1.55.108.2 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: FPT Broadband Service

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Attempted connection to ports 8291, 8728.	2020-03-11 20:36:16

Comments on same subnet:

IP	Type	Details	Datetime
1.55.108.58	attackbots	2020-06-27 22:41:51.946579-0500 localhost smtpd[52166]: NOQUEUE: reject: RCPT from unknown[1.55.108.58]: 554 5.7.1 Service unavailable; Client host [1.55.108.58] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/1.55.108.58; from= to= proto=ESMTP helo=<[1.55.108.58]>	2020-06-28 19:27:02
1.55.108.102	attackbotsspam	Unauthorized IMAP connection attempt	2020-06-26 04:01:30
1.55.108.46	attackbotsspam	2020-03-14 14:17:50 1jD6fk-0002IS-GS SMTP connection from $\[1.55.108.46\]$ \[1.55.108.46\]:51276 I=\[193.107.88.166\]:25 closed by DROP in ACL 2020-03-14 14:18:40 1jD6gX-0002Jd-PO SMTP connection from $\[1.55.108.46\]$ \[1.55.108.46\]:2982 I=\[193.107.88.166\]:25 closed by DROP in ACL 2020-03-14 14:19:32 1jD6hM-0002Kb-Rw SMTP connection from $\[1.55.108.46\]$ \[1.55.108.46\]:10038 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-06-01 21:28:09
1.55.108.74	attack	Host Scan	2020-02-29 09:30:09
1.55.108.204	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-11 17:03:26
1.55.108.170	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-22 04:43:03
1.55.108.27	attackbots	Unauthorized connection attempt from IP address 1.55.108.27 on Port 445(SMB)	2019-12-27 07:49:14
1.55.108.127	attackspam	Unauthorized connection attempt detected from IP address 1.55.108.127 to port 445	2019-12-25 02:59:24
1.55.108.91	attackbotsspam	Unauthorised access (Nov 28) SRC=1.55.108.91 LEN=52 TTL=108 ID=4877 DF TCP DPT=445 WINDOW=8192 SYN	2019-11-29 02:46:56

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.55.108.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28303
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.55.108.2.			IN	A

;; AUTHORITY SECTION:
.			476	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031100 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 11 20:36:02 CST 2020
;; MSG SIZE  rcvd: 114

Host info

Host 2.108.55.1.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 2.108.55.1.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
1.205.74.75	attackspambots	SIP/5060 Probe, BF, Hack -	2020-05-10 03:47:54
116.111.76.185	attackbots	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	2020-05-10 04:03:23
116.101.237.37	attackspambots	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	2020-05-10 04:09:02
179.229.159.240	attack	SSH/22 MH Probe, BF, Hack -	2020-05-10 03:55:46
180.117.20.211	attackspambots	May 9 21:34:13 nextcloud sshd\[9744\]: Invalid user test from 180.117.20.211 May 9 21:34:13 nextcloud sshd\[9744\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.117.20.211 May 9 21:34:15 nextcloud sshd\[9744\]: Failed password for invalid user test from 180.117.20.211 port 40504 ssh2	2020-05-10 03:54:40
12.91.243.178	attackbotsspam	666/tcp 8291/tcp 8292/tcp... [2020-03-30/05-09]12pkt,3pt.(tcp)	2020-05-10 03:37:48
218.161.117.147	attack	23/tcp [2020-05-09]1pkt	2020-05-10 03:54:09
154.194.3.173	attack	$f2bV_matches	2020-05-10 04:12:48
116.101.242.172	attackbotsspam	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	2020-05-10 04:06:40
179.84.230.10	attackbotsspam	SSH/22 MH Probe, BF, Hack -	2020-05-10 03:51:49
34.228.224.211	attack	May 9 21:23:18 mail postfix/postscreen[30296]: DNSBL rank 3 for [34.228.224.211]:38410 ...	2020-05-10 04:09:30
117.5.251.74	attackbotsspam	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	2020-05-10 03:37:21
54.244.188.5	attackbots	05/09/2020-19:24:46.676274 54.244.188.5 Protocol: 6 SURICATA TLS invalid record/traffic	2020-05-10 03:52:55
217.165.65.54	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-05-10 03:57:07
213.175.178.66	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-05-10 03:58:17

Recently Reported IPs

65.151.40.202	36.67.31.185	173.201.193.129	173.254.28.240
23.234.35.183	3.134.89.57	95.216.99.106	91.195.240.87
85.225.26.223	84.238.108.247	70.40.220.114	89.163.134.134
66.194.167.76	58.229.187.72	49.207.177.234	185.33.132.163
121.240.212.2	83.222.97.197	41.250.251.178	37.78.152.78