Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
firewall-block, port(s): 23786/tcp
2020-10-05 06:04:49
attackbots
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-10-04 22:03:38
attackspambots
firewall-block, port(s): 6864/tcp
2020-10-04 13:49:33
attack
 TCP (SYN) 45.55.65.92:55907 -> port 24092, len 44
2020-10-04 02:11:02
attackspambots
 TCP (SYN) 45.55.65.92:55907 -> port 24092, len 44
2020-10-03 17:56:13
attack
 TCP (SYN) 45.55.65.92:44462 -> port 22831, len 44
2020-09-27 01:17:38
attack
ET CINS Active Threat Intelligence Poor Reputation IP group 29 - port: 114 proto: tcp cat: Misc Attackbytes: 60
2020-09-26 17:09:55
attackspambots
 TCP (SYN) 45.55.65.92:44677 -> port 30778, len 44
2020-09-12 20:00:24
attackspambots
30778/tcp 20032/tcp 21192/tcp...
[2020-08-30/09-11]43pkt,15pt.(tcp)
2020-09-12 12:02:55
attackspambots
firewall-block, port(s): 20032/tcp
2020-09-12 03:51:33
attack
Fail2Ban Ban Triggered
2020-04-24 20:59:35
attackbots
Port Scan: Events[2] countPorts[2]: 22912 26199 ..
2020-04-16 05:27:02
attackspam
Port 12930 scan denied
2020-03-28 19:42:37
attackbots
Mar 26 11:25:52 debian-2gb-nbg1-2 kernel: \[7477427.856143\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.55.65.92 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=17152 PROTO=TCP SPT=43828 DPT=26705 WINDOW=1024 RES=0x00 SYN URGP=0
2020-03-26 19:06:41
attackspam
2020-03-11T02:08:00.807412abusebot-3.cloudsearch.cf sshd[16933]: Invalid user ftptest from 45.55.65.92 port 38990
2020-03-11T02:08:00.812807abusebot-3.cloudsearch.cf sshd[16933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.65.92
2020-03-11T02:08:00.807412abusebot-3.cloudsearch.cf sshd[16933]: Invalid user ftptest from 45.55.65.92 port 38990
2020-03-11T02:08:03.182881abusebot-3.cloudsearch.cf sshd[16933]: Failed password for invalid user ftptest from 45.55.65.92 port 38990 ssh2
2020-03-11T02:13:11.332315abusebot-3.cloudsearch.cf sshd[17240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.65.92  user=root
2020-03-11T02:13:13.732713abusebot-3.cloudsearch.cf sshd[17240]: Failed password for root from 45.55.65.92 port 40312 ssh2
2020-03-11T02:16:10.265576abusebot-3.cloudsearch.cf sshd[17395]: Invalid user osman from 45.55.65.92 port 57354
...
2020-03-11 10:32:44
attackbots
Port 10192 scan denied
2020-03-07 02:52:39
attackspam
firewall-block, port(s): 10173/tcp
2020-02-27 08:58:38
attackbots
Port 10169 scan denied
2020-02-27 02:50:58
attackbotsspam
*Port Scan* detected from 45.55.65.92 (US/United States/-). 4 hits in the last 115 seconds
2020-02-25 05:10:24
attackspam
firewall-block, port(s): 10157/tcp
2020-02-20 21:22:22
attack
SSH Brute-Forcing (server2)
2020-02-15 18:11:53
attack
Fail2Ban Ban Triggered
2020-02-09 00:45:15
attackbotsspam
Multiport scan 19 ports : 10100 10101 10102 10103 10104 10105 10106 10107 10108 10109 10110(x2) 10111 10112 10113 10114 10115 10116 10117 10118
2020-02-06 07:35:41
attack
Dec 22 23:18:00 server sshd\[25921\]: Failed password for invalid user wwwrun from 45.55.65.92 port 59436 ssh2
Dec 23 12:22:54 server sshd\[14460\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.65.92  user=root
Dec 23 12:22:56 server sshd\[14460\]: Failed password for root from 45.55.65.92 port 40966 ssh2
Dec 23 12:31:57 server sshd\[16933\]: Invalid user tk from 45.55.65.92
Dec 23 12:31:57 server sshd\[16933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.65.92 
...
2019-12-23 17:50:43
attackbots
Dec 20 07:24:03 MK-Soft-VM7 sshd[9038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.65.92 
Dec 20 07:24:05 MK-Soft-VM7 sshd[9038]: Failed password for invalid user z123456789 from 45.55.65.92 port 35742 ssh2
...
