1.55.18.58 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: FPT Broadband Service

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt from IP address 1.55.18.58 on Port 445(SMB)	2020-02-14 02:39:30

Comments on same subnet:

IP	Type	Details	Datetime
1.55.187.180	attack	Unauthorized connection attempt detected from IP address 1.55.187.180 to port 23 [J]	2020-02-23 20:14:00
1.55.183.255	attackspam	1582204835 - 02/20/2020 14:20:35 Host: 1.55.183.255/1.55.183.255 Port: 445 TCP Blocked	2020-02-21 05:07:47
1.55.188.248	attackbots	Unauthorized connection attempt detected from IP address 1.55.188.248 to port 23 [J]	2020-02-02 08:18:38
1.55.187.136	attack	unauthorized connection attempt	2020-01-17 16:32:56
1.55.18.228	attackbots	Unauthorized connection attempt from IP address 1.55.18.228 on Port 445(SMB)	2020-01-13 19:18:22
1.55.182.205	attackspambots	Jan 10 05:54:25 grey postfix/smtpd\[29272\]: NOQUEUE: reject: RCPT from unknown\[1.55.182.205\]: 554 5.7.1 Service unavailable\; Client host \[1.55.182.205\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[1.55.182.205\]\; from=\ to=\ proto=ESMTP helo=\<\[1.55.182.205\]\> ...	2020-01-10 15:47:21
1.55.183.7	attack	20/1/10@02:08:13: FAIL: Alarm-Network address from=1.55.183.7 ...	2020-01-10 15:45:49
1.55.18.211	attack	Unauthorized connection attempt from IP address 1.55.18.211 on Port 445(SMB)	2019-12-24 19:56:10
1.55.187.141	attack	Honeypot attack, port: 23, PTR: PTR record not found	2019-12-22 23:11:24
1.55.180.27	attackspambots	Sun, 21 Jul 2019 18:26:55 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 09:36:58
1.55.183.144	attack	Sun, 21 Jul 2019 07:35:33 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 00:49:25
1.55.185.128	attackspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-18 08:19:21,641 INFO [amun_request_handler] PortScan Detected on Port: 445 (1.55.185.128)	2019-07-18 23:26:35
1.55.187.46	attackbotsspam	[portscan] tcp/23 [TELNET] *(RWIN=14600)(06240931)	2019-06-25 04:40:54

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.55.18.58
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29316
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.55.18.58.			IN	A

;; AUTHORITY SECTION:
.			344	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021300 1800 900 604800 86400

;; Query time: 70 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 02:39:23 CST 2020
;; MSG SIZE  rcvd: 114

Host info

Host 58.18.55.1.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 58.18.55.1.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
159.203.201.38	attackbots	18091/tcp 29093/tcp 27017/tcp... [2019-09-18/11-19]49pkt,45pt.(tcp),2pt.(udp)	2019-11-20 06:29:07
158.69.194.212	attack	Fail2Ban Ban Triggered	2019-11-20 06:02:06
139.155.22.165	attackbotsspam	Nov 19 22:58:02 sd-53420 sshd\[22528\]: Invalid user encarnacion from 139.155.22.165 Nov 19 22:58:02 sd-53420 sshd\[22528\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.22.165 Nov 19 22:58:04 sd-53420 sshd\[22528\]: Failed password for invalid user encarnacion from 139.155.22.165 port 38808 ssh2 Nov 19 23:01:58 sd-53420 sshd\[23628\]: User root from 139.155.22.165 not allowed because none of user's groups are listed in AllowGroups Nov 19 23:01:58 sd-53420 sshd\[23628\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.22.165 user=root ...	2019-11-20 06:14:24
157.88.55.48	attack	Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools	2019-11-20 06:09:45
188.219.188.155	attack	Automatic report - Port Scan Attack	2019-11-20 06:18:54
185.176.27.6	attack	11/19/2019-23:07:37.580355 185.176.27.6 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-11-20 06:13:22
222.186.180.223	attack	Nov 19 22:56:33 mail sshd[17937]: Failed password for root from 222.186.180.223 port 64948 ssh2 Nov 19 22:56:39 mail sshd[17937]: Failed password for root from 222.186.180.223 port 64948 ssh2 Nov 19 22:56:45 mail sshd[17937]: Failed password for root from 222.186.180.223 port 64948 ssh2 Nov 19 22:56:51 mail sshd[17937]: Failed password for root from 222.186.180.223 port 64948 ssh2	2019-11-20 06:02:26
45.79.162.220	attack	Port scan: Attack repeated for 24 hours	2019-11-20 06:28:13
151.80.254.75	attack	SSH bruteforce	2019-11-20 06:17:26
198.108.67.35	attackspam	Portscan or hack attempt detected by psad/fwsnort	2019-11-20 06:32:20
212.64.114.254	attackspambots	SSH bruteforce	2019-11-20 06:16:33
106.75.215.121	attack	2019-11-19T22:17:09.762258scmdmz1 sshd\[13123\]: Invalid user dankel from 106.75.215.121 port 48858 2019-11-19T22:17:09.765606scmdmz1 sshd\[13123\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.215.121 2019-11-19T22:17:11.647317scmdmz1 sshd\[13123\]: Failed password for invalid user dankel from 106.75.215.121 port 48858 ssh2 ...	2019-11-20 06:05:51
111.63.31.7	attackspambots	" "	2019-11-20 06:33:19
222.186.175.220	attack	Nov 19 22:56:18 minden010 sshd[13578]: Failed password for root from 222.186.175.220 port 16772 ssh2 Nov 19 22:56:31 minden010 sshd[13578]: Failed password for root from 222.186.175.220 port 16772 ssh2 Nov 19 22:56:31 minden010 sshd[13578]: error: maximum authentication attempts exceeded for root from 222.186.175.220 port 16772 ssh2 [preauth] ...	2019-11-20 06:11:17
107.161.176.10	attack	107.161.176.10 has been banned for [WebApp Attack] ...	2019-11-20 06:07:37

Recently Reported IPs

122.53.82.189	52.49.18.99	62.203.224.23	103.29.117.63
195.34.115.20	200.39.254.136	110.164.139.210	86.150.141.205
197.94.239.247	186.90.210.132	61.0.137.134	14.165.211.78
43.245.47.114	187.174.228.2	128.201.57.180	80.250.82.160
79.79.14.184	197.210.71.254	118.163.197.27	13.92.178.16