Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Guangdong Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackbots
Feb 22 07:10:20 www sshd\[21607\]: Invalid user liming from 119.137.55.20Feb 22 07:10:22 www sshd\[21607\]: Failed password for invalid user liming from 119.137.55.20 port 8015 ssh2Feb 22 07:13:09 www sshd\[21699\]: Invalid user lisha from 119.137.55.20
...
2020-02-22 13:28:25
Comments on same subnet:
IP Type Details Datetime
119.137.55.107 attackbotsspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-01-18 21:14:55
119.137.55.241 attack
Lines containing failures of 119.137.55.241
Dec  8 08:18:34 shared09 sshd[12136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.137.55.241  user=r.r
Dec  8 08:18:35 shared09 sshd[12136]: Failed password for r.r from 119.137.55.241 port 17936 ssh2
Dec  8 08:18:35 shared09 sshd[12136]: Received disconnect from 119.137.55.241 port 17936:11: Bye Bye [preauth]
Dec  8 08:18:35 shared09 sshd[12136]: Disconnected from authenticating user r.r 119.137.55.241 port 17936 [preauth]
Dec  8 08:41:00 shared09 sshd[19977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.137.55.241  user=r.r
Dec  8 08:41:02 shared09 sshd[19977]: Failed password for r.r from 119.137.55.241 port 18649 ssh2
Dec  8 08:41:03 shared09 sshd[19977]: Received disconnect from 119.137.55.241 port 18649:11: Bye Bye [preauth]
Dec  8 08:41:03 shared09 sshd[19977]: Disconnected from authenticating user r.r 119.137.55.241 port 18649........
------------------------------
2019-12-08 17:52:11
119.137.55.116 attackspambots
SSH Brute Force, server-1 sshd[11547]: Failed password for invalid user cylectro from 119.137.55.116 port 48174 ssh2
2019-11-30 19:13:54
119.137.55.181 attackbots
Nov 24 07:09:22 MK-Soft-VM8 sshd[6077]: Failed password for root from 119.137.55.181 port 45162 ssh2
...
2019-11-24 21:05:18
119.137.55.160 attackbotsspam
Nov 15 06:44:47 ACSRAD auth.info sshd[7987]: Invalid user ftpuser from 119.137.55.160 port 39126
Nov 15 06:44:47 ACSRAD auth.info sshd[7987]: Failed password for invalid user ftpuser from 119.137.55.160 port 39126 ssh2
Nov 15 06:44:47 ACSRAD auth.info sshd[7987]: Received disconnect from 119.137.55.160 port 39126:11: Bye Bye [preauth]
Nov 15 06:44:47 ACSRAD auth.info sshd[7987]: Disconnected from 119.137.55.160 port 39126 [preauth]
Nov 15 06:44:48 ACSRAD auth.notice sshguard[3498]: Attack from "119.137.55.160" on service 100 whostnameh danger 10.
Nov 15 06:44:48 ACSRAD auth.notice sshguard[3498]: Attack from "119.137.55.160" on service 100 whostnameh danger 10.
Nov 15 06:44:48 ACSRAD auth.notice sshguard[3498]: Attack from "119.137.55.160" on service 100 whostnameh danger 10.
Nov 15 06:44:48 ACSRAD auth.warn sshguard[3498]: Blocking "119.137.55.160/32" forever (3 attacks in 0 secs, after 2 abuses over 2369 secs.)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?
2019-11-16 22:49:03
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.137.55.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35293
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;119.137.55.20.			IN	A

;; AUTHORITY SECTION:
.			240	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022101 1800 900 604800 86400

