45.55.41.98 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	fail2ban honeypot	2019-12-26 02:21:44
attackbots	Automatic report - Banned IP Access	2019-11-22 14:39:56
attackspambots	timhelmke.de 45.55.41.98 \[10/Nov/2019:01:12:26 +0100\] "POST /wp-login.php HTTP/1.1" 200 5592 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" timhelmke.de 45.55.41.98 \[10/Nov/2019:01:12:27 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4082 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-11-10 08:46:14
attackspambots	Automatic report - XMLRPC Attack	2019-11-09 16:03:24
attackspam	xmlrpc attack	2019-11-04 05:25:24

Comments on same subnet:

IP	Type	Details	Datetime
45.55.41.113	attack	Oct 9 15:59:19 vpn01 sshd[4052]: Failed password for root from 45.55.41.113 port 50772 ssh2 ...	2020-10-10 05:39:46
45.55.41.113	attackspam	Oct 9 14:55:31 vpn01 sshd[3438]: Failed password for root from 45.55.41.113 port 35716 ssh2 ...	2020-10-09 21:44:41
45.55.41.113	attackbotsspam	Repeated brute force against a port	2020-10-09 13:34:20
45.55.41.113	attack	Brute-Force,SSH	2020-09-14 04:01:34
45.55.41.113	attack	malicious Brute-Force reported by https://www.patrick-binder.de ...	2020-09-13 20:06:23
45.55.41.113	attackbotsspam	45.55.41.113 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 9 00:47:15 server5 sshd[23837]: Failed password for root from 88.136.99.40 port 39066 ssh2 Sep 9 00:45:38 server5 sshd[23278]: Failed password for root from 164.132.54.215 port 45168 ssh2 Sep 9 00:42:12 server5 sshd[21667]: Failed password for root from 45.55.41.113 port 33524 ssh2 Sep 9 00:49:05 server5 sshd[24696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.15.54 user=root Sep 9 00:42:10 server5 sshd[21667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.41.113 user=root IP Addresses Blocked: 88.136.99.40 (FR/France/-) 164.132.54.215 (FR/France/-)	2020-09-09 22:56:49
45.55.41.113	attackspambots	45.55.41.113 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 9 00:47:15 server5 sshd[23837]: Failed password for root from 88.136.99.40 port 39066 ssh2 Sep 9 00:45:38 server5 sshd[23278]: Failed password for root from 164.132.54.215 port 45168 ssh2 Sep 9 00:42:12 server5 sshd[21667]: Failed password for root from 45.55.41.113 port 33524 ssh2 Sep 9 00:49:05 server5 sshd[24696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.15.54 user=root Sep 9 00:42:10 server5 sshd[21667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.41.113 user=root IP Addresses Blocked: 88.136.99.40 (FR/France/-) 164.132.54.215 (FR/France/-)	2020-09-09 16:39:53
45.55.41.113	attack	Sep 7 12:28:05 vps sshd[24205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.41.113 Sep 7 12:28:07 vps sshd[24205]: Failed password for invalid user andcze from 45.55.41.113 port 36186 ssh2 Sep 7 12:32:33 vps sshd[24390]: Failed password for root from 45.55.41.113 port 43520 ssh2 ...	2020-09-08 03:33:27
45.55.41.113	attackspambots	Sep 7 12:28:05 vps sshd[24205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.41.113 Sep 7 12:28:07 vps sshd[24205]: Failed password for invalid user andcze from 45.55.41.113 port 36186 ssh2 Sep 7 12:32:33 vps sshd[24390]: Failed password for root from 45.55.41.113 port 43520 ssh2 ...	2020-09-07 19:06:08
45.55.41.191	attackspam	[SunOct0613:39:30.0569352019][:error][pid1449:tid46955279439616][client45.55.41.191:57548][client45.55.41.191]ModSecurity:Accessdeniedwithcode403$phase2$.Matchof"rx$clientscript/yui/connection/javascript\\\\\\\\:false\$$"against"REQUEST_HEADERS:Referer"required.[file"/usr/local/apache.ea3/conf/modsec_rules/10_asl_rules.conf"][line"1016"][id"340003"][rev"9"][msg"Atomicorp.comWAFRules:XSSattackinrequestheaders"][severity"CRITICAL"][hostname"pepperdreams.ch"][uri"/"][unique_id"XZnSchQeQY@yGgBfwaEBOgAAABA"]\,referer:"\>\attackspambots	Aug 12 16:21:20 sshgateway sshd\[7621\]: Invalid user support from 45.55.41.232 Aug 12 16:21:20 sshgateway sshd\[7621\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.41.232 Aug 12 16:21:22 sshgateway sshd\[7621\]: Failed password for invalid user support from 45.55.41.232 port 55844 ssh2	2019-08-13 01:54:44
45.55.41.232	attack	Jul 17 06:13:58 MK-Soft-VM4 sshd\[26407\]: Invalid user peter from 45.55.41.232 port 34502 Jul 17 06:13:58 MK-Soft-VM4 sshd\[26407\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.41.232 Jul 17 06:14:00 MK-Soft-VM4 sshd\[26407\]: Failed password for invalid user peter from 45.55.41.232 port 34502 ssh2 ...	2019-07-17 15:02:16
45.55.41.232	attackbots	Jul 16 19:43:55 itv-usvr-02 sshd[30753]: Invalid user git from 45.55.41.232 port 48646	2019-07-16 21:24:52
45.55.41.232	attack	Invalid user wolf from 45.55.41.232 port 43848	2019-07-13 14:31:53
45.55.41.232	attackbotsspam	Jul 2 05:07:34 MK-Soft-VM4 sshd\[10542\]: Invalid user dusty from 45.55.41.232 port 41968 Jul 2 05:07:34 MK-Soft-VM4 sshd\[10542\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.41.232 Jul 2 05:07:36 MK-Soft-VM4 sshd\[10542\]: Failed password for invalid user dusty from 45.55.41.232 port 41968 ssh2 ...	2019-07-02 13:13:13

