Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: LinkWays UG

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
Port 22 Scan, PTR: None
2019-12-03 16:57:13
attack
Sep  9 23:42:58 markkoudstaal sshd[9826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.55.121
Sep  9 23:42:59 markkoudstaal sshd[9826]: Failed password for invalid user vnc from 45.95.55.121 port 42238 ssh2
Sep  9 23:48:33 markkoudstaal sshd[10301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.55.121
2019-09-10 09:01:42
Comments on same subnet:
IP Type Details Datetime
45.95.55.58 attackspambots
Brute force SMTP login attempted.
...
2020-03-24 04:24:15
45.95.55.58 attack
Telnet/23 MH Probe, Scan, BF, Hack -
2020-03-21 04:45:12
45.95.55.58 attackspam
Mar 19 13:28:35 archiv sshd[2013]: Address 45.95.55.58 maps to 45.95.55.58.linkways.de, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Mar 19 13:28:35 archiv sshd[2013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.55.58  user=r.r
Mar 19 13:28:37 archiv sshd[2013]: Failed password for r.r from 45.95.55.58 port 42482 ssh2
Mar 19 13:28:37 archiv sshd[2013]: Received disconnect from 45.95.55.58 port 42482:11: Bye Bye [preauth]
Mar 19 13:28:37 archiv sshd[2013]: Disconnected from 45.95.55.58 port 42482 [preauth]
Mar 19 13:28:37 archiv sshd[2018]: Address 45.95.55.58 maps to 45.95.55.58.linkways.de, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Mar 19 13:28:37 archiv sshd[2018]: Invalid user admin from 45.95.55.58 port 45066
Mar 19 13:28:37 archiv sshd[2018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.55.58
Mar 19 13:28:39 archi........
-------------------------------
2020-03-20 00:59:45
45.95.55.69 attackbotsspam
Unauthorised access (Mar  8) SRC=45.95.55.69 LEN=40 PREC=0x20 TTL=56 ID=50708 TCP DPT=23 WINDOW=11789 SYN
2020-03-08 09:14:25
45.95.55.45 attack
2020-02-26T02:49:30.855276vps751288.ovh.net sshd\[30510\]: Invalid user yuanshishi from 45.95.55.45 port 53672
2020-02-26T02:49:30.868517vps751288.ovh.net sshd\[30510\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.55.45
2020-02-26T02:49:33.176183vps751288.ovh.net sshd\[30510\]: Failed password for invalid user yuanshishi from 45.95.55.45 port 53672 ssh2
2020-02-26T02:50:13.933187vps751288.ovh.net sshd\[30512\]: Invalid user budget from 45.95.55.45 port 32808
2020-02-26T02:50:13.940916vps751288.ovh.net sshd\[30512\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.55.45
2020-02-26 10:48:25
45.95.55.97 attackspam
Feb 12 23:17:50 legacy sshd[31371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.55.97
Feb 12 23:17:52 legacy sshd[31371]: Failed password for invalid user abramowitz from 45.95.55.97 port 51165 ssh2
Feb 12 23:21:00 legacy sshd[31591]: Failed password for root from 45.95.55.97 port 37929 ssh2
...
2020-02-13 06:28:31
45.95.55.97 attackbotsspam
Jan 23 21:41:29 server sshd\[10553\]: Invalid user chandru from 45.95.55.97
Jan 23 21:41:29 server sshd\[10553\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.55.97 
Jan 23 21:41:30 server sshd\[10553\]: Failed password for invalid user chandru from 45.95.55.97 port 40080 ssh2
Jan 24 01:23:03 server sshd\[30610\]: Invalid user btest from 45.95.55.97
Jan 24 01:23:03 server sshd\[30610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.55.97 
...
2020-01-24 06:29:14
45.95.55.169 attackspambots
Dec 11 13:44:17 MK-Soft-VM5 sshd[23900]: Failed password for root from 45.95.55.169 port 34454 ssh2
Dec 11 13:49:25 MK-Soft-VM5 sshd[23976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.55.169 
...
2019-12-11 21:07:22
45.95.55.12 attackspambots
Dec  1 08:41:44 mout sshd[18270]: Invalid user user2 from 45.95.55.12 port 48376
2019-12-01 16:03:05
45.95.55.12 attackbots
Nov 30 06:53:58 venus sshd\[1373\]: Invalid user chaales from 45.95.55.12 port 45416
Nov 30 06:53:58 venus sshd\[1373\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.55.12
Nov 30 06:54:00 venus sshd\[1373\]: Failed password for invalid user chaales from 45.95.55.12 port 45416 ssh2
...
