137.226.1.55 - IPInfo

Basic Info

City: Aachen

Region: North Rhine-Westphalia

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
137.226.113.10	attack	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-09-12 01:59:28
137.226.113.10	attackbots	Port scan denied	2020-09-11 17:50:45
137.226.113.56	attackbotsspam	4843/tcp 1883/tcp 8883/tcp... [2020-06-14/08-11]44pkt,5pt.(tcp)	2020-08-12 07:49:20
137.226.113.56	attackspam	Unauthorized connection attempt detected from IP address 137.226.113.56 to port 4840 [T]	2020-07-20 06:50:01
137.226.113.56	attackbots	Port Scan ...	2020-07-14 02:14:02
137.226.113.9	attackspambots	port scan and connect, tcp 443 (https)	2020-06-06 21:06:05
137.226.113.56	attackbots	srv02 Mass scanning activity detected Target: 102(iso-tsap) ..	2020-06-01 20:17:23
137.226.113.27	attackbots	mozilla/5.0+zgrab/0.x+(compatible;+researchscan/t12sns;++http://researchscan.comsys.rwth-aachen.de)	2020-05-31 07:27:51
137.226.113.31	attackspambots	Port Scan detected from 137.226.113.31 (DE/Germany/researchscan23.comsys.rwth-aachen.de). 5 hits in the last 35 seconds	2020-05-25 17:19:31
137.226.113.10	attack	137.226.113.10	2020-04-14 12:57:11
137.226.113.56	attack	Apr 13 15:48:24 debian-2gb-nbg1-2 kernel: \[9044698.686856\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=137.226.113.56 DST=195.201.40.59 LEN=64 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=TCP SPT=47703 DPT=102 WINDOW=65535 RES=0x00 SYN URGP=0	2020-04-14 01:14:48
137.226.113.56	attackbots	" "	2020-04-06 00:29:43
137.226.113.10	attack	Mar 5 21:51:17 debian-2gb-nbg1-2 kernel: \[5700646.129243\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=137.226.113.10 DST=195.201.40.59 LEN=1228 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=UDP SPT=50832 DPT=443 LEN=1208	2020-03-06 05:32:53
137.226.113.56	attack	Unauthorized connection attempt detected from IP address 137.226.113.56 to port 102 [J]	2020-03-03 00:36:56
137.226.113.56	attackbots	Unauthorized connection attempt detected from IP address 137.226.113.56 to port 4840 [J]	2020-03-02 02:31:27

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 137.226.1.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20483
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;137.226.1.55.			IN	A

