54.39.22.252 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Canada

Internet Service Provider: OVH Hosting Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Unauthorized connection attempt detected from IP address 54.39.22.252 to port 6050 [J]	2020-01-19 18:51:25
attack	2019-12-29 23:54:02,965 fail2ban.filter [1517]: INFO [ssh] Found 54.39.22.252 - 2019-12-29 23:54:02 2019-12-29 23:54:04,897 fail2ban.filter [1517]: INFO [ssh] Found 54.39.22.252 - 2019-12-29 23:54:04 2019-12-29 23:54:09,056 fail2ban.filter [1517]: INFO [ssh] Found 54.39.22.252 - 2019-12-29 23:54:09 2019-12-29 23:54:10,889 fail2ban.filter [1517]: INFO [ssh] Found 54.39.22.252 - 2019-12-29 23:54:10 2019-12-29 23:54:14,106 fail2ban.filter [1517]: INFO [ssh] Found 54.39.22.252 - 2019-12-29 23:54:13 2019-12-29 23:54:16,156 fail2ban.filter [1517]: INFO [ssh] Found 54.39.22.252 - 2019-12-29 23:54:16 2019-12-29 23:54:18,525 fail2ban.filter [1517]: INFO [ssh] Found 54.39.22.252 - 2019-12-29 23:54:18 2019-12-29 23:54:21,937 fail2ban.filter [1517]: INFO [ssh] Found 54.39.22.252 - 2019-12-29 23:54:21 2019-12-29 23:54:24,153 fail2ban.filter [1517]: INFO [ssh] Found 54.39.22.252 - 2019-........ -------------------------------	2019-12-30 08:27:42

Type

Details

Datetime

attackbots

Unauthorized connection attempt detected from IP address 54.39.22.252 to port 6050 [J]

2020-01-19 18:51:25

attack

2019-12-29 23:54:02,965 fail2ban.filter         [1517]: INFO    [ssh] Found 54.39.22.252 - 2019-12-29 23:54:02
2019-12-29 23:54:04,897 fail2ban.filter         [1517]: INFO    [ssh] Found 54.39.22.252 - 2019-12-29 23:54:04
2019-12-29 23:54:09,056 fail2ban.filter         [1517]: INFO    [ssh] Found 54.39.22.252 - 2019-12-29 23:54:09
2019-12-29 23:54:10,889 fail2ban.filter         [1517]: INFO    [ssh] Found 54.39.22.252 - 2019-12-29 23:54:10
2019-12-29 23:54:14,106 fail2ban.filter         [1517]: INFO    [ssh] Found 54.39.22.252 - 2019-12-29 23:54:13
2019-12-29 23:54:16,156 fail2ban.filter         [1517]: INFO    [ssh] Found 54.39.22.252 - 2019-12-29 23:54:16
2019-12-29 23:54:18,525 fail2ban.filter         [1517]: INFO    [ssh] Found 54.39.22.252 - 2019-12-29 23:54:18
2019-12-29 23:54:21,937 fail2ban.filter         [1517]: INFO    [ssh] Found 54.39.22.252 - 2019-12-29 23:54:21
2019-12-29 23:54:24,153 fail2ban.filter         [1517]: INFO    [ssh] Found 54.39.22.252 - 2019-........
-------------------------------

2019-12-30 08:27:42

Comments on same subnet:

