Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
2020-09-24T23:40:22.216464luisaranguren sshd[3126165]: Invalid user freeswitch from 45.55.180.7 port 48641
2020-09-24T23:40:23.985579luisaranguren sshd[3126165]: Failed password for invalid user freeswitch from 45.55.180.7 port 48641 ssh2
...
2020-09-24 22:40:59
attackspambots
Sep 24 02:32:10 ws22vmsma01 sshd[229912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.180.7
Sep 24 02:32:11 ws22vmsma01 sshd[229912]: Failed password for invalid user test from 45.55.180.7 port 45385 ssh2
...
2020-09-24 14:31:37
attack
Sep 23 17:55:14 ny01 sshd[14039]: Failed password for root from 45.55.180.7 port 46164 ssh2
Sep 23 17:58:35 ny01 sshd[14658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.180.7
Sep 23 17:58:37 ny01 sshd[14658]: Failed password for invalid user ubuntu from 45.55.180.7 port 44040 ssh2
2020-09-24 05:59:25
attackspam
$f2bV_matches
2020-09-23 21:51:37
attackspambots
4 SSH login attempts.
2020-09-23 14:11:36
attackbots
Time:     Tue Sep 22 21:34:09 2020 +0000
IP:       45.55.180.7 (US/United States/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 22 21:26:10 47-1 sshd[21786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.180.7  user=root
Sep 22 21:26:13 47-1 sshd[21786]: Failed password for root from 45.55.180.7 port 51605 ssh2
Sep 22 21:30:42 47-1 sshd[21893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.180.7  user=root
Sep 22 21:30:44 47-1 sshd[21893]: Failed password for root from 45.55.180.7 port 48460 ssh2
Sep 22 21:34:07 47-1 sshd[21982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.180.7  user=root
2020-09-23 06:00:46
attack
Aug 20 22:42:22 vserver sshd\[7583\]: Invalid user abd from 45.55.180.7Aug 20 22:42:24 vserver sshd\[7583\]: Failed password for invalid user abd from 45.55.180.7 port 49463 ssh2Aug 20 22:45:46 vserver sshd\[7731\]: Invalid user ubuntu from 45.55.180.7Aug 20 22:45:48 vserver sshd\[7731\]: Failed password for invalid user ubuntu from 45.55.180.7 port 52950 ssh2
...
2020-08-21 07:30:31
attackspam
Aug 20 05:52:37 nextcloud sshd\[12573\]: Invalid user zhangjb from 45.55.180.7
Aug 20 05:52:37 nextcloud sshd\[12573\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.180.7
Aug 20 05:52:40 nextcloud sshd\[12573\]: Failed password for invalid user zhangjb from 45.55.180.7 port 48010 ssh2
2020-08-20 14:58:29
attackbots
Aug 15 16:28:20 vpn01 sshd[11937]: Failed password for root from 45.55.180.7 port 40958 ssh2
...
2020-08-15 23:24:49
attackbotsspam
Aug 14 13:55:38 NPSTNNYC01T sshd[16888]: Failed password for root from 45.55.180.7 port 40159 ssh2
Aug 14 14:00:33 NPSTNNYC01T sshd[17637]: Failed password for root from 45.55.180.7 port 42348 ssh2
...
2020-08-15 02:20:26
attack
Aug 13 09:24:59 piServer sshd[20358]: Failed password for root from 45.55.180.7 port 34332 ssh2
Aug 13 09:30:10 piServer sshd[21039]: Failed password for root from 45.55.180.7 port 48719 ssh2
...
2020-08-13 15:56:15
attackbotsspam
Bruteforce detected by fail2ban
2020-08-11 13:47:46
attackbots
Aug  8 23:28:17 server sshd[19738]: Failed password for root from 45.55.180.7 port 47659 ssh2
Aug  8 23:31:56 server sshd[20846]: Failed password for root from 45.55.180.7 port 58407 ssh2
Aug  8 23:35:40 server sshd[22104]: Failed password for root from 45.55.180.7 port 43655 ssh2
2020-08-09 05:44:29
attackbots
Aug  8 21:49:30 home sshd[670242]: Failed password for root from 45.55.180.7 port 55521 ssh2
Aug  8 21:51:45 home sshd[670973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.180.7  user=root
Aug  8 21:51:47 home sshd[670973]: Failed password for root from 45.55.180.7 port 60415 ssh2
Aug  8 21:54:09 home sshd[672023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.180.7  user=root
Aug  8 21:54:11 home sshd[672023]: Failed password for root from 45.55.180.7 port 36634 ssh2
...
