1.55.142.99 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Vietnam

Internet Service Provider: FPT Telecom Company

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Attempt to attack host OS, exploiting network vulnerabilities, on 12-03-2020 03:50:08.	2020-03-12 17:03:02

Comments on same subnet:

IP	Type	Details	Datetime
1.55.142.12	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-05 21:39:03
1.55.142.12	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-05 13:16:12
1.55.142.12	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-05 06:02:28
1.55.142.60	attackspambots	Automated report (2020-08-20T11:47:57+08:00). Referrer spam originating from this address detected (anti-crisis-seo.com).	2020-08-20 19:20:48
1.55.142.3	attackbotsspam	Attempted connection to port 445.	2020-05-31 19:56:04
1.55.142.110	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-03-07 22:24:56
1.55.142.212	attackspambots	Unauthorized connection attempt from IP address 1.55.142.212 on Port 445(SMB)	2020-03-07 00:44:44
1.55.142.136	attack	Unauthorized connection attempt from IP address 1.55.142.136 on Port 445(SMB)	2020-02-13 20:38:28
1.55.142.115	attack	1581483056 - 02/12/2020 05:50:56 Host: 1.55.142.115/1.55.142.115 Port: 445 TCP Blocked	2020-02-12 19:01:36
1.55.142.178	attackbotsspam	Jan 10 15:14:07 grey postfix/smtpd\[14160\]: NOQUEUE: reject: RCPT from unknown\[1.55.142.178\]: 554 5.7.1 Service unavailable\; Client host \[1.55.142.178\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[1.55.142.178\]\; from=\ to=\ proto=ESMTP helo=\<\[1.55.142.178\]\> ...	2020-01-11 03:52:45
1.55.142.26	attackbots	1577946406 - 01/02/2020 07:26:46 Host: 1.55.142.26/1.55.142.26 Port: 445 TCP Blocked	2020-01-02 17:50:55
1.55.142.125	attackbots	Autoban 1.55.142.125 AUTH/CONNECT	2019-11-18 22:12:44
1.55.142.251	attackspambots	Unauthorized connection attempt from IP address 1.55.142.251 on Port 445(SMB)	2019-10-27 00:08:54
1.55.142.108	attackbotsspam	B: Magento admin pass /admin/ test (wrong country)	2019-10-22 15:20:14

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.55.142.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22766
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.55.142.99.			IN	A

;; AUTHORITY SECTION:
.			293	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031200 1800 900 604800 86400

;; Query time: 51 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 12 17:02:58 CST 2020
;; MSG SIZE  rcvd: 115

