Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
Jul 19 19:10:23 buvik sshd[23232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.189.113
Jul 19 19:10:25 buvik sshd[23232]: Failed password for invalid user git from 45.55.189.113 port 47911 ssh2
Jul 19 19:14:55 buvik sshd[23812]: Invalid user postgres from 45.55.189.113
...
2020-07-20 04:43:33
attackspambots
2020-07-18T06:11:47.902747sd-86998 sshd[40191]: Invalid user aps from 45.55.189.113 port 48295
2020-07-18T06:11:47.906632sd-86998 sshd[40191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.189.113
2020-07-18T06:11:47.902747sd-86998 sshd[40191]: Invalid user aps from 45.55.189.113 port 48295
2020-07-18T06:11:50.635863sd-86998 sshd[40191]: Failed password for invalid user aps from 45.55.189.113 port 48295 ssh2
2020-07-18T06:15:42.746140sd-86998 sshd[40725]: Invalid user miguel from 45.55.189.113 port 56181
...
2020-07-18 12:26:09
attackspam
Jul 16 18:25:26 abendstille sshd\[9055\]: Invalid user madura from 45.55.189.113
Jul 16 18:25:26 abendstille sshd\[9055\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.189.113
Jul 16 18:25:28 abendstille sshd\[9055\]: Failed password for invalid user madura from 45.55.189.113 port 60388 ssh2
Jul 16 18:29:39 abendstille sshd\[13196\]: Invalid user ec2-user from 45.55.189.113
Jul 16 18:29:39 abendstille sshd\[13196\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.189.113
...
2020-07-17 01:27:18
attackbots
Jul 11 17:52:51 IngegnereFirenze sshd[5036]: Failed password for invalid user emqttd from 45.55.189.113 port 46628 ssh2
...
2020-07-12 04:02:23
Comments on same subnet:
IP Type Details Datetime
45.55.189.252 attack
Last failed login: Fri Jan 1 09:37:01 EST 2021 from 45.55.189.252 on ssh:notty
2021-01-01 22:44:49
45.55.189.252 attack
Sep 28 19:23:18 pkdns2 sshd\[37213\]: Address 45.55.189.252 maps to fotomate.in, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Sep 28 19:23:18 pkdns2 sshd\[37213\]: Invalid user teste1 from 45.55.189.252Sep 28 19:23:19 pkdns2 sshd\[37213\]: Failed password for invalid user teste1 from 45.55.189.252 port 36024 ssh2Sep 28 19:28:33 pkdns2 sshd\[37469\]: Address 45.55.189.252 maps to fotomate.in, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Sep 28 19:28:33 pkdns2 sshd\[37469\]: Invalid user admin from 45.55.189.252Sep 28 19:28:34 pkdns2 sshd\[37469\]: Failed password for invalid user admin from 45.55.189.252 port 43306 ssh2
...
2020-09-29 01:01:48
45.55.189.252 attackbots
Sep 28 09:56:58 h2829583 sshd[7808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.189.252
2020-09-28 17:05:04
45.55.189.252 attack
Sep  1 00:45:00 server sshd[9613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.189.252 
Sep  1 00:45:00 server sshd[9613]: Invalid user magno from 45.55.189.252 port 49154
Sep  1 00:45:02 server sshd[9613]: Failed password for invalid user magno from 45.55.189.252 port 49154 ssh2
Sep  1 00:56:23 server sshd[16184]: User root from 45.55.189.252 not allowed because listed in DenyUsers
Sep  1 00:56:23 server sshd[16184]: User root from 45.55.189.252 not allowed because listed in DenyUsers
...