2020-08-09 04:06:13
attack
Aug  8 08:29:40 mellenthin sshd[32497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.180.7  user=root
Aug  8 08:29:41 mellenthin sshd[32497]: Failed password for invalid user root from 45.55.180.7 port 44520 ssh2
2020-08-08 16:08:19
attack
Aug  7 16:18:00 ny01 sshd[15766]: Failed password for root from 45.55.180.7 port 57134 ssh2
Aug  7 16:21:36 ny01 sshd[16238]: Failed password for root from 45.55.180.7 port 58392 ssh2
2020-08-08 07:09:09
attackspam
Aug  6 15:34:59 gospond sshd[31458]: Failed password for root from 45.55.180.7 port 53577 ssh2
Aug  6 15:34:57 gospond sshd[31458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.180.7  user=root
Aug  6 15:34:59 gospond sshd[31458]: Failed password for root from 45.55.180.7 port 53577 ssh2
...
2020-08-06 23:16:25
attack
2020-08-02T14:19:13.811381n23.at sshd[3880352]: Failed password for root from 45.55.180.7 port 50775 ssh2
2020-08-02T14:20:31.273433n23.at sshd[3881966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.180.7  user=root
2020-08-02T14:20:33.238401n23.at sshd[3881966]: Failed password for root from 45.55.180.7 port 49990 ssh2
...
2020-08-02 22:40:14
attackbotsspam
Aug  1 17:47:17 vm0 sshd[18641]: Failed password for root from 45.55.180.7 port 42049 ssh2
...
2020-08-01 23:53:30
attackspambots
SSH Brute Force
2020-07-30 04:19:58
attackspam
Jul 28 14:34:26 server1 sshd\[24722\]: Invalid user dcs from 45.55.180.7
Jul 28 14:34:26 server1 sshd\[24722\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.180.7 
Jul 28 14:34:28 server1 sshd\[24722\]: Failed password for invalid user dcs from 45.55.180.7 port 49623 ssh2
Jul 28 14:38:27 server1 sshd\[25673\]: Invalid user vmadmin from 45.55.180.7
Jul 28 14:38:27 server1 sshd\[25673\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.180.7 
...
2020-07-29 04:46:17
attack
Ssh brute force
2020-07-24 08:02:57
attackbots
Jul 18 06:18:15 vps687878 sshd\[9324\]: Failed password for invalid user cfb from 45.55.180.7 port 40082 ssh2
Jul 18 06:21:57 vps687878 sshd\[9551\]: Invalid user huyaoyi from 45.55.180.7 port 52880
Jul 18 06:21:57 vps687878 sshd\[9551\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.180.7
Jul 18 06:22:00 vps687878 sshd\[9551\]: Failed password for invalid user huyaoyi from 45.55.180.7 port 52880 ssh2
Jul 18 06:25:52 vps687878 sshd\[10524\]: Invalid user dimitri from 45.55.180.7 port 36562
Jul 18 06:25:52 vps687878 sshd\[10524\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.180.7
...
2020-07-18 12:32:11
attackbotsspam
2020-07-16T03:19:39.649526vps2034 sshd[31344]: Invalid user rhode from 45.55.180.7 port 58885
2020-07-16T03:19:39.653509vps2034 sshd[31344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.180.7
2020-07-16T03:19:39.649526vps2034 sshd[31344]: Invalid user rhode from 45.55.180.7 port 58885
2020-07-16T03:19:41.735084vps2034 sshd[31344]: Failed password for invalid user rhode from 45.55.180.7 port 58885 ssh2
2020-07-16T03:23:27.016264vps2034 sshd[8417]: Invalid user style from 45.55.180.7 port 40926
...