;; Query time: 160 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 22 13:28:20 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 20.55.137.119.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 20.55.137.119.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
45.55.145.31 attack
Sep 20 09:14:22 lavrea sshd[87856]: Invalid user git from 45.55.145.31 port 48975
...
2020-09-20 20:12:50
167.248.133.64 attackbotsspam
 TCP (SYN) 167.248.133.64:12502 -> port 12144, len 44
2020-09-20 20:24:57
24.137.101.210 attackspambots
Sep 19 23:02:49 vps639187 sshd\[32490\]: Invalid user user from 24.137.101.210 port 55548
Sep 19 23:02:49 vps639187 sshd\[32490\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.137.101.210
Sep 19 23:02:51 vps639187 sshd\[32490\]: Failed password for invalid user user from 24.137.101.210 port 55548 ssh2
...
2020-09-20 20:36:59
171.249.138.140 attackbotsspam
Failed password for invalid user from 171.249.138.140 port 33220 ssh2
2020-09-20 20:24:29
194.5.207.189 attackspambots
Sep 20 13:12:27 vm2 sshd[2754]: Failed password for root from 194.5.207.189 port 57580 ssh2
...
2020-09-20 20:17:38
61.178.223.218 attackspambots
Auto Detect Rule!
proto TCP (SYN), 61.178.223.218:5924->gjan.info:1433, len 44
2020-09-20 20:41:06
218.103.131.205 attackbots
Sep 20 10:02:19 scw-focused-cartwright sshd[15322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.103.131.205
Sep 20 10:02:21 scw-focused-cartwright sshd[15322]: Failed password for invalid user admin from 218.103.131.205 port 44165 ssh2
2020-09-20 20:42:30
156.96.117.191 attack
[2020-09-20 08:38:37] NOTICE[1239][C-000059a0] chan_sip.c: Call from '' (156.96.117.191:61194) to extension '880110972567244623' rejected because extension not found in context 'public'.
[2020-09-20 08:38:37] SECURITY[1264] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-20T08:38:37.421-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="880110972567244623",SessionID="0x7f4d48513438",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/156.96.117.191/61194",ACLName="no_extension_match"
[2020-09-20 08:41:47] NOTICE[1239][C-000059a5] chan_sip.c: Call from '' (156.96.117.191:62579) to extension '870110972567244623' rejected because extension not found in context 'public'.
[2020-09-20 08:41:47] SECURITY[1264] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-20T08:41:47.650-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="870110972567244623",SessionID="0x7f4d482f9458",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAdd
...
2020-09-20 20:48:10
101.99.81.155 attack
port scan and connect, tcp 23 (telnet)
2020-09-20 20:51:27
181.46.68.97 attack
2020-09-19 11:55:29.685189-0500  localhost smtpd[24990]: NOQUEUE: reject: RCPT from unknown[181.46.68.97]: 554 5.7.1 Service unavailable; Client host [181.46.68.97] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/181.46.68.97; from= to= proto=ESMTP helo=
2020-09-20 20:39:03
190.153.27.98 attackbotsspam
Sep 20 13:01:18 vps sshd[10558]: Failed password for root from 190.153.27.98 port 47360 ssh2
Sep 20 13:12:15 vps sshd[11271]: Failed password for root from 190.153.27.98 port 33248 ssh2
...
2020-09-20 20:52:26
116.236.189.134 attack
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-20T10:36:00Z and 2020-09-20T10:45:27Z
2020-09-20 20:28:45
222.186.173.238 attack
Sep 20 14:14:05 melroy-server sshd[19895]: Failed password for root from 222.186.173.238 port 13794 ssh2
Sep 20 14:14:08 melroy-server sshd[19895]: Failed password for root from 222.186.173.238 port 13794 ssh2
...
2020-09-20 20:15:00
34.201.153.104 attackspambots
HTTP/80/443/8080 Probe, BF, WP, Hack -
2020-09-20 20:29:15
1.54.112.19 attackspam
2020-09-19 11:54:51.029951-0500  localhost smtpd[24990]: NOQUEUE: reject: RCPT from unknown[1.54.112.19]: 554 5.7.1 Service unavailable; Client host [1.54.112.19] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/1.54.112.19; from= to= proto=ESMTP helo=<[1.54.112.19]>
2020-09-20 20:42:02

Recently Reported IPs

156.222.130.150 118.144.11.132 182.254.198.16 128.1.39.48
171.234.1.11 106.12.157.243 160.32.113.223 45.76.21.48
148.144.143.54 220.242.2.81 51.244.194.121 146.169.8.11
131.73.6.210 203.34.117.130 83.37.149.251 77.219.135.230
41.221.76.111 14.239.26.10 209.169.151.199 103.91.85.149