Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: TOT Public Company Limited

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspambots
Unauthorized connection attempt from IP address 113.53.40.80 on Port 445(SMB)
2020-01-16 19:34:46
Comments on same subnet:
IP Type Details Datetime
113.53.40.126 spambotsattackproxynormal
/
2023-07-20 22:04:48
113.53.40.221 attack
Unauthorized connection attempt from IP address 113.53.40.221 on Port 445(SMB)
2020-06-25 03:44:44
113.53.40.56 attack
SSH-bruteforce attempts
2019-11-30 19:39:07
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.53.40.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56147
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;113.53.40.80.			IN	A

;; AUTHORITY SECTION:
.			311	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011600 1800 900 604800 86400

;; Query time: 114 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 16 19:34:43 CST 2020
;; MSG SIZE  rcvd: 116
Host info
Host 80.40.53.113.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 80.40.53.113.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
142.93.147.165 attack
Honeypot attack, port: 81, PTR: min-extra-scan-116-ca-prod.binaryedge.ninja.
2020-02-06 02:09:29
5.88.155.130 attackbots
Feb  5 05:49:35 server sshd\[18766\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=net-5-88-155-130.cust.vodafonedsl.it 
Feb  5 05:49:36 server sshd\[18766\]: Failed password for invalid user contact from 5.88.155.130 port 58874 ssh2
Feb  5 19:40:40 server sshd\[1773\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=net-5-88-155-130.cust.vodafonedsl.it  user=root
Feb  5 19:40:43 server sshd\[1773\]: Failed password for root from 5.88.155.130 port 47522 ssh2
Feb  5 19:42:41 server sshd\[2114\]: Invalid user contact from 5.88.155.130
Feb  5 19:42:41 server sshd\[2114\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=net-5-88-155-130.cust.vodafonedsl.it 
...
2020-02-06 02:36:20
104.248.34.192 attackspambots
Unauthorized connection attempt detected from IP address 104.248.34.192 to port 2220 [J]
2020-02-06 02:07:07
46.252.240.134 attackbotsspam
Unauthorized connection attempt from IP address 46.252.240.134 on Port 445(SMB)
2020-02-06 02:02:32
113.53.31.217 attackspambots
Unauthorized connection attempt from IP address 113.53.31.217 on Port 445(SMB)
2020-02-06 02:33:18
210.54.32.35 attack
Feb  5 06:08:14 home sshd[14919]: Invalid user af from 210.54.32.35 port 46174
Feb  5 06:08:14 home sshd[14919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.54.32.35
Feb  5 06:08:14 home sshd[14919]: Invalid user af from 210.54.32.35 port 46174
Feb  5 06:08:16 home sshd[14919]: Failed password for invalid user af from 210.54.32.35 port 46174 ssh2
Feb  5 06:38:44 home sshd[15317]: Invalid user nm from 210.54.32.35 port 39002
Feb  5 06:38:44 home sshd[15317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.54.32.35
Feb  5 06:38:44 home sshd[15317]: Invalid user nm from 210.54.32.35 port 39002
Feb  5 06:38:46 home sshd[15317]: Failed password for invalid user nm from 210.54.32.35 port 39002 ssh2
Feb  5 06:40:32 home sshd[15340]: Invalid user lara from 210.54.32.35 port 52856
Feb  5 06:40:32 home sshd[15340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.54.32.35
Feb  5 06:40:3
2020-02-06 02:11:28
35.202.59.212 attackspam
Unauthorized connection attempt detected from IP address 35.202.59.212 to port 2220 [J]
2020-02-06 02:05:34
45.135.164.46 attackspambots
Feb  3 00:29:34 HOST sshd[14295]: Address 45.135.164.46 maps to ptr.ruvds.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Feb  3 00:29:35 HOST sshd[14295]: Failed password for invalid user vivo from 45.135.164.46 port 56754 ssh2
Feb  3 00:29:35 HOST sshd[14295]: Received disconnect from 45.135.164.46: 11: Bye Bye [preauth]
Feb  3 00:46:00 HOST sshd[15256]: Address 45.135.164.46 maps to ptr.ruvds.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Feb  3 00:46:02 HOST sshd[15256]: Failed password for invalid user ghostname from 45.135.164.46 port 40094 ssh2
Feb  3 00:46:02 HOST sshd[15256]: Received disconnect from 45.135.164.46: 11: Bye Bye [preauth]
Feb  3 00:51:36 HOST sshd[15520]: Address 45.135.164.46 maps to ptr.ruvds.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Feb  3 00:51:39 HOST sshd[15520]: Failed password for invalid user zara from 45.135.164.46 port 42770 ssh2
Feb  3 00:51:39 ........
-------------------------------
2020-02-06 02:20:57
59.120.185.230 attack
web-1 [ssh] SSH Attack
2020-02-06 02:08:04
49.247.203.22 attackspam
$f2bV_matches
2020-02-06 02:19:06
80.82.65.122 attack
Feb  5 18:22:34 h2177944 kernel: \[4121445.264322\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=80.82.65.122 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=16597 PROTO=TCP SPT=52718 DPT=18503 WINDOW=1024 RES=0x00 SYN URGP=0 
Feb  5 18:22:34 h2177944 kernel: \[4121445.264337\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=80.82.65.122 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=16597 PROTO=TCP SPT=52718 DPT=18503 WINDOW=1024 RES=0x00 SYN URGP=0 
Feb  5 18:44:12 h2177944 kernel: \[4122742.945337\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=80.82.65.122 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=62219 PROTO=TCP SPT=52718 DPT=18441 WINDOW=1024 RES=0x00 SYN URGP=0 
Feb  5 18:44:12 h2177944 kernel: \[4122742.945353\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=80.82.65.122 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=62219 PROTO=TCP SPT=52718 DPT=18441 WINDOW=1024 RES=0x00 SYN URGP=0 
Feb  5 18:45:43 h2177944 kernel: \[4122834.563569\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=80.82.65.122 DST=85.214.117.9
2020-02-06 02:02:02
186.216.65.12 attackbots
Unauthorized connection attempt from IP address 186.216.65.12 on Port 445(SMB)
2020-02-06 02:21:29
104.236.247.67 attackbots
Brute force attempt
2020-02-06 02:33:39
37.252.189.70 attack
Unauthorized connection attempt detected from IP address 37.252.189.70 to port 2220 [J]
2020-02-06 02:22:54
162.243.130.244 attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-06 02:11:12

Recently Reported IPs

167.172.158.200 34.220.22.12 27.79.210.148 49.145.136.163
148.227.208.7 119.46.176.222 42.237.93.44 125.160.60.167
184.168.193.98 59.95.211.203 167.99.86.90 49.145.64.197
196.188.240.13 54.245.165.222 179.228.74.3 118.69.111.122
94.25.230.115 190.93.222.228 114.34.72.141 14.181.249.235