2020-09-01 07:19:52
45.55.189.252 attackbots
SSH Invalid Login
2020-08-29 07:02:41
45.55.189.252 attackbotsspam
<6 unauthorized SSH connections
2020-08-26 15:10:24
45.55.189.252 attackbotsspam
$f2bV_matches
2020-08-24 03:01:22
45.55.189.252 attackbots
Ssh brute force
2020-08-10 12:06:39
45.55.189.252 attackbots
SSH Login Bruteforce
2020-06-27 16:27:13
45.55.189.252 attack
Jun 18 20:44:49 vmd48417 sshd[26390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.189.252
2020-06-19 03:48:53
45.55.189.252 attackspambots
(sshd) Failed SSH login from 45.55.189.252 (US/United States/fotomate.in): 5 in the last 3600 secs
2020-06-16 12:40:49
45.55.189.252 attack
2020-06-15T20:50:00.646821ns386461 sshd\[16746\]: Invalid user icinga from 45.55.189.252 port 52124
2020-06-15T20:50:00.652813ns386461 sshd\[16746\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.189.252
2020-06-15T20:50:03.111348ns386461 sshd\[16746\]: Failed password for invalid user icinga from 45.55.189.252 port 52124 ssh2
2020-06-15T20:55:50.372440ns386461 sshd\[22313\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.189.252  user=root
2020-06-15T20:55:51.542582ns386461 sshd\[22313\]: Failed password for root from 45.55.189.252 port 37282 ssh2
...
2020-06-16 04:01:16
45.55.189.252 attackbotsspam
(sshd) Failed SSH login from 45.55.189.252 (US/United States/fotomate.in): 5 in the last 3600 secs
2020-06-14 04:44:03
45.55.189.252 attack
May 21 12:03:48 *** sshd[326]: Invalid user qmq from 45.55.189.252
2020-05-21 20:44:06
45.55.189.252 attackbots
SSH brute-force: detected 10 distinct usernames within a 24-hour window.
2020-05-06 04:54:33
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.55.189.113
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60650
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.55.189.113.			IN	A

;; AUTHORITY SECTION:
.			507	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020071101 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jul 12 04:02:20 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 113.189.55.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 113.189.55.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
61.172.238.77 attackspambots
Jul 12 06:42:25 ip-172-31-1-72 sshd\[13085\]: Invalid user mc from 61.172.238.77
Jul 12 06:42:25 ip-172-31-1-72 sshd\[13085\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.172.238.77
Jul 12 06:42:27 ip-172-31-1-72 sshd\[13085\]: Failed password for invalid user mc from 61.172.238.77 port 48794 ssh2
Jul 12 06:48:28 ip-172-31-1-72 sshd\[13234\]: Invalid user shop from 61.172.238.77
Jul 12 06:48:28 ip-172-31-1-72 sshd\[13234\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.172.238.77
2019-07-12 15:15:08
112.170.27.139 attack
Jul 12 01:55:37 server sshd[24150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.170.27.139
...
2019-07-12 15:32:58
182.61.34.79 attackspambots
Jul 11 23:18:28 vtv3 sshd\[28668\]: Invalid user public from 182.61.34.79 port 45092
Jul 11 23:18:28 vtv3 sshd\[28668\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.34.79
Jul 11 23:18:31 vtv3 sshd\[28668\]: Failed password for invalid user public from 182.61.34.79 port 45092 ssh2
Jul 11 23:27:21 vtv3 sshd\[829\]: Invalid user git2 from 182.61.34.79 port 6220
Jul 11 23:27:21 vtv3 sshd\[829\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.34.79
Jul 11 23:50:46 vtv3 sshd\[12264\]: Invalid user admwizzbe from 182.61.34.79 port 42327
Jul 11 23:50:46 vtv3 sshd\[12264\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.34.79
Jul 11 23:50:47 vtv3 sshd\[12264\]: Failed password for invalid user admwizzbe from 182.61.34.79 port 42327 ssh2
Jul 11 23:56:34 vtv3 sshd\[14971\]: Invalid user aman from 182.61.34.79 port 35364
Jul 11 23:56:35 vtv3 sshd\[14971\]: pam_unix\(s
2019-07-12 15:36:55
139.59.6.148 attackspambots
Invalid user nexus from 139.59.6.148 port 44066
2019-07-12 14:35:53
107.173.145.168 attackbots
Jul 12 03:12:17 plusreed sshd[26029]: Invalid user paul from 107.173.145.168
...
