City: unknown
Region: unknown
Country: Canada
Internet Service Provider: OVH Hosting Inc.
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackbotsspam |
|
2020-09-12 03:21:22 |
| attackspam | UDP ports : 17 / 389 / 5093 / 5353 |
2020-09-11 19:23:25 |
| attack | 1597294297 - 08/13/2020 11:51:37 Host: ip32.ip-54-39-215.net/54.39.215.32 Port: 17 UDP Blocked ... |
2020-08-13 13:37:57 |
| attackspambots | *Port Scan* detected from 54.39.215.32 (CA/Canada/Ontario/Ottawa (Kanata)/ip32.ip-54-39-215.net). 4 hits in the last 35 seconds |
2020-08-13 09:40:58 |
| attackbots |
|
2020-07-26 03:48:04 |
| attackbotsspam | 111/udp 5351/udp 5632/udp... [2020-05-25/07-25]299pkt,20pt.(udp) |
2020-07-25 13:03:17 |
| attackspam | Port scan denied |
2020-07-14 01:35:03 |
| attackbots | Jun 27 00:14:11 debian-2gb-nbg1-2 kernel: \[15468306.817602\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=54.39.215.32 DST=195.201.40.59 LEN=35 TOS=0x00 PREC=0x00 TTL=239 ID=54321 PROTO=UDP SPT=47688 DPT=5060 LEN=15 |
2020-06-27 06:28:14 |
| attackbots | US_OVH_<177>1592694063 [1:2403377:58145] ET CINS Active Threat Intelligence Poor Reputation IP UDP group 39 [Classification: Misc Attack] [Priority: 2]: |
2020-06-21 08:05:51 |
| attackspam |
|
2020-06-11 13:56:25 |
| attackspam | *Port Scan* detected from 54.39.215.32 (CA/Canada/Ontario/Ottawa (Kanata)/ip32.ip-54-39-215.net). 4 hits in the last 40 seconds |
2020-05-30 12:06:52 |
| attackbots | GPL SNMP public access udp - port: 161 proto: UDP cat: Attempted Information Leak |
2020-05-10 00:56:04 |
| attack | ET CINS Active Threat Intelligence Poor Reputation IP group 36 - port: 32414 proto: UDP cat: Misc Attack |
2020-05-03 06:18:27 |
| attackbots | ET CINS Active Threat Intelligence Poor Reputation IP group 37 - port: 5093 proto: UDP cat: Misc Attack |
2020-04-17 22:57:17 |
| attackspam | Apr 13 11:09:53 debian-2gb-nbg1-2 kernel: \[9027988.070372\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=54.39.215.32 DST=195.201.40.59 LEN=32 TOS=0x00 PREC=0x00 TTL=239 ID=54321 PROTO=UDP SPT=58309 DPT=30718 LEN=12 |
2020-04-13 17:27:11 |
| attack | Port 33625 scan denied |
2020-04-13 15:49:36 |
| attackspam | Port 40417 scan denied |
2020-03-28 18:51:35 |
| attackbots | SIP/5060 Probe, BF, Hack - |
2020-03-25 19:04:57 |
| attack | 54.39.215.32 was recorded 5 times by 5 hosts attempting to connect to the following ports: 10001,123. Incident counter (4h, 24h, all-time): 5, 17, 254 |
2020-03-25 03:08:48 |
| attackbotsspam | ET CINS Active Threat Intelligence Poor Reputation IP group 36 - port: 5093 proto: UDP cat: Misc Attack |
2020-03-24 01:52:12 |
| attackspambots | 54.39.215.32 was recorded 7 times by 7 hosts attempting to connect to the following ports: 5353. Incident counter (4h, 24h, all-time): 7, 17, 228 |
2020-03-23 18:15:07 |
| attackbots | ET CINS Active Threat Intelligence Poor Reputation IP group 37 - port: 3702 proto: UDP cat: Misc Attack |
2020-03-18 17:40:59 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 54.39.215.38 | attackbots | 27-Sep-2020 14:43:30.765 client @0x7f352c0a25f0 54.39.215.38#58427 (pizzaseo.com): query (cache) 'pizzaseo.com/RRSIG/IN' denied |
2020-09-28 04:12:53 |
| 54.39.215.38 | attackspam | UDP ports : 389 / 10001 |
2020-09-27 20:30:00 |
| 54.39.215.38 | attackbots |
|
2020-09-27 12:05:39 |
| 54.39.215.18 | attackspambots | $f2bV_matches |
2020-09-22 20:08:30 |
| 54.39.215.18 | attackspambots | 20 attempts against mh-ssh on creek |
2020-09-22 04:16:38 |
| 54.39.215.23 | attackspambots | Jun 29 00:36:35 ny01 sshd[23393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.215.23 Jun 29 00:36:37 ny01 sshd[23393]: Failed password for invalid user user1 from 54.39.215.23 port 57368 ssh2 Jun 29 00:39:52 ny01 sshd[23787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.215.23 |
2020-06-29 16:54:10 |
| 54.39.215.23 | attackbotsspam | Jun 22 15:08:49 santamaria sshd\[6046\]: Invalid user git from 54.39.215.23 Jun 22 15:08:49 santamaria sshd\[6046\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.215.23 Jun 22 15:08:51 santamaria sshd\[6046\]: Failed password for invalid user git from 54.39.215.23 port 46122 ssh2 ... |
2020-06-22 21:36:09 |
| 54.39.215.35 | attackbotsspam | 2020/05/27 05:25:29 [info] 3400#0: *18471 client sent invalid request while reading client request line, client: 54.39.215.35, server: mail.hermescis.com, request: "GET login.cgi HTTP/1.1" |
2020-05-27 13:46:04 |
| 54.39.215.240 | attackspam | Lines containing failures of 54.39.215.240 Jan 7 08:18:17 keyhelp sshd[17042]: Invalid user opfor from 54.39.215.240 port 44248 Jan 7 08:18:17 keyhelp sshd[17042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.215.240 Jan 7 08:18:19 keyhelp sshd[17042]: Failed password for invalid user opfor from 54.39.215.240 port 44248 ssh2 Jan 7 08:18:19 keyhelp sshd[17042]: Received disconnect from 54.39.215.240 port 44248:11: Bye Bye [preauth] Jan 7 08:18:19 keyhelp sshd[17042]: Disconnected from invalid user opfor 54.39.215.240 port 44248 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=54.39.215.240 |
2020-01-11 07:39:01 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.39.215.32
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 82
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;54.39.215.32. IN A
;; AUTHORITY SECTION:
. 500 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020031800 1800 900 604800 86400
;; Query time: 98 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 18 17:40:55 CST 2020
;; MSG SIZE rcvd: 11632.215.39.54.in-addr.arpa domain name pointer ip32.ip-54-39-215.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
32.215.39.54.in-addr.arpa name = ip32.ip-54-39-215.net.
Authoritative answers can be found from: