Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Feb 18 23:13:16 server sshd\[30525\]: Invalid user www from 128.199.55.13
Feb 18 23:13:16 server sshd\[30525\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13 
Feb 18 23:13:18 server sshd\[30525\]: Failed password for invalid user www from 128.199.55.13 port 35579 ssh2
Feb 18 23:20:18 server sshd\[32045\]: Invalid user user1 from 128.199.55.13
Feb 18 23:20:18 server sshd\[32045\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13 
...
2020-02-19 05:00:00
attackbots
3x Failed Password
2020-01-20 17:27:20
attackbotsspam
Unauthorized connection attempt detected from IP address 128.199.55.13 to port 2220 [J]
2020-01-17 04:12:15
attack
Jan  9 03:59:06 eddieflores sshd\[13767\]: Invalid user test_user from 128.199.55.13
Jan  9 03:59:06 eddieflores sshd\[13767\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Jan  9 03:59:08 eddieflores sshd\[13767\]: Failed password for invalid user test_user from 128.199.55.13 port 43130 ssh2
Jan  9 04:01:04 eddieflores sshd\[13935\]: Invalid user ubnt from 128.199.55.13
Jan  9 04:01:04 eddieflores sshd\[13935\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
2020-01-10 00:03:50
attackbots
Jan  9 00:51:42 [host] sshd[23971]: Invalid user um from 128.199.55.13
Jan  9 00:51:42 [host] sshd[23971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Jan  9 00:51:43 [host] sshd[23971]: Failed password for invalid user um from 128.199.55.13 port 57992 ssh2
2020-01-09 08:10:18
attackspambots
Unauthorized connection attempt detected from IP address 128.199.55.13 to port 2220 [J]
2020-01-07 22:05:42
attackspam
Dec 31 05:54:34 vps691689 sshd[8880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Dec 31 05:54:36 vps691689 sshd[8880]: Failed password for invalid user popsvr from 128.199.55.13 port 51393 ssh2
...
2019-12-31 13:21:52
attack
Dec 26 03:19:17 plusreed sshd[25800]: Invalid user blavia from 128.199.55.13
Dec 26 03:19:17 plusreed sshd[25800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Dec 26 03:19:17 plusreed sshd[25800]: Invalid user blavia from 128.199.55.13
Dec 26 03:19:19 plusreed sshd[25800]: Failed password for invalid user blavia from 128.199.55.13 port 52857 ssh2
Dec 26 03:25:52 plusreed sshd[27467]: Invalid user applmgr from 128.199.55.13
...
2019-12-26 16:29:55
attackbotsspam
Fail2Ban - SSH Bruteforce Attempt
2019-12-21 03:20:09
attack
Invalid user guest from 128.199.55.13 port 41506
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Failed password for invalid user guest from 128.199.55.13 port 41506 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=root
Failed password for root from 128.199.55.13 port 45665 ssh2
2019-12-12 17:37:41
attackbots
Invalid user home from 128.199.55.13 port 39011
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Failed password for invalid user home from 128.199.55.13 port 39011 ssh2
Invalid user dimitris from 128.199.55.13 port 44190
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
2019-12-05 13:20:33
attack
Dec  1 04:24:18 vibhu-HP-Z238-Microtower-Workstation sshd\[20432\]: Invalid user sinnwell from 128.199.55.13
Dec  1 04:24:18 vibhu-HP-Z238-Microtower-Workstation sshd\[20432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Dec  1 04:24:21 vibhu-HP-Z238-Microtower-Workstation sshd\[20432\]: Failed password for invalid user sinnwell from 128.199.55.13 port 52979 ssh2
Dec  1 04:27:27 vibhu-HP-Z238-Microtower-Workstation sshd\[20625\]: Invalid user palmiste from 128.199.55.13
Dec  1 04:27:27 vibhu-HP-Z238-Microtower-Workstation sshd\[20625\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
...
2019-12-01 07:05:19
attackbotsspam
Nov 28 10:49:50 vps691689 sshd[11826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Nov 28 10:49:53 vps691689 sshd[11826]: Failed password for invalid user giorgis from 128.199.55.13 port 56217 ssh2
...
2019-11-28 20:39:14
attackbotsspam
Oct 30 10:33:03 odroid64 sshd\[28168\]: Invalid user test from 128.199.55.13
Oct 30 10:33:03 odroid64 sshd\[28168\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
...
2019-11-21 18:47:46
attack
SSH invalid-user multiple login attempts
2019-11-19 08:02:38
attackbotsspam
<6 unauthorized SSH connections
2019-11-17 18:34:39
attackspam
$f2bV_matches
2019-11-16 05:38:57
attackbotsspam
Nov 14 20:58:20 web1 sshd\[27745\]: Invalid user lisa from 128.199.55.13
Nov 14 20:58:20 web1 sshd\[27745\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Nov 14 20:58:22 web1 sshd\[27745\]: Failed password for invalid user lisa from 128.199.55.13 port 48679 ssh2
Nov 14 21:02:26 web1 sshd\[28067\]: Invalid user navy from 128.199.55.13
Nov 14 21:02:26 web1 sshd\[28067\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
2019-11-15 15:17:39
attackbots
ssh failed login
2019-11-11 18:51:06
attack
Nov  6 14:53:06 plusreed sshd[6649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=root
Nov  6 14:53:08 plusreed sshd[6649]: Failed password for root from 128.199.55.13 port 58106 ssh2
...