IP	Type	Details	Datetime
54.39.22.191	attackbots	Failed password for invalid user steam from 54.39.22.191 port 56144 ssh2	2020-09-03 20:36:07
54.39.22.191	attack	Sep 2 22:00:35 firewall sshd[20477]: Invalid user odoo from 54.39.22.191 Sep 2 22:00:37 firewall sshd[20477]: Failed password for invalid user odoo from 54.39.22.191 port 36692 ssh2 Sep 2 22:04:17 firewall sshd[20537]: Invalid user xavier from 54.39.22.191 ...	2020-09-03 12:21:12
54.39.22.191	attackbotsspam	(sshd) Failed SSH login from 54.39.22.191 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 2 15:28:36 server5 sshd[1697]: Invalid user mna from 54.39.22.191 Sep 2 15:28:36 server5 sshd[1697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.22.191 Sep 2 15:28:38 server5 sshd[1697]: Failed password for invalid user mna from 54.39.22.191 port 37620 ssh2 Sep 2 15:36:59 server5 sshd[5353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.22.191 user=root Sep 2 15:37:01 server5 sshd[5353]: Failed password for root from 54.39.22.191 port 57558 ssh2	2020-09-03 04:40:03
54.39.22.191	attackbots	$f2bV_matches	2020-08-29 01:10:24
54.39.22.191	attackbotsspam	[SID2] Fail2ban detected 5 failed SSH login attempts within 30 minutes. This report was submitted automatically.	2020-08-28 02:28:17
54.39.22.191	attack	Aug 13 01:26:08 journals sshd\[15551\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.22.191 user=root Aug 13 01:26:11 journals sshd\[15551\]: Failed password for root from 54.39.22.191 port 37370 ssh2 Aug 13 01:29:48 journals sshd\[15933\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.22.191 user=root Aug 13 01:29:50 journals sshd\[15933\]: Failed password for root from 54.39.22.191 port 41618 ssh2 Aug 13 01:33:26 journals sshd\[16334\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.22.191 user=root ...	2020-08-13 07:34:13
54.39.22.191	attack	Aug 8 00:15:11 ip106 sshd[3630]: Failed password for root from 54.39.22.191 port 49578 ssh2 ...	2020-08-08 07:17:21
54.39.22.191	attack	Jul 31 16:10:03 buvik sshd[5014]: Failed password for root from 54.39.22.191 port 34304 ssh2 Jul 31 16:14:28 buvik sshd[5698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.22.191 user=root Jul 31 16:14:30 buvik sshd[5698]: Failed password for root from 54.39.22.191 port 46750 ssh2 ...	2020-07-31 22:27:42
54.39.22.191	attackbots	Jul 26 22:29:37 onepixel sshd[2355094]: Invalid user mth from 54.39.22.191 port 53586 Jul 26 22:29:37 onepixel sshd[2355094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.22.191 Jul 26 22:29:37 onepixel sshd[2355094]: Invalid user mth from 54.39.22.191 port 53586 Jul 26 22:29:39 onepixel sshd[2355094]: Failed password for invalid user mth from 54.39.22.191 port 53586 ssh2 Jul 26 22:33:55 onepixel sshd[2357372]: Invalid user topgui from 54.39.22.191 port 37644	2020-07-27 06:49:35
54.39.22.191	attackbots	Invalid user v from 54.39.22.191 port 52802	2020-07-26 18:27:38
54.39.22.191	attackspambots	(sshd) Failed SSH login from 54.39.22.191 (CA/Canada/srv.witoldpap.com): 12 in the last 3600 secs	2020-07-25 00:02:57
54.39.22.191	attack	Jul 6 03:55:22 scw-tender-jepsen sshd[11884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.22.191 Jul 6 03:55:25 scw-tender-jepsen sshd[11884]: Failed password for invalid user zhangsan from 54.39.22.191 port 38280 ssh2	2020-07-06 12:01:03
54.39.22.191	attackspambots	Jul 4 09:17:21 sshd\[13680\]: Invalid user mes from 54.39.22.191Jul 4 09:17:23 sshd\[13680\]: Failed password for invalid user mes from 54.39.22.191 port 52048 ssh2 ...	2020-07-04 19:26:25
54.39.22.191	attack	Jun 27 17:47:35 OPSO sshd\[18929\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.22.191 user=root Jun 27 17:47:37 OPSO sshd\[18929\]: Failed password for root from 54.39.22.191 port 41400 ssh2 Jun 27 17:49:44 OPSO sshd\[19169\]: Invalid user ankit from 54.39.22.191 port 45828 Jun 27 17:49:44 OPSO sshd\[19169\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.22.191 Jun 27 17:49:46 OPSO sshd\[19169\]: Failed password for invalid user ankit from 54.39.22.191 port 45828 ssh2	2020-06-28 00:15:32
54.39.227.33	attack	Jun 15 09:40:11 dhoomketu sshd[756973]: Invalid user thh from 54.39.227.33 port 48820 Jun 15 09:40:11 dhoomketu sshd[756973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.227.33 Jun 15 09:40:11 dhoomketu sshd[756973]: Invalid user thh from 54.39.227.33 port 48820 Jun 15 09:40:13 dhoomketu sshd[756973]: Failed password for invalid user thh from 54.39.227.33 port 48820 ssh2 Jun 15 09:43:50 dhoomketu sshd[757021]: Invalid user ai from 54.39.227.33 port 51338 ...	2020-06-15 18:44:49

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.39.22.252
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42225
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;54.39.22.252.			IN	A

;; AUTHORITY SECTION:
.			418	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122901 1800 900 604800 86400

;; Query time: 921 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 30 08:27:39 CST 2019
;; MSG SIZE  rcvd: 116

