Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: TOT Public Company Limited

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspambots
Unauthorized connection attempt from IP address 113.53.40.80 on Port 445(SMB)
2020-01-16 19:34:46
Comments on same subnet:
IP Type Details Datetime
113.53.40.126 spambotsattackproxynormal
/
2023-07-20 22:04:48
113.53.40.221 attack
Unauthorized connection attempt from IP address 113.53.40.221 on Port 445(SMB)
2020-06-25 03:44:44
113.53.40.56 attack
SSH-bruteforce attempts
2019-11-30 19:39:07
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.53.40.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56147
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;113.53.40.80.			IN	A

;; AUTHORITY SECTION:
.			311	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011600 1800 900 604800 86400

;; Query time: 114 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 16 19:34:43 CST 2020
;; MSG SIZE  rcvd: 116
Host info
Host 80.40.53.113.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 80.40.53.113.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
87.241.138.143 attackspam
Automatic report - Banned IP Access
2019-11-16 05:36:59
196.52.43.57 attack
port scan and connect, tcp 8443 (https-alt)
2019-11-16 05:50:37
122.228.19.80 attackspam
15.11.2019 20:50:46 Connection to port 1023 blocked by firewall
2019-11-16 05:33:00
138.68.12.43 attack
Nov 15 05:45:44 web9 sshd\[25102\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.12.43  user=root
Nov 15 05:45:46 web9 sshd\[25102\]: Failed password for root from 138.68.12.43 port 33178 ssh2
Nov 15 05:50:28 web9 sshd\[25779\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.12.43  user=root
Nov 15 05:50:30 web9 sshd\[25779\]: Failed password for root from 138.68.12.43 port 42522 ssh2
Nov 15 05:55:12 web9 sshd\[26356\]: Invalid user admin from 138.68.12.43
Nov 15 05:55:12 web9 sshd\[26356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.12.43
2019-11-16 05:54:56
92.118.161.53 attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 91 - port: 5353 proto: UDP cat: Misc Attack
2019-11-16 05:48:23
165.22.251.193 attackbots
2019-11-15T14:34:48.767665shield sshd\[26838\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.251.193  user=root
2019-11-15T14:34:50.650085shield sshd\[26838\]: Failed password for root from 165.22.251.193 port 49550 ssh2
2019-11-15T14:35:37.614014shield sshd\[27032\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.251.193  user=root
2019-11-15T14:35:39.225118shield sshd\[27032\]: Failed password for root from 165.22.251.193 port 60604 ssh2
2019-11-15T14:36:25.985047shield sshd\[27181\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.251.193  user=root
2019-11-16 05:37:47
92.118.37.84 attack
MultiHost/MultiPort Probe, Scan, Hack -
2019-11-16 05:29:19
212.47.246.150 attack
Nov 15 21:00:36 * sshd[25664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.47.246.150
Nov 15 21:00:38 * sshd[25664]: Failed password for invalid user crosse from 212.47.246.150 port 56852 ssh2
2019-11-16 05:50:24
77.85.106.132 attack
[Fri Nov 15 11:36:50.912878 2019] [:error] [pid 162507] [client 77.85.106.132:33773] [client 77.85.106.132] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 21)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "127.0.0.1"] [uri "/cgi-bin/ViewLog.asp"] [unique_id "Xc64AjGRh487OmvNeZkUygAAAAU"]
...
2019-11-16 05:21:23
196.52.43.66 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2019-11-16 05:23:13
222.186.190.92 attackspambots
detected by Fail2Ban
2019-11-16 05:44:11
196.52.43.55 attack
MultiHost/MultiPort Probe, Scan, Hack -
2019-11-16 05:56:33
103.85.63.253 attack
Nov 15 17:29:13 marvibiene sshd[50882]: Invalid user okita from 103.85.63.253 port 44000
Nov 15 17:29:13 marvibiene sshd[50882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.85.63.253
Nov 15 17:29:13 marvibiene sshd[50882]: Invalid user okita from 103.85.63.253 port 44000
Nov 15 17:29:15 marvibiene sshd[50882]: Failed password for invalid user okita from 103.85.63.253 port 44000 ssh2
...
2019-11-16 05:42:06
196.52.43.56 attackbots
ICMP MH Probe, Scan /Distributed -
2019-11-16 05:54:06
196.52.43.84 attack
MultiHost/MultiPort Probe, Scan, Hack -
2019-11-16 05:20:31

Recently Reported IPs

167.172.158.200 34.220.22.12 27.79.210.148 49.145.136.163
148.227.208.7 119.46.176.222 42.237.93.44 125.160.60.167
184.168.193.98 59.95.211.203 167.99.86.90 49.145.64.197
196.188.240.13 54.245.165.222 179.228.74.3 118.69.111.122
94.25.230.115 190.93.222.228 114.34.72.141 14.181.249.235