59.13.200.148 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Korea (Republic of)

Internet Service Provider: KT Corporation

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt detected from IP address 59.13.200.148 to port 5555 [J]	2020-01-13 04:35:35
attackbotsspam	Unauthorized connection attempt detected from IP address 59.13.200.148 to port 5555 [J]	2020-01-12 18:23:52

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 59.13.200.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7485
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;59.13.200.148.			IN	A

;; AUTHORITY SECTION:
.			460	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011200 1800 900 604800 86400

;; Query time: 108 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 12 18:23:49 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 148.200.13.59.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 148.200.13.59.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
186.215.198.137	attack	(imapd) Failed IMAP login from 186.215.198.137 (BR/Brazil/podal.static.gvt.net.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug 29 00:51:52 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=186.215.198.137, lip=5.63.12.44, TLS: Connection closed, session=<9D5czfWtyMq618aJ>	2020-08-29 07:39:59
182.71.111.138	attack	Aug 28 22:44:33 django-0 sshd[2053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.71.111.138 user=root Aug 28 22:44:35 django-0 sshd[2053]: Failed password for root from 182.71.111.138 port 54326 ssh2 ...	2020-08-29 07:11:47
45.92.126.90	attackbotsspam	Brute force attack stopped by firewall	2020-08-29 07:38:42
54.161.3.78	attackspambots	HTTP/80/443/8080 Probe, Hack -	2020-08-29 07:29:11
106.12.102.54	attackspam	Aug 28 21:49:38 instance-2 sshd[11194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.102.54 Aug 28 21:49:41 instance-2 sshd[11194]: Failed password for invalid user log from 106.12.102.54 port 39664 ssh2 Aug 28 21:54:19 instance-2 sshd[11335]: Failed password for root from 106.12.102.54 port 42894 ssh2	2020-08-29 07:06:27
61.177.172.177	attack	Aug 29 01:02:52 mail sshd\[12876\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.177 user=root Aug 29 01:02:53 mail sshd\[12876\]: Failed password for root from 61.177.172.177 port 21278 ssh2 Aug 29 01:02:57 mail sshd\[12876\]: Failed password for root from 61.177.172.177 port 21278 ssh2 Aug 29 01:03:00 mail sshd\[12876\]: Failed password for root from 61.177.172.177 port 21278 ssh2 Aug 29 01:03:04 mail sshd\[12876\]: Failed password for root from 61.177.172.177 port 21278 ssh2 Aug 29 01:03:07 mail sshd\[12876\]: Failed password for root from 61.177.172.177 port 21278 ssh2 ...	2020-08-29 07:04:26
120.86.127.45	attackbots	Aug 29 01:24:13 sso sshd[16216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.86.127.45 Aug 29 01:24:15 sso sshd[16216]: Failed password for invalid user kte from 120.86.127.45 port 40126 ssh2 ...	2020-08-29 07:41:42
218.92.0.175	attack	Aug 28 22:47:16 scw-6657dc sshd[28017]: Failed password for root from 218.92.0.175 port 6240 ssh2 Aug 28 22:47:16 scw-6657dc sshd[28017]: Failed password for root from 218.92.0.175 port 6240 ssh2 Aug 28 22:47:20 scw-6657dc sshd[28017]: Failed password for root from 218.92.0.175 port 6240 ssh2 ...	2020-08-29 07:05:25
122.51.176.55	attackbots	Invalid user ftptest from 122.51.176.55 port 57224	2020-08-29 07:08:37
37.187.106.104	attackbots	Aug 29 00:31:06 db sshd[1151]: Invalid user edmond from 37.187.106.104 port 44912 ...	2020-08-29 07:15:26
218.92.0.165	attackspam	Aug 29 01:27:58 sso sshd[16694]: Failed password for root from 218.92.0.165 port 38542 ssh2 Aug 29 01:28:01 sso sshd[16694]: Failed password for root from 218.92.0.165 port 38542 ssh2 ...	2020-08-29 07:28:11
120.132.22.92	attackbots	Aug 28 22:21:57 rancher-0 sshd[1326041]: Invalid user jenkins from 120.132.22.92 port 41722 ...	2020-08-29 07:36:13
1.235.192.218	attack	Invalid user hsi from 1.235.192.218 port 50072	2020-08-29 07:32:22
222.186.180.6	attackspam	Aug 28 16:02:11 dignus sshd[18902]: Failed password for root from 222.186.180.6 port 21882 ssh2 Aug 28 16:02:14 dignus sshd[18902]: Failed password for root from 222.186.180.6 port 21882 ssh2 Aug 28 16:02:14 dignus sshd[18902]: error: maximum authentication attempts exceeded for root from 222.186.180.6 port 21882 ssh2 [preauth] Aug 28 16:02:19 dignus sshd[18940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.6 user=root Aug 28 16:02:20 dignus sshd[18940]: Failed password for root from 222.186.180.6 port 34680 ssh2 ...	2020-08-29 07:18:58
185.123.164.54	attackspambots	Bruteforce detected by fail2ban	2020-08-29 07:16:11

Recently Reported IPs

66.25.115.169	41.44.206.32	168.34.35.130	129.2.246.66
122.116.146.133	94.249.102.130	58.187.70.187	47.151.247.103
41.239.88.115	38.76.80.89	33.239.132.152	151.192.196.126
189.59.38.65	215.186.70.37	224.182.101.77	36.22.109.185
158.236.184.35	245.158.96.177	233.74.2.245	199.223.75.95