51.254.95.139 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: France

Internet Service Provider: OVH SAS

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Oct 6 05:38:30 mail sshd[19941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.95.139 user=root Oct 6 05:38:33 mail sshd[19941]: Failed password for root from 51.254.95.139 port 49786 ssh2 Oct 6 05:50:50 mail sshd[21473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.95.139 user=root Oct 6 05:50:52 mail sshd[21473]: Failed password for root from 51.254.95.139 port 36380 ssh2 Oct 6 05:54:50 mail sshd[21896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.95.139 user=root Oct 6 05:54:52 mail sshd[21896]: Failed password for root from 51.254.95.139 port 53564 ssh2 ...	2019-10-06 12:40:30
attackspam	2019-10-03 16:10:34,975 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 51.254.95.139 2019-10-03 16:44:20,818 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 51.254.95.139 2019-10-03 17:15:55,565 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 51.254.95.139 2019-10-03 17:46:44,063 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 51.254.95.139 2019-10-03 18:21:03,279 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 51.254.95.139 ...	2019-10-04 04:28:08

Type

Details

Datetime

attackspambots

Oct  6 05:38:30 mail sshd[19941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.95.139  user=root
Oct  6 05:38:33 mail sshd[19941]: Failed password for root from 51.254.95.139 port 49786 ssh2
Oct  6 05:50:50 mail sshd[21473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.95.139  user=root
Oct  6 05:50:52 mail sshd[21473]: Failed password for root from 51.254.95.139 port 36380 ssh2
Oct  6 05:54:50 mail sshd[21896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.95.139  user=root
Oct  6 05:54:52 mail sshd[21896]: Failed password for root from 51.254.95.139 port 53564 ssh2
...

2019-10-06 12:40:30

attackspam

2019-10-03 16:10:34,975 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 51.254.95.139
2019-10-03 16:44:20,818 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 51.254.95.139
2019-10-03 17:15:55,565 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 51.254.95.139
2019-10-03 17:46:44,063 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 51.254.95.139
2019-10-03 18:21:03,279 fail2ban.actions        \[946\]: NOTICE  \[sshd\] Ban 51.254.95.139
...

2019-10-04 04:28:08

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 51.254.95.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35648
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;51.254.95.139.			IN	A

;; AUTHORITY SECTION:
.			151	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100301 1800 900 604800 86400

;; Query time: 228 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 04 04:28:05 CST 2019
;; MSG SIZE  rcvd: 117

Host info

139.95.254.51.in-addr.arpa domain name pointer ip139.ip-51-254-95.eu.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
139.95.254.51.in-addr.arpa	name = ip139.ip-51-254-95.eu.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
46.38.145.4	attackspam	2020-07-09 08:01:35 auth_plain authenticator failed for (User) [46.38.145.4]: 535 Incorrect authentication data (set_id=tjc@mail.csmailer.org) 2020-07-09 08:02:18 auth_plain authenticator failed for (User) [46.38.145.4]: 535 Incorrect authentication data (set_id=hanif@mail.csmailer.org) 2020-07-09 08:03:03 auth_plain authenticator failed for (User) [46.38.145.4]: 535 Incorrect authentication data (set_id=tuyen@mail.csmailer.org) 2020-07-09 08:03:47 auth_plain authenticator failed for (User) [46.38.145.4]: 535 Incorrect authentication data (set_id=luxe@mail.csmailer.org) 2020-07-09 08:04:31 auth_plain authenticator failed for (User) [46.38.145.4]: 535 Incorrect authentication data (set_id=rodica@mail.csmailer.org) ...	2020-07-09 16:03:14
195.72.228.174	attackspambots	Honeypot attack, port: 445, PTR: h174.228-c765000004560.ys.ll.sakhalin.ru.	2020-07-09 15:46:38
181.65.252.9	attackbotsspam	$f2bV_matches	2020-07-09 15:56:43
34.76.172.157	attackbots	34.76.172.157 - - [09/Jul/2020:07:20:37 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 34.76.172.157 - - [09/Jul/2020:07:20:38 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 34.76.172.157 - - [09/Jul/2020:07:20:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-07-09 15:47:31
24.216.30.138	attackbots	Scanning	2020-07-09 16:13:29
98.143.148.45	attack	Jul 9 08:59:11 h2865660 sshd[1154]: Invalid user Veronika from 98.143.148.45 port 44294 Jul 9 08:59:11 h2865660 sshd[1154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.143.148.45 Jul 9 08:59:11 h2865660 sshd[1154]: Invalid user Veronika from 98.143.148.45 port 44294 Jul 9 08:59:13 h2865660 sshd[1154]: Failed password for invalid user Veronika from 98.143.148.45 port 44294 ssh2 Jul 9 09:13:56 h2865660 sshd[1824]: Invalid user ssingh from 98.143.148.45 port 38196 ...	2020-07-09 15:46:18
110.77.228.18	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-07-09 15:43:05
180.126.50.150	attackbots	Port probing on unauthorized port 22	2020-07-09 16:04:50
121.69.89.78	attackspam	Failed password for invalid user rbt from 121.69.89.78 port 48142 ssh2	2020-07-09 15:58:21
191.240.39.89	attack	Unauthorized connection attempt from IP address 191.240.39.89 on port 587	2020-07-09 16:02:27
218.92.0.251	attackbotsspam	Jul 9 05:09:24 vm0 sshd[23625]: Failed password for root from 218.92.0.251 port 48683 ssh2 ...	2020-07-09 15:37:13
64.227.22.136	attackspam	TCP (SYN) 64.227.22.136:45878 -> port 23, len 44	2020-07-09 16:13:07
125.227.255.79	attackbots	2020-07-09T09:06:09+0200 Failed SSH Authentication/Brute Force Attack. (Server 10)	2020-07-09 15:38:24
115.79.220.42	attackbots	Honeypot attack, port: 445, PTR: adsl.viettel.vn.	2020-07-09 16:01:55
104.248.56.150	attack	Jul 9 09:44:23 rancher-0 sshd[207788]: Invalid user taoli from 104.248.56.150 port 59638 Jul 9 09:44:26 rancher-0 sshd[207788]: Failed password for invalid user taoli from 104.248.56.150 port 59638 ssh2 ...	2020-07-09 16:12:33

Recently Reported IPs

159.228.60.77	82.200.182.130	243.206.109.209	78.188.58.174
234.18.243.234	19.9.245.113	160.50.115.210	138.242.171.0
67.3.150.171	220.104.252.79	235.144.239.213	187.67.209.248
106.65.45.63	94.133.10.97	129.75.8.43	229.17.110.67
185.99.86.15	110.20.90.250	211.133.47.22	47.244.95.111