Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: Second Assignment

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackbots
1582813527 - 02/27/2020 15:25:27 Host: 78.85.48.55/78.85.48.55 Port: 445 TCP Blocked
2020-02-28 00:57:25
Comments on same subnet:
IP Type Details Datetime
78.85.48.225 attackspambots
Unauthorized connection attempt from IP address 78.85.48.225 on Port 445(SMB)
2020-08-01 06:23:46
78.85.48.201 attack
Automatic report - Port Scan Attack
2020-07-16 15:06:43
78.85.48.86 attack
Honeypot attack, port: 445, PTR: a86.sub48.net78.udm.net.
2020-06-06 11:13:53
78.85.48.86 attackspambots
20/6/3@07:57:29: FAIL: Alarm-Intrusion address from=78.85.48.86
...
2020-06-03 20:21:23
78.85.48.225 attack
Port Scan
2020-05-30 01:37:17
78.85.48.221 attackbots
Unauthorized connection attempt from IP address 78.85.48.221 on Port 445(SMB)
2020-04-24 01:29:32
78.85.48.198 attackspam
Honeypot attack, port: 445, PTR: a198.sub48.net78.udm.net.
2020-02-08 21:20:44
78.85.48.76 attack
Unauthorized connection attempt from IP address 78.85.48.76 on Port 445(SMB)
2019-12-16 06:24:39
78.85.48.130 attack
Port Scan: TCP/445
2019-09-14 10:51:42
78.85.48.7 attackspam
Honeypot attack, port: 445, PTR: a7.sub48.net78.udm.net.
2019-08-09 18:59:38
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 78.85.48.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63759
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;78.85.48.55.			IN	A

;; AUTHORITY SECTION:
.			566	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022700 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 00:57:14 CST 2020
;; MSG SIZE  rcvd: 115
Host info
55.48.85.78.in-addr.arpa domain name pointer a55.sub48.net78.udm.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
55.48.85.78.in-addr.arpa	name = a55.sub48.net78.udm.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
158.69.210.168 attackspambots
malicious Brute-Force reported by https://www.patrick-binder.de
...
2020-07-04 10:31:09
140.227.187.144 attackspambots
Unauthorized connection attempt from IP address 140.227.187.144 on Port 445(SMB)
2020-07-04 10:21:21
222.186.175.148 attackspambots
Jul  4 04:15:18 ns381471 sshd[15691]: Failed password for root from 222.186.175.148 port 44372 ssh2
Jul  4 04:15:21 ns381471 sshd[15691]: Failed password for root from 222.186.175.148 port 44372 ssh2
2020-07-04 10:18:53
89.97.218.142 attackbotsspam
Jul  4 01:10:55 ns3033917 sshd[4041]: Invalid user usuario from 89.97.218.142 port 53068
Jul  4 01:10:57 ns3033917 sshd[4041]: Failed password for invalid user usuario from 89.97.218.142 port 53068 ssh2
Jul  4 01:24:15 ns3033917 sshd[4107]: Invalid user amir from 89.97.218.142 port 37320
...
2020-07-04 10:21:46
190.8.169.136 attack
1593818647 - 07/04/2020 01:24:07 Host: 190.8.169.136/190.8.169.136 Port: 445 TCP Blocked
2020-07-04 10:25:58
36.46.142.80 attackbotsspam
Scanned 3 times in the last 24 hours on port 22
2020-07-04 10:47:15
192.154.110.52 attackspam
20 attempts against mh-ssh on ice
2020-07-04 10:17:35
109.94.119.128 attackspambots
port scan and connect, tcp 23 (telnet)
2020-07-04 10:50:11
170.130.187.18 attackbotsspam
Unauthorized connection attempt detected from IP address 170.130.187.18 to port 3389
2020-07-04 10:29:07
51.38.32.230 attackbots
2020-07-04T05:01:45.221944mail.standpoint.com.ua sshd[15327]: Invalid user web3 from 51.38.32.230 port 57736
2020-07-04T05:01:45.224698mail.standpoint.com.ua sshd[15327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=server.ikadocteur.com
2020-07-04T05:01:45.221944mail.standpoint.com.ua sshd[15327]: Invalid user web3 from 51.38.32.230 port 57736
2020-07-04T05:01:46.907940mail.standpoint.com.ua sshd[15327]: Failed password for invalid user web3 from 51.38.32.230 port 57736 ssh2
2020-07-04T05:05:23.426074mail.standpoint.com.ua sshd[15936]: Invalid user livia from 51.38.32.230 port 52130
...
2020-07-04 10:19:52
91.121.221.195 attackbotsspam
Jul  4 01:43:43 abendstille sshd\[3543\]: Invalid user gitlab-runner from 91.121.221.195
Jul  4 01:43:43 abendstille sshd\[3543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.221.195
Jul  4 01:43:45 abendstille sshd\[3543\]: Failed password for invalid user gitlab-runner from 91.121.221.195 port 40652 ssh2
Jul  4 01:46:55 abendstille sshd\[6613\]: Invalid user invite from 91.121.221.195
Jul  4 01:46:55 abendstille sshd\[6613\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.221.195
...
2020-07-04 10:16:14
106.53.108.16 attack
Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-07-04 10:23:32
14.165.134.126 attackspam
1593822217 - 07/04/2020 02:23:37 Host: 14.165.134.126/14.165.134.126 Port: 445 TCP Blocked
2020-07-04 10:24:42
139.99.238.213 attack
Jul  4 04:08:11 debian-2gb-nbg1-2 kernel: \[16087111.880049\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=139.99.238.213 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=233 ID=54321 PROTO=TCP SPT=60092 DPT=81 WINDOW=65535 RES=0x00 SYN URGP=0
2020-07-04 10:32:32
134.175.99.237 attackbotsspam
Jul  4 04:25:50 * sshd[11805]: Failed password for git from 134.175.99.237 port 43708 ssh2
2020-07-04 10:36:36

Recently Reported IPs

188.158.206.39 66.89.103.139 13.31.80.173 36.203.101.76
205.117.189.136 23.224.244.61 205.114.235.151 139.119.190.113
177.107.161.11 75.121.162.183 198.23.143.5 177.53.186.36
194.41.26.129 153.99.166.208 36.113.32.45 133.242.207.176
125.160.83.93 35.178.235.134 1.53.156.20 153.192.2.144