113.254.2.40 - IPInfo

Basic Info

City: Sheung Shui

Region: North New Territories

Country: Hong Kong

Internet Service Provider: CSL Limited

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
113.254.208.242	attackbots	Port probing on unauthorized port 5555	2020-08-18 03:24:56
113.254.230.153	attack	Aug 10 18:05:12 host-itldc-nl sshd[37222]: User root from 113.254.230.153 not allowed because not listed in AllowUsers Aug 11 02:24:33 host-itldc-nl sshd[58084]: User root from 113.254.230.153 not allowed because not listed in AllowUsers Aug 11 02:24:46 host-itldc-nl sshd[59004]: Invalid user support from 113.254.230.153 port 48578 ...	2020-08-11 08:36:30
113.254.2.169	attackspambots	20/7/11@08:00:51: FAIL: IoT-Telnet address from=113.254.2.169 ...	2020-07-11 21:46:33
113.254.230.114	attack	1593489344 - 06/30/2020 05:55:44 Host: 113.254.230.114/113.254.230.114 Port: 445 TCP Blocked	2020-06-30 13:13:03
113.254.242.46	attackspambots	Invalid user admin from 113.254.242.46 port 59610	2020-05-22 03:36:49
113.254.250.30	attackbots	1584369791 - 03/16/2020 21:43:11 Host: 30-250-254-113-on-nets.com/113.254.250.30 Port: 23 TCP Blocked ...	2020-03-17 01:36:46
113.254.206.210	attack	Honeypot attack, port: 5555, PTR: 210-206-254-113-on-nets.com.	2020-03-08 22:04:39
113.254.249.236	attack	Sat Mar 7 15:08:32 2020 - Child process 400040 handling connection Sat Mar 7 15:08:32 2020 - New connection from: 113.254.249.236:32809 Sat Mar 7 15:08:32 2020 - Sending data to client: [Login: ] Sat Mar 7 15:09:03 2020 - Child aborting Sat Mar 7 15:09:03 2020 - Reporting IP address: 113.254.249.236 - mflag: 0	2020-03-08 07:46:56
113.254.26.42	attack	1583241588 - 03/03/2020 14:19:48 Host: 113.254.26.42/113.254.26.42 Port: 445 TCP Blocked	2020-03-04 05:48:46
113.254.241.130	attackspam	Port probing on unauthorized port 5555	2020-03-01 17:11:10
113.254.250.253	attackbots	Fail2Ban Ban Triggered	2020-02-18 21:47:14
113.254.226.210	attack	Port probing on unauthorized port 23	2020-02-09 20:41:25
113.254.236.78	attackspam	unauthorized connection attempt	2020-02-07 14:24:09
113.254.205.14	attackspam	Honeypot attack, port: 5555, PTR: 14-205-254-113-on-nets.com.	2020-01-26 23:40:06
113.254.247.74	attackspambots	unauthorized connection attempt	2020-01-17 17:45:53

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.254.2.40
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21455
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;113.254.2.40.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025032900 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 29 17:44:08 CST 2025
;; MSG SIZE  rcvd: 105