2019-11-07 03:55:37
attackbotsspam
Oct 31 13:48:45 php1 sshd\[8262\]: Invalid user ajersch from 128.199.55.13
Oct 31 13:48:45 php1 sshd\[8262\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Oct 31 13:48:48 php1 sshd\[8262\]: Failed password for invalid user ajersch from 128.199.55.13 port 46886 ssh2
Oct 31 13:52:56 php1 sshd\[8718\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=root
Oct 31 13:52:58 php1 sshd\[8718\]: Failed password for root from 128.199.55.13 port 37586 ssh2
2019-11-01 08:02:26
attackbotsspam
Oct 27 11:40:07 vmanager6029 sshd\[25770\]: Invalid user At123\~ from 128.199.55.13 port 33227
Oct 27 11:40:07 vmanager6029 sshd\[25770\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Oct 27 11:40:10 vmanager6029 sshd\[25770\]: Failed password for invalid user At123\~ from 128.199.55.13 port 33227 ssh2
2019-10-27 19:13:24
attack
Oct 26 06:50:00 www5 sshd\[29617\]: Invalid user 123!@\# from 128.199.55.13
Oct 26 06:50:00 www5 sshd\[29617\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Oct 26 06:50:02 www5 sshd\[29617\]: Failed password for invalid user 123!@\# from 128.199.55.13 port 43183 ssh2
...
2019-10-26 15:03:14
attack
2019-10-25T01:56:52.525438suse-nuc sshd[23255]: Invalid user student from 128.199.55.13 port 45828
...
2019-10-25 19:40:14
attackbots
$f2bV_matches
2019-10-20 17:50:25
attackspambots
Oct 18 17:40:27 TORMINT sshd\[14754\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=root
Oct 18 17:40:29 TORMINT sshd\[14754\]: Failed password for root from 128.199.55.13 port 48132 ssh2
Oct 18 17:44:52 TORMINT sshd\[14871\]: Invalid user bb from 128.199.55.13
Oct 18 17:44:52 TORMINT sshd\[14871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
...
2019-10-19 07:15:33
attackbots
Oct 14 06:25:57 fv15 sshd[13398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=r.r
Oct 14 06:25:59 fv15 sshd[13398]: Failed password for r.r from 128.199.55.13 port 37028 ssh2
Oct 14 06:25:59 fv15 sshd[13398]: Received disconnect from 128.199.55.13: 11: Bye Bye [preauth]
Oct 14 06:30:10 fv15 sshd[8352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=r.r
Oct 14 06:30:12 fv15 sshd[8352]: Failed password for r.r from 128.199.55.13 port 56858 ssh2
Oct 14 06:30:12 fv15 sshd[8352]: Received disconnect from 128.199.55.13: 11: Bye Bye [preauth]
Oct 14 06:34:19 fv15 sshd[3165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=r.r
Oct 14 06:34:22 fv15 sshd[3165]:
.... truncated .... 

Oct 14 06:25:57 fv15 sshd[13398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= r........
-------------------------------
2019-10-14 23:57:33
attackspam
2019-10-11T04:20:41.404502mizuno.rwx.ovh sshd[408488]: Connection from 128.199.55.13 port 56018 on 78.46.61.178 port 22
2019-10-11T04:20:41.501833mizuno.rwx.ovh sshd[408488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=root
2019-10-11T04:20:43.054842mizuno.rwx.ovh sshd[408488]: Failed password for root from 128.199.55.13 port 56018 ssh2
2019-10-11T04:36:48.809024mizuno.rwx.ovh sshd[410561]: Connection from 128.199.55.13 port 50860 on 78.46.61.178 port 22
2019-10-11T04:36:50.974637mizuno.rwx.ovh sshd[410561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=root
2019-10-11T04:36:53.219547mizuno.rwx.ovh sshd[410561]: Failed password for root from 128.199.55.13 port 50860 ssh2
...
2019-10-11 19:34:41
attackspambots
2019-10-04T22:51:23.248819shield sshd\[9364\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=root
2019-10-04T22:51:25.094456shield sshd\[9364\]: Failed password for root from 128.199.55.13 port 58171 ssh2
2019-10-04T22:55:29.035931shield sshd\[9991\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=root
2019-10-04T22:55:31.319233shield sshd\[9991\]: Failed password for root from 128.199.55.13 port 49101 ssh2
2019-10-04T22:59:25.592045shield sshd\[10811\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13  user=root
2019-10-05 07:08:27
attackspam
Sep 29 17:50:32 wbs sshd\[14338\]: Invalid user test from 128.199.55.13
Sep 29 17:50:32 wbs sshd\[14338\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
Sep 29 17:50:34 wbs sshd\[14338\]: Failed password for invalid user test from 128.199.55.13 port 57104 ssh2
Sep 29 17:54:45 wbs sshd\[14726\]: Invalid user ha from 128.199.55.13
Sep 29 17:54:45 wbs sshd\[14726\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.55.13
2019-09-30 16:20:20
Comments on same subnet:
IP Type Details Datetime
128.199.55.17 attack
fire
2019-11-17 00:59:55
128.199.55.17 attackspam
Invalid user fake from 128.199.55.17 port 48918
2019-06-21 20:49:45
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 128.199.55.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41367
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;128.199.55.13.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081801 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Aug 19 10:59:07 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 13.55.199.128.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 13.55.199.128.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
222.186.31.166 attack
Jul 27 09:40:50 vps639187 sshd\[12128\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.166  user=root
Jul 27 09:40:52 vps639187 sshd\[12128\]: Failed password for root from 222.186.31.166 port 23399 ssh2
Jul 27 09:41:09 vps639187 sshd\[12141\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.166  user=root
...
