49.145.110.242

Basic Info

City: unknown

Region: unknown

Country: Philippines

Internet Service Provider: Philippine Long Distance Telephone Company

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Honeypot attack, port: 445, PTR: dsl.49.145.110.242.pldt.net.	2020-03-01 21:47:10

Comments on same subnet:

IP	Type	Details	Datetime
49.145.110.158	attackspambots	Honeypot attack, port: 445, PTR: dsl.49.145.110.158.pldt.net.	2020-02-23 23:28:56
49.145.110.67	attack	Dec 8 07:25:58 host sshd[15725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.145.110.67 user=root Dec 8 07:26:00 host sshd[15725]: Failed password for root from 49.145.110.67 port 45795 ssh2 ...	2019-12-08 20:50:12
49.145.110.24	attack	WordPress XMLRPC scan :: 49.145.110.24 0.140 BYPASS [24/Sep/2019:13:53:53 1000] [censored_1] "GET /xmlrpc.php HTTP/1.1" 405 53 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1"	2019-09-24 15:43:15

Type

Details

Datetime

49.145.110.158

attackspambots

Honeypot attack, port: 445, PTR: dsl.49.145.110.158.pldt.net.

2020-02-23 23:28:56

49.145.110.67

attack

Dec  8 07:25:58 host sshd[15725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.145.110.67  user=root
Dec  8 07:26:00 host sshd[15725]: Failed password for root from 49.145.110.67 port 45795 ssh2
...

2019-12-08 20:50:12

49.145.110.24

attack

WordPress XMLRPC scan :: 49.145.110.24 0.140 BYPASS [24/Sep/2019:13:53:53  1000] [censored_1] "GET /xmlrpc.php HTTP/1.1" 405 53 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1"

2019-09-24 15:43:15

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.145.110.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3658
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.145.110.242.			IN	A

;; AUTHORITY SECTION:
.			535	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030100 1800 900 604800 86400

;; Query time: 89 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 01 21:47:05 CST 2020
;; MSG SIZE  rcvd: 118

Host info

242.110.145.49.in-addr.arpa domain name pointer dsl.49.145.110.242.pldt.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
242.110.145.49.in-addr.arpa	name = dsl.49.145.110.242.pldt.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
134.17.94.158	attackspam	Jun 30 21:10:15 vm0 sshd[13294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.17.94.158 Jun 30 21:10:17 vm0 sshd[13294]: Failed password for invalid user vt from 134.17.94.158 port 10038 ssh2 ...	2020-07-02 04:47:34
34.84.184.7	attackbotsspam	Jun 30 20:52:40 XXXXXX sshd[36730]: Invalid user server from 34.84.184.7 port 57892	2020-07-02 04:35:28
123.206.255.17	attackspam	SSH Bruteforce Attempt (failed auth)	2020-07-02 04:41:41
122.51.57.78	attack	SSH Invalid Login	2020-07-02 04:51:22
185.22.142.197	attack	Jul 1 01:24:55 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jul 1 01:24:57 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jul 1 01:25:19 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jul 1 01:30:31 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 181 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jul 1 01:30:32 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 ...	2020-07-02 05:11:44
14.143.187.242	attackbotsspam	Jun 30 21:16:15 pbkit sshd[615470]: Failed password for invalid user demo from 14.143.187.242 port 12964 ssh2 Jun 30 21:33:20 pbkit sshd[615902]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.143.187.242 user=root Jun 30 21:33:22 pbkit sshd[615902]: Failed password for root from 14.143.187.242 port 27234 ssh2 ...	2020-07-02 04:34:39
5.9.107.211	attack	20 attempts against mh-misbehave-ban on sonic	2020-07-02 04:57:17
87.121.77.137	attack	Jul 1 01:29:18 mail sshd\[26459\]: Invalid user ubnt from 87.121.77.137 Jul 1 01:29:18 mail sshd\[26459\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.121.77.137 Jul 1 01:29:20 mail sshd\[26459\]: Failed password for invalid user ubnt from 87.121.77.137 port 60483 ssh2	2020-07-02 05:14:22
128.199.193.106	attack	Automatic report - Banned IP Access	2020-07-02 04:30:36
81.163.15.72	attack	Jun 29 13:16:49 mail.srvfarm.net postfix/smtps/smtpd[797263]: warning: 81-163-15-72.net.lasnet.pl[81.163.15.72]: SASL PLAIN authentication failed: Jun 29 13:16:49 mail.srvfarm.net postfix/smtps/smtpd[797263]: lost connection after AUTH from 81-163-15-72.net.lasnet.pl[81.163.15.72] Jun 29 13:22:42 mail.srvfarm.net postfix/smtpd[782527]: warning: 81-163-15-72.net.lasnet.pl[81.163.15.72]: SASL PLAIN authentication failed: Jun 29 13:22:42 mail.srvfarm.net postfix/smtpd[782527]: lost connection after AUTH from 81-163-15-72.net.lasnet.pl[81.163.15.72] Jun 29 13:24:01 mail.srvfarm.net postfix/smtps/smtpd[794331]: warning: unknown[81.163.15.72]: SASL PLAIN authentication failed:	2020-07-02 04:53:13
35.201.138.19	attack	Jun 30 16:59:47 pi sshd[4771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.201.138.19 Jun 30 16:59:50 pi sshd[4771]: Failed password for invalid user ftp from 35.201.138.19 port 59222 ssh2	2020-07-02 05:16:53
106.75.32.229	attackspam	prod8 ...	2020-07-02 04:48:44
118.25.39.110	attackbots	2020-06-30T10:52:49.580562server.espacesoutien.com sshd[27783]: Invalid user www-data from 118.25.39.110 port 39360 2020-06-30T10:52:49.595904server.espacesoutien.com sshd[27783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.39.110 2020-06-30T10:52:49.580562server.espacesoutien.com sshd[27783]: Invalid user www-data from 118.25.39.110 port 39360 2020-06-30T10:52:51.745263server.espacesoutien.com sshd[27783]: Failed password for invalid user www-data from 118.25.39.110 port 39360 ssh2 ...	2020-07-02 04:33:30
104.236.228.46	attackbotsspam	TCP (SYN) 104.236.228.46:50969 -> port 29734, len 44	2020-07-02 05:00:17
34.87.171.187	attack	Jun 30 22:11:48 mail sshd[27983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.87.171.187 Jun 30 22:11:50 mail sshd[27983]: Failed password for invalid user dan from 34.87.171.187 port 41850 ssh2 ...	2020-07-02 04:32:09

Recently Reported IPs

49.53.126.26	104.170.43.216	15.245.227.72	171.163.132.3
105.91.45.201	113.128.97.59	106.249.8.16	174.69.30.26
81.134.124.219	31.228.188.252	172.50.35.161	221.14.14.9
69.242.170.82	198.51.36.224	172.76.150.11	179.167.247.43
216.245.197.14	73.239.51.54	175.72.64.89	14.70.114.115