Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: Second Assignment

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackbots
1582813527 - 02/27/2020 15:25:27 Host: 78.85.48.55/78.85.48.55 Port: 445 TCP Blocked
2020-02-28 00:57:25
Comments on same subnet:
IP Type Details Datetime
78.85.48.225 attackspambots
Unauthorized connection attempt from IP address 78.85.48.225 on Port 445(SMB)
2020-08-01 06:23:46
78.85.48.201 attack
Automatic report - Port Scan Attack
2020-07-16 15:06:43
78.85.48.86 attack
Honeypot attack, port: 445, PTR: a86.sub48.net78.udm.net.
2020-06-06 11:13:53
78.85.48.86 attackspambots
20/6/3@07:57:29: FAIL: Alarm-Intrusion address from=78.85.48.86
...
2020-06-03 20:21:23
78.85.48.225 attack
Port Scan
2020-05-30 01:37:17
78.85.48.221 attackbots
Unauthorized connection attempt from IP address 78.85.48.221 on Port 445(SMB)
2020-04-24 01:29:32
78.85.48.198 attackspam
Honeypot attack, port: 445, PTR: a198.sub48.net78.udm.net.
2020-02-08 21:20:44
78.85.48.76 attack
Unauthorized connection attempt from IP address 78.85.48.76 on Port 445(SMB)
2019-12-16 06:24:39
78.85.48.130 attack
Port Scan: TCP/445
2019-09-14 10:51:42
78.85.48.7 attackspam
Honeypot attack, port: 445, PTR: a7.sub48.net78.udm.net.
2019-08-09 18:59:38
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 78.85.48.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63759
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;78.85.48.55.			IN	A

;; AUTHORITY SECTION:
.			566	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022700 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 00:57:14 CST 2020
;; MSG SIZE  rcvd: 115
Host info
55.48.85.78.in-addr.arpa domain name pointer a55.sub48.net78.udm.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
55.48.85.78.in-addr.arpa	name = a55.sub48.net78.udm.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
14.161.6.201 attackspam
Oct 22 03:50:05 venus sshd\[15402\]: Invalid user pi from 14.161.6.201 port 51802
Oct 22 03:50:06 venus sshd\[15404\]: Invalid user pi from 14.161.6.201 port 51806
Oct 22 03:50:06 venus sshd\[15402\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.6.201
...
2019-10-22 18:15:49
97.79.238.200 attackspambots
Automatic report - XMLRPC Attack
2019-10-22 17:43:58
164.132.56.243 attack
2019-10-22T09:42:01.780677  sshd[22806]: Invalid user p@ssw0rd123456 from 164.132.56.243 port 37912
2019-10-22T09:42:01.794854  sshd[22806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.56.243
2019-10-22T09:42:01.780677  sshd[22806]: Invalid user p@ssw0rd123456 from 164.132.56.243 port 37912
2019-10-22T09:42:04.104048  sshd[22806]: Failed password for invalid user p@ssw0rd123456 from 164.132.56.243 port 37912 ssh2
2019-10-22T09:45:52.957163  sshd[22905]: Invalid user mugging from 164.132.56.243 port 56688
...
2019-10-22 18:02:43
106.12.58.4 attack
Invalid user uc from 106.12.58.4 port 51928
2019-10-22 17:50:56
129.211.80.201 attack
Automatic report - Banned IP Access
2019-10-22 18:19:08
133.167.100.109 attackbots
2019-10-22T12:02:57.737283scmdmz1 sshd\[19512\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=os3-380-23105.vs.sakura.ne.jp  user=root
2019-10-22T12:03:00.240307scmdmz1 sshd\[19512\]: Failed password for root from 133.167.100.109 port 48408 ssh2
2019-10-22T12:07:02.078379scmdmz1 sshd\[20064\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=os3-380-23105.vs.sakura.ne.jp  user=root
...
2019-10-22 18:11:07
164.52.24.173 attack
RPC Portmapper DUMP Request Detected
2019-10-22 18:06:12
46.47.255.194 attackbotsspam
2019-10-21 22:50:32 H=(luceat.it) [46.47.255.194]:48822 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-10-21 22:50:32 H=(luceat.it) [46.47.255.194]:48822 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-10-21 22:50:33 H=(luceat.it) [46.47.255.194]:48822 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
...
2019-10-22 17:54:19
134.175.178.153 attackbots
Oct 22 10:52:59 MK-Soft-VM3 sshd[16120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.178.153 
Oct 22 10:53:01 MK-Soft-VM3 sshd[16120]: Failed password for invalid user xl from 134.175.178.153 port 46015 ssh2
...
2019-10-22 18:12:24
106.13.221.44 attack
firewall-block, port(s): 7001/tcp, 9200/tcp
2019-10-22 18:13:24
106.12.130.148 attack
Oct 22 08:53:26 lnxweb62 sshd[5253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.130.148
2019-10-22 18:13:46
118.25.103.132 attackspam
Oct 22 06:57:07 OPSO sshd\[12059\]: Invalid user boc from 118.25.103.132 port 56774
Oct 22 06:57:07 OPSO sshd\[12059\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.103.132
Oct 22 06:57:09 OPSO sshd\[12059\]: Failed password for invalid user boc from 118.25.103.132 port 56774 ssh2
Oct 22 07:01:30 OPSO sshd\[13008\]: Invalid user legal2 from 118.25.103.132 port 34946
Oct 22 07:01:30 OPSO sshd\[13008\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.103.132
2019-10-22 17:46:23
34.82.232.117 attackspambots
$f2bV_matches
2019-10-22 18:15:17
167.114.172.144 attackspam
Automatic report - XMLRPC Attack
2019-10-22 17:43:14
147.135.208.234 attackspam
2019-10-22T09:28:53.457689abusebot-2.cloudsearch.cf sshd\[4945\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=234.ip-147-135-208.eu  user=root
2019-10-22 17:44:47

Recently Reported IPs

188.158.206.39 66.89.103.139 13.31.80.173 36.203.101.76
205.117.189.136 23.224.244.61 205.114.235.151 139.119.190.113
177.107.161.11 75.121.162.183 198.23.143.5 177.53.186.36
194.41.26.129 153.99.166.208 36.113.32.45 133.242.207.176
125.160.83.93 35.178.235.134 1.53.156.20 153.192.2.144