2019-12-20 21:15:59
attack
Dec 15 20:19:20 ns381471 sshd[27297]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.65.92
Dec 15 20:19:22 ns381471 sshd[27297]: Failed password for invalid user QWERASDFzxcv123 from 45.55.65.92 port 33568 ssh2
2019-12-16 03:34:16
attackspam
Dec 13 07:48:40 vtv3 sshd[8108]: Failed password for invalid user samaroo from 45.55.65.92 port 48284 ssh2
Dec 13 07:53:59 vtv3 sshd[10497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.65.92 
Dec 13 08:04:32 vtv3 sshd[15265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.65.92 
Dec 13 08:04:34 vtv3 sshd[15265]: Failed password for invalid user iguchi from 45.55.65.92 port 45962 ssh2
Dec 13 08:09:50 vtv3 sshd[17677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.65.92 
Dec 13 08:20:21 vtv3 sshd[22851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.65.92 
Dec 13 08:20:23 vtv3 sshd[22851]: Failed password for invalid user scp from 45.55.65.92 port 43838 ssh2
Dec 13 08:26:48 vtv3 sshd[25762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.65.92 
Dec 13 08:37:16 vtv3 sshd[31047
2019-12-14 16:39:12
attackbots
Dec 10 23:59:00 php1 sshd\[19285\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.65.92  user=www-data
Dec 10 23:59:03 php1 sshd\[19285\]: Failed password for www-data from 45.55.65.92 port 52140 ssh2
Dec 11 00:04:44 php1 sshd\[20070\]: Invalid user sungbae from 45.55.65.92
Dec 11 00:04:44 php1 sshd\[20070\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.65.92
Dec 11 00:04:46 php1 sshd\[20070\]: Failed password for invalid user sungbae from 45.55.65.92 port 32936 ssh2
2019-12-11 18:10:47
attack
Oct 14 06:44:32 site3 sshd\[236804\]: Invalid user P4$$W0RD1234 from 45.55.65.92
Oct 14 06:44:32 site3 sshd\[236804\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.65.92
Oct 14 06:44:34 site3 sshd\[236804\]: Failed password for invalid user P4$$W0RD1234 from 45.55.65.92 port 57786 ssh2
Oct 14 06:48:35 site3 sshd\[236886\]: Invalid user Micro@2017 from 45.55.65.92
Oct 14 06:48:35 site3 sshd\[236886\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.65.92
...
2019-10-14 17:53:32
attack
Oct 12 17:17:23 MK-Soft-VM6 sshd[16288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.65.92 
Oct 12 17:17:25 MK-Soft-VM6 sshd[16288]: Failed password for invalid user Chicken2017 from 45.55.65.92 port 48816 ssh2
...
2019-10-12 23:52:59
Comments on same subnet:
IP Type Details Datetime
45.55.65.221 attackbotsspam
enlinea.de 45.55.65.221 \[19/Sep/2019:21:35:19 +0200\] "POST /wp-login.php HTTP/1.1" 200 5770 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
enlinea.de 45.55.65.221 \[19/Sep/2019:21:35:25 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4075 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-09-20 04:02:05
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.55.65.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48308
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.55.65.92.			IN	A

;; AUTHORITY SECTION:
.			286	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100901 1800 900 604800 86400

;; Query time: 270 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 10 13:20:20 CST 2019
;; MSG SIZE  rcvd: 115
Host info
Host 92.65.55.45.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 92.65.55.45.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
46.249.48.11 attackbotsspam
Still sending PORN junk daily.
2020-04-12 17:11:48
185.36.81.23 attackbotsspam
Rude login attack (18 tries in 1d)
2020-04-12 16:56:57
167.99.15.232 attackspambots
Invalid user user2 from 167.99.15.232 port 53994
2020-04-12 16:31:35
193.142.146.21 attackbotsspam
Apr 12 11:41:02 server2 sshd\[7765\]: User root from 193.142.146.21 not allowed because not listed in AllowUsers
Apr 12 11:41:02 server2 sshd\[7767\]: User root from 193.142.146.21 not allowed because not listed in AllowUsers
Apr 12 11:41:02 server2 sshd\[7769\]: Invalid user administrator from 193.142.146.21
Apr 12 11:41:03 server2 sshd\[7771\]: Invalid user amx from 193.142.146.21
Apr 12 11:41:03 server2 sshd\[7773\]: Invalid user admin from 193.142.146.21
Apr 12 11:41:03 server2 sshd\[7775\]: Invalid user cisco from 193.142.146.21
2020-04-12 16:52:23
212.64.8.10 attack
prod11
...
