1.55.142.136 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: FPT Broadband Service

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt from IP address 1.55.142.136 on Port 445(SMB)	2020-02-13 20:38:28

Comments on same subnet:

IP	Type	Details	Datetime
1.55.142.12	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-05 21:39:03
1.55.142.12	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-05 13:16:12
1.55.142.12	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-05 06:02:28
1.55.142.60	attackspambots	Automated report (2020-08-20T11:47:57+08:00). Referrer spam originating from this address detected (anti-crisis-seo.com).	2020-08-20 19:20:48
1.55.142.3	attackbotsspam	Attempted connection to port 445.	2020-05-31 19:56:04
1.55.142.99	attackbotsspam	Attempt to attack host OS, exploiting network vulnerabilities, on 12-03-2020 03:50:08.	2020-03-12 17:03:02
1.55.142.110	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-03-07 22:24:56
1.55.142.212	attackspambots	Unauthorized connection attempt from IP address 1.55.142.212 on Port 445(SMB)	2020-03-07 00:44:44
1.55.142.115	attack	1581483056 - 02/12/2020 05:50:56 Host: 1.55.142.115/1.55.142.115 Port: 445 TCP Blocked	2020-02-12 19:01:36
1.55.142.178	attackbotsspam	Jan 10 15:14:07 grey postfix/smtpd\[14160\]: NOQUEUE: reject: RCPT from unknown\[1.55.142.178\]: 554 5.7.1 Service unavailable\; Client host \[1.55.142.178\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[1.55.142.178\]\; from=\ to=\ proto=ESMTP helo=\<\[1.55.142.178\]\> ...	2020-01-11 03:52:45
1.55.142.26	attackbots	1577946406 - 01/02/2020 07:26:46 Host: 1.55.142.26/1.55.142.26 Port: 445 TCP Blocked	2020-01-02 17:50:55
1.55.142.125	attackbots	Autoban 1.55.142.125 AUTH/CONNECT	2019-11-18 22:12:44
1.55.142.251	attackspambots	Unauthorized connection attempt from IP address 1.55.142.251 on Port 445(SMB)	2019-10-27 00:08:54
1.55.142.108	attackbotsspam	B: Magento admin pass /admin/ test (wrong country)	2019-10-22 15:20:14

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.55.142.136
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9644
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.55.142.136.			IN	A

;; AUTHORITY SECTION:
.			511	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021300 1800 900 604800 86400

;; Query time: 390 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 20:38:22 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 136.142.55.1.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 136.142.55.1.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
211.43.13.237	attack	Sep 16 13:45:29 php1 sshd\[5752\]: Invalid user ftpuser from 211.43.13.237 Sep 16 13:45:29 php1 sshd\[5752\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.43.13.237 Sep 16 13:45:31 php1 sshd\[5752\]: Failed password for invalid user ftpuser from 211.43.13.237 port 52360 ssh2 Sep 16 13:51:21 php1 sshd\[6346\]: Invalid user mannherz from 211.43.13.237 Sep 16 13:51:21 php1 sshd\[6346\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.43.13.237	2019-09-17 08:01:43
167.99.52.34	attack	2019-09-16T22:07:02.246657abusebot-8.cloudsearch.cf sshd\[32236\]: Invalid user u2 from 167.99.52.34 port 45906	2019-09-17 08:36:08
128.199.142.0	attack	Sep 17 02:18:27 localhost sshd\[24397\]: Invalid user test1 from 128.199.142.0 port 60840 Sep 17 02:18:27 localhost sshd\[24397\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.0 Sep 17 02:18:30 localhost sshd\[24397\]: Failed password for invalid user test1 from 128.199.142.0 port 60840 ssh2	2019-09-17 08:30:35
123.14.80.109	attackspambots	Sep 16 08:47:49 our-server-hostname postfix/smtpd[4769]: connect from unknown[123.14.80.109] Sep x@x Sep 16 08:47:50 our-server-hostname postfix/smtpd[4769]: lost connection after RCPT from unknown[123.14.80.109] Sep 16 08:47:50 our-server-hostname postfix/smtpd[4769]: disconnect from unknown[123.14.80.109] Sep 16 08:53:36 our-server-hostname postfix/smtpd[2721]: connect from unknown[123.14.80.109] Sep 16 08:53:37 our-server-hostname postfix/smtpd[2721]: NOQUEUE: reject: RCPT from unknown[123.14.80.109]: 450 4.1.8 : Sender address rejected: Domain not found; from=x@x helo=	2019-09-17 08:20:52
134.175.141.166	attack	2019-09-16T16:51:33.730968suse-nuc sshd[21338]: Invalid user aish from 134.175.141.166 port 44323 ...	2019-09-17 07:57:21
192.116.142.240	attackbotsspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-16 17:21:08,799 INFO [amun_request_handler] PortScan Detected on Port: 445 (192.116.142.240)	2019-09-17 08:38:47
202.83.17.223	attack	Sep 17 00:03:59 MK-Soft-VM6 sshd\[12410\]: Invalid user xv from 202.83.17.223 port 56142 Sep 17 00:03:59 MK-Soft-VM6 sshd\[12410\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.83.17.223 Sep 17 00:04:01 MK-Soft-VM6 sshd\[12410\]: Failed password for invalid user xv from 202.83.17.223 port 56142 ssh2 ...	2019-09-17 08:18:38
182.180.128.132	attackbotsspam	vps1:sshd-InvalidUser	2019-09-17 07:58:10
36.68.239.131	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-16 17:27:26,594 INFO [amun_request_handler] PortScan Detected on Port: 445 (36.68.239.131)	2019-09-17 08:13:18
45.249.48.21	attack	$f2bV_matches	2019-09-17 08:23:29
192.145.238.65	attackspambots	xmlrpc attack	2019-09-17 08:20:28
81.182.254.124	attackbotsspam	Sep 16 22:52:08 server sshd\[928\]: Invalid user ftpuser from 81.182.254.124 port 54912 Sep 16 22:52:08 server sshd\[928\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.182.254.124 Sep 16 22:52:11 server sshd\[928\]: Failed password for invalid user ftpuser from 81.182.254.124 port 54912 ssh2 Sep 16 22:56:29 server sshd\[5761\]: User root from 81.182.254.124 not allowed because listed in DenyUsers Sep 16 22:56:29 server sshd\[5761\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.182.254.124 user=root	2019-09-17 08:25:30
47.254.131.53	attackbots	Sep 17 02:20:03 vpn01 sshd\[19728\]: Invalid user notification from 47.254.131.53 Sep 17 02:20:03 vpn01 sshd\[19728\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.254.131.53 Sep 17 02:20:05 vpn01 sshd\[19728\]: Failed password for invalid user notification from 47.254.131.53 port 39346 ssh2	2019-09-17 08:32:51
185.220.101.1	attack	1,47-01/02 [bc01/m21] concatform PostRequest-Spammer scoring: brussels	2019-09-17 08:29:15
222.73.242.180	attackspambots	Automatic report - Banned IP Access	2019-09-17 07:59:52

Recently Reported IPs

36.90.87.246	5.42.178.50	228.172.148.109	192.59.218.168
88.65.24.17	101.57.254.109	223.98.242.124	56.45.209.27
19.127.119.71	243.101.169.204	180.183.129.172	56.25.169.207
182.105.93.156	182.16.110.190	182.70.254.87	59.90.201.11
110.45.73.127	50.73.202.212	103.221.254.4	219.28.141.158