2019-07-12 15:20:18
188.11.67.165 attackbotsspam
Jul 12 12:43:29 areeb-Workstation sshd\[2911\]: Invalid user lxm from 188.11.67.165
Jul 12 12:43:29 areeb-Workstation sshd\[2911\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.11.67.165
Jul 12 12:43:31 areeb-Workstation sshd\[2911\]: Failed password for invalid user lxm from 188.11.67.165 port 49514 ssh2
...
2019-07-12 15:27:35
199.127.56.236 attack
I don't know who this is but they keep stalking me and it's been for months now and I just wish it would stop. I don't like it because it makes me uncomfortable.
2019-07-12 14:53:02
119.6.99.204 attackspambots
Jul 12 02:50:09 vps200512 sshd\[9168\]: Invalid user test from 119.6.99.204
Jul 12 02:50:09 vps200512 sshd\[9168\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.6.99.204
Jul 12 02:50:11 vps200512 sshd\[9168\]: Failed password for invalid user test from 119.6.99.204 port 9926 ssh2
Jul 12 02:55:49 vps200512 sshd\[9311\]: Invalid user claudio from 119.6.99.204
Jul 12 02:55:49 vps200512 sshd\[9311\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.6.99.204
2019-07-12 15:06:12
198.108.66.173 attackbotsspam
3389BruteforceFW21
2019-07-12 15:14:08
121.67.246.132 attackbots
Jul 12 06:56:52 ip-172-31-1-72 sshd\[13401\]: Invalid user flor from 121.67.246.132
Jul 12 06:56:52 ip-172-31-1-72 sshd\[13401\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.67.246.132
Jul 12 06:56:54 ip-172-31-1-72 sshd\[13401\]: Failed password for invalid user flor from 121.67.246.132 port 43354 ssh2
Jul 12 07:02:54 ip-172-31-1-72 sshd\[13514\]: Invalid user tester from 121.67.246.132
Jul 12 07:02:54 ip-172-31-1-72 sshd\[13514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.67.246.132
2019-07-12 15:17:45
103.91.54.100 attackspambots
Invalid user xt from 103.91.54.100 port 53953
2019-07-12 14:52:15
185.53.88.47 attack
MultiHost/MultiPort Probe, Scan, Hack -
2019-07-12 15:09:09
142.93.117.249 attackspam
Jul 11 15:05:08 voyager sshd[43035]: Disconnected from invalid user ry 142.93.117.249 port 36358 [preauth]                                                                                                                                                                                                                   Jul 11 15:09:36 voyager sshd[19117]: Invalid user fp from 142.93.117.249 port 36474                                                                                                                                                                                                                                          Jul 11 15:09:36 voyager sshd[19117]: Failed password for invalid user fp from 142.93.117.249 port 36474 ssh2                                                                                                                                                                                                                 Jul 11 15:09:36 voyager sshd[19117]: Received disconnect from 142.93.117.
2019-07-12 15:23:06
103.42.57.65 attackspambots
Jul 12 08:46:18 * sshd[12811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.42.57.65
Jul 12 08:46:21 * sshd[12811]: Failed password for invalid user tom from 103.42.57.65 port 56648 ssh2
2019-07-12 15:16:41
188.127.230.15 attack
188.127.230.15 - - [12/Jul/2019:02:40:21 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
188.127.230.15 - - [12/Jul/2019:02:40:22 +0200] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
188.127.230.15 - - [12/Jul/2019:02:40:22 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
188.127.230.15 - - [12/Jul/2019:02:40:22 +0200] "POST /wp-login.php HTTP/1.1" 200 1607 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
188.127.230.15 - - [12/Jul/2019:02:40:22 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
188.127.230.15 - - [12/Jul/2019:02:40:22 +0200] "POST /wp-login.php HTTP/1.1" 200 1608 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2019-07-12 15:15:34

Recently Reported IPs

106.55.13.121 5.252.229.90 124.112.204.41 109.207.1.97
212.70.149.19 103.120.221.97 175.213.24.199 117.69.190.91
201.119.192.179 98.255.132.76 103.206.205.5 115.84.76.236
172.104.43.120 180.244.41.198 106.110.111.233 52.188.168.78
105.112.99.219 248.207.219.35 141.0.146.227 80.170.221.235