Host info

252.22.39.54.in-addr.arpa domain name pointer 252.ip-54-39-22.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
252.22.39.54.in-addr.arpa	name = 252.ip-54-39-22.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
103.44.27.16	attack	fail2ban	2020-10-02 16:28:35
154.221.18.237	attackbots	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-10-02T06:36:56Z and 2020-10-02T06:45:06Z	2020-10-02 16:16:58
117.57.98.246	attackbotsspam	Oct 1 19:04:02 r.ca sshd[21486]: Failed password for root from 117.57.98.246 port 52496 ssh2	2020-10-02 16:27:58
81.70.22.3	attackbotsspam	Port scan denied	2020-10-02 16:47:19
123.127.244.100	attack	Oct 2 08:09:57 django-0 sshd[29075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.127.244.100 user=root Oct 2 08:09:59 django-0 sshd[29075]: Failed password for root from 123.127.244.100 port 38430 ssh2 ...	2020-10-02 16:45:16
106.53.220.103	attackspambots	Oct 2 06:59:54 gitlab sshd[2550140]: Invalid user renata from 106.53.220.103 port 58570 Oct 2 06:59:54 gitlab sshd[2550140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.220.103 Oct 2 06:59:54 gitlab sshd[2550140]: Invalid user renata from 106.53.220.103 port 58570 Oct 2 06:59:56 gitlab sshd[2550140]: Failed password for invalid user renata from 106.53.220.103 port 58570 ssh2 Oct 2 07:01:39 gitlab sshd[2550406]: Invalid user admin from 106.53.220.103 port 47708 ...	2020-10-02 16:53:25
185.136.52.158	attack	Oct 2 08:33:15 game-panel sshd[28690]: Failed password for root from 185.136.52.158 port 35044 ssh2 Oct 2 08:39:28 game-panel sshd[29017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.136.52.158 Oct 2 08:39:29 game-panel sshd[29017]: Failed password for invalid user j from 185.136.52.158 port 41468 ssh2	2020-10-02 16:52:42
125.119.42.238	attack	Oct 1 20:35:24 CT3029 sshd[7748]: Invalid user user13 from 125.119.42.238 port 38654 Oct 1 20:35:24 CT3029 sshd[7748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.119.42.238 Oct 1 20:35:26 CT3029 sshd[7748]: Failed password for invalid user user13 from 125.119.42.238 port 38654 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=125.119.42.238	2020-10-02 16:43:51
5.9.155.226	attack	20 attempts against mh-misbehave-ban on flare	2020-10-02 16:48:30
125.119.43.254	attackbotsspam	Oct 1 20:33:58 CT3029 sshd[7727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.119.43.254 user=r.r Oct 1 20:34:00 CT3029 sshd[7727]: Failed password for r.r from 125.119.43.254 port 60634 ssh2 Oct 1 20:34:01 CT3029 sshd[7727]: Received disconnect from 125.119.43.254 port 60634:11: Bye Bye [preauth] Oct 1 20:34:01 CT3029 sshd[7727]: Disconnected from 125.119.43.254 port 60634 [preauth] Oct 1 20:34:26 CT3029 sshd[7729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.119.43.254 user=r.r ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=125.119.43.254	2020-10-02 16:36:46
222.186.31.166	attackspambots	Oct 2 10:07:34 host sshd[4251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.166 user=root Oct 2 10:07:36 host sshd[4251]: Failed password for root from 222.186.31.166 port 48403 ssh2 ...	2020-10-02 16:20:35
219.136.65.109	attackbots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-10-02 16:49:57
106.12.97.46	attack	Oct 2 10:46:09 buvik sshd[9615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.97.46 Oct 2 10:46:11 buvik sshd[9615]: Failed password for invalid user javier from 106.12.97.46 port 56036 ssh2 Oct 2 10:47:37 buvik sshd[9723]: Invalid user admin from 106.12.97.46 ...	2020-10-02 16:54:55
58.56.112.169	attack	Oct 1 20:41:05 jumpserver sshd[421144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.56.112.169 Oct 1 20:41:05 jumpserver sshd[421144]: Invalid user pi from 58.56.112.169 port 12041 Oct 1 20:41:07 jumpserver sshd[421144]: Failed password for invalid user pi from 58.56.112.169 port 12041 ssh2 ...	2020-10-02 16:42:42
45.148.122.20	attackbots	TCP (SYN) 45.148.122.20:50901 -> port 22, len 44	2020-10-02 16:49:43

Recently Reported IPs

109.133.110.117	200.66.74.165	181.164.229.24	82.24.117.219
121.233.226.192	223.219.141.80	0.212.174.82	223.97.198.31
183.80.251.117	26.175.31.96	183.80.213.167	123.252.135.226
207.5.150.194	183.80.89.245	10.23.248.149	183.6.155.145
244.232.11.95	151.170.152.101	180.218.122.48	227.180.249.158