2019-11-30 15:52:48
45.95.55.12 attackbots
2019-11-29 09:14:36,184 fail2ban.actions: WARNING [ssh] Ban 45.95.55.12
2019-11-29 18:56:11
45.95.55.12 attack
Nov 24 17:59:46 microserver sshd[50855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.55.12  user=www-data
Nov 24 17:59:48 microserver sshd[50855]: Failed password for www-data from 45.95.55.12 port 40270 ssh2
Nov 24 18:05:54 microserver sshd[52007]: Invalid user burcew from 45.95.55.12 port 48374
Nov 24 18:05:54 microserver sshd[52007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.55.12
Nov 24 18:05:57 microserver sshd[52007]: Failed password for invalid user burcew from 45.95.55.12 port 48374 ssh2
2019-11-24 22:21:41
45.95.55.12 attack
Nov  4 08:56:46 reporting1 sshd[31793]: Address 45.95.55.12 maps to 45.95.55.12.linkways.de, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Nov  4 08:56:46 reporting1 sshd[31793]: Invalid user knoxville from 45.95.55.12
Nov  4 08:56:46 reporting1 sshd[31793]: Failed password for invalid user knoxville from 45.95.55.12 port 58457 ssh2
Nov  4 09:13:23 reporting1 sshd[9301]: Address 45.95.55.12 maps to 45.95.55.12.linkways.de, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Nov  4 09:13:23 reporting1 sshd[9301]: User r.r from 45.95.55.12 not allowed because not listed in AllowUsers
Nov  4 09:13:23 reporting1 sshd[9301]: Failed password for invalid user r.r from 45.95.55.12 port 54813 ssh2
Nov  4 09:16:55 reporting1 sshd[11109]: Address 45.95.55.12 maps to 45.95.55.12.linkways.de, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Nov  4 09:16:55 reporting1 sshd[11109]: Invalid user terminfo from 45.95.55.12........
-------------------------------
2019-11-09 15:32:31
45.95.55.12 attackspam
Nov  4 08:56:46 reporting1 sshd[31793]: Address 45.95.55.12 maps to 45.95.55.12.linkways.de, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Nov  4 08:56:46 reporting1 sshd[31793]: Invalid user knoxville from 45.95.55.12
Nov  4 08:56:46 reporting1 sshd[31793]: Failed password for invalid user knoxville from 45.95.55.12 port 58457 ssh2
Nov  4 09:13:23 reporting1 sshd[9301]: Address 45.95.55.12 maps to 45.95.55.12.linkways.de, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Nov  4 09:13:23 reporting1 sshd[9301]: User r.r from 45.95.55.12 not allowed because not listed in AllowUsers
Nov  4 09:13:23 reporting1 sshd[9301]: Failed password for invalid user r.r from 45.95.55.12 port 54813 ssh2
Nov  4 09:16:55 reporting1 sshd[11109]: Address 45.95.55.12 maps to 45.95.55.12.linkways.de, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Nov  4 09:16:55 reporting1 sshd[11109]: Invalid user terminfo from 45.95.55.12........
-------------------------------
2019-11-08 08:31:18
45.95.55.25 attackspambots
Oct 16 01:05:19 mail sshd[5521]: Invalid user virtual from 45.95.55.25
Oct 16 01:05:19 mail sshd[5521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.55.25
Oct 16 01:05:19 mail sshd[5521]: Invalid user virtual from 45.95.55.25
Oct 16 01:05:22 mail sshd[5521]: Failed password for invalid user virtual from 45.95.55.25 port 40552 ssh2
Oct 16 01:13:16 mail sshd[17345]: Invalid user postgres from 45.95.55.25
...
2019-10-16 07:48:27
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.95.55.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 205
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.95.55.121.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019090902 1800 900 604800 86400

;; Query time: 5 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Sep 10 09:01:37 CST 2019
;; MSG SIZE  rcvd: 116
Host info
121.55.95.45.in-addr.arpa domain name pointer 45.95.55.121.linkways.de.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
121.55.95.45.in-addr.arpa	name = 45.95.55.121.linkways.de.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
200.146.232.97 attackspam
Jan 11 05:53:23 amit sshd\[9894\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.146.232.97  user=root
Jan 11 05:53:25 amit sshd\[9894\]: Failed password for root from 200.146.232.97 port 58180 ssh2
Jan 11 05:59:53 amit sshd\[10005\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.146.232.97  user=root
...