Host info

40.2.254.113.in-addr.arpa domain name pointer 40-2-254-113-on-nets.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
40.2.254.113.in-addr.arpa	name = 40-2-254-113-on-nets.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
41.210.128.37	attackspambots	2019-07-23T09:54:02.834331abusebot-5.cloudsearch.cf sshd\[31434\]: Invalid user admin from 41.210.128.37 port 51366	2019-07-23 18:12:50
192.99.70.12	attackspambots	Jul 23 11:04:52 microserver sshd[51268]: Invalid user btsync from 192.99.70.12 port 41040 Jul 23 11:04:52 microserver sshd[51268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.70.12 Jul 23 11:04:53 microserver sshd[51268]: Failed password for invalid user btsync from 192.99.70.12 port 41040 ssh2 Jul 23 11:08:40 microserver sshd[51855]: Invalid user admin from 192.99.70.12 port 56974 Jul 23 11:08:40 microserver sshd[51855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.70.12 Jul 23 11:19:56 microserver sshd[53206]: Invalid user pp from 192.99.70.12 port 48268 Jul 23 11:19:56 microserver sshd[53206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.70.12 Jul 23 11:19:57 microserver sshd[53206]: Failed password for invalid user pp from 192.99.70.12 port 48268 ssh2 Jul 23 11:23:41 microserver sshd[53780]: Invalid user simon from 192.99.70.12 port 35944 Jul 23 11:23:41 mi	2019-07-23 17:53:04
115.84.121.80	attackbotsspam	Jul 23 12:12:55 meumeu sshd[27763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.84.121.80 Jul 23 12:12:57 meumeu sshd[27763]: Failed password for invalid user dbms from 115.84.121.80 port 35184 ssh2 Jul 23 12:17:37 meumeu sshd[10097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.84.121.80 ...	2019-07-23 18:17:52
36.66.4.62	attackspambots	2019-07-23T09:21:37.359084abusebot-6.cloudsearch.cf sshd\[1791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.66.4.62 user=root	2019-07-23 18:33:22
134.209.155.250	attackspambots	SSH Server BruteForce Attack	2019-07-23 17:49:33
211.253.25.21	attackbotsspam	Jul 23 14:54:10 vibhu-HP-Z238-Microtower-Workstation sshd\[3901\]: Invalid user soporte from 211.253.25.21 Jul 23 14:54:10 vibhu-HP-Z238-Microtower-Workstation sshd\[3901\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.253.25.21 Jul 23 14:54:12 vibhu-HP-Z238-Microtower-Workstation sshd\[3901\]: Failed password for invalid user soporte from 211.253.25.21 port 39190 ssh2 Jul 23 14:59:25 vibhu-HP-Z238-Microtower-Workstation sshd\[4038\]: Invalid user user from 211.253.25.21 Jul 23 14:59:25 vibhu-HP-Z238-Microtower-Workstation sshd\[4038\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.253.25.21 ...	2019-07-23 17:43:40
131.100.219.3	attackspam	Jul 23 11:55:04 rpi sshd[19538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=131.100.219.3 Jul 23 11:55:06 rpi sshd[19538]: Failed password for invalid user alfresco from 131.100.219.3 port 42354 ssh2	2019-07-23 18:27:56
54.38.18.211	attack	Jul 23 11:22:27 * sshd[30390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.18.211 Jul 23 11:22:30 * sshd[30390]: Failed password for invalid user user1 from 54.38.18.211 port 39938 ssh2	2019-07-23 18:09:18
35.163.172.93	attackspam	xmlrpc attack	2019-07-23 18:10:20
165.227.131.210	attack	Jul 23 11:53:55 rpi sshd[19487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.131.210 Jul 23 11:53:57 rpi sshd[19487]: Failed password for invalid user superman from 165.227.131.210 port 38815 ssh2	2019-07-23 17:59:26
201.69.200.201	attack	Jul 23 11:23:16 ArkNodeAT sshd\[26848\]: Invalid user reseller from 201.69.200.201 Jul 23 11:23:16 ArkNodeAT sshd\[26848\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.69.200.201 Jul 23 11:23:17 ArkNodeAT sshd\[26848\]: Failed password for invalid user reseller from 201.69.200.201 port 38795 ssh2	2019-07-23 17:52:25
122.96.43.77	attackspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-20 19:16:43,209 INFO [shellcode_manager] (122.96.43.77) no match, writing hexdump (fc774a4455b2c4a19fdddcb5caa1a1b8 :2128163) - MS17010 (EternalBlue)	2019-07-23 17:22:30
142.44.247.87	attackbotsspam	Jul 23 11:40:39 SilenceServices sshd[30178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.247.87 Jul 23 11:40:41 SilenceServices sshd[30178]: Failed password for invalid user frodo from 142.44.247.87 port 48490 ssh2 Jul 23 11:46:38 SilenceServices sshd[2038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.247.87	2019-07-23 18:09:38
94.197.65.180	attack	illegal hidden networks/verizon/8000 series/ mtu 16384 options=1203 inet 127.0.0.1 netmask 0xff000000 inet6 ::1 prefixlen 128 inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1 nd6 options=201 gif0: flags=8010 mtu 1280 stf0: flags=0<> mtu 1280 en0: flags=8863 mtu 1500 ether 7c:04:d0:bb:dc:a6 inet6 fe80::1455:1d61:99fb:9eb1%en0 prefixlen 64 secured scopeid 0x4 inet 192.168.8.100 netmask 0xffffff00 broadcast 192.168.8.255 nd6 options=201 media: autoselect status: active en1: flags=863 mtu 1500 options=60 ether 9a:00:0c:64:90:40 media: autoselect status: inactive p2p0: flags=8843 mtu 2304 ether 0e:04:d0:bb:dc:a6 media: autoselect status: inactive awdl0: flags=8943	2019-07-23 18:15:39
178.122.189.106	attackspam	Jul 23 01:11:48 ncomp sshd[6965]: Invalid user admin from 178.122.189.106 Jul 23 01:11:48 ncomp sshd[6965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.122.189.106 Jul 23 01:11:48 ncomp sshd[6965]: Invalid user admin from 178.122.189.106 Jul 23 01:11:50 ncomp sshd[6965]: Failed password for invalid user admin from 178.122.189.106 port 40159 ssh2	2019-07-23 17:18:16

Recently Reported IPs

138.134.147.13	203.29.157.239	117.204.14.208	104.112.154.57
187.78.247.119	81.112.16.85	250.161.69.230	153.67.224.245
223.66.86.122	177.105.87.34	121.194.147.124	51.182.218.103
35.246.237.90	164.24.135.238	251.187.50.206	20.254.150.57
89.33.142.39	204.4.17.20	240.75.62.180	185.62.253.231