;; AUTHORITY SECTION:
.			587	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022061102 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 12 07:06:14 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 55.1.226.137.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 55.1.226.137.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
165.231.13.13	attackbots	Sep 1 19:30:23 hb sshd\[17819\]: Invalid user openbravo from 165.231.13.13 Sep 1 19:30:23 hb sshd\[17819\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.231.13.13 Sep 1 19:30:25 hb sshd\[17819\]: Failed password for invalid user openbravo from 165.231.13.13 port 55460 ssh2 Sep 1 19:34:49 hb sshd\[18169\]: Invalid user vr from 165.231.13.13 Sep 1 19:34:49 hb sshd\[18169\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.231.13.13	2019-09-02 04:55:02
37.252.190.224	attackbots	Sep 1 21:37:29 MainVPS sshd[20852]: Invalid user csgo from 37.252.190.224 port 40304 Sep 1 21:37:29 MainVPS sshd[20852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.252.190.224 Sep 1 21:37:29 MainVPS sshd[20852]: Invalid user csgo from 37.252.190.224 port 40304 Sep 1 21:37:31 MainVPS sshd[20852]: Failed password for invalid user csgo from 37.252.190.224 port 40304 ssh2 Sep 1 21:41:46 MainVPS sshd[21232]: Invalid user real from 37.252.190.224 port 56280 ...	2019-09-02 04:41:35
218.98.26.175	attack	SSH Bruteforce	2019-09-02 04:46:29
112.78.45.40	attack	Sep 1 22:36:55 nextcloud sshd\[28824\]: Invalid user 123surusa from 112.78.45.40 Sep 1 22:36:55 nextcloud sshd\[28824\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.78.45.40 Sep 1 22:36:57 nextcloud sshd\[28824\]: Failed password for invalid user 123surusa from 112.78.45.40 port 35130 ssh2 ...	2019-09-02 04:59:24
54.37.155.165	attack	Sep 1 22:29:22 SilenceServices sshd[3584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.155.165 Sep 1 22:29:24 SilenceServices sshd[3584]: Failed password for invalid user bert from 54.37.155.165 port 55834 ssh2 Sep 1 22:33:44 SilenceServices sshd[7010]: Failed password for root from 54.37.155.165 port 45180 ssh2	2019-09-02 04:36:02
37.211.25.98	attackspam	Sep 1 22:07:44 meumeu sshd[20999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.211.25.98 Sep 1 22:07:45 meumeu sshd[20999]: Failed password for invalid user franklin from 37.211.25.98 port 39096 ssh2 Sep 1 22:12:31 meumeu sshd[21745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.211.25.98 ...	2019-09-02 04:22:36
54.39.187.138	attackbotsspam	Sep 1 10:06:26 php2 sshd\[27507\]: Invalid user med from 54.39.187.138 Sep 1 10:06:26 php2 sshd\[27507\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=srv-test.faceldi.net Sep 1 10:06:27 php2 sshd\[27507\]: Failed password for invalid user med from 54.39.187.138 port 48885 ssh2 Sep 1 10:10:19 php2 sshd\[27996\]: Invalid user chinaken from 54.39.187.138 Sep 1 10:10:19 php2 sshd\[27996\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=srv-test.faceldi.net	2019-09-02 04:23:11
153.35.93.7	attackspam	SSH Brute-Force reported by Fail2Ban	2019-09-02 04:31:13
52.253.228.47	attack	Sep 1 21:52:00 OPSO sshd\[20814\]: Invalid user test from 52.253.228.47 port 1344 Sep 1 21:52:00 OPSO sshd\[20814\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.253.228.47 Sep 1 21:52:02 OPSO sshd\[20814\]: Failed password for invalid user test from 52.253.228.47 port 1344 ssh2 Sep 1 21:56:21 OPSO sshd\[21305\]: Invalid user Access from 52.253.228.47 port 1344 Sep 1 21:56:21 OPSO sshd\[21305\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.253.228.47	2019-09-02 04:07:50
148.72.214.18	attackspam	Sep 1 21:40:58 lnxded64 sshd[1194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.72.214.18	2019-09-02 05:02:09
142.93.61.35	attack	SS5,WP GET /wp-login.php	2019-09-02 04:39:10
200.93.224.222	attackspam	2019-09-01 12:34:04 H=(lovepress.it) [200.93.224.222]:57548 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-09-01 12:34:05 H=(lovepress.it) [200.93.224.222]:57548 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-09-01 12:34:05 H=(lovepress.it) [200.93.224.222]:57548 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2019-09-02 04:25:42
106.51.141.20	attackspam	Sep 1 21:46:53 debian sshd\[27163\]: Invalid user polycom from 106.51.141.20 port 1890 Sep 1 21:46:53 debian sshd\[27163\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.141.20 ...	2019-09-02 04:50:11
93.113.151.135	attack	DATE:2019-09-01 19:33:42, IP:93.113.151.135, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)	2019-09-02 04:40:35
159.89.34.170	attackspambots	Attempted WordPress login: "GET /wp-login.php"	2019-09-02 04:35:32

Recently Reported IPs

5.167.64.250	137.226.0.237	164.92.195.223	137.226.1.18
121.46.24.111	154.211.13.242	198.20.69.73	185.41.110.40
198.20.70.112	5.167.65.39	144.86.151.157	207.180.252.79
58.248.11.38	137.226.0.20	3.23.132.83	5.167.64.109
5.167.65.69	40.115.201.88	137.226.1.132	5.167.64.148