201.55.158.55 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: WI - Provedor de Telecomunicacoes Ltda.

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	email brute force	2020-09-17 02:42:58
attackspambots	Sep 15 18:24:03 mail.srvfarm.net postfix/smtps/smtpd[2819938]: warning: 201-55-158-55.witelecom.com.br[201.55.158.55]: SASL PLAIN authentication failed: Sep 15 18:24:03 mail.srvfarm.net postfix/smtps/smtpd[2819938]: lost connection after AUTH from 201-55-158-55.witelecom.com.br[201.55.158.55] Sep 15 18:26:53 mail.srvfarm.net postfix/smtps/smtpd[2805670]: warning: 201-55-158-55.witelecom.com.br[201.55.158.55]: SASL PLAIN authentication failed: Sep 15 18:26:54 mail.srvfarm.net postfix/smtps/smtpd[2805670]: lost connection after AUTH from 201-55-158-55.witelecom.com.br[201.55.158.55] Sep 15 18:33:12 mail.srvfarm.net postfix/smtps/smtpd[2818213]: warning: 201-55-158-55.witelecom.com.br[201.55.158.55]: SASL PLAIN authentication failed:	2020-09-16 19:02:23

Type

Details

Datetime

attack

email brute force

2020-09-17 02:42:58

attackspambots

Sep 15 18:24:03 mail.srvfarm.net postfix/smtps/smtpd[2819938]: warning: 201-55-158-55.witelecom.com.br[201.55.158.55]: SASL PLAIN authentication failed: 
Sep 15 18:24:03 mail.srvfarm.net postfix/smtps/smtpd[2819938]: lost connection after AUTH from 201-55-158-55.witelecom.com.br[201.55.158.55]
Sep 15 18:26:53 mail.srvfarm.net postfix/smtps/smtpd[2805670]: warning: 201-55-158-55.witelecom.com.br[201.55.158.55]: SASL PLAIN authentication failed: 
Sep 15 18:26:54 mail.srvfarm.net postfix/smtps/smtpd[2805670]: lost connection after AUTH from 201-55-158-55.witelecom.com.br[201.55.158.55]
Sep 15 18:33:12 mail.srvfarm.net postfix/smtps/smtpd[2818213]: warning: 201-55-158-55.witelecom.com.br[201.55.158.55]: SASL PLAIN authentication failed:

2020-09-16 19:02:23

Comments on same subnet:

IP	Type	Details	Datetime
201.55.158.228	attackbotsspam	Sep 12 21:11:40 mail.srvfarm.net postfix/smtps/smtpd[610610]: warning: 201-55-158-228.witelecom.com.br[201.55.158.228]: SASL PLAIN authentication failed: Sep 12 21:11:40 mail.srvfarm.net postfix/smtps/smtpd[610610]: lost connection after AUTH from 201-55-158-228.witelecom.com.br[201.55.158.228] Sep 12 21:17:02 mail.srvfarm.net postfix/smtps/smtpd[596783]: warning: 201-55-158-228.witelecom.com.br[201.55.158.228]: SASL PLAIN authentication failed: Sep 12 21:17:02 mail.srvfarm.net postfix/smtps/smtpd[596783]: lost connection after AUTH from 201-55-158-228.witelecom.com.br[201.55.158.228] Sep 12 21:17:13 mail.srvfarm.net postfix/smtps/smtpd[597331]: warning: 201-55-158-228.witelecom.com.br[201.55.158.228]: SASL PLAIN authentication failed:	2020-09-14 01:32:43
201.55.158.228	attack	Sep 12 21:11:40 mail.srvfarm.net postfix/smtps/smtpd[610610]: warning: 201-55-158-228.witelecom.com.br[201.55.158.228]: SASL PLAIN authentication failed: Sep 12 21:11:40 mail.srvfarm.net postfix/smtps/smtpd[610610]: lost connection after AUTH from 201-55-158-228.witelecom.com.br[201.55.158.228] Sep 12 21:17:02 mail.srvfarm.net postfix/smtps/smtpd[596783]: warning: 201-55-158-228.witelecom.com.br[201.55.158.228]: SASL PLAIN authentication failed: Sep 12 21:17:02 mail.srvfarm.net postfix/smtps/smtpd[596783]: lost connection after AUTH from 201-55-158-228.witelecom.com.br[201.55.158.228] Sep 12 21:17:13 mail.srvfarm.net postfix/smtps/smtpd[597331]: warning: 201-55-158-228.witelecom.com.br[201.55.158.228]: SASL PLAIN authentication failed:	2020-09-13 17:26:14
201.55.158.225	attackbots	Aug 11 13:55:53 mail.srvfarm.net postfix/smtps/smtpd[2364251]: warning: 201-55-158-225.witelecom.com.br[201.55.158.225]: SASL PLAIN authentication failed: Aug 11 13:55:53 mail.srvfarm.net postfix/smtps/smtpd[2364251]: lost connection after AUTH from 201-55-158-225.witelecom.com.br[201.55.158.225] Aug 11 13:56:01 mail.srvfarm.net postfix/smtps/smtpd[2366576]: warning: 201-55-158-225.witelecom.com.br[201.55.158.225]: SASL PLAIN authentication failed: Aug 11 13:56:01 mail.srvfarm.net postfix/smtps/smtpd[2366576]: lost connection after AUTH from 201-55-158-225.witelecom.com.br[201.55.158.225] Aug 11 14:01:31 mail.srvfarm.net postfix/smtps/smtpd[2367144]: warning: 201-55-158-225.witelecom.com.br[201.55.158.225]: SASL PLAIN authentication failed:	2020-08-12 03:30:05
201.55.158.169	attackspam	Jun 18 05:12:42 mail.srvfarm.net postfix/smtps/smtpd[1338969]: warning: 201-55-158-169.witelecom.com.br[201.55.158.169]: SASL PLAIN authentication failed: Jun 18 05:12:42 mail.srvfarm.net postfix/smtps/smtpd[1338969]: lost connection after AUTH from 201-55-158-169.witelecom.com.br[201.55.158.169] Jun 18 05:13:35 mail.srvfarm.net postfix/smtpd[1337038]: warning: 201-55-158-169.witelecom.com.br[201.55.158.169]: SASL PLAIN authentication failed: Jun 18 05:13:36 mail.srvfarm.net postfix/smtpd[1337038]: lost connection after AUTH from 201-55-158-169.witelecom.com.br[201.55.158.169] Jun 18 05:19:08 mail.srvfarm.net postfix/smtpd[1339651]: warning: 201-55-158-169.witelecom.com.br[201.55.158.169]: SASL PLAIN authentication failed:	2020-06-18 16:41:12
201.55.158.113	attackbotsspam	(BR/Brazil/-) SMTP Bruteforcing attempts	2020-06-05 17:42:07
201.55.158.87	attack	(BR/Brazil/-) SMTP Bruteforcing attempts	2020-06-05 17:38:25
201.55.158.242	attackspambots	Jun 4 13:43:49 mail.srvfarm.net postfix/smtpd[2497905]: warning: 201-55-158-242.witelecom.com.br[201.55.158.242]: SASL PLAIN authentication failed: Jun 4 13:43:50 mail.srvfarm.net postfix/smtpd[2497905]: lost connection after AUTH from 201-55-158-242.witelecom.com.br[201.55.158.242] Jun 4 13:51:32 mail.srvfarm.net postfix/smtpd[2502236]: warning: 201-55-158-242.witelecom.com.br[201.55.158.242]: SASL PLAIN authentication failed: Jun 4 13:51:32 mail.srvfarm.net postfix/smtpd[2502236]: lost connection after AUTH from 201-55-158-242.witelecom.com.br[201.55.158.242] Jun 4 13:52:13 mail.srvfarm.net postfix/smtps/smtpd[2498108]: warning: 201-55-158-242.witelecom.com.br[201.55.158.242]: SASL PLAIN authentication failed:	2020-06-05 03:18:55
201.55.158.21	attack	May 20 17:46:49 mail.srvfarm.net postfix/smtps/smtpd[1512859]: warning: 201-55-158-21.witelecom.com.br[201.55.158.21]: SASL PLAIN authentication failed: May 20 17:46:50 mail.srvfarm.net postfix/smtps/smtpd[1512859]: lost connection after AUTH from 201-55-158-21.witelecom.com.br[201.55.158.21] May 20 17:51:02 mail.srvfarm.net postfix/smtpd[1512862]: warning: 201-55-158-21.witelecom.com.br[201.55.158.21]: SASL PLAIN authentication failed: May 20 17:51:02 mail.srvfarm.net postfix/smtpd[1512862]: lost connection after AUTH from 201-55-158-21.witelecom.com.br[201.55.158.21] May 20 17:54:07 mail.srvfarm.net postfix/smtps/smtpd[1510940]: warning: 201-55-158-21.witelecom.com.br[201.55.158.21]: SASL PLAIN authentication failed:	2020-05-21 00:51:00
201.55.158.46	attackbots	Brute forcing email accounts	2020-05-10 05:02:42
201.55.158.2	attackspambots	SpamScore above: 10.0	2020-03-25 10:05:05
201.55.158.155	attackbots	Sep 5 22:52:02 mailman postfix/smtpd[12837]: warning: 201-55-158-155.witelecom.com.br[201.55.158.155]: SASL PLAIN authentication failed: authentication failure	2019-09-06 17:55:04
201.55.158.171	attackspambots	Sep 5 14:11:06 mailman postfix/smtpd[29743]: warning: 201-55-158-171.witelecom.com.br[201.55.158.171]: SASL PLAIN authentication failed: authentication failure	2019-09-06 03:49:34
201.55.158.62	attackbotsspam	Excessive failed login attempts on port 25	2019-09-03 17:15:51
201.55.158.28	attackspambots	SASL PLAIN auth failed: ruser=...	2019-08-19 12:06:02
201.55.158.224	attack	SASL PLAIN auth failed: ruser=...	2019-08-13 09:36:07

