Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Zambia

Internet Service Provider: Zambia Research and Education Network

Hostname: unknown

Organization: unknown

Usage Type: University/College/School

Comments:
Type Details Datetime
attackspambots
Invalid user a1 from 155.0.254.111 port 57282
2020-08-31 01:32:42
attackbots
Jul 21 15:55:18 lukav-desktop sshd\[18401\]: Invalid user oracle2 from 155.0.254.111
Jul 21 15:55:18 lukav-desktop sshd\[18401\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=155.0.254.111
Jul 21 15:55:20 lukav-desktop sshd\[18401\]: Failed password for invalid user oracle2 from 155.0.254.111 port 53888 ssh2
Jul 21 16:01:15 lukav-desktop sshd\[18462\]: Invalid user 111111 from 155.0.254.111
Jul 21 16:01:15 lukav-desktop sshd\[18462\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=155.0.254.111
2020-07-21 21:58:25
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 155.0.254.111
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37761
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;155.0.254.111.			IN	A

;; AUTHORITY SECTION:
.			198	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020072100 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jul 21 21:58:20 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 111.254.0.155.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 111.254.0.155.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
52.187.245.12 attackspambots
Connection to SSH Honeypot - Detected by HoneypotDB
2020-09-25 23:27:15
223.150.152.181 attackspam
Brute force blocker - service: proftpd1 - aantal: 35 - Wed Sep  5 05:05:14 2018
2020-09-25 23:28:05
178.16.174.0 attack
Sep 25 16:25:48 mavik sshd[5990]: Failed password for invalid user postgres from 178.16.174.0 port 48471 ssh2
Sep 25 16:29:35 mavik sshd[6097]: Invalid user admin from 178.16.174.0
Sep 25 16:29:35 mavik sshd[6097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.16.174.0
Sep 25 16:29:37 mavik sshd[6097]: Failed password for invalid user admin from 178.16.174.0 port 39251 ssh2
Sep 25 16:33:18 mavik sshd[6199]: Invalid user thomas from 178.16.174.0
...
2020-09-25 23:44:53
113.21.228.202 attackbotsspam
Brute force blocker - service: proftpd1 - aantal: 69 - Sun Sep  2 05:30:17 2018
2020-09-26 00:05:00
37.49.224.131 attackbotsspam
lfd: (smtpauth) Failed SMTP AUTH login from 37.49.224.131 (NL/Netherlands/-): 5 in the last 3600 secs - Tue Sep  4 16:57:29 2018
2020-09-25 23:37:22
27.223.89.238 attackspam
Invalid user guest2 from 27.223.89.238 port 52639
2020-09-26 00:15:09
179.104.229.209 attackspam
445/tcp
[2020-09-24]1pkt
2020-09-25 23:39:47
108.174.199.169 attackspam
lfd: (smtpauth) Failed SMTP AUTH login from 108.174.199.169 (US/United States/hwsrv-310030.hostwindsdns.com): 5 in the last 3600 secs - Tue Sep  4 09:26:05 2018
2020-09-25 23:36:17
117.81.59.153 attackbotsspam
Brute force blocker - service: proftpd1 - aantal: 26 - Mon Sep  3 12:20:15 2018
2020-09-25 23:42:47
40.89.164.58 attackspam
Sep 25 16:55:35 abendstille sshd\[18576\]: Invalid user congrapps from 40.89.164.58
Sep 25 16:55:35 abendstille sshd\[18576\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.89.164.58
Sep 25 16:55:35 abendstille sshd\[18578\]: Invalid user congrapps from 40.89.164.58
Sep 25 16:55:35 abendstille sshd\[18578\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.89.164.58
Sep 25 16:55:37 abendstille sshd\[18576\]: Failed password for invalid user congrapps from 40.89.164.58 port 15791 ssh2
...
2020-09-25 23:27:43
194.87.139.223 attack
Invalid user fctrserver from 194.87.139.223 port 57674
2020-09-26 00:08:35
52.150.8.43 attack
2020-09-24 UTC: (3x) - root(3x)
2020-09-26 00:02:35
196.200.181.7 attackspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-09-25 23:39:20
211.159.149.29 attackbots
Invalid user 111 from 211.159.149.29 port 59520
2020-09-26 00:07:36
115.63.119.9 attackbots
Brute force blocker - service: proftpd1 - aantal: 28 - Tue Sep  4 08:55:13 2018
2020-09-25 23:36:02

Recently Reported IPs

85.98.30.28 35.226.241.164 187.126.222.33 82.102.21.185
197.44.101.91 174.23.37.179 120.92.149.231 20.52.51.9
14.252.192.249 207.244.92.6 159.65.132.140 108.176.158.141
72.44.21.237 200.219.61.2 10.153.91.178 188.162.201.59
152.136.102.101 122.155.3.94 66.220.149.118 157.47.47.115