2020-04-12 16:33:51
154.66.107.43 attackspambots
$f2bV_matches
2020-04-12 16:34:14
116.10.133.73 attackbotsspam
Unauthorized connection attempt detected from IP address 116.10.133.73 to port 23 [T]
2020-04-12 16:48:22
110.43.34.195 attackbots
Apr 12 08:07:48 vserver sshd\[4532\]: Failed password for root from 110.43.34.195 port 12658 ssh2Apr 12 08:09:13 vserver sshd\[4614\]: Invalid user test from 110.43.34.195Apr 12 08:09:16 vserver sshd\[4614\]: Failed password for invalid user test from 110.43.34.195 port 28770 ssh2Apr 12 08:10:32 vserver sshd\[4641\]: Invalid user admin from 110.43.34.195
...
2020-04-12 16:43:19
217.92.142.223 attackbots
Apr 12 03:47:53 lamijardin sshd[27787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.92.142.223  user=r.r
Apr 12 03:47:55 lamijardin sshd[27787]: Failed password for r.r from 217.92.142.223 port 54312 ssh2
Apr 12 03:47:55 lamijardin sshd[27787]: Received disconnect from 217.92.142.223 port 54312:11: Bye Bye [preauth]
Apr 12 03:47:55 lamijardin sshd[27787]: Disconnected from 217.92.142.223 port 54312 [preauth]
Apr 12 03:57:37 lamijardin sshd[27927]: Invalid user vcsa from 217.92.142.223
Apr 12 03:57:37 lamijardin sshd[27927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.92.142.223
Apr 12 03:57:39 lamijardin sshd[27927]: Failed password for invalid user vcsa from 217.92.142.223 port 46702 ssh2
Apr 12 03:57:39 lamijardin sshd[27927]: Received disconnect from 217.92.142.223 port 46702:11: Bye Bye [preauth]
Apr 12 03:57:39 lamijardin sshd[27927]: Disconnected from 217.92.142.223 por........
-------------------------------
2020-04-12 16:32:56
49.234.206.45 attackbotsspam
$f2bV_matches
2020-04-12 16:36:25
91.132.0.203 attack
(sshd) Failed SSH login from 91.132.0.203 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 12 09:21:50 amsweb01 sshd[8686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.132.0.203  user=root
Apr 12 09:21:52 amsweb01 sshd[8686]: Failed password for root from 91.132.0.203 port 39274 ssh2
Apr 12 09:29:31 amsweb01 sshd[9462]: Invalid user supervisor from 91.132.0.203 port 31714
Apr 12 09:29:33 amsweb01 sshd[9462]: Failed password for invalid user supervisor from 91.132.0.203 port 31714 ssh2
Apr 12 09:32:33 amsweb01 sshd[9709]: Invalid user marek from 91.132.0.203 port 33158
2020-04-12 16:38:01
211.145.49.129 attack
Invalid user sys from 211.145.49.129 port 14580
2020-04-12 17:09:35
194.146.50.35 attack
Apr 12 05:51:58  exim[6986]: [1\48] 1jNTf3-0001og-9e H=shut.isefardi.com (shut.callbite.com) [194.146.50.35] F= rejected after DATA: This message scored 101.1 spam points.
2020-04-12 17:01:51
187.120.21.14 attackbots
Automatic report - XMLRPC Attack
2020-04-12 16:33:23
106.75.176.189 attackspambots
2020-04-12T05:08:29.607477shield sshd\[25285\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.176.189  user=operator
2020-04-12T05:08:31.496840shield sshd\[25285\]: Failed password for operator from 106.75.176.189 port 45182 ssh2
2020-04-12T05:12:14.960682shield sshd\[26084\]: Invalid user mjuma from 106.75.176.189 port 59146
2020-04-12T05:12:14.964691shield sshd\[26084\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.176.189
2020-04-12T05:12:16.743454shield sshd\[26084\]: Failed password for invalid user mjuma from 106.75.176.189 port 59146 ssh2
2020-04-12 16:50:24

Recently Reported IPs

125.166.167.179 218.19.138.66 88.247.27.169 171.224.18.101
191.17.153.46 190.199.147.61 103.249.26.155 2.38.224.181
59.96.83.96 24.235.12.81 49.235.85.234 216.180.108.46
42.4.244.145 199.250.188.129 152.44.103.113 118.243.118.144
178.128.106.139 213.60.135.210 121.122.68.246 182.119.183.136