1.55.18.211 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: FPT Broadband Service

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt from IP address 1.55.18.211 on Port 445(SMB)	2019-12-24 19:56:10

Comments on same subnet:

IP	Type	Details	Datetime
1.55.187.180	attack	Unauthorized connection attempt detected from IP address 1.55.187.180 to port 23 [J]	2020-02-23 20:14:00
1.55.183.255	attackspam	1582204835 - 02/20/2020 14:20:35 Host: 1.55.183.255/1.55.183.255 Port: 445 TCP Blocked	2020-02-21 05:07:47
1.55.18.58	attack	Unauthorized connection attempt from IP address 1.55.18.58 on Port 445(SMB)	2020-02-14 02:39:30
1.55.188.248	attackbots	Unauthorized connection attempt detected from IP address 1.55.188.248 to port 23 [J]	2020-02-02 08:18:38
1.55.187.136	attack	unauthorized connection attempt	2020-01-17 16:32:56
1.55.18.228	attackbots	Unauthorized connection attempt from IP address 1.55.18.228 on Port 445(SMB)	2020-01-13 19:18:22
1.55.182.205	attackspambots	Jan 10 05:54:25 grey postfix/smtpd\[29272\]: NOQUEUE: reject: RCPT from unknown\[1.55.182.205\]: 554 5.7.1 Service unavailable\; Client host \[1.55.182.205\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[1.55.182.205\]\; from=\ to=\ proto=ESMTP helo=\<\[1.55.182.205\]\> ...	2020-01-10 15:47:21
1.55.183.7	attack	20/1/10@02:08:13: FAIL: Alarm-Network address from=1.55.183.7 ...	2020-01-10 15:45:49
1.55.187.141	attack	Honeypot attack, port: 23, PTR: PTR record not found	2019-12-22 23:11:24
1.55.180.27	attackspambots	Sun, 21 Jul 2019 18:26:55 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 09:36:58
1.55.183.144	attack	Sun, 21 Jul 2019 07:35:33 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 00:49:25
1.55.185.128	attackspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-18 08:19:21,641 INFO [amun_request_handler] PortScan Detected on Port: 445 (1.55.185.128)	2019-07-18 23:26:35
1.55.187.46	attackbotsspam	[portscan] tcp/23 [TELNET] *(RWIN=14600)(06240931)	2019-06-25 04:40:54

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.55.18.211
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34926
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.55.18.211.			IN	A

;; AUTHORITY SECTION:
.			588	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122400 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 24 19:56:04 CST 2019
;; MSG SIZE  rcvd: 115

Host info

Host 211.18.55.1.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 211.18.55.1.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
200.133.125.244	attack	k+ssh-bruteforce	2020-04-18 17:59:42
49.247.193.105	attackspambots	SSH invalid-user multiple login attempts	2020-04-18 17:59:25
118.25.91.168	attack	SSH brutforce	2020-04-18 17:46:31
200.124.155.34	attackspam	Apr 18 05:51:28 debian-2gb-nbg1-2 kernel: \[9440862.164805\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=200.124.155.34 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=51 ID=23477 PROTO=TCP SPT=56641 DPT=80 WINDOW=16384 RES=0x00 ACK SYN URGP=0	2020-04-18 17:56:47
123.59.194.185	attackbotsspam	Unauthorized connection attempt detected from IP address 123.59.194.185 to port 12048 [T]	2020-04-18 17:58:55
13.94.57.205	attack	Apr 18 07:05:44 game-panel sshd[28798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.94.57.205 Apr 18 07:05:46 game-panel sshd[28798]: Failed password for invalid user git from 13.94.57.205 port 60272 ssh2 Apr 18 07:06:45 game-panel sshd[28841]: Failed password for root from 13.94.57.205 port 44464 ssh2	2020-04-18 17:42:53
1.186.40.2	attackbots	Unauthorized IMAP connection attempt	2020-04-18 17:54:51
221.238.47.98	attack	Apr 18 05:51:59 debian-2gb-nbg1-2 kernel: \[9440892.277910\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=221.238.47.98 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=8622 PROTO=TCP SPT=59024 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0	2020-04-18 17:29:20
78.188.27.12	attackbots	Automatic report - Banned IP Access	2020-04-18 17:46:49
112.35.27.98	attackspam	web-1 [ssh] SSH Attack	2020-04-18 17:43:29
122.51.68.105	attackspambots	Brute-force attempt banned	2020-04-18 18:05:38
111.230.244.45	attackbots	Apr 18 08:46:17 sshd[4950]: Failed password for invalid user postgres from 111.230.244.45 port 57438 ssh2	2020-04-18 17:44:09
64.227.25.170	attackbots	Bruteforce detected by fail2ban	2020-04-18 17:33:37
64.225.6.32	attack	Unauthorized connection attempt detected from IP address 64.225.6.32 to port 5985	2020-04-18 17:47:20
222.186.173.154	attackspam	2020-04-18T12:02:41.383110struts4.enskede.local sshd\[18820\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.154 user=root 2020-04-18T12:02:43.621771struts4.enskede.local sshd\[18820\]: Failed password for root from 222.186.173.154 port 20208 ssh2 2020-04-18T12:02:48.229484struts4.enskede.local sshd\[18820\]: Failed password for root from 222.186.173.154 port 20208 ssh2 2020-04-18T12:02:51.860014struts4.enskede.local sshd\[18820\]: Failed password for root from 222.186.173.154 port 20208 ssh2 2020-04-18T12:02:55.311503struts4.enskede.local sshd\[18820\]: Failed password for root from 222.186.173.154 port 20208 ssh2 ...	2020-04-18 18:08:51

Recently Reported IPs

14.184.80.177	183.83.65.158	115.75.88.52	247.140.133.103
233.10.42.91	216.82.43.138	156.206.2.30	34.204.96.111
123.103.76.224	49.229.53.18	3.161.74.163	101.108.69.2
3.127.137.193	85.174.83.194	42.113.63.217	207.109.216.250
14.172.80.114	235.11.211.89	180.251.201.101	90.109.68.248