2020-07-27 15:41:58
218.21.240.24 attackbots
Jul 27 07:32:17 mout sshd[14434]: Invalid user tci from 218.21.240.24 port 52033
2020-07-27 15:44:58
219.136.243.47 attackbots
SSH bruteforce
2020-07-27 15:47:36
194.26.29.83 attackbotsspam
Jul 27 08:29:50 [host] kernel: [1498644.958313] [U
Jul 27 08:31:50 [host] kernel: [1498764.149785] [U
Jul 27 08:44:15 [host] kernel: [1499509.021319] [U
Jul 27 09:11:59 [host] kernel: [1501173.152486] [U
Jul 27 09:19:29 [host] kernel: [1501623.108438] [U
Jul 27 09:29:17 [host] kernel: [1502210.909607] [U
2020-07-27 16:12:25
151.80.60.151 attack
Jul 27 08:40:45 sxvn sshd[233243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.60.151
2020-07-27 16:17:56
222.186.52.39 attack
Jul 27 07:38:15 IngegnereFirenze sshd[10225]: User root from 222.186.52.39 not allowed because not listed in AllowUsers
...
2020-07-27 15:41:27
202.83.161.117 attackspam
Jul 27 10:06:39 vpn01 sshd[28654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.83.161.117
Jul 27 10:06:41 vpn01 sshd[28654]: Failed password for invalid user test from 202.83.161.117 port 48978 ssh2
...
2020-07-27 16:14:24
141.101.143.44 attack
Web form spam
2020-07-27 15:52:10
185.147.163.24 attackspambots
wp BF attempts
2020-07-27 16:20:01
106.13.184.234 attackspam
Jul 27 09:50:51 srv-ubuntu-dev3 sshd[9939]: Invalid user vendas from 106.13.184.234
Jul 27 09:50:51 srv-ubuntu-dev3 sshd[9939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.184.234
Jul 27 09:50:51 srv-ubuntu-dev3 sshd[9939]: Invalid user vendas from 106.13.184.234
Jul 27 09:50:53 srv-ubuntu-dev3 sshd[9939]: Failed password for invalid user vendas from 106.13.184.234 port 50724 ssh2
Jul 27 09:55:05 srv-ubuntu-dev3 sshd[10426]: Invalid user jdavila from 106.13.184.234
Jul 27 09:55:05 srv-ubuntu-dev3 sshd[10426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.184.234
Jul 27 09:55:05 srv-ubuntu-dev3 sshd[10426]: Invalid user jdavila from 106.13.184.234
Jul 27 09:55:08 srv-ubuntu-dev3 sshd[10426]: Failed password for invalid user jdavila from 106.13.184.234 port 47742 ssh2
Jul 27 09:59:12 srv-ubuntu-dev3 sshd[10903]: Invalid user wolf from 106.13.184.234
...
2020-07-27 15:59:35
94.102.51.95 attackbotsspam
 TCP (SYN) 94.102.51.95:40763 -> port 16086, len 44
2020-07-27 15:43:35
85.239.35.12 attackspam
Jul 27 11:51:03 gw1 sshd[30166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.239.35.12
Jul 27 11:51:05 gw1 sshd[30166]: Failed password for invalid user aau from 85.239.35.12 port 44302 ssh2
...
2020-07-27 16:05:03
113.137.36.187 attackspam
B: Abusive ssh attack
2020-07-27 15:59:09
124.67.255.183 attack
port scan and connect, tcp 1433 (ms-sql-s)
2020-07-27 15:52:36
178.136.195.90 attackspambots
Jul 27 05:52:26 debian-2gb-nbg1-2 kernel: \[18080453.543926\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=178.136.195.90 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=11874 DF PROTO=TCP SPT=10359 DPT=8080 WINDOW=14600 RES=0x00 SYN URGP=0
2020-07-27 16:01:06

Recently Reported IPs

142.152.155.141 184.179.216.156 141.216.205.190 188.188.112.6
60.28.63.85 189.91.239.181 103.208.20.118 125.116.210.239
109.162.39.131 111.224.121.244 46.146.233.117 134.209.161.147
71.44.166.170 59.27.118.163 73.10.180.160 59.127.189.160
140.207.114.222 45.114.9.237 16.225.94.186 194.34.53.151