Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Clifton

Region: New Jersey

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: DigitalOcean, LLC

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Feb  7 23:40:06 MK-Soft-Root2 sshd[3978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.225.152 
Feb  7 23:40:08 MK-Soft-Root2 sshd[3978]: Failed password for invalid user kfe from 45.55.225.152 port 41786 ssh2
...
2020-02-08 06:51:57
attackspambots
Unauthorized connection attempt detected from IP address 45.55.225.152 to port 2220 [J]
2020-02-02 04:55:31
attackbots
Unauthorized connection attempt detected from IP address 45.55.225.152 to port 2220 [J]
2020-01-26 01:11:54
attackspambots
Jan 24 21:52:47 mout sshd[808]: Invalid user ren from 45.55.225.152 port 48375
2020-01-25 05:20:33
attack
Unauthorized connection attempt detected from IP address 45.55.225.152 to port 2220 [J]
2020-01-17 23:19:59
attackspambots
Automatic report - Banned IP Access
2020-01-08 03:57:38
attackbots
2019-12-26T06:44:19.262780shield sshd\[23951\]: Invalid user sirevicius from 45.55.225.152 port 53639
2019-12-26T06:44:19.267759shield sshd\[23951\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.225.152
2019-12-26T06:44:21.291265shield sshd\[23951\]: Failed password for invalid user sirevicius from 45.55.225.152 port 53639 ssh2
2019-12-26T06:45:34.695833shield sshd\[24659\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.225.152  user=sshd
2019-12-26T06:45:36.683979shield sshd\[24659\]: Failed password for sshd from 45.55.225.152 port 58352 ssh2
2019-12-26 15:10:13
attackbotsspam
Dec  6 08:41:01 fr01 sshd[19377]: Invalid user ec2-user from 45.55.225.152
Dec  6 08:41:01 fr01 sshd[19377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.225.152
Dec  6 08:41:01 fr01 sshd[19377]: Invalid user ec2-user from 45.55.225.152
Dec  6 08:41:03 fr01 sshd[19377]: Failed password for invalid user ec2-user from 45.55.225.152 port 54271 ssh2
...
2019-12-06 20:59:00
attack
Sep 23 14:19:04 XXX sshd[48300]: Invalid user user from 45.55.225.152 port 60183
2019-09-24 02:32:23
attackspambots
2019-09-01T18:30:23.036639abusebot-7.cloudsearch.cf sshd\[14120\]: Invalid user git from 45.55.225.152 port 35832
2019-09-02 03:02:16
attackspam
Aug 27 03:11:32 vps65 sshd\[1993\]: Invalid user h from 45.55.225.152 port 49041
Aug 27 03:11:32 vps65 sshd\[1993\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.225.152
...
2019-08-27 10:59:21
attack
Aug 26 18:18:41 andromeda sshd\[46293\]: Invalid user git from 45.55.225.152 port 40522
Aug 26 18:18:42 andromeda sshd\[46293\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.225.152
Aug 26 18:18:44 andromeda sshd\[46293\]: Failed password for invalid user git from 45.55.225.152 port 40522 ssh2
2019-08-27 00:27:59
attack
Aug 14 14:49:59 XXX sshd[6651]: Invalid user olimex from 45.55.225.152 port 48588
2019-08-14 23:43:05
attack
Jul  1 01:05:39 srv1 sshd[17668]: Invalid user ghostname from 45.55.225.152
Jul  1 01:05:39 srv1 sshd[17668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.225.152 
Jul  1 01:05:41 srv1 sshd[17668]: Failed password for invalid user ghostname from 45.55.225.152 port 58399 ssh2
Jul  1 01:05:41 srv1 sshd[17668]: Received disconnect from 45.55.225.152: 11: Bye Bye [preauth]
Jul  1 01:06:33 srv1 sshd[17711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.225.152  user=r.r
Jul  1 01:06:35 srv1 sshd[17711]: Failed password for r.r from 45.55.225.152 port 59544 ssh2
Jul  1 01:06:35 srv1 sshd[17711]: Received disconnect from 45.55.225.152: 11: Bye Bye [preauth]
Jul  1 01:06:52 srv1 sshd[17741]: Invalid user javi from 45.55.225.152
Jul  1 01:06:52 srv1 sshd[17741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.225.152 
Jul  1 01:06:54 srv1........
-------------------------------
2019-07-01 16:51:09
attack
Jun 22 06:17:51 xeon sshd[45608]: Invalid user cong from 45.55.225.152
2019-06-22 20:41:24
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.55.225.152
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30695
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.55.225.152.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040501 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sat Apr 06 04:15:57 +08 2019
;; MSG SIZE  rcvd: 117

