45.55.58.104 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104 20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104 20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104 20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104 20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104 20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104 20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104 20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104 20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104 20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104 ...	2020-08-02 02:30:17

Type

Details

Datetime

attackspambots

20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104
20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104
20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104
20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104
20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104
20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104
20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104
20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104
20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104
20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104
...

2020-08-02 02:30:17

Comments on same subnet:

IP	Type	Details	Datetime
45.55.58.74	attack	srv02 Mass scanning activity detected Target: 8088(omniorb) ..	2020-10-12 04:38:17
45.55.58.74	attackspambots	ET CINS Active Threat Intelligence Poor Reputation IP group 30 - port: 8088 proto: tcp cat: Misc Attackbytes: 60	2020-10-11 20:41:22
45.55.58.74	attackspambots	Unauthorized connection attempt detected from IP address 45.55.58.74 to port 8088 [T]	2020-10-11 12:38:50
45.55.58.74	attackbots	TCP (SYN) 45.55.58.74:52006 -> port 22, len 44	2020-10-11 06:01:33
45.55.58.101	attack	Fail2Ban Ban Triggered	2020-02-28 23:43:22
45.55.58.101	attackspambots	Fail2Ban Ban Triggered	2020-02-26 08:50:45

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.55.58.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1976
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.55.58.104.			IN	A

;; AUTHORITY SECTION:
.			542	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020080101 1800 900 604800 86400

;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Aug 02 02:30:12 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 104.58.55.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 104.58.55.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
202.147.198.154	attack	Aug 16 15:11:00 cosmoit sshd[717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.147.198.154	2020-08-16 21:29:12
221.155.59.5	attack	Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-08-16 21:31:33
37.139.20.6	attackspambots	Aug 16 13:25:49 gospond sshd[13404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.139.20.6 Aug 16 13:25:49 gospond sshd[13404]: Invalid user lulu from 37.139.20.6 port 53431 Aug 16 13:25:52 gospond sshd[13404]: Failed password for invalid user lulu from 37.139.20.6 port 53431 ssh2 ...	2020-08-16 20:53:07
222.186.180.223	attackbots	Aug 16 15:23:48 vps sshd[796879]: Failed password for root from 222.186.180.223 port 51790 ssh2 Aug 16 15:23:52 vps sshd[796879]: Failed password for root from 222.186.180.223 port 51790 ssh2 Aug 16 15:23:56 vps sshd[796879]: Failed password for root from 222.186.180.223 port 51790 ssh2 Aug 16 15:23:59 vps sshd[796879]: Failed password for root from 222.186.180.223 port 51790 ssh2 Aug 16 15:24:02 vps sshd[796879]: Failed password for root from 222.186.180.223 port 51790 ssh2 ...	2020-08-16 21:26:54
69.245.71.26	attackspambots	Multiple SSH authentication failures from 69.245.71.26	2020-08-16 21:05:23
71.6.165.200	attackbotsspam	[Tue Aug 11 16:46:59 2020] - DDoS Attack From IP: 71.6.165.200 Port: 28693	2020-08-16 21:26:19
154.0.161.99	attackbots	2020-08-16T12:35:46.067859shield sshd\[20770\]: Invalid user money from 154.0.161.99 port 41120 2020-08-16T12:35:46.077812shield sshd\[20770\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=baymonitoring.dedicated.co.za 2020-08-16T12:35:47.683797shield sshd\[20770\]: Failed password for invalid user money from 154.0.161.99 port 41120 ssh2 2020-08-16T12:40:46.916053shield sshd\[21630\]: Invalid user ed from 154.0.161.99 port 50550 2020-08-16T12:40:46.924820shield sshd\[21630\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=baymonitoring.dedicated.co.za	2020-08-16 21:13:21
49.233.171.219	attack	Aug 16 14:24:46 dev0-dcde-rnet sshd[10751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.171.219 Aug 16 14:24:48 dev0-dcde-rnet sshd[10751]: Failed password for invalid user nikolas from 49.233.171.219 port 25869 ssh2 Aug 16 14:32:59 dev0-dcde-rnet sshd[10805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.171.219	2020-08-16 20:52:50
89.248.169.143	attackspambots	Aug 16 13:01:21 game-panel sshd[9963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.248.169.143 Aug 16 13:01:23 game-panel sshd[9963]: Failed password for invalid user web from 89.248.169.143 port 50294 ssh2 Aug 16 13:06:21 game-panel sshd[10209]: Failed password for root from 89.248.169.143 port 57126 ssh2	2020-08-16 21:14:09
18.139.66.150	attackbots	18.139.66.150 - - [16/Aug/2020:13:25:42 +0100] "POST /wp-login.php HTTP/1.1" 200 2046 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 18.139.66.150 - - [16/Aug/2020:13:25:45 +0100] "POST /wp-login.php HTTP/1.1" 200 2020 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 18.139.66.150 - - [16/Aug/2020:13:25:47 +0100] "POST /wp-login.php HTTP/1.1" 200 2019 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-16 21:00:31
111.229.58.152	attackbotsspam	Aug 16 08:53:06 ny01 sshd[21552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.58.152 Aug 16 08:53:09 ny01 sshd[21552]: Failed password for invalid user test from 111.229.58.152 port 33842 ssh2 Aug 16 08:55:41 ny01 sshd[22233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.58.152	2020-08-16 21:19:54
114.67.254.244	attackbotsspam	Aug 16 14:22:36 sip sshd[1323434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.254.244 user=root Aug 16 14:22:38 sip sshd[1323434]: Failed password for root from 114.67.254.244 port 47089 ssh2 Aug 16 14:25:26 sip sshd[1323470]: Invalid user usergrid from 114.67.254.244 port 32835 ...	2020-08-16 21:27:49
129.211.124.120	attack	Aug 16 14:25:40 ns3164893 sshd[16645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.124.120 Aug 16 14:25:41 ns3164893 sshd[16645]: Failed password for invalid user anpr from 129.211.124.120 port 42126 ssh2 ...	2020-08-16 21:08:33
212.70.149.3	attackbots	Aug 16 15:10:16 cho postfix/smtpd[771101]: warning: unknown[212.70.149.3]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 16 15:10:35 cho postfix/smtpd[771101]: warning: unknown[212.70.149.3]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 16 15:10:54 cho postfix/smtpd[769651]: warning: unknown[212.70.149.3]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 16 15:11:12 cho postfix/smtpd[769651]: warning: unknown[212.70.149.3]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 16 15:11:31 cho postfix/smtpd[770628]: warning: unknown[212.70.149.3]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-08-16 21:12:11
176.106.132.131	attack	$f2bV_matches	2020-08-16 20:53:30

Recently Reported IPs

162.20.137.34	130.135.67.28	110.163.55.57	2.95.58.103
26.145.65.111	39.187.58.34	124.80.0.203	104.87.197.1
180.126.225.105	13.68.234.18	188.49.182.138	230.231.76.79
213.43.42.156	175.159.3.252	218.107.67.243	43.49.7.229
109.178.38.226	121.224.19.45	12.71.38.218	105.27.1.39