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.55.41.98
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10635
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.55.41.98.			IN	A

;; AUTHORITY SECTION:
.			120	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110301 1800 900 604800 86400

;; Query time: 96 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Nov 04 05:25:21 CST 2019
;; MSG SIZE  rcvd: 115

Host info

Host 98.41.55.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 98.41.55.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
201.156.8.162	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-07-18 00:03:37
142.44.211.229	attackspam	$f2bV_matches	2019-07-17 23:37:31
68.183.83.166	attack	Invalid user fake from 68.183.83.166 port 59710	2019-07-17 23:46:36
159.65.131.134	attackbotsspam	Invalid user admin from 159.65.131.134 port 53282 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.131.134 Failed password for invalid user admin from 159.65.131.134 port 53282 ssh2 Invalid user user from 159.65.131.134 port 51988 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.131.134	2019-07-17 23:58:50
168.126.101.166	attack	17.07.2019 14:29:01 SSH access blocked by firewall	2019-07-17 23:58:28
3.86.218.233	attack	3389BruteforceFW21	2019-07-18 00:36:52
60.11.113.212	attackbots	Jul 17 09:58:08 icinga sshd[31008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.11.113.212 Jul 17 09:58:10 icinga sshd[31008]: Failed password for invalid user nh from 60.11.113.212 port 15609 ssh2 ...	2019-07-18 00:00:39
156.198.166.58	attack	Invalid user luis from 156.198.166.58 port 57305	2019-07-17 23:42:37
112.85.42.177	attack	Jul 17 18:14:37 v22018076622670303 sshd\[17135\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.177 user=root Jul 17 18:14:39 v22018076622670303 sshd\[17135\]: Failed password for root from 112.85.42.177 port 32235 ssh2 Jul 17 18:14:43 v22018076622670303 sshd\[17135\]: Failed password for root from 112.85.42.177 port 32235 ssh2 ...	2019-07-18 00:25:35
58.213.166.140	attackbotsspam	2019-07-17T16:12:28.159767abusebot-3.cloudsearch.cf sshd\[12533\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.166.140 user=root	2019-07-18 00:19:22
117.141.6.210	attackspam	Jul 17 12:03:21 TORMINT sshd\[22449\]: Invalid user horia from 117.141.6.210 Jul 17 12:03:21 TORMINT sshd\[22449\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.141.6.210 Jul 17 12:03:22 TORMINT sshd\[22449\]: Failed password for invalid user horia from 117.141.6.210 port 37814 ssh2 ...	2019-07-18 00:17:38
212.64.39.109	attackbotsspam	Jul 17 09:08:11 home sshd[20526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.39.109 user=root Jul 17 09:08:13 home sshd[20526]: Failed password for root from 212.64.39.109 port 54208 ssh2 Jul 17 09:21:36 home sshd[20554]: Invalid user weblogic from 212.64.39.109 port 57404 Jul 17 09:21:36 home sshd[20554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.39.109 Jul 17 09:21:36 home sshd[20554]: Invalid user weblogic from 212.64.39.109 port 57404 Jul 17 09:21:39 home sshd[20554]: Failed password for invalid user weblogic from 212.64.39.109 port 57404 ssh2 Jul 17 09:26:15 home sshd[20570]: Invalid user tiny from 212.64.39.109 port 37438 Jul 17 09:26:15 home sshd[20570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.39.109 Jul 17 09:26:15 home sshd[20570]: Invalid user tiny from 212.64.39.109 port 37438 Jul 17 09:26:17 home sshd[20570]: Failed password for invalid us	2019-07-18 00:33:19
108.174.198.159	attackspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-17 00:33:19,260 INFO [shellcode_manager] (108.174.198.159) no match, writing hexdump (35090dd3715541714f274df58369dfd1 :112) - SMB (Unknown) Vulnerability	2019-07-18 00:22:05
134.209.106.112	attack	2019-07-17T16:41:25.521453abusebot-7.cloudsearch.cf sshd\[16847\]: Invalid user redmine from 134.209.106.112 port 49808	2019-07-18 00:48:36
85.185.149.28	attackspam	Jul 17 12:53:27 microserver sshd[54658]: Invalid user rdp from 85.185.149.28 port 32833 Jul 17 12:53:27 microserver sshd[54658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.185.149.28 Jul 17 12:53:29 microserver sshd[54658]: Failed password for invalid user rdp from 85.185.149.28 port 32833 ssh2 Jul 17 12:58:32 microserver sshd[55924]: Invalid user taiga from 85.185.149.28 port 56037 Jul 17 12:58:32 microserver sshd[55924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.185.149.28 Jul 17 13:08:36 microserver sshd[58435]: Invalid user codeunbug from 85.185.149.28 port 45996 Jul 17 13:08:36 microserver sshd[58435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.185.149.28 Jul 17 13:08:38 microserver sshd[58435]: Failed password for invalid user codeunbug from 85.185.149.28 port 45996 ssh2 Jul 17 13:13:31 microserver sshd[59641]: Invalid user user1 from 85.185.149.28 port 40972 J	2019-07-18 00:50:44

Recently Reported IPs

170.233.178.83	196.2.192.73	49.66.211.254	157.124.144.111
101.250.188.78	218.43.18.140	207.57.22.153	211.66.171.203
163.62.242.227	121.29.173.70	185.80.54.94	18.190.92.244
223.112.34.40	59.124.51.46	2.39.238.73	200.134.56.25
205.40.50.24	5.71.192.188	51.159.57.28	78.13.88.88