Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Poland

Internet Service Provider: OVH SAS

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Apr 22 19:09:35 santamaria sshd\[15049\]: Invalid user ih from 54.38.55.52
Apr 22 19:09:35 santamaria sshd\[15049\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.55.52
Apr 22 19:09:37 santamaria sshd\[15049\]: Failed password for invalid user ih from 54.38.55.52 port 59750 ssh2
...
2020-04-23 01:36:02
attackbots
no
2020-04-19 02:15:42
Comments on same subnet:
IP Type Details Datetime
54.38.55.136 attack
Invalid user esbuser from 54.38.55.136 port 60022
2020-09-24 02:02:46
54.38.55.136 attackspam
Sep 23 04:57:21 gitlab sshd[596134]: Failed password for invalid user test_user from 54.38.55.136 port 40764 ssh2
Sep 23 04:59:24 gitlab sshd[596441]: Invalid user operator from 54.38.55.136 port 45910
Sep 23 04:59:24 gitlab sshd[596441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.55.136 
Sep 23 04:59:24 gitlab sshd[596441]: Invalid user operator from 54.38.55.136 port 45910
Sep 23 04:59:26 gitlab sshd[596441]: Failed password for invalid user operator from 54.38.55.136 port 45910 ssh2
...
2020-09-23 18:09:32
54.38.55.136 attack
Sep 11 15:10:04 ns382633 sshd\[8526\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.55.136  user=root
Sep 11 15:10:06 ns382633 sshd\[8526\]: Failed password for root from 54.38.55.136 port 59212 ssh2
Sep 11 15:14:24 ns382633 sshd\[9245\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.55.136  user=root
Sep 11 15:14:26 ns382633 sshd\[9245\]: Failed password for root from 54.38.55.136 port 42236 ssh2
Sep 11 15:18:48 ns382633 sshd\[10103\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.55.136  user=root
2020-09-11 21:56:16
54.38.55.136 attack
54.38.55.136 (PL/Poland/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 10 12:57:14 server5 sshd[24882]: Failed password for root from 178.128.61.101 port 58388 ssh2
Sep 10 12:57:17 server5 sshd[24891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.120.37  user=root
Sep 10 12:57:12 server5 sshd[24882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.61.101  user=root
Sep 10 12:53:03 server5 sshd[22713]: Failed password for root from 54.38.55.136 port 34870 ssh2
Sep 10 12:56:21 server5 sshd[24154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.30.236.149  user=root
Sep 10 12:56:23 server5 sshd[24154]: Failed password for root from 123.30.236.149 port 11284 ssh2

IP Addresses Blocked:

178.128.61.101 (SG/Singapore/-)
68.183.120.37 (US/United States/-)
2020-09-11 14:03:43
54.38.55.136 attackspambots
54.38.55.136 (PL/Poland/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 10 12:57:14 server5 sshd[24882]: Failed password for root from 178.128.61.101 port 58388 ssh2
Sep 10 12:57:17 server5 sshd[24891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.120.37  user=root
Sep 10 12:57:12 server5 sshd[24882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.61.101  user=root
Sep 10 12:53:03 server5 sshd[22713]: Failed password for root from 54.38.55.136 port 34870 ssh2
Sep 10 12:56:21 server5 sshd[24154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.30.236.149  user=root
Sep 10 12:56:23 server5 sshd[24154]: Failed password for root from 123.30.236.149 port 11284 ssh2

IP Addresses Blocked:

