Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Ethiopia

Internet Service Provider: Ethio Telecom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attack
Unauthorized connection attempt from IP address 213.55.92.56 on Port 445(SMB)
2020-09-21 23:00:37
attack
Unauthorized connection attempt from IP address 213.55.92.56 on Port 445(SMB)
2020-09-21 14:45:23
attackspam
Unauthorized connection attempt from IP address 213.55.92.56 on Port 445(SMB)
2019-12-01 23:27:45
Comments on same subnet:
IP Type Details Datetime
213.55.92.58 attackspam
Unauthorized connection attempt from IP address 213.55.92.58 on Port 445(SMB)
2020-09-25 02:38:07
213.55.92.58 attackspambots
Unauthorized connection attempt from IP address 213.55.92.58 on Port 445(SMB)
2020-09-24 18:18:46
213.55.92.59 attack
Unauthorized connection attempt from IP address 213.55.92.59 on Port 445(SMB)
2020-07-25 07:03:04
213.55.92.51 attackspambots
Unauthorized connection attempt from IP address 213.55.92.51 on Port 445(SMB)
2020-07-18 07:46:16
213.55.92.49 attackspambots
Unauthorized connection attempt from IP address 213.55.92.49 on Port 445(SMB)
2020-02-03 21:38:35
213.55.92.59 attackbotsspam
Unauthorized connection attempt from IP address 213.55.92.59 on Port 445(SMB)
2020-01-25 21:22:16
213.55.92.49 attackspam
Unauthorized connection attempt detected from IP address 213.55.92.49 to port 445
2020-01-01 22:36:52
213.55.92.58 attackbotsspam
Unauthorized connection attempt from IP address 213.55.92.58 on Port 445(SMB)
2019-10-10 00:43:48
213.55.92.49 attackbots
445/tcp 445/tcp 445/tcp...
[2019-08-07/10-01]6pkt,1pt.(tcp)
2019-10-02 00:57:08
213.55.92.50 attackspambots
Attempt to attack host OS, exploiting network vulnerabilities, on 26-09-2019 16:31:00.
2019-09-27 04:20:36
213.55.92.50 attack
Unauthorized connection attempt from IP address 213.55.92.50 on Port 445(SMB)
2019-08-25 18:56:15
213.55.92.51 attackspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-16 19:47:02,163 INFO [amun_request_handler] PortScan Detected on Port: 445 (213.55.92.51)
2019-08-17 07:03:07
213.55.92.81 attack
Aug 12 02:34:05 work-partkepr sshd\[24644\]: Invalid user rungsit.ato from 213.55.92.81 port 52340
Aug 12 02:34:05 work-partkepr sshd\[24644\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.55.92.81
...
2019-08-12 16:51:31
213.55.92.50 attackbotsspam
445/tcp 445/tcp 445/tcp...
[2019-06-20/07-29]9pkt,1pt.(tcp)
2019-07-30 11:28:01
213.55.92.81 attackbotsspam
2019-07-24T06:44:15.371687hub.schaetter.us sshd\[12952\]: Invalid user team2 from 213.55.92.81
2019-07-24T06:44:15.421072hub.schaetter.us sshd\[12952\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.55.92.81
2019-07-24T06:44:17.540532hub.schaetter.us sshd\[12952\]: Failed password for invalid user team2 from 213.55.92.81 port 53124 ssh2
2019-07-24T06:50:07.928380hub.schaetter.us sshd\[12981\]: Invalid user zd from 213.55.92.81
2019-07-24T06:50:07.968995hub.schaetter.us sshd\[12981\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.55.92.81
...
2019-07-24 15:02:17
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.55.92.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54637
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;213.55.92.56.			IN	A

