Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Addis Ababa

Region: Addis Ababa

Country: Ethiopia

Internet Service Provider: Ethio Telecom

Hostname: unknown

Organization: Ethiopian Telecommunication Corporation

Usage Type: unknown

Comments:
Type Details Datetime
attackbots
Unauthorised access (Oct 12) SRC=213.55.95.158 LEN=52 TTL=112 ID=14240 DF TCP DPT=445 WINDOW=8192 SYN
2019-10-12 21:56:02
attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-18 08:17:24,370 INFO [amun_request_handler] PortScan Detected on Port: 445 (213.55.95.158)
2019-07-19 00:25:29
Comments on same subnet:
IP Type Details Datetime
213.55.95.203 attackspambots
Unauthorized IMAP connection attempt
2020-08-21 23:59:23
213.55.95.186 attack
Unauthorized connection attempt from IP address 213.55.95.186 on Port 445(SMB)
2020-08-18 01:30:00
213.55.95.185 attack
Unauthorized connection attempt detected from IP address 213.55.95.185 to port 445 [T]
2020-08-14 01:54:51
213.55.95.177 attackbots
20/6/3@07:49:40: FAIL: Alarm-Network address from=213.55.95.177
...
2020-06-04 02:06:58
213.55.95.228 attackbotsspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-03-14 02:15:19
213.55.95.171 attackspam
Unauthorized connection attempt from IP address 213.55.95.171 on Port 445(SMB)
2019-12-06 08:20:26
213.55.95.187 attackbots
Attempt to attack host OS, exploiting network vulnerabilities, on 16-11-2019 06:20:33.
2019-11-16 20:16:36
213.55.95.149 attack
Unauthorized connection attempt from IP address 213.55.95.149 on Port 445(SMB)
2019-10-26 01:54:03
213.55.95.150 attackbotsspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-25 14:18:02,900 INFO [shellcode_manager] (213.55.95.150) no match, writing hexdump (c0023eea185e3c8551cdc9ee669bfa00 :2357805) - MS17010 (EternalBlue)
2019-08-26 05:44:39
213.55.95.137 attackspam
Unauthorized connection attempt from IP address 213.55.95.137 on Port 445(SMB)
2019-08-23 03:44:32
213.55.95.150 attackspambots
Unauthorised access (Jul 30) SRC=213.55.95.150 LEN=52 TTL=112 ID=6749 DF TCP DPT=445 WINDOW=8192 SYN
2019-07-31 06:04:22
213.55.95.140 attackbotsspam
Detected by ModSecurity. Request URI: /wp-login.php
2019-06-30 23:35:10
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.55.95.158
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59776
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;213.55.95.158.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071800 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jul 19 00:25:19 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 158.95.55.213.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 158.95.55.213.in-addr.arpa: SERVFAIL

Related IP info:
Related comments:
IP Type Details Datetime
222.186.180.223 attackbotsspam
Jun 13 22:27:41 server sshd[5209]: Failed none for root from 222.186.180.223 port 27762 ssh2
Jun 13 22:27:43 server sshd[5209]: Failed password for root from 222.186.180.223 port 27762 ssh2
Jun 13 22:27:48 server sshd[5209]: Failed password for root from 222.186.180.223 port 27762 ssh2
2020-06-14 04:29:10
129.204.188.93 attack
sshd
2020-06-14 04:28:12
167.172.98.89 attack
2020-06-13T21:51:52.393404vps773228.ovh.net sshd[15789]: Failed password for root from 167.172.98.89 port 45450 ssh2
2020-06-13T21:56:31.768429vps773228.ovh.net sshd[15875]: Invalid user jacky from 167.172.98.89 port 44823
2020-06-13T21:56:31.782875vps773228.ovh.net sshd[15875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.98.89
2020-06-13T21:56:31.768429vps773228.ovh.net sshd[15875]: Invalid user jacky from 167.172.98.89 port 44823
2020-06-13T21:56:33.706619vps773228.ovh.net sshd[15875]: Failed password for invalid user jacky from 167.172.98.89 port 44823 ssh2
...
2020-06-14 04:40:35
81.169.142.180 attack
RDP Bruteforce
2020-06-14 04:50:22
106.13.52.107 attack
2020-06-13T22:26:40.624928centos sshd[26168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.52.107
2020-06-13T22:26:40.617230centos sshd[26168]: Invalid user rs from 106.13.52.107 port 35354
2020-06-13T22:26:42.560262centos sshd[26168]: Failed password for invalid user rs from 106.13.52.107 port 35354 ssh2
...
2020-06-14 04:36:18
220.181.108.84 attackbots
Automatic report - Banned IP Access
2020-06-14 05:04:19
201.231.115.87 attack
Jun 13 06:18:51 Host-KLAX-C sshd[16191]: User root from 201.231.115.87 not allowed because not listed in AllowUsers
...
2020-06-14 04:59:08
51.91.255.147 attack
Jun 14 02:36:32 localhost sshd[941874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.255.147  user=root
Jun 14 02:36:34 localhost sshd[941874]: Failed password for root from 51.91.255.147 port 56324 ssh2
...
2020-06-14 04:43:43
61.133.232.253 attackspam
Jun 13 18:27:06 lnxmysql61 sshd[19762]: Failed password for root from 61.133.232.253 port 13439 ssh2
Jun 13 18:35:33 lnxmysql61 sshd[22211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.133.232.253
Jun 13 18:35:35 lnxmysql61 sshd[22211]: Failed password for invalid user cakir from 61.133.232.253 port 36288 ssh2
2020-06-14 04:35:04
148.235.57.183 attackbots
Jun 13 11:24:39 vps46666688 sshd[8687]: Failed password for www-data from 148.235.57.183 port 33742 ssh2
...
2020-06-14 04:41:18
138.197.185.188 attack
leo_www
2020-06-14 04:44:54
111.229.226.212 attack
Jun 13 19:00:57 buvik sshd[4684]: Failed password for invalid user yashoda from 111.229.226.212 port 33082 ssh2
Jun 13 19:04:49 buvik sshd[5126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.226.212  user=root
Jun 13 19:04:51 buvik sshd[5126]: Failed password for root from 111.229.226.212 port 51590 ssh2
...
2020-06-14 04:43:24
113.142.72.107 attackbots
 TCP (SYN) 113.142.72.107:21213 -> port 23, len 44
2020-06-14 05:02:57
197.167.47.214 attack
1592050759 - 06/13/2020 14:19:19 Host: 197.167.47.214/197.167.47.214 Port: 445 TCP Blocked
2020-06-14 04:36:42
92.207.180.50 attack
Jun 13 19:34:51 ourumov-web sshd\[12004\]: Invalid user admin from 92.207.180.50 port 37984
Jun 13 19:34:51 ourumov-web sshd\[12004\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.207.180.50
Jun 13 19:34:53 ourumov-web sshd\[12004\]: Failed password for invalid user admin from 92.207.180.50 port 37984 ssh2
...
2020-06-14 04:29:30

Recently Reported IPs

72.242.219.213 123.78.102.77 55.192.241.18 177.80.228.203
70.177.75.34 93.72.128.208 90.9.87.100 3.176.139.149
185.3.141.158 2a01:598:990c:9d8f:5064:c5eb:a4e0:c2da 103.71.19.22 53.77.246.197
62.131.45.97 58.4.164.46 104.248.223.178 160.2.29.249
221.9.254.222 2003:d1:7f41:94b4:887e:836e:8432:ccc2 80.172.203.96 43.252.158.52