45.55.52.13 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	WordPress brute force	2020-06-04 05:14:28

Comments on same subnet:

IP	Type	Details	Datetime
45.55.52.145	attackspambots	fail2ban detected bruce force on ssh iptables	2020-10-13 01:42:53
45.55.52.145	attack	Oct 12 08:11:35 xeon sshd[43682]: Failed password for root from 45.55.52.145 port 43538 ssh2	2020-10-12 17:05:41
45.55.52.145	attack	SSH Invalid Login	2020-10-07 07:12:43
45.55.52.145	attack	sshd: Failed password for .... from 45.55.52.145 port 12902 ssh2 (8 attempts)	2020-10-06 23:33:51
45.55.52.145	attackbotsspam	Oct 6 06:49:04 jumpserver sshd[520203]: Failed password for root from 45.55.52.145 port 45042 ssh2 Oct 6 06:53:10 jumpserver sshd[520308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.52.145 user=root Oct 6 06:53:11 jumpserver sshd[520308]: Failed password for root from 45.55.52.145 port 43301 ssh2 ...	2020-10-06 15:22:48
45.55.52.223	attackspam	Unauthorized connection attempt detected, IP banned.	2020-03-01 09:28:18

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.55.52.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28838
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.55.52.13.			IN	A

;; AUTHORITY SECTION:
.			448	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060302 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jun 04 05:14:25 CST 2020
;; MSG SIZE  rcvd: 115

Host info

Host 13.52.55.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 13.52.55.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
95.177.162.10	attackbotsspam	$f2bV_matches	2019-09-22 01:37:19
220.163.107.130	attack	$f2bV_matches	2019-09-22 01:58:53
145.239.73.103	attackspam	Sep 21 14:53:56 [host] sshd[26964]: Invalid user ie from 145.239.73.103 Sep 21 14:53:56 [host] sshd[26964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.73.103 Sep 21 14:53:58 [host] sshd[26964]: Failed password for invalid user ie from 145.239.73.103 port 36826 ssh2	2019-09-22 01:48:02
45.136.109.140	attackspambots	09/21/2019-14:07:24.880312 45.136.109.140 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-09-22 02:07:40
213.183.101.89	attackbotsspam	Sep 21 16:21:08 meumeu sshd[27275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.183.101.89 Sep 21 16:21:10 meumeu sshd[27275]: Failed password for invalid user user3 from 213.183.101.89 port 56000 ssh2 Sep 21 16:25:48 meumeu sshd[27851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.183.101.89 ...	2019-09-22 02:03:11
68.183.213.39	attackspambots	Sep 21 14:53:59 dedicated sshd[14661]: Invalid user aleida from 68.183.213.39 port 32810	2019-09-22 01:46:42
77.247.110.199	attackbotsspam	\[2019-09-21 13:42:48\] NOTICE\[2270\] chan_sip.c: Registration from '\' failed for '77.247.110.199:62560' - Wrong password \[2019-09-21 13:42:48\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-21T13:42:48.891-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1000086",SessionID="0x7fcd8c197298",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.199/62560",Challenge="4b788f45",ReceivedChallenge="4b788f45",ReceivedHash="f18929b50bd605e0f7e4270b21c487e5" \[2019-09-21 13:42:49\] NOTICE\[2270\] chan_sip.c: Registration from '\' failed for '77.247.110.199:57246' - Wrong password \[2019-09-21 13:42:49\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-21T13:42:49.207-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1000086",SessionID="0x7fcd8c1c4788",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110	2019-09-22 01:55:28
119.28.24.83	attackspambots	Sep 21 20:39:09 tuotantolaitos sshd[18859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.24.83 Sep 21 20:39:10 tuotantolaitos sshd[18859]: Failed password for invalid user cactiuser from 119.28.24.83 port 46478 ssh2 ...	2019-09-22 02:03:31
68.170.109.47	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-21 12:39:51,415 INFO [amun_request_handler] PortScan Detected on Port: 445 (68.170.109.47)	2019-09-22 01:53:00
211.43.13.237	attackspam	Reported by AbuseIPDB proxy server.	2019-09-22 01:59:15
150.249.192.154	attackbots	2019-09-21T17:54:22.482133abusebot-7.cloudsearch.cf sshd\[17028\]: Invalid user admin from 150.249.192.154 port 55998	2019-09-22 01:56:31
189.203.233.206	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-21 12:41:28,832 INFO [amun_request_handler] PortScan Detected on Port: 445 (189.203.233.206)	2019-09-22 01:49:18
186.219.242.201	attackbots	Autoban 186.219.242.201 AUTH/CONNECT	2019-09-22 02:02:26
183.131.82.99	attackspam	2019-09-21T18:16:25.221607abusebot-4.cloudsearch.cf sshd\[17753\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.131.82.99 user=root	2019-09-22 02:16:56
41.144.137.63	attackspambots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/41.144.137.63/ ZA - 1H : (14) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : ZA NAME ASN : ASN5713 IP : 41.144.137.63 CIDR : 41.144.0.0/13 PREFIX COUNT : 117 UNIQUE IP COUNT : 1794304 WYKRYTE ATAKI Z ASN5713 : 1H - 1 3H - 1 6H - 1 12H - 2 24H - 2 INFO : SERVER - ABB - Looking for resource vulnerabilities Detected and Blocked by ADMIN - data recovery	2019-09-22 02:05:37

Recently Reported IPs

121.183.237.118	60.190.135.238	104.236.51.102	103.21.149.200
178.62.50.210	176.88.103.226	143.189.46.186	124.65.250.102
191.162.253.4	59.127.196.121	16.34.155.89	196.241.76.27
61.215.49.6	57.191.174.171	89.32.13.183	134.122.54.93
106.13.164.39	165.193.115.213	246.74.146.196	184.74.93.222