-09-25 10:45:46
189.1.132.75	attack	Sep 25 03:56:38 DAAP sshd[32124]: Invalid user ubuntu from 189.1.132.75 port 48160 Sep 25 03:56:38 DAAP sshd[32124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.1.132.75 Sep 25 03:56:38 DAAP sshd[32124]: Invalid user ubuntu from 189.1.132.75 port 48160 Sep 25 03:56:40 DAAP sshd[32124]: Failed password for invalid user ubuntu from 189.1.132.75 port 48160 ssh2 Sep 25 04:00:52 DAAP sshd[32169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.1.132.75 user=root Sep 25 04:00:54 DAAP sshd[32169]: Failed password for root from 189.1.132.75 port 57510 ssh2 ...	2020-09-25 10:33:29
184.105.139.98	attack	1600997224 - 09/25/2020 03:27:04 Host: 184.105.139.98/184.105.139.98 Port: 69 UDP Blocked ...	2020-09-25 10:16:32
47.33.12.47	attackspam	(sshd) Failed SSH login from 47.33.12.47 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 24 15:50:46 server2 sshd[838]: Invalid user admin from 47.33.12.47 Sep 24 15:50:49 server2 sshd[838]: Failed password for invalid user admin from 47.33.12.47 port 48666 ssh2 Sep 24 15:50:50 server2 sshd[845]: Invalid user admin from 47.33.12.47 Sep 24 15:50:52 server2 sshd[845]: Failed password for invalid user admin from 47.33.12.47 port 48792 ssh2 Sep 24 15:50:53 server2 sshd[850]: Invalid user admin from 47.33.12.47	2020-09-25 10:37:17
182.61.43.196	attackspam	Sep 24 22:24:43 ip106 sshd[23789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.43.196 Sep 24 22:24:45 ip106 sshd[23789]: Failed password for invalid user git from 182.61.43.196 port 44044 ssh2 ...	2020-09-25 10:28:34
193.112.250.252	attack	Sep 25 07:18:22 gw1 sshd[22215]: Failed password for root from 193.112.250.252 port 54126 ssh2 ...	2020-09-25 10:56:42
37.228.227.113	attack	Email rejected due to spam filtering	2020-09-25 10:55:33
51.91.99.233	attackbotsspam	WordPress wp-login brute force :: 51.91.99.233 0.068 BYPASS [25/Sep/2020:02:21:57 0000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 2577 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-09-25 10:23:15
51.143.143.145	attackspam	" "	2020-09-25 10:21:27
2a03:b0c0:1:e0::673:5001	attackspam	[ThuSep2421:51:16.5574622020][:error][pid21385:tid47083707156224][client2a03:b0c0:1:e0::673:5001:60180][client2a03:b0c0:1:e0::673:5001]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\\\\\\\.ini\\|web.config\)\\\\\\\\b\\|$\\|\^\\|\\\\\\\\.\\\\\\\\.$/etc/\\|/\\\\\\\\.$\?:history\\|bash_history\\|sh_history\\|env$\$\)"atREQUEST_FILENAME.[file"/usr/local/apache.ea3/conf/modsec_rules/10_asl_rules.conf"][line"211"][id"390709"][rev"30"][msg"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely"][data"/.env"][severity"CRITICAL"][hostname"miaschildrensuisse.org"][uri"/.env"][unique_id"X2z4tG21C9wOm8wrlnV9MQAAANg"][ThuSep2421:51:17.4035812020][:error][pid21190:tid47083677738752][client2a03:b0c0:1:e0::673:5001:54800][client2a03:b0c0:1:e0::673:5001]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|gro	2020-09-25 10:21:58
217.115.112.198	attackspambots	Sep 25 03:44:05 rancher-0 sshd[276743]: Invalid user qpcrm from 217.115.112.198 port 34146 ...	2020-09-25 10:51:51
103.39.213.133	attack	(sshd) Failed SSH login from 103.39.213.133 (CN/China/Guangdong/Shenzhen (Nanshan Qu)/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 24 18:59:26 atlas sshd[27333]: Invalid user toto from 103.39.213.133 port 44932 Sep 24 18:59:27 atlas sshd[27333]: Failed password for invalid user toto from 103.39.213.133 port 44932 ssh2 Sep 24 19:07:37 atlas sshd[29270]: Invalid user ds from 103.39.213.133 port 42272 Sep 24 19:07:39 atlas sshd[29270]: Failed password for invalid user ds from 103.39.213.133 port 42272 ssh2 Sep 24 19:17:09 atlas sshd[31435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.39.213.133 user=root	2020-09-25 10:36:42
221.195.189.144	attackspambots	(sshd) Failed SSH login from 221.195.189.144 (CN/China/-): 5 in the last 3600 secs	2020-09-25 10:42:47
186.215.143.149	attackspam	Sep 18 17:40:29 WHD8 dovecot: imap-login: Disconnected $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=186.215.143.149, lip=10.64.89.208, TLS, session=\ Sep 19 18:38:29 WHD8 dovecot: imap-login: Disconnected $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=186.215.143.149, lip=10.64.89.208, session=\ Sep 20 08:08:31 WHD8 dovecot: imap-login: Disconnected $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=186.215.143.149, lip=10.64.89.208, session=\ Sep 20 15:09:09 WHD8 dovecot: imap-login: Disconnected $auth failed, 1 attempts in 4 secs$: user=\, method=PLAIN, rip=186.215.143.149, lip=10.64.89.208, session=\ Sep 20 21:34:12 WHD8 dovecot: imap-login: Disconnected $auth failed, 1 attempts in 7 secs$: user=\, method=PLAIN, rip=186.215.143.1 ...	2020-09-25 10:52:10

Recently Reported IPs

5.2.183.187	5.2.207.102	5.200.94.0	5.200.87.178
5.202.111.112	5.202.123.86	5.201.133.46	5.201.176.173
5.202.145.236	5.202.142.117	5.202.142.41	5.202.142.76
5.202.152.128	192.1.35.129	5.202.147.53	5.202.147.37
5.201.164.228	5.202.158.146	5.202.158.60	5.202.223.12