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 201.55.158.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16182
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;201.55.158.55.			IN	A

;; AUTHORITY SECTION:
.			144	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020091600 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 16 19:02:18 CST 2020
;; MSG SIZE  rcvd: 117

Host info

55.158.55.201.in-addr.arpa domain name pointer 201-55-158-55.witelecom.com.br.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
55.158.55.201.in-addr.arpa	name = 201-55-158-55.witelecom.com.br.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
113.173.166.178	attack	Invalid user admin from 113.173.166.178 port 40557	2020-02-02 15:11:33
179.186.198.89	attack	Unauthorized connection attempt detected from IP address 179.186.198.89 to port 23 [J]	2020-02-02 14:27:56
106.13.173.161	attackbots	Feb 1 20:12:40 web9 sshd\[28134\]: Invalid user tsbot from 106.13.173.161 Feb 1 20:12:40 web9 sshd\[28134\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.173.161 Feb 1 20:12:42 web9 sshd\[28134\]: Failed password for invalid user tsbot from 106.13.173.161 port 57826 ssh2 Feb 1 20:15:30 web9 sshd\[28328\]: Invalid user hadoop from 106.13.173.161 Feb 1 20:15:30 web9 sshd\[28328\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.173.161	2020-02-02 15:00:30
42.231.162.14	attackspambots	Feb 2 05:56:58 grey postfix/smtpd\[22281\]: NOQUEUE: reject: RCPT from unknown\[42.231.162.14\]: 554 5.7.1 Service unavailable\; Client host \[42.231.162.14\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[42.231.162.14\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-02 14:23:22
187.162.134.187	attack	Automatic report - Port Scan Attack	2020-02-02 15:14:01
185.184.79.34	attack	RDP brute force attack detected by fail2ban	2020-02-02 15:25:00
217.182.197.93	attackbotsspam	217.182.197.93 - - [02/Feb/2020:04:56:10 +0000] "POST /wp/wp-login.php HTTP/1.1" 200 6040 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 217.182.197.93 - - [02/Feb/2020:04:56:12 +0000] "POST /wp/wp-login.php HTTP/1.1" 200 5770 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-02-02 15:04:57
49.48.235.216	attackbotsspam	Unauthorized connection attempt detected from IP address 49.48.235.216 to port 445	2020-02-02 15:19:35
220.135.33.131	attack	unauthorized connection attempt	2020-02-02 15:03:25
106.54.142.84	attack	$f2bV_matches	2020-02-02 15:27:02
155.138.231.139	attackbots	Brute forcing email accounts	2020-02-02 15:25:35
125.212.152.41	attackbots	Honeypot attack, port: 445, PTR: dynamic-ip-adsl.viettel.vn.	2020-02-02 15:09:31
46.101.17.215	attackbotsspam	Invalid user teja from 46.101.17.215 port 49422	2020-02-02 15:04:11
5.101.0.209	attackspambots	Unauthorized connection attempt detected from IP address 5.101.0.209 to port 8161 [J]	2020-02-02 15:26:48
119.80.240.11	attackbotsspam	unauthorized connection attempt	2020-02-02 15:30:57

Recently Reported IPs

196.216.228.111	85.105.168.26	183.150.33.140	51.91.91.225
118.89.241.214	83.96.47.178	157.245.134.19	137.174.72.237
159.65.154.65	166.237.191.29	64.222.179.172	141.32.21.13
169.252.139.152	178.234.174.147	37.27.139.48	127.38.49.182
177.227.96.52	10.39.219.218	152.249.155.111	57.94.149.237