Host info
Host 152.225.55.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 152.225.55.45.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
188.40.106.120 attack
Found on   CINS badguys     / proto=6  .  srcport=44771  .  dstport=55522  .     (2688)
2020-09-27 20:35:57
124.196.17.78 attack
Invalid user postgres from 124.196.17.78 port 47840
2020-09-27 20:52:03
192.35.169.20 attack
 TCP (SYN) 192.35.169.20:29572 -> port 8080, len 44
2020-09-27 20:25:05
163.172.51.180 attackbotsspam
blocked asn
2020-09-27 20:47:47
49.88.112.70 attack
Sep 27 17:46:17 mx sshd[1009749]: Failed password for root from 49.88.112.70 port 20090 ssh2
Sep 27 17:46:12 mx sshd[1009749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.70  user=root
Sep 27 17:46:14 mx sshd[1009749]: Failed password for root from 49.88.112.70 port 20090 ssh2
Sep 27 17:46:17 mx sshd[1009749]: Failed password for root from 49.88.112.70 port 20090 ssh2
Sep 27 17:46:19 mx sshd[1009749]: Failed password for root from 49.88.112.70 port 20090 ssh2
...
2020-09-27 20:33:03
87.246.143.2 attackbots
Found on   Alienvault    / proto=47  .    .    .     (2690)
2020-09-27 20:26:32
104.248.63.101 attackspambots
Fail2Ban Ban Triggered
2020-09-27 20:33:40
139.155.43.222 attack
Sep 27 05:32:52 mail sshd\[36859\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.43.222  user=root
...
2020-09-27 20:27:27
203.212.250.252 attack
DATE:2020-09-26 22:37:47, IP:203.212.250.252, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)
2020-09-27 20:35:41
222.186.42.213 attack
Sep 27 12:42:41 scw-tender-jepsen sshd[20496]: Failed password for root from 222.186.42.213 port 44228 ssh2
Sep 27 12:42:43 scw-tender-jepsen sshd[20496]: Failed password for root from 222.186.42.213 port 44228 ssh2
2020-09-27 20:45:12
118.89.245.202 attackbotsspam
2020-09-27T07:19:31.618194hostname sshd[9168]: Invalid user fabian from 118.89.245.202 port 40776
2020-09-27T07:19:33.142564hostname sshd[9168]: Failed password for invalid user fabian from 118.89.245.202 port 40776 ssh2
2020-09-27T07:21:53.253146hostname sshd[10202]: Invalid user deploy from 118.89.245.202 port 35208
...
2020-09-27 20:23:23
138.255.148.35 attack
Ssh brute force
2020-09-27 20:57:39
52.188.5.139 attackbots
Flask-IPban - exploit URL requested:/xmlrpc.php
2020-09-27 20:42:50
117.103.168.204 attackspambots
Sep 27 11:12:22 localhost sshd[101518]: Invalid user lidia from 117.103.168.204 port 33052
Sep 27 11:12:22 localhost sshd[101518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.sub168.pika.net.id
Sep 27 11:12:22 localhost sshd[101518]: Invalid user lidia from 117.103.168.204 port 33052
Sep 27 11:12:24 localhost sshd[101518]: Failed password for invalid user lidia from 117.103.168.204 port 33052 ssh2
Sep 27 11:13:24 localhost sshd[101599]: Invalid user user from 117.103.168.204 port 42878
...
2020-09-27 20:52:20
134.209.150.94 attack
TCP ports : 8872 / 26226
2020-09-27 20:25:39

Recently Reported IPs

51.68.127.28 41.228.12.149 41.175.230.43 34.73.182.101
74.70.201.53 38.135.122.124 77.232.160.22 49.156.54.146
128.14.136.78 118.24.26.7 108.35.176.202 202.57.50.59
120.192.201.22 178.128.217.40 62.42.52.172 122.192.199.151
177.9.79.140 62.4.55.61 46.232.112.16 129.204.70.43