110.54.248.42 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Philippines

Internet Service Provider: Globe Telecom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Unauthorized connection attempt from IP address 110.54.248.42 on Port 445(SMB)	2019-10-31 03:05:57

Comments on same subnet:

IP	Type	Details	Datetime
110.54.248.232	attackspambots	1588477790 - 05/03/2020 05:49:50 Host: 110.54.248.232/110.54.248.232 Port: 445 TCP Blocked	2020-05-03 17:51:04
110.54.248.158	attackspambots	1578632139 - 01/10/2020 05:55:39 Host: 110.54.248.158/110.54.248.158 Port: 445 TCP Blocked	2020-01-10 15:02:46
110.54.248.91	attackbotsspam	Unauthorised access (Nov 29) SRC=110.54.248.91 LEN=52 TTL=114 ID=16447 DF TCP DPT=445 WINDOW=8192 SYN	2019-11-29 20:45:07
110.54.248.69	attackbotsspam	Unauthorized connection attempt from IP address 110.54.248.69 on Port 445(SMB)	2019-11-15 22:37:20

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 110.54.248.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53992
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;110.54.248.42.			IN	A

;; AUTHORITY SECTION:
.			471	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019103001 1800 900 604800 86400

;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 31 03:05:53 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 42.248.54.110.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 42.248.54.110.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
168.181.49.192	attackbotsspam	Nov 13 15:47:07 lnxweb61 sshd[6245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.181.49.192	2019-11-14 02:47:50
45.71.136.125	attack	Unauthorized connection attempt from IP address 45.71.136.125 on Port 445(SMB)	2019-11-14 02:53:46
218.92.0.155	attack	$f2bV_matches	2019-11-14 03:07:06
138.197.195.52	attackbotsspam	Nov 13 19:21:34 serwer sshd\[25602\]: Invalid user user from 138.197.195.52 port 55592 Nov 13 19:21:34 serwer sshd\[25602\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.195.52 Nov 13 19:21:36 serwer sshd\[25602\]: Failed password for invalid user user from 138.197.195.52 port 55592 ssh2 ...	2019-11-14 02:58:17
201.47.217.98	attack	Unauthorized connection attempt from IP address 201.47.217.98 on Port 445(SMB)	2019-11-14 03:02:55
141.98.81.37	attackbotsspam	detected by Fail2Ban	2019-11-14 02:41:24
2.92.69.36	attackbotsspam	Unauthorized connection attempt from IP address 2.92.69.36 on Port 445(SMB)	2019-11-14 03:11:02
141.98.80.99	attackspambots		2019-11-14 02:39:40
192.163.215.159	attackbotsspam	2019-11-13T15:43:06.750776 sshd[9328]: Invalid user yx from 192.163.215.159 port 57238 2019-11-13T15:43:06.765829 sshd[9328]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.163.215.159 2019-11-13T15:43:06.750776 sshd[9328]: Invalid user yx from 192.163.215.159 port 57238 2019-11-13T15:43:08.920184 sshd[9328]: Failed password for invalid user yx from 192.163.215.159 port 57238 ssh2 2019-11-13T15:46:51.016156 sshd[9422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.163.215.159 user=daemon 2019-11-13T15:46:52.724319 sshd[9422]: Failed password for daemon from 192.163.215.159 port 36024 ssh2 ...	2019-11-14 02:59:39
190.13.135.44	attackbots	Unauthorized connection attempt from IP address 190.13.135.44 on Port 445(SMB)	2019-11-14 02:50:47
190.186.19.162	attackspam	Nov 13 13:45:45 mecmail postfix/smtpd[27129]: NOQUEUE: reject: RCPT from static-ip-adsl-190.186.19.162.cotas.com.bo[190.186.19.162]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo= Nov 13 13:46:11 mecmail postfix/smtpd[611]: NOQUEUE: reject: RCPT from static-ip-adsl-190.186.19.162.cotas.com.bo[190.186.19.162]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo= Nov 13 13:46:30 mecmail postfix/smtpd[611]: NOQUEUE: reject: RCPT from static-ip-adsl-190.186.19.162.cotas.com.bo[190.186.19.162]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo= Nov 13 13:46:43 mecmail postfix/smtpd[324 ...	2019-11-14 03:00:59
218.92.0.138	attack	$f2bV_matches	2019-11-14 02:38:32
14.248.97.71	attackspambots	Unauthorized connection attempt from IP address 14.248.97.71 on Port 445(SMB)	2019-11-14 03:05:17
179.187.249.161	attack	Unauthorized connection attempt from IP address 179.187.249.161 on Port 445(SMB)	2019-11-14 03:03:39
45.82.153.42	attackspambots	11/13/2019-19:36:13.979585 45.82.153.42 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 44	2019-11-14 03:06:34

Recently Reported IPs

130.162.12.120	88.151.190.113	132.142.121.21	161.101.221.190
156.111.1.67	173.150.11.166	182.117.143.204	248.35.233.202
215.187.31.37	136.50.128.41	99.234.148.217	104.238.162.110
190.53.226.186	97.228.117.222	5.46.179.167	20.222.162.60
34.128.192.239	197.183.114.97	34.186.134.118	200.127.42.197