1.55.216.137 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.55.216.115	attack	Unauthorized connection attempt detected from IP address 1.55.216.115 to port 445	2020-01-02 21:07:19
1.55.216.2	attack	Unauthorized connection attempt from IP address 1.55.216.2 on Port 445(SMB)	2019-09-09 19:33:55
1.55.216.215	attackbots	Unauthorized connection attempt from IP address 1.55.216.215 on Port 445(SMB)	2019-09-03 12:22:42
1.55.216.232	attack	[SMB remote code execution attempt: port tcp/445] *(RWIN=8192)(06240931)	2019-06-25 05:34:20

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.55.216.137
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12251
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.55.216.137.			IN	A

;; AUTHORITY SECTION:
.			338	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400

;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 01:03:28 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 137.216.55.1.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

server can't find 1.55.216.137.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
47.17.177.110	attack	Sep 23 13:47:25 ny01 sshd[6828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.17.177.110 Sep 23 13:47:27 ny01 sshd[6828]: Failed password for invalid user postgres from 47.17.177.110 port 53354 ssh2 Sep 23 13:56:29 ny01 sshd[8578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.17.177.110	2020-09-24 01:59:19
50.63.161.42	attack	50.63.161.42 - - [23/Sep/2020:17:07:00 +0000] "POST /wp-login.php HTTP/1.1" 200 2077 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 50.63.161.42 - - [23/Sep/2020:17:07:03 +0000] "POST /wp-login.php HTTP/1.1" 200 2055 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 50.63.161.42 - - [23/Sep/2020:17:07:06 +0000] "POST /wp-login.php HTTP/1.1" 200 2052 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 50.63.161.42 - - [23/Sep/2020:17:07:09 +0000] "POST /wp-login.php HTTP/1.1" 200 2052 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 50.63.161.42 - - [23/Sep/2020:17:07:11 +0000] "POST /xmlrpc.php HTTP/1.1" 200 236 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-"	2020-09-24 02:34:04
121.46.26.126	attackbots	Brute force attempt	2020-09-24 02:14:24
164.132.46.14	attack	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-24 02:10:40
114.35.154.121	attackbotsspam	Unauthorized connection attempt from IP address 114.35.154.121 on Port 445(SMB)	2020-09-24 02:04:02
123.205.179.16	attackspambots	Icarus honeypot on github	2020-09-24 02:30:48
195.200.244.80	attackspam	bruteforce detected	2020-09-24 02:01:21
51.178.43.9	attackbots	Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-09-24 02:09:35
125.143.193.232	attack	Sep 22 17:01:07 ssh2 sshd[20418]: User root from 125.143.193.232 not allowed because not listed in AllowUsers Sep 22 17:01:07 ssh2 sshd[20418]: Failed password for invalid user root from 125.143.193.232 port 59376 ssh2 Sep 22 17:01:08 ssh2 sshd[20418]: Connection closed by invalid user root 125.143.193.232 port 59376 [preauth] ...	2020-09-24 02:24:44
121.171.54.104	attack	Sep 23 09:02:15 ssh2 sshd[56467]: User root from 121.171.54.104 not allowed because not listed in AllowUsers Sep 23 09:02:15 ssh2 sshd[56467]: Failed password for invalid user root from 121.171.54.104 port 56385 ssh2 Sep 23 09:02:16 ssh2 sshd[56467]: Connection closed by invalid user root 121.171.54.104 port 56385 [preauth] ...	2020-09-24 02:32:07
222.186.180.6	attack	Failed password for root from 222.186.180.6 port 52560 ssh2 Failed password for root from 222.186.180.6 port 52560 ssh2 Failed password for root from 222.186.180.6 port 52560 ssh2 Failed password for root from 222.186.180.6 port 52560 ssh2	2020-09-24 02:32:46
162.142.125.25	attackbots	TCP (SYN) 162.142.125.25:25602 -> port 23, len 44	2020-09-24 01:57:57
155.4.200.95	attackspam	Sep 22 15:05:57 roki-contabo sshd\[18496\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=155.4.200.95 user=root Sep 22 15:05:59 roki-contabo sshd\[18496\]: Failed password for root from 155.4.200.95 port 50997 ssh2 Sep 22 19:00:53 roki-contabo sshd\[20494\]: Invalid user ubuntu from 155.4.200.95 Sep 22 19:00:53 roki-contabo sshd\[20494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=155.4.200.95 Sep 22 19:00:55 roki-contabo sshd\[20494\]: Failed password for invalid user ubuntu from 155.4.200.95 port 42289 ssh2 ...	2020-09-24 02:29:31
140.143.19.237	attackbots	Sep 23 10:36:38 firewall sshd[26059]: Invalid user deploy from 140.143.19.237 Sep 23 10:36:40 firewall sshd[26059]: Failed password for invalid user deploy from 140.143.19.237 port 45452 ssh2 Sep 23 10:41:28 firewall sshd[26160]: Invalid user user3 from 140.143.19.237 ...	2020-09-24 02:17:44
172.245.7.189	attackbots	Sep 23 18:57:16 rocket sshd[16913]: Failed password for root from 172.245.7.189 port 40734 ssh2 Sep 23 18:57:25 rocket sshd[16931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.245.7.189 ...	2020-09-24 02:12:41

Recently Reported IPs

104.21.6.84	1.55.210.123	1.55.227.52	1.55.211.111
1.55.227.79	1.55.31.84	104.21.6.87	1.56.146.162
1.55.48.33	1.58.107.115	1.55.56.78	1.58.117.243
1.55.60.107	1.55.57.236	1.55.8.86	1.57.184.93
1.59.142.11	1.55.86.144	1.55.86.169	1.6.49.193