2020-01-11 13:06:04
178.62.12.192 attackspam
Jan 11 05:58:13 MK-Soft-VM7 sshd[5333]: Failed password for root from 178.62.12.192 port 55978 ssh2
...
2020-01-11 13:02:06
104.131.138.126 attackspambots
Invalid user dfh from 104.131.138.126 port 59198
2020-01-11 08:58:44
106.53.110.176 attackbots
Jan 10 23:05:24 host postfix/smtpd[17780]: warning: unknown[106.53.110.176]: SASL LOGIN authentication failed: authentication failure
Jan 10 23:05:25 host postfix/smtpd[17780]: warning: unknown[106.53.110.176]: SASL LOGIN authentication failed: authentication failure
...
2020-01-11 09:14:52
60.250.128.152 attackbots
SSH Bruteforce attack
2020-01-11 09:10:34
186.90.139.76 attack
20/1/10@23:59:31: FAIL: Alarm-Intrusion address from=186.90.139.76
...
2020-01-11 13:11:16
222.186.180.223 attack
Jan 11 02:02:19 vmanager6029 sshd\[20968\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223  user=root
Jan 11 02:02:21 vmanager6029 sshd\[20968\]: Failed password for root from 222.186.180.223 port 47828 ssh2
Jan 11 02:02:43 vmanager6029 sshd\[20982\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223  user=root
2020-01-11 09:09:42
107.170.121.10 attackspambots
2020-01-11T05:59:20.421530centos sshd\[29263\]: Invalid user pentaho from 107.170.121.10 port 46844
2020-01-11T05:59:20.427165centos sshd\[29263\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=www.alexhernandez.cl
2020-01-11T05:59:24.156758centos sshd\[29263\]: Failed password for invalid user pentaho from 107.170.121.10 port 46844 ssh2
2020-01-11 13:13:22
54.38.242.233 attackbots
Jan 11 04:59:46 IngegnereFirenze sshd[25748]: User root from 54.38.242.233 not allowed because not listed in AllowUsers
...
2020-01-11 13:02:55
114.119.137.130 attackbots
badbot
2020-01-11 13:15:57
154.8.209.64 attackspam
" "
2020-01-11 13:04:21
181.123.9.68 attackspambots
2020-01-10T23:24:30.369018abusebot-7.cloudsearch.cf sshd[29392]: Invalid user wwting from 181.123.9.68 port 53466
2020-01-10T23:24:30.373460abusebot-7.cloudsearch.cf sshd[29392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.123.9.68
2020-01-10T23:24:30.369018abusebot-7.cloudsearch.cf sshd[29392]: Invalid user wwting from 181.123.9.68 port 53466
2020-01-10T23:24:32.421618abusebot-7.cloudsearch.cf sshd[29392]: Failed password for invalid user wwting from 181.123.9.68 port 53466 ssh2
2020-01-10T23:31:24.246932abusebot-7.cloudsearch.cf sshd[29729]: Invalid user rabbitmq from 181.123.9.68 port 48552
2020-01-10T23:31:24.252017abusebot-7.cloudsearch.cf sshd[29729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.123.9.68
2020-01-10T23:31:24.246932abusebot-7.cloudsearch.cf sshd[29729]: Invalid user rabbitmq from 181.123.9.68 port 48552
2020-01-10T23:31:26.470493abusebot-7.cloudsearch.cf sshd[29729]: Fail
...
2020-01-11 09:13:10
178.62.107.141 attackbots
SSH Login Bruteforce
2020-01-11 13:10:49
187.216.31.142 attack
1578718772 - 01/11/2020 05:59:32 Host: 187.216.31.142/187.216.31.142 Port: 445 TCP Blocked
2020-01-11 13:10:19
162.254.148.44 attackbots
Scanning random ports - tries to find possible vulnerable services
2020-01-11 09:15:55

Recently Reported IPs

42.113.198.99 194.93.33.14 250.195.239.97 45.95.33.135
164.43.99.214 116.104.45.15 118.24.101.224 95.63.242.252
141.56.46.255 121.219.234.118 157.20.62.105 222.188.29.241
178.162.209.74 196.221.39.32 51.91.55.253 63.35.119.230
189.124.151.245 219.170.193.195 184.47.206.134 104.248.83.216