45.55.58.74 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	srv02 Mass scanning activity detected Target: 8088(omniorb) ..	2020-10-12 04:38:17
attackspambots	ET CINS Active Threat Intelligence Poor Reputation IP group 30 - port: 8088 proto: tcp cat: Misc Attackbytes: 60	2020-10-11 20:41:22
attackspambots	Unauthorized connection attempt detected from IP address 45.55.58.74 to port 8088 [T]	2020-10-11 12:38:50
attackbots	TCP (SYN) 45.55.58.74:52006 -> port 22, len 44	2020-10-11 06:01:33

Comments on same subnet:

IP	Type	Details	Datetime
45.55.58.104	attackspambots	20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104 20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104 20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104 20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104 20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104 20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104 20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104 20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104 20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104 20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104 ...	2020-08-02 02:30:17
45.55.58.101	attack	Fail2Ban Ban Triggered	2020-02-28 23:43:22
45.55.58.101	attackspambots	Fail2Ban Ban Triggered	2020-02-26 08:50:45

Type

Details

Datetime

45.55.58.104

attackspambots

20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104
20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104
20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104
20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104
20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104
20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104
20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104
20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104
20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104
20/8/1@11:39:57: FAIL: IoT-Telnet address from=45.55.58.104
...

2020-08-02 02:30:17

45.55.58.101

attack

Fail2Ban Ban Triggered

2020-02-28 23:43:22

45.55.58.101

attackspambots

Fail2Ban Ban Triggered

2020-02-26 08:50:45

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.55.58.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37819
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.55.58.74.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020101002 1800 900 604800 86400

;; Query time: 97 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 11 06:01:30 CST 2020
;; MSG SIZE  rcvd: 115

Host info

Host 74.58.55.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 74.58.55.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
94.102.51.17	attackbotsspam	Fail2Ban Ban Triggered	2020-08-23 06:37:22
123.207.153.52	attackbotsspam	Invalid user npf from 123.207.153.52 port 56236	2020-08-23 06:44:47
128.199.128.215	attackspam	prod6 ...	2020-08-23 06:36:16
207.154.215.119	attackbotsspam	SSH Invalid Login	2020-08-23 06:22:21
103.253.3.214	attack	2020-08-23T00:57:20.264727mail.standpoint.com.ua sshd[8006]: Invalid user christian from 103.253.3.214 port 57690 2020-08-23T00:57:20.267405mail.standpoint.com.ua sshd[8006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.253.3.214 2020-08-23T00:57:20.264727mail.standpoint.com.ua sshd[8006]: Invalid user christian from 103.253.3.214 port 57690 2020-08-23T00:57:22.081660mail.standpoint.com.ua sshd[8006]: Failed password for invalid user christian from 103.253.3.214 port 57690 ssh2 2020-08-23T01:01:46.146536mail.standpoint.com.ua sshd[8975]: Invalid user ramu from 103.253.3.214 port 37296 ...	2020-08-23 06:29:58
124.156.244.126	attackbots	Aug 7 16:34:56 hidden postfix/postscreen[11221]: DNSBL rank 4 for [124.156.244.126]:40610	2020-08-23 06:27:23
176.106.132.131	attackbots	Aug 22 21:52:50 jumpserver sshd[5215]: Invalid user kusanagi from 176.106.132.131 port 42137 Aug 22 21:52:53 jumpserver sshd[5215]: Failed password for invalid user kusanagi from 176.106.132.131 port 42137 ssh2 Aug 22 21:53:53 jumpserver sshd[5238]: Invalid user write from 176.106.132.131 port 49580 ...	2020-08-23 06:33:44
104.248.157.207	attack	20 attempts against mh-ssh on cloud	2020-08-23 06:36:53
106.12.83.217	attackbots	Aug 22 18:26:17 george sshd[14988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.83.217 user=lp Aug 22 18:26:19 george sshd[14988]: Failed password for lp from 106.12.83.217 port 35638 ssh2 Aug 22 18:32:03 george sshd[15065]: Invalid user webmaster from 106.12.83.217 port 36218 Aug 22 18:32:03 george sshd[15065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.83.217 Aug 22 18:32:05 george sshd[15065]: Failed password for invalid user webmaster from 106.12.83.217 port 36218 ssh2 ...	2020-08-23 06:39:35
142.93.172.45	attackbotsspam	142.93.172.45 - - [22/Aug/2020:23:33:17 +0200] "GET /wp-login.php HTTP/1.1" 200 1748 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.172.45 - - [22/Aug/2020:23:33:20 +0200] "POST /wp-login.php HTTP/1.1" 200 1880 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.172.45 - - [22/Aug/2020:23:33:21 +0200] "GET /wp-login.php HTTP/1.1" 200 1748 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.172.45 - - [22/Aug/2020:23:33:22 +0200] "POST /wp-login.php HTTP/1.1" 200 1861 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.172.45 - - [22/Aug/2020:23:33:24 +0200] "GET /wp-login.php HTTP/1.1" 200 1748 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.172.45 - - [22/Aug/2020:23:33:25 +0200] "POST /wp-login.php HTTP/1.1" 200 1855 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Fir ...	2020-08-23 06:25:45
192.241.154.168	attack	Aug 22 22:41:53 localhost sshd\[20616\]: Invalid user file from 192.241.154.168 port 36936 Aug 22 22:41:53 localhost sshd\[20616\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.154.168 Aug 22 22:41:55 localhost sshd\[20616\]: Failed password for invalid user file from 192.241.154.168 port 36936 ssh2 ...	2020-08-23 06:45:36
219.136.249.151	attackbots	Aug 23 00:26:32 mout sshd[30825]: Invalid user saroj from 219.136.249.151 port 56545	2020-08-23 06:38:36
103.125.191.146	attackbots	Aug 8 05:26:16 hidden postfix/postscreen[12273]: DNSBL rank 4 for [103.125.191.146]:56929	2020-08-23 06:40:00
193.112.143.80	attack	Invalid user shreya1 from 193.112.143.80 port 53418	2020-08-23 06:19:33
124.16.4.5	attack	Aug 22 18:09:51 NPSTNNYC01T sshd[22560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.4.5 Aug 22 18:09:53 NPSTNNYC01T sshd[22560]: Failed password for invalid user adm from 124.16.4.5 port 43855 ssh2 Aug 22 18:15:17 NPSTNNYC01T sshd[23211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.16.4.5 ...	2020-08-23 06:25:03

Recently Reported IPs

144.217.171.230	106.13.19.147	46.101.154.96	38.88.102.147
158.140.180.71	182.126.99.114	176.127.140.84	111.88.42.89
174.219.150.202	119.45.213.69	177.21.195.122	174.243.97.222
95.178.172.67	188.166.8.132	166.168.3.163	154.74.132.234
85.209.41.238	110.45.190.213	102.23.224.252	54.161.231.48