Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
2020-03-03T18:15:31.518104upcloud.m0sh1x2.com sshd[26764]: Invalid user admin from 45.55.49.174 port 39648
2020-03-04 02:22:35
Comments on same subnet:
IP Type Details Datetime
45.55.49.45 attackbotsspam
xmlrpc attack
2020-08-09 12:36:44
45.55.49.45 attackbots
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-06-29 18:12:23
45.55.49.201 attack
HTTP_USER_AGENT Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)
2020-06-12 02:35:14
45.55.49.45 attack
diesunddas.net 45.55.49.45 [02/Jun/2020:05:54:46 +0200] "POST /wp-login.php HTTP/1.1" 200 8447 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
diesunddas.net 45.55.49.45 [02/Jun/2020:05:54:47 +0200] "POST /wp-login.php HTTP/1.1" 200 8447 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-06-02 13:13:49
45.55.49.33 attackbotsspam
SpamScore above: 10.0
2020-05-13 19:56:47
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.55.49.174
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 128
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.55.49.174.			IN	A

;; AUTHORITY SECTION:
.			415	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030300 1800 900 604800 86400

;; Query time: 114 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 04 02:22:32 CST 2020
;; MSG SIZE  rcvd: 116
Host info
Host 174.49.55.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 174.49.55.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
149.56.15.98 attack
2020-06-24T10:40:51.6711531240 sshd\[9537\]: Invalid user earl from 149.56.15.98 port 59669
2020-06-24T10:40:51.6749331240 sshd\[9537\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.15.98
2020-06-24T10:40:53.8634791240 sshd\[9537\]: Failed password for invalid user earl from 149.56.15.98 port 59669 ssh2
...
2020-06-24 19:15:25
140.246.229.200 attack
Jun 24 07:50:39 rotator sshd\[2851\]: Failed password for root from 140.246.229.200 port 50034 ssh2Jun 24 07:52:25 rotator sshd\[2874\]: Failed password for root from 140.246.229.200 port 38748 ssh2Jun 24 07:54:10 rotator sshd\[2888\]: Invalid user sftp from 140.246.229.200Jun 24 07:54:12 rotator sshd\[2888\]: Failed password for invalid user sftp from 140.246.229.200 port 55694 ssh2Jun 24 07:56:05 rotator sshd\[3673\]: Invalid user kim from 140.246.229.200Jun 24 07:56:06 rotator sshd\[3673\]: Failed password for invalid user kim from 140.246.229.200 port 44420 ssh2
...
2020-06-24 19:42:12
106.243.2.244 attackbots
sshd: Failed password for invalid user .... from 106.243.2.244 port 41204 ssh2 (6 attempts)
2020-06-24 19:52:55
209.97.175.128 attack
20 attempts against mh-ssh on river
2020-06-24 19:48:58
45.236.64.138 attackbotsspam
Jun 24 06:57:15 h2779839 sshd[5239]: Invalid user bfq from 45.236.64.138 port 29012
Jun 24 06:57:15 h2779839 sshd[5239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.236.64.138
Jun 24 06:57:15 h2779839 sshd[5239]: Invalid user bfq from 45.236.64.138 port 29012
Jun 24 06:57:16 h2779839 sshd[5239]: Failed password for invalid user bfq from 45.236.64.138 port 29012 ssh2
Jun 24 07:01:09 h2779839 sshd[5327]: Invalid user haolong from 45.236.64.138 port 25397
Jun 24 07:01:09 h2779839 sshd[5327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.236.64.138
Jun 24 07:01:09 h2779839 sshd[5327]: Invalid user haolong from 45.236.64.138 port 25397
Jun 24 07:01:11 h2779839 sshd[5327]: Failed password for invalid user haolong from 45.236.64.138 port 25397 ssh2
Jun 24 07:05:02 h2779839 sshd[5452]: Invalid user core from 45.236.64.138 port 21738
...
2020-06-24 19:44:02
182.71.221.78 attackbotsspam
...
2020-06-24 19:53:52
43.226.145.238 attackspam
5x Failed Password
2020-06-24 19:25:48
104.131.157.96 attackbots
2020-06-24T11:05:11.953677shield sshd\[12325\]: Invalid user git from 104.131.157.96 port 44552
2020-06-24T11:05:11.956518shield sshd\[12325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.157.96
2020-06-24T11:05:14.676218shield sshd\[12325\]: Failed password for invalid user git from 104.131.157.96 port 44552 ssh2
2020-06-24T11:11:19.721568shield sshd\[13979\]: Invalid user istian from 104.131.157.96 port 45212
2020-06-24T11:11:19.725293shield sshd\[13979\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.157.96
2020-06-24 19:18:04
139.186.84.46 attackbots
Jun 24 04:50:25 ws24vmsma01 sshd[55688]: Failed password for root from 139.186.84.46 port 50350 ssh2
...
2020-06-24 19:30:48
183.134.89.199 attack
Jun 24 09:45:43 nextcloud sshd\[13653\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.134.89.199  user=elasticsearch
Jun 24 09:45:46 nextcloud sshd\[13653\]: Failed password for elasticsearch from 183.134.89.199 port 50366 ssh2
Jun 24 09:49:28 nextcloud sshd\[18331\]: Invalid user uftp from 183.134.89.199
Jun 24 09:49:28 nextcloud sshd\[18331\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.134.89.199
2020-06-24 19:17:44
83.97.20.35 attackspam
 TCP (SYN) 83.97.20.35:45425 -> port 10001, len 44
2020-06-24 19:45:27
163.172.40.236 attackbots
163.172.40.236 - - [24/Jun/2020:15:17:19 +0400] "POST /GponForm/diag_Form?style/ HTTP/1.1" 502 157 "-" "curl/7.3.2"
...
2020-06-24 19:37:40
41.218.87.226 attackspam
SMB Server BruteForce Attack
2020-06-24 19:50:06
124.29.242.190 attackbotsspam
Icarus honeypot on github
2020-06-24 19:44:38
175.213.185.129 attack
Jun 24 01:53:16 dignus sshd[22044]: Failed password for invalid user mql from 175.213.185.129 port 52336 ssh2
Jun 24 01:54:12 dignus sshd[22130]: Invalid user default from 175.213.185.129 port 32992
Jun 24 01:54:12 dignus sshd[22130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.213.185.129
Jun 24 01:54:14 dignus sshd[22130]: Failed password for invalid user default from 175.213.185.129 port 32992 ssh2
Jun 24 01:55:12 dignus sshd[22226]: Invalid user admin from 175.213.185.129 port 41890
...
2020-06-24 19:17:06

Recently Reported IPs

209.201.36.227 153.149.12.73 139.196.236.152 123.148.145.17
49.232.16.13 104.215.192.70 101.51.97.163 104.200.144.21
62.171.153.96 115.84.92.61 103.253.42.5 42.114.36.154
180.124.78.196 103.14.36.218 101.51.149.220 183.81.55.91
162.241.158.22 156.96.118.36 154.9.173.155 103.21.59.20