178.128.61.101 (SG/Singapore/-)
68.183.120.37 (US/United States/-)
2020-09-11 06:15:40
54.38.55.136 attackbots
SSH login attempts.
2020-09-07 04:34:26
54.38.55.136 attack
...
2020-09-06 20:10:23
54.38.55.136 attackspambots
Aug 25 17:33:06 jane sshd[15240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.55.136 
Aug 25 17:33:08 jane sshd[15240]: Failed password for invalid user dpi from 54.38.55.136 port 59618 ssh2
...
2020-08-26 00:02:46
54.38.55.136 attack
Aug 11 22:28:54 prod4 sshd\[25658\]: Failed password for root from 54.38.55.136 port 50970 ssh2
Aug 11 22:33:14 prod4 sshd\[27130\]: Failed password for root from 54.38.55.136 port 33238 ssh2
Aug 11 22:37:25 prod4 sshd\[30297\]: Failed password for root from 54.38.55.136 port 43736 ssh2
...
2020-08-12 05:06:16
54.38.55.136 attackbotsspam
Aug  4 20:02:06 scw-tender-jepsen sshd[5176]: Failed password for root from 54.38.55.136 port 53056 ssh2
2020-08-05 05:37:29
54.38.55.136 attack
Jul 21 06:55:10 vpn01 sshd[24183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.55.136
Jul 21 06:55:12 vpn01 sshd[24183]: Failed password for invalid user instinct from 54.38.55.136 port 39682 ssh2
...
2020-07-21 15:27:31
54.38.55.136 attack
Jul 19 00:09:32 vserver sshd\[31320\]: Invalid user rn from 54.38.55.136Jul 19 00:09:34 vserver sshd\[31320\]: Failed password for invalid user rn from 54.38.55.136 port 34542 ssh2Jul 19 00:18:11 vserver sshd\[31469\]: Invalid user mb from 54.38.55.136Jul 19 00:18:13 vserver sshd\[31469\]: Failed password for invalid user mb from 54.38.55.136 port 44270 ssh2
...
2020-07-19 07:44:29
54.38.55.136 attackbotsspam
Jul 18 19:12:28 itv-usvr-02 sshd[27365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.55.136  user=daemon
Jul 18 19:12:30 itv-usvr-02 sshd[27365]: Failed password for daemon from 54.38.55.136 port 34226 ssh2
Jul 18 19:21:34 itv-usvr-02 sshd[27693]: Invalid user guest from 54.38.55.136 port 50332
Jul 18 19:21:34 itv-usvr-02 sshd[27693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.55.136
Jul 18 19:21:34 itv-usvr-02 sshd[27693]: Invalid user guest from 54.38.55.136 port 50332
Jul 18 19:21:35 itv-usvr-02 sshd[27693]: Failed password for invalid user guest from 54.38.55.136 port 50332 ssh2
2020-07-18 22:11:52
54.38.55.136 attackspambots
$f2bV_matches
2020-07-14 05:08:02
54.38.55.136 attackbotsspam
Jun 28 09:08:11 jane sshd[15293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.55.136 
Jun 28 09:08:13 jane sshd[15293]: Failed password for invalid user adv from 54.38.55.136 port 41958 ssh2
...
2020-06-28 15:54:10
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.38.55.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5678
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;54.38.55.52.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020041800 1800 900 604800 86400

;; Query time: 93 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 19 02:15:39 CST 2020
;; MSG SIZE  rcvd: 115
Host info
52.55.38.54.in-addr.arpa domain name pointer 52.ip-54-38-55.eu.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
52.55.38.54.in-addr.arpa	name = 52.ip-54-38-55.eu.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
167.114.169.17 attack
167.114.169.17 - - \[21/Dec/2019:15:52:23 +0100\] "GET / HTTP/1.0" 444 0 "-" "masscan/1.0 \(https://github.com/robertdavidgraham/masscan\)"
...
2019-12-22 02:44:53
222.127.97.91 attackbots
2019-12-21T15:46:36.989791vps751288.ovh.net sshd\[21248\]: Invalid user 12345aa from 222.127.97.91 port 58383
2019-12-21T15:46:36.998900vps751288.ovh.net sshd\[21248\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.127.97.91
2019-12-21T15:46:39.161883vps751288.ovh.net sshd\[21248\]: Failed password for invalid user 12345aa from 222.127.97.91 port 58383 ssh2
2019-12-21T15:53:02.707194vps751288.ovh.net sshd\[21289\]: Invalid user remote from 222.127.97.91 port 40237
2019-12-21T15:53:02.717010vps751288.ovh.net sshd\[21289\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.127.97.91
2019-12-22 02:18:07
59.63.188.39 attack
Dec 18 20:39:07 sanyalnet-awsem3-1 sshd[24789]: Connection from 59.63.188.39 port 50594 on 172.30.0.184 port 22
Dec 18 20:39:10 sanyalnet-awsem3-1 sshd[24789]: Invalid user test from 59.63.188.39
Dec 18 20:39:10 sanyalnet-awsem3-1 sshd[24789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.63.188.39 
Dec 18 20:39:13 sanyalnet-awsem3-1 sshd[24789]: Failed password for invalid user test from 59.63.188.39 port 50594 ssh2
Dec 18 20:39:13 sanyalnet-awsem3-1 sshd[24789]: Received disconnect from 59.63.188.39: 11: Bye Bye [preauth]
Dec 18 20:57:05 sanyalnet-awsem3-1 sshd[25224]: Connection from 59.63.188.39 port 34738 on 172.30.0.184 port 22
Dec 18 20:57:07 sanyalnet-awsem3-1 sshd[25224]: Invalid user daugirda from 59.63.188.39
Dec 18 20:57:07 sanyalnet-awsem3-1 sshd[25224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.63.188.39 


