This IP address has been reported a total of
16
times from
15 distinct
sources.
111.55.204.232 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
2026-01-05T10:27:08.928505 matius01.digitalsekuriti.id sshd[298032]: Invalid user zhenghaibin from 1 ...
show more2026-01-05T10:27:08.928505 matius01.digitalsekuriti.id sshd[298032]: Invalid user zhenghaibin from 111.55.204.232 port 60876
2026-01-05T10:27:28.989428 matius01.digitalsekuriti.id sshd[298277]: Invalid user pritty from 111.55.204.232 port 60345
2026-01-05T10:27:48.259566 matius01.digitalsekuriti.id sshd[299011]: Invalid user admin from 111.55.204.232 port 60877
...
show less
2026-01-04T12:29:26.678911+07:00 NetBird sshd[1461819]: Invalid user lijiang from 111.55.204.232 por ...
show more2026-01-04T12:29:26.678911+07:00 NetBird sshd[1461819]: Invalid user lijiang from 111.55.204.232 port 54010
2026-01-04T12:30:05.707114+07:00 NetBird sshd[1461829]: Invalid user desligar from 111.55.204.232 port 56267
2026-01-04T12:30:25.979156+07:00 NetBird sshd[1461834]: Invalid user fanqz from 111.55.204.232 port 54012
2026-01-04T12:31:01.301854+07:00 NetBird sshd[1461840]: Invalid user obiee from 111.55.204.232 port 56268
2026-01-04T12:31:19.339763+07:00 NetBird sshd[1461844]: Invalid user hlei from 111.55.204.232 port 56269
...
show less
2025-12-28T17:20:28.560387+00:00 shrapnelnet sshd-session[1447462]: Invalid user dermi from 111.55.2 ...
show more2025-12-28T17:20:28.560387+00:00 shrapnelnet sshd-session[1447462]: Invalid user dermi from 111.55.204.232 port 39570
2025-12-28T17:20:49.565936+00:00 shrapnelnet sshd-session[1447595]: Invalid user txh from 111.55.204.232 port 39571
2025-12-28T17:21:09.955094+00:00 shrapnelnet sshd-session[1447949]: Invalid user elasearch from 111.55.204.232 port 39572
2025-12-28T17:21:32.415405+00:00 shrapnelnet sshd-session[1448088]: Invalid user mssiddiqui from 111.55.204.232 port 33393
2025-12-28T17:21:50.304808+00:00 shrapnelnet sshd-session[1448233]: Invalid user orz from 111.55.204.232 port 39573
...
show less
Brute-Force
SSH
Anonymous
111.55.204.232 detected and blocked by sshd after 2 try
2025-12-23T21:20:19.978740-07:00 Host-KLAX-C sshd[405788]: Connection closed by 111.55.204.232 port ...
show more2025-12-23T21:20:19.978740-07:00 Host-KLAX-C sshd[405788]: Connection closed by 111.55.204.232 port 12907 [preauth]
...
show less
2025-12-23T21:17:16.254123+07:00 euxcvn124012 sshd[3059355]: Invalid user martinruan from 111.55.204 ...
show more2025-12-23T21:17:16.254123+07:00 euxcvn124012 sshd[3059355]: Invalid user martinruan from 111.55.204.232 port 62167
2025-12-23T21:18:09.528117+07:00 euxcvn124012 sshd[3059406]: Invalid user wsb from 111.55.204.232 port 63389
2025-12-23T21:18:37.920914+07:00 euxcvn124012 sshd[3059526]: Invalid user hov from 111.55.204.232 port 62168
2025-12-23T21:19:24.269099+07:00 euxcvn124012 sshd[3059577]: Invalid user tayeng from 111.55.204.232 port 63390
2025-12-23T21:19:47.276320+07:00 euxcvn124012 sshd[3059582]: Invalid user zhaotb_lab from 111.55.204.232 port 62171
...
show less
Aug 29 09:31:22 canopus postfix/smtpd[467706]: NOQUEUE: reject: RCPT from unknown[111.55.204.232]: 5 ...
show moreAug 29 09:31:22 canopus postfix/smtpd[467706]: NOQUEUE: reject: RCPT from unknown[111.55.204.232]: 554 5.7.1 Service unavailable; Client host [111.55.204.232] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/111.55.204.232 / Listed by PBL, see https://check.spamhaus.org/query/ip/111.55.204.232; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<triangledelaphysique.f>
Aug 29 15:01:46 canopus postfix/smtpd[484056]: NOQUEUE: reject: RCPT from unknown[111.55.204.232]: 554 5.7.1 Service unavailable; Client host [111.55.204.232] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/111.55.204.232 / Listed by PBL, see https://check.spamhaus.org/query/ip/111.55.204.232 / Listed by XBL, see https://check.spamhaus.org/query/ip/111.55.204.232; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<8.135.10.116>
Aug 29 15:09:47 canopus postfix/smtpd[484551]: NOQUEUE: reject: RCPT from
...
show less
Brute-Force
Exploited Host
Showing 1 to
15
of 16 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