;; AUTHORITY SECTION:
.			444	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019120100 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 01 23:27:39 CST 2019
;; MSG SIZE  rcvd: 116
Host info
Host 56.92.55.213.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 56.92.55.213.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
1.4.135.197 attack
Port Scan
2019-10-21 21:10:06
66.76.71.70 attackspambots
66.76.71.0/24 blocked
porn
2019-10-21 21:25:35
31.167.204.127 attackspam
2019-10-21 x@x
2019-10-21 11:37:01 unexpected disconnection while reading SMTP command from ([31.167.204.127]) [31.167.204.127]:10530 I=[10.100.18.21]:25 (error: Connection reset by peer)
2019-10-21 x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=31.167.204.127
2019-10-21 21:45:15
189.115.109.132 attackbots
Oct 21 14:46:07 * sshd[11721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.115.109.132
Oct 21 14:46:09 * sshd[11721]: Failed password for invalid user informax from 189.115.109.132 port 57022 ssh2
2019-10-21 21:33:55
190.96.214.88 attack
Automatic report - Port Scan Attack
2019-10-21 21:27:26
146.185.25.190 attackspambots
Port Scan
2019-10-21 21:16:09
164.132.24.138 attackspam
Oct 21 15:01:43 meumeu sshd[28525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.24.138 
Oct 21 15:01:46 meumeu sshd[28525]: Failed password for invalid user chinacc2008 from 164.132.24.138 port 37240 ssh2
Oct 21 15:08:46 meumeu sshd[29374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.24.138 
...
2019-10-21 21:14:06
41.214.20.60 attackbotsspam
2019-10-21T15:05:24.255997scmdmz1 sshd\[12894\]: Invalid user lisa from 41.214.20.60 port 33923
2019-10-21T15:05:24.258599scmdmz1 sshd\[12894\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.214.20.60
2019-10-21T15:05:25.713293scmdmz1 sshd\[12894\]: Failed password for invalid user lisa from 41.214.20.60 port 33923 ssh2
...
2019-10-21 21:18:13
45.70.167.248 attackspam
Oct 21 02:39:17 eddieflores sshd\[2249\]: Invalid user p4\$\$word from 45.70.167.248
Oct 21 02:39:17 eddieflores sshd\[2249\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.70.167.248
Oct 21 02:39:19 eddieflores sshd\[2249\]: Failed password for invalid user p4\$\$word from 45.70.167.248 port 35172 ssh2
Oct 21 02:44:14 eddieflores sshd\[2626\]: Invalid user Passwort!qaz from 45.70.167.248
Oct 21 02:44:14 eddieflores sshd\[2626\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.70.167.248
2019-10-21 21:04:22
190.112.126.179 attackbotsspam
Fail2Ban Ban Triggered
2019-10-21 21:27:05
59.153.74.43 attackspam
Oct 21 12:01:46 localhost sshd\[124813\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.153.74.43  user=root
Oct 21 12:01:48 localhost sshd\[124813\]: Failed password for root from 59.153.74.43 port 63755 ssh2
Oct 21 12:07:59 localhost sshd\[125009\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.153.74.43  user=root
Oct 21 12:08:01 localhost sshd\[125009\]: Failed password for root from 59.153.74.43 port 62596 ssh2
Oct 21 12:13:33 localhost sshd\[125201\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.153.74.43  user=root
...
2019-10-21 21:19:12
113.172.145.142 attackspambots
SSH scan ::
2019-10-21 21:41:32
191.112.7.120 attackspambots
2019-10-21 x@x
2019-10-21 11:58:36 unexpected disconnection while reading SMTP command from (191-112-7-120.baf.movistar.cl) [191.112.7.120]:23456 I=[10.100.18.21]:25 (error: Connection reset by peer)
2019-10-21 x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=191.112.7.120
2019-10-21 21:15:42
121.162.131.223 attackspam
Oct 21 13:46:53 microserver sshd[606]: Invalid user lc from 121.162.131.223 port 44877
Oct 21 13:46:53 microserver sshd[606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.162.131.223
Oct 21 13:46:55 microserver sshd[606]: Failed password for invalid user lc from 121.162.131.223 port 44877 ssh2
Oct 21 13:51:07 microserver sshd[1255]: Invalid user frodo from 121.162.131.223 port 36218
Oct 21 13:51:07 microserver sshd[1255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.162.131.223
Oct 21 14:03:23 microserver sshd[2775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.162.131.223  user=root
Oct 21 14:03:25 microserver sshd[2775]: Failed password for root from 121.162.131.223 port 38483 ssh2
Oct 21 14:07:38 microserver sshd[3427]: Invalid user ts3bot2 from 121.162.131.223 port 58060
Oct 21 14:07:38 microserver sshd[3427]: pam_unix(sshd:auth): authentication failure; logname= uid
2019-10-21 21:05:59
49.234.155.117 attackbotsspam
Oct 21 02:16:33 php1 sshd\[26461\]: Invalid user tar from 49.234.155.117
Oct 21 02:16:33 php1 sshd\[26461\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.155.117
Oct 21 02:16:35 php1 sshd\[26461\]: Failed password for invalid user tar from 49.234.155.117 port 45124 ssh2
Oct 21 02:22:34 php1 sshd\[26954\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.155.117  user=root
Oct 21 02:22:36 php1 sshd\[26954\]: Failed password for root from 49.234.155.117 port 55682 ssh2
2019-10-21 21:11:23

Recently Reported IPs

178.2.114.224 190.206.99.225 170.189.243.215 69.83.155.89
129.140.119.22 107.77.80.108 195.186.113.11 140.56.42.106
63.151.61.233 186.29.206.128 151.124.159.246 42.118.53.37
118.181.226.166 117.68.195.118 59.92.68.167 111.230.165.183
110.137.101.23 103.124.152.140 111.90.150.213 188.64.133.188