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip
2019-12-22 02:18:44
47.15.180.12 attackbotsspam
1576939977 - 12/21/2019 15:52:57 Host: 47.15.180.12/47.15.180.12 Port: 445 TCP Blocked
2019-12-22 02:21:32
136.144.225.182 attackspambots
Message ID	
Created at:	Fri, Dec 20, 2019 at 3:47 PM (Delivered after 5 seconds)
From:	Amour Feel Super-Team  Using WhatCounts
To:	
Subject:	𝓣𝓱𝓮𝔂 𝓪𝓻𝓮 𝓼𝓸 𝓼𝓮𝓭𝓾𝓬𝓽𝓲𝓿𝓮... 𝓨𝓸𝓾 𝔀𝓸𝓷'𝓽 𝓫𝓮 𝓪𝓫𝓵𝓮 𝓽𝓸 𝓻𝓮𝓼𝓲𝓼𝓽 𝓽𝓱𝓮𝓶
SPF:	NEUTRAL with IP 136.144.225.182 Learn more
DKIM:	'PASS' with domain ruicci.accincing.com
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@ruicci.accincing.com header.s=default header.b=ua0PWwlq;
       spf=neutral (google.com: 136.144.225.182 is neither permitted nor denied by best guess record for domain of return@chacha.com) smtp.mailfrom=Return@chacha.com
Return-Path: 
Received: from ruicci.accincing.com (ruicci.accincing.com. [136.144.225.182])
        by mx.google.com with ESMTP id c10si8148718edv.360.2019.12.20.13.47.59
2019-12-22 02:37:06
46.217.22.2 attackbots
Unauthorized connection attempt detected from IP address 46.217.22.2 to port 445
2019-12-22 02:12:55
157.245.50.91 attack
" "
2019-12-22 02:51:14
35.192.20.114 attackbotsspam
php WP PHPmyadamin ABUSE blocked for 12h
2019-12-22 02:38:55
13.92.189.179 attackspam
Dec 21 18:13:23 MK-Soft-VM6 sshd[19045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.92.189.179 
Dec 21 18:13:25 MK-Soft-VM6 sshd[19045]: Failed password for invalid user hoeler from 13.92.189.179 port 43288 ssh2
...
2019-12-22 02:30:08
62.234.68.246 attackspambots
Dec 21 08:25:18 eddieflores sshd\[27314\]: Invalid user veen from 62.234.68.246
Dec 21 08:25:18 eddieflores sshd\[27314\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.68.246
Dec 21 08:25:20 eddieflores sshd\[27314\]: Failed password for invalid user veen from 62.234.68.246 port 59069 ssh2
Dec 21 08:30:52 eddieflores sshd\[27832\]: Invalid user moorhty from 62.234.68.246
Dec 21 08:30:52 eddieflores sshd\[27832\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.68.246
2019-12-22 02:42:07
54.36.241.186 attack
20 attempts against mh-ssh on cloud.magehost.pro
2019-12-22 02:20:06
54.37.158.218 attackbots
Brute-force attempt banned
2019-12-22 02:15:32
207.55.255.20 attackspam
207.55.255.20 - - \[21/Dec/2019:19:02:34 +0100\] "POST /wp-login.php HTTP/1.0" 200 7544 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
207.55.255.20 - - \[21/Dec/2019:19:02:35 +0100\] "POST /wp-login.php HTTP/1.0" 200 7411 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
207.55.255.20 - - \[21/Dec/2019:19:02:36 +0100\] "POST /wp-login.php HTTP/1.0" 200 7407 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-12-22 02:26:57
2.229.85.233 attackspambots
19/12/21@09:52:56: FAIL: Alarm-Intrusion address from=2.229.85.233
...
2019-12-22 02:22:03
49.88.112.113 attackbotsspam
Dec 21 08:35:58 wbs sshd\[21507\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.113  user=root
Dec 21 08:36:00 wbs sshd\[21507\]: Failed password for root from 49.88.112.113 port 10922 ssh2
Dec 21 08:36:02 wbs sshd\[21507\]: Failed password for root from 49.88.112.113 port 10922 ssh2
Dec 21 08:36:04 wbs sshd\[21507\]: Failed password for root from 49.88.112.113 port 10922 ssh2
Dec 21 08:37:11 wbs sshd\[21674\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.113  user=root
2019-12-22 02:40:26

Recently Reported IPs

140.246.251.23 123.21.254.70 113.173.134.8 112.250.69.74
111.220.110.188 111.122.228.76 102.41.244.171 94.177.235.23
78.36.130.118 49.233.24.148 41.210.32.43 14.186.238.216
14.186.32.5 14.186.23.241 213.32.120.130 202.146.231.240
189.196.194.88 187.189.226.22 160.13.125.4 150.251.127.148