2020-07-16 15:27:50
attackspam
$f2bV_matches
2020-07-15 10:57:14
attackspam
2020-07-14T09:55:56.180165ks3355764 sshd[21168]: Invalid user appldev from 45.55.180.7 port 55577
2020-07-14T09:55:57.710191ks3355764 sshd[21168]: Failed password for invalid user appldev from 45.55.180.7 port 55577 ssh2
...
2020-07-14 17:43:48
attack
Jul 13 15:15:09 rancher-0 sshd[282895]: Invalid user gordon from 45.55.180.7 port 47427
Jul 13 15:15:11 rancher-0 sshd[282895]: Failed password for invalid user gordon from 45.55.180.7 port 47427 ssh2
...
2020-07-13 21:37:10
attackspam
SSH Brute-Force reported by Fail2Ban
2020-05-31 19:53:53
attackbotsspam
May 14 22:53:53 v22018086721571380 sshd[20323]: Failed password for invalid user ansible from 45.55.180.7 port 55785 ssh2
2020-05-15 07:29:15
attackbotsspam
2020-05-14T08:57:07.840240  sshd[6834]: Invalid user postgres from 45.55.180.7 port 59001
2020-05-14T08:57:07.851825  sshd[6834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.180.7
2020-05-14T08:57:07.840240  sshd[6834]: Invalid user postgres from 45.55.180.7 port 59001
2020-05-14T08:57:09.768216  sshd[6834]: Failed password for invalid user postgres from 45.55.180.7 port 59001 ssh2
...
2020-05-14 16:45:22
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.55.180.7
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37895
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.55.180.7.			IN	A

;; AUTHORITY SECTION:
.			279	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020042800 1800 900 604800 86400

;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 28 23:16:58 CST 2020
;; MSG SIZE  rcvd: 115
Host info
Host 7.180.55.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 7.180.55.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
222.73.215.81 attackspambots
Jul 13 05:52:49 OPSO sshd\[12137\]: Invalid user testftp from 222.73.215.81 port 38430
Jul 13 05:52:49 OPSO sshd\[12137\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.73.215.81
Jul 13 05:52:51 OPSO sshd\[12137\]: Failed password for invalid user testftp from 222.73.215.81 port 38430 ssh2
Jul 13 05:55:48 OPSO sshd\[12795\]: Invalid user francis from 222.73.215.81 port 52548
Jul 13 05:55:48 OPSO sshd\[12795\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.73.215.81
2020-07-13 12:47:19
193.228.91.105 attack
Port probing on unauthorized port 22
2020-07-13 12:49:51
89.136.142.244 attackbotsspam
(sshd) Failed SSH login from 89.136.142.244 (RO/Romania/home-314856.b.astral.ro): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 13 05:27:58 amsweb01 sshd[23384]: Invalid user abc from 89.136.142.244 port 36950
Jul 13 05:28:00 amsweb01 sshd[23384]: Failed password for invalid user abc from 89.136.142.244 port 36950 ssh2
Jul 13 05:47:18 amsweb01 sshd[26467]: Invalid user teamspeak3-user from 89.136.142.244 port 33034
Jul 13 05:47:21 amsweb01 sshd[26467]: Failed password for invalid user teamspeak3-user from 89.136.142.244 port 33034 ssh2
Jul 13 05:55:16 amsweb01 sshd[27704]: Invalid user hua from 89.136.142.244 port 59000
2020-07-13 13:09:55
190.42.66.57 attackspam
Port Scan
...
2020-07-13 13:20:15
157.39.76.134 attackspam
Unauthorised access (Jul 13) SRC=157.39.76.134 LEN=52 TOS=0x10 PREC=0x40 TTL=109 ID=25297 DF TCP DPT=445 WINDOW=8192 SYN
2020-07-13 13:15:22
180.76.53.100 attack
Jul 13 06:56:46 minden010 sshd[6878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.53.100
Jul 13 06:56:48 minden010 sshd[6878]: Failed password for invalid user www-upload from 180.76.53.100 port 41306 ssh2
Jul 13 07:00:43 minden010 sshd[8673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.53.100
...
