1.55.18.58 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: FPT Broadband Service

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt from IP address 1.55.18.58 on Port 445(SMB)	2020-02-14 02:39:30

Comments on same subnet:

IP	Type	Details	Datetime
1.55.187.180	attack	Unauthorized connection attempt detected from IP address 1.55.187.180 to port 23 [J]	2020-02-23 20:14:00
1.55.183.255	attackspam	1582204835 - 02/20/2020 14:20:35 Host: 1.55.183.255/1.55.183.255 Port: 445 TCP Blocked	2020-02-21 05:07:47
1.55.188.248	attackbots	Unauthorized connection attempt detected from IP address 1.55.188.248 to port 23 [J]	2020-02-02 08:18:38
1.55.187.136	attack	unauthorized connection attempt	2020-01-17 16:32:56
1.55.18.228	attackbots	Unauthorized connection attempt from IP address 1.55.18.228 on Port 445(SMB)	2020-01-13 19:18:22
1.55.182.205	attackspambots	Jan 10 05:54:25 grey postfix/smtpd\[29272\]: NOQUEUE: reject: RCPT from unknown\[1.55.182.205\]: 554 5.7.1 Service unavailable\; Client host \[1.55.182.205\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[1.55.182.205\]\; from=\ to=\ proto=ESMTP helo=\<\[1.55.182.205\]\> ...	2020-01-10 15:47:21
1.55.183.7	attack	20/1/10@02:08:13: FAIL: Alarm-Network address from=1.55.183.7 ...	2020-01-10 15:45:49
1.55.18.211	attack	Unauthorized connection attempt from IP address 1.55.18.211 on Port 445(SMB)	2019-12-24 19:56:10
1.55.187.141	attack	Honeypot attack, port: 23, PTR: PTR record not found	2019-12-22 23:11:24
1.55.180.27	attackspambots	Sun, 21 Jul 2019 18:26:55 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 09:36:58
1.55.183.144	attack	Sun, 21 Jul 2019 07:35:33 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 00:49:25
1.55.185.128	attackspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-18 08:19:21,641 INFO [amun_request_handler] PortScan Detected on Port: 445 (1.55.185.128)	2019-07-18 23:26:35
1.55.187.46	attackbotsspam	[portscan] tcp/23 [TELNET] *(RWIN=14600)(06240931)	2019-06-25 04:40:54

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.55.18.58
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29316
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.55.18.58.			IN	A

;; AUTHORITY SECTION:
.			344	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021300 1800 900 604800 86400

;; Query time: 70 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 02:39:23 CST 2020
;; MSG SIZE  rcvd: 114

Host info

Host 58.18.55.1.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 58.18.55.1.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
112.216.39.234	attackbots	Oct 8 07:36:00 ns382633 sshd\[12644\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.39.234 user=root Oct 8 07:36:01 ns382633 sshd\[12644\]: Failed password for root from 112.216.39.234 port 42722 ssh2 Oct 8 07:40:58 ns382633 sshd\[13374\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.39.234 user=root Oct 8 07:41:00 ns382633 sshd\[13374\]: Failed password for root from 112.216.39.234 port 44704 ssh2 Oct 8 07:44:30 ns382633 sshd\[13913\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.216.39.234 user=root	2020-10-08 14:50:55
27.64.230.234	attack	[N1.H1.VM1] Port Scanner Detected Blocked by UFW	2020-10-08 14:40:34
191.232.245.241	attackspambots	Fail2Ban Ban Triggered (2)	2020-10-08 14:49:43
87.27.248.8	attackspam	20/10/7@16:45:32: FAIL: Alarm-Network address from=87.27.248.8 20/10/7@16:45:32: FAIL: Alarm-Network address from=87.27.248.8 ...	2020-10-08 14:56:25
195.37.209.9	attack	TBI Web Scanner Detection	2020-10-08 14:40:51
142.44.146.33	attackbotsspam	Oct 8 09:01:25 host sshd[4492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.146.33 user=root Oct 8 09:01:27 host sshd[4492]: Failed password for root from 142.44.146.33 port 35748 ssh2 ...	2020-10-08 15:09:51
139.199.228.133	attackspambots	Oct 8 08:45:15 buvik sshd[20213]: Failed password for root from 139.199.228.133 port 20378 ssh2 Oct 8 08:47:29 buvik sshd[20456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.228.133 user=root Oct 8 08:47:31 buvik sshd[20456]: Failed password for root from 139.199.228.133 port 33133 ssh2 ...	2020-10-08 15:04:38
192.241.131.150	attackspambots	2020-10-08T05:05:30.241996n23.at sshd[3921265]: Failed password for root from 192.241.131.150 port 57420 ssh2 2020-10-08T05:09:19.000259n23.at sshd[3924359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.131.150 user=root 2020-10-08T05:09:21.037429n23.at sshd[3924359]: Failed password for root from 192.241.131.150 port 33370 ssh2 ...	2020-10-08 14:51:24
172.81.208.125	attackbotsspam	Oct 7 22:40:27 haigwepa sshd[3849]: Failed password for root from 172.81.208.125 port 48614 ssh2 ...	2020-10-08 15:07:54
125.78.160.160	attack	Failed password for invalid user root from 125.78.160.160 port 53590 ssh2	2020-10-08 14:44:33
115.76.30.104	attack	Icarus honeypot on github	2020-10-08 14:50:30
190.202.51.107	attackbotsspam	Unauthorized connection attempt from IP address 190.202.51.107 on Port 445(SMB)	2020-10-08 14:47:27
45.148.124.199	attackbots	SS5,Magento Bruteforce Login Attack POST /index.php/admin/	2020-10-08 14:53:42
34.73.15.205	attackspambots	Failed password for invalid user root from 34.73.15.205 port 52342 ssh2	2020-10-08 15:04:22
61.219.11.153	attackspambots	Port scan denied	2020-10-08 14:45:29

Recently Reported IPs

122.53.82.189	52.49.18.99	62.203.224.23	103.29.117.63
195.34.115.20	200.39.254.136	110.164.139.210	86.150.141.205
197.94.239.247	186.90.210.132	61.0.137.134	14.165.211.78
43.245.47.114	187.174.228.2	128.201.57.180	80.250.82.160
79.79.14.184	197.210.71.254	118.163.197.27	13.92.178.16