Host info

Host 99.142.55.1.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 99.142.55.1.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
109.124.145.69	attack	Jul 18 23:09:21 [host] sshd[13887]: Invalid user git from 109.124.145.69 Jul 18 23:09:21 [host] sshd[13887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.124.145.69 Jul 18 23:09:23 [host] sshd[13887]: Failed password for invalid user git from 109.124.145.69 port 30993 ssh2	2019-07-19 05:19:04
59.2.180.218	attackspam	SSH Brute Force	2019-07-19 05:02:19
176.213.142.75	attack	Dec 17 01:29:11 vpn sshd[14046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.213.142.75 Dec 17 01:29:14 vpn sshd[14046]: Failed password for invalid user youtube from 176.213.142.75 port 52748 ssh2 Dec 17 01:38:11 vpn sshd[14091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.213.142.75	2019-07-19 05:13:54
181.65.208.167	attackspambots	Jul 19 04:09:26 webhost01 sshd[18812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.65.208.167 Jul 19 04:09:28 webhost01 sshd[18812]: Failed password for invalid user test from 181.65.208.167 port 43636 ssh2 ...	2019-07-19 05:25:17
202.88.237.110	attackbotsspam	Jul 18 23:03:47 tux-35-217 sshd\[24877\]: Invalid user test2 from 202.88.237.110 port 38156 Jul 18 23:03:47 tux-35-217 sshd\[24877\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.88.237.110 Jul 18 23:03:49 tux-35-217 sshd\[24877\]: Failed password for invalid user test2 from 202.88.237.110 port 38156 ssh2 Jul 18 23:09:15 tux-35-217 sshd\[24903\]: Invalid user daniela from 202.88.237.110 port 35544 Jul 18 23:09:15 tux-35-217 sshd\[24903\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.88.237.110 ...	2019-07-19 05:23:29
176.126.166.39	attackbots	Mar 17 09:33:33 vpn sshd[8663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.126.166.39 Mar 17 09:33:35 vpn sshd[8663]: Failed password for invalid user testuser from 176.126.166.39 port 58156 ssh2 Mar 17 09:41:32 vpn sshd[8718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.126.166.39	2019-07-19 05:20:42
220.130.222.156	attack	Jul 18 22:11:33 debian sshd\[23128\]: Invalid user postgresql from 220.130.222.156 port 35184 Jul 18 22:11:33 debian sshd\[23128\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.130.222.156 ...	2019-07-19 05:20:27
51.68.123.198	attack	Jan 21 02:23:51 vtv3 sshd\[14008\]: Invalid user ali from 51.68.123.198 port 43872 Jan 21 02:23:51 vtv3 sshd\[14008\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.123.198 Jan 21 02:23:54 vtv3 sshd\[14008\]: Failed password for invalid user ali from 51.68.123.198 port 43872 ssh2 Jan 21 02:27:24 vtv3 sshd\[15310\]: Invalid user sql from 51.68.123.198 port 43664 Jan 21 02:27:24 vtv3 sshd\[15310\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.123.198 Jan 25 18:29:55 vtv3 sshd\[14388\]: Invalid user fse from 51.68.123.198 port 53790 Jan 25 18:29:55 vtv3 sshd\[14388\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.123.198 Jan 25 18:29:58 vtv3 sshd\[14388\]: Failed password for invalid user fse from 51.68.123.198 port 53790 ssh2 Jan 25 18:33:54 vtv3 sshd\[15672\]: Invalid user hamish from 51.68.123.198 port 55892 Jan 25 18:33:54 vtv3 sshd\[15672\]: pam_unix\(sshd	2019-07-19 05:23:08
84.125.163.213	attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-07-19 04:46:47
46.229.168.138	attackbotsspam	46.229.168.138 - - \[18/Jul/2019:16:00:32 +0200\] "GET /horoscope-t-1607-3.html HTTP/1.1" 200 11868 "-" "Mozilla/5.0 \(compatible\; SemrushBot/3\~bl\; +http://www.semrush.com/bot.html\)" 46.229.168.138 - - \[18/Jul/2019:16:02:08 +0200\] "GET /showthread.php\?pid=11082 HTTP/1.1" 302 5 "-" "Mozilla/5.0 \(compatible\; SemrushBot/3\~bl\; +http://www.semrush.com/bot.html\)"	2019-07-19 05:02:35
176.107.131.182	attack	Mar 5 05:21:31 vpn sshd[3815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.107.131.182 Mar 5 05:21:34 vpn sshd[3815]: Failed password for invalid user hn from 176.107.131.182 port 36734 ssh2 Mar 5 05:27:46 vpn sshd[3839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.107.131.182	2019-07-19 05:31:01
111.68.97.59	attackspam	Jul 18 20:43:46 mail sshd\[10303\]: Invalid user sun from 111.68.97.59 port 38805 Jul 18 20:43:46 mail sshd\[10303\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.68.97.59 Jul 18 20:43:47 mail sshd\[10303\]: Failed password for invalid user sun from 111.68.97.59 port 38805 ssh2 Jul 18 20:49:41 mail sshd\[10378\]: Invalid user cloud from 111.68.97.59 port 50572 Jul 18 20:49:41 mail sshd\[10378\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.68.97.59 ...	2019-07-19 04:52:25
206.189.108.59	attackspambots	Jul 18 15:20:52 lnxmysql61 sshd[2068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.108.59	2019-07-19 05:01:49
190.116.55.89	attack	Trying to deliver email spam, but blocked by RBL	2019-07-19 04:48:48
137.74.112.125	attackbotsspam	2019-07-18T21:09:14.872237abusebot.cloudsearch.cf sshd\[7595\]: Invalid user transfer from 137.74.112.125 port 46962	2019-07-19 05:24:20

Recently Reported IPs

93.184.220.70	116.110.83.32	27.123.213.78	1.179.181.74
213.6.53.170	106.54.32.196	67.180.80.249	103.219.29.28
222.187.238.123	171.241.62.104	118.172.0.117	200.141.184.169
119.188.157.211	42.116.18.180	213.60.134.170	61.154.168.19
36.69.199.50	180.101.186.24	122.226.134.39	91.243.90.184