2020-07-13 13:04:14
128.199.227.96 attackspam
Jul 13 06:47:56 ift sshd\[27617\]: Invalid user guess from 128.199.227.96Jul 13 06:47:58 ift sshd\[27617\]: Failed password for invalid user guess from 128.199.227.96 port 36120 ssh2Jul 13 06:51:27 ift sshd\[28636\]: Invalid user lutz from 128.199.227.96Jul 13 06:51:29 ift sshd\[28636\]: Failed password for invalid user lutz from 128.199.227.96 port 33578 ssh2Jul 13 06:55:02 ift sshd\[29267\]: Invalid user ze from 128.199.227.96
...
2020-07-13 13:23:41
222.186.175.202 attackbots
Jul 13 06:54:47 minden010 sshd[5814]: Failed password for root from 222.186.175.202 port 38186 ssh2
Jul 13 06:54:50 minden010 sshd[5814]: Failed password for root from 222.186.175.202 port 38186 ssh2
Jul 13 06:54:53 minden010 sshd[5814]: Failed password for root from 222.186.175.202 port 38186 ssh2
Jul 13 06:54:59 minden010 sshd[5814]: error: maximum authentication attempts exceeded for root from 222.186.175.202 port 38186 ssh2 [preauth]
...
2020-07-13 13:01:16
72.205.37.195 attackspam
Jul 13 01:00:07 george sshd[23609]: Failed password for invalid user deb from 72.205.37.195 port 54743 ssh2
Jul 13 01:02:42 george sshd[23636]: Invalid user csilla from 72.205.37.195 port 21924
Jul 13 01:02:42 george sshd[23636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.205.37.195 
Jul 13 01:02:44 george sshd[23636]: Failed password for invalid user csilla from 72.205.37.195 port 21924 ssh2
Jul 13 01:05:25 george sshd[23676]: Invalid user deploy from 72.205.37.195 port 45609
...
2020-07-13 13:14:47
51.38.70.175 attackspambots
detected by Fail2Ban
2020-07-13 13:00:49
138.197.202.197 attackbotsspam
Automatic report - Banned IP Access
2020-07-13 12:46:52
117.184.228.6 attackspam
Jul 13 06:39:58 [host] sshd[775]: Invalid user kok
Jul 13 06:39:58 [host] sshd[775]: pam_unix(sshd:au
Jul 13 06:39:59 [host] sshd[775]: Failed password
2020-07-13 13:10:39
51.91.58.14 attackbotsspam
2020-07-13 04:54:43,258 fail2ban.actions        [937]: NOTICE  [sshd] Ban 51.91.58.14
2020-07-13 05:25:46,964 fail2ban.actions        [937]: NOTICE  [sshd] Ban 51.91.58.14
2020-07-13 05:56:40,567 fail2ban.actions        [937]: NOTICE  [sshd] Ban 51.91.58.14
2020-07-13 06:27:53,178 fail2ban.actions        [937]: NOTICE  [sshd] Ban 51.91.58.14
2020-07-13 06:59:00,752 fail2ban.actions        [937]: NOTICE  [sshd] Ban 51.91.58.14
...
2020-07-13 13:21:35
88.231.120.76 attackspambots
1594612557 - 07/13/2020 05:55:57 Host: 88.231.120.76/88.231.120.76 Port: 445 TCP Blocked
2020-07-13 12:42:39
51.77.215.0 attackbotsspam
Jul 13 04:38:23 XXXXXX sshd[21485]: Invalid user rong from 51.77.215.0 port 42428
2020-07-13 13:12:14

Recently Reported IPs

148.70.15.205 125.227.177.116 97.121.147.44 35.225.211.175
217.61.123.176 34.84.248.177 51.68.181.121 5.126.176.91
27.255.247.1 123.26.190.113 35.193.134.10 204.136.117.3
183.108.114.95 45.106.33.21 123.20.39.71 111.230.211.130
203.210.85.142 186.71.89.154 14.162.145.203 105.212.4.6