1.55.207.242 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: FPT Broadband Service

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Unauthorized connection attempt from IP address 1.55.207.242 on Port 445(SMB)	2020-07-11 03:55:00

Comments on same subnet:

IP	Type	Details	Datetime
1.55.207.97	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-05 02:47:32
1.55.207.97	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-04 18:14:16
1.55.207.106	attackbots	Unauthorized connection attempt from IP address 1.55.207.106 on Port 445(SMB)	2020-08-21 03:45:46
1.55.207.39	attackbotsspam	Unauthorized connection attempt from IP address 1.55.207.39 on Port 445(SMB)	2020-04-23 01:53:29

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.55.207.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37961
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.55.207.242.			IN	A

;; AUTHORITY SECTION:
.			432	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020071001 1800 900 604800 86400

;; Query time: 69 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 11 03:54:57 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 242.207.55.1.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 242.207.55.1.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
94.42.165.180	attack	Apr 26 23:22:17 legacy sshd[16121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.42.165.180 Apr 26 23:22:19 legacy sshd[16121]: Failed password for invalid user kristof from 94.42.165.180 port 40800 ssh2 Apr 26 23:26:19 legacy sshd[16397]: Failed password for root from 94.42.165.180 port 47119 ssh2 ...	2020-04-27 06:33:24
119.29.158.26	attack	Apr 26 23:40:34 [host] sshd[18172]: Invalid user x Apr 26 23:40:34 [host] sshd[18172]: pam_unix(sshd: Apr 26 23:40:37 [host] sshd[18172]: Failed passwor	2020-04-27 06:27:12
106.124.140.36	attackspam	Apr 27 00:36:48 mail sshd[11672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.140.36 Apr 27 00:36:50 mail sshd[11672]: Failed password for invalid user carne from 106.124.140.36 port 44149 ssh2 Apr 27 00:41:16 mail sshd[12628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.140.36	2020-04-27 06:48:06
104.131.52.16	attackbotsspam	Apr 26 20:08:53 XXX sshd[55185]: Invalid user bot from 104.131.52.16 port 60923	2020-04-27 06:16:56
103.86.134.194	attack	Apr 26 22:41:19 vmd48417 sshd[29333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.86.134.194	2020-04-27 06:28:43
42.176.57.166	attackbotsspam	trying to access non-authorized port	2020-04-27 06:38:35
46.105.99.163	attack	46.105.99.163 - - [26/Apr/2020:23:40:44 +0200] "POST /wp-login.php HTTP/1.1" 200 5379 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 46.105.99.163 - - [26/Apr/2020:23:40:52 +0200] "POST /wp-login.php HTTP/1.1" 200 5379 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 46.105.99.163 - - [26/Apr/2020:23:40:59 +0200] "POST /wp-login.php HTTP/1.1" 200 5379 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 46.105.99.163 - - [26/Apr/2020:23:41:08 +0200] "POST /wp-login.php HTTP/1.1" 200 5379 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 46.105.99.163 - - [26/Apr/2020:23:41:30 +0200] "POST /wp-login.php HTTP/1.1" 200 5379 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safar ...	2020-04-27 06:07:18
182.18.252.216	attackbots	Invalid user summer from 182.18.252.216 port 46338	2020-04-27 06:09:51
2.137.126.235	attack	Attempted connection to port 80.	2020-04-27 06:47:00
47.101.47.7	attackbots	47.101.47.7 - - \[26/Apr/2020:22:39:01 +0200\] "POST /wp-login.php HTTP/1.0" 200 4128 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 47.101.47.7 - - \[26/Apr/2020:22:39:05 +0200\] "POST /wp-login.php HTTP/1.0" 200 4134 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 47.101.47.7 - - \[26/Apr/2020:22:39:06 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-04-27 06:16:41
101.53.233.109	attackbots	Apr 26 21:40:28 localhost sshd\[8414\]: Invalid user ubnt from 101.53.233.109 port 5661 Apr 26 21:40:28 localhost sshd\[8414\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.53.233.109 Apr 26 21:40:30 localhost sshd\[8414\]: Failed password for invalid user ubnt from 101.53.233.109 port 5661 ssh2 ...	2020-04-27 06:15:02
222.186.175.182	attackbots	(sshd) Failed SSH login from 222.186.175.182 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 27 00:32:32 amsweb01 sshd[14867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.182 user=root Apr 27 00:32:32 amsweb01 sshd[14868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.182 user=root Apr 27 00:32:34 amsweb01 sshd[14867]: Failed password for root from 222.186.175.182 port 62548 ssh2 Apr 27 00:32:34 amsweb01 sshd[14868]: Failed password for root from 222.186.175.182 port 42866 ssh2 Apr 27 00:32:38 amsweb01 sshd[14867]: Failed password for root from 222.186.175.182 port 62548 ssh2	2020-04-27 06:34:06
165.227.26.69	attack	Apr 26 21:43:31 scw-6657dc sshd[16981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.26.69 user=root Apr 26 21:43:31 scw-6657dc sshd[16981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.26.69 user=root Apr 26 21:43:33 scw-6657dc sshd[16981]: Failed password for root from 165.227.26.69 port 53700 ssh2 ...	2020-04-27 06:35:31
175.24.21.17	attack	(sshd) Failed SSH login from 175.24.21.17 (CN/China/-): 5 in the last 3600 secs	2020-04-27 06:29:05
222.252.16.153	attackbots	(imapd) Failed IMAP login from 222.252.16.153 (VN/Vietnam/static.vnpt-hanoi.com.vn): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 27 01:09:13 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=222.252.16.153, lip=5.63.12.44, session=<4SoKlzek/dne/BCZ>	2020-04-27 06:08:15

Recently Reported IPs

136.243.216.142	250.2.75.160	78.248.187.92	208.208.1.51
233.10.79.90	6.175.20.85	138.104.183.151	42.73.213.187
125.245.209.109	185.92.73.230	130.116.182.89	130.131.97.175
180.144.173.118	197.42.157.241	34.123.142.183	170.139.204.29
185.70.131.11	233.163.134.249	250.47.13.228	148.55.232.85