110.49.13.66 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Thailand

运营商(isp): Advanced Info Service Public Company Limited

主机名(hostname): unknown

机构(organization): SBN-ISP/AWN-ISP and SBN-NIX/AWN-NIX

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Unauthorised access (Jul 14) SRC=110.49.13.66 LEN=40 PREC=0x20 TTL=238 ID=31433 TCP DPT=445 WINDOW=1024 SYN	2019-07-15 03:05:54
attackbotsspam	Unauthorized connection attempt from IP address 110.49.13.66 on Port 445(SMB)	2019-07-12 04:25:12
attackbots	Unauthorized connection attempt from IP address 110.49.13.66 on Port 445(SMB)	2019-07-05 06:39:44

类型

评论内容

时间

attackbotsspam

Unauthorised access (Jul 14) SRC=110.49.13.66 LEN=40 PREC=0x20 TTL=238 ID=31433 TCP DPT=445 WINDOW=1024 SYN

2019-07-15 03:05:54

attackbotsspam

Unauthorized connection attempt from IP address 110.49.13.66 on Port 445(SMB)

2019-07-12 04:25:12

attackbots

Unauthorized connection attempt from IP address 110.49.13.66 on Port 445(SMB)

2019-07-05 06:39:44

相同子网IP讨论:

IP	类型	评论内容	时间
110.49.13.230	attackbotsspam	1576650515 - 12/18/2019 07:28:35 Host: 110.49.13.230/110.49.13.230 Port: 445 TCP Blocked	2019-12-18 17:07:32

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 110.49.13.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53608
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;110.49.13.66.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019043000 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Tue Apr 30 19:36:47 +08 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 66.13.49.110.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 66.13.49.110.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
78.22.32.82	attackspam	May 14 01:54:06 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=78.22.32.82, lip=172.104.140.148, TLS, session=<5YmFS5Cle8pOFiBS> May 14 01:54:06 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=78.22.32.82, lip=172.104.140.148, TLS, session= May 14 01:54:08 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=78.22.32.82, lip=172.104.140.148, TLS, session= May 14 01:54:08 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=78.22.32.82, lip=172.104.140.148, TLS, session= May 14 01:54:11 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=78.22.32.82, lip=172.104.140.148, TLS, session= ...	2020-05-14 08:15:20
175.107.230.9	attack	20/5/13@17:06:07: FAIL: Alarm-Network address from=175.107.230.9 ...	2020-05-14 08:00:10
83.48.89.147	attackspam	Invalid user gz from 83.48.89.147 port 33919	2020-05-14 07:39:38
157.230.243.44	attackbots	May 14 04:36:33 gw1 sshd[28602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.243.44 May 14 04:36:35 gw1 sshd[28602]: Failed password for invalid user get from 157.230.243.44 port 60448 ssh2 ...	2020-05-14 07:57:25
118.24.110.178	attackspambots	May 14 00:28:34 vps sshd[68619]: Failed password for invalid user vps from 118.24.110.178 port 24978 ssh2 May 14 00:30:55 vps sshd[82162]: Invalid user norma from 118.24.110.178 port 56794 May 14 00:30:55 vps sshd[82162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.110.178 May 14 00:30:57 vps sshd[82162]: Failed password for invalid user norma from 118.24.110.178 port 56794 ssh2 May 14 00:33:22 vps sshd[91370]: Invalid user goldiejacobs from 118.24.110.178 port 24623 ...	2020-05-14 07:54:49
128.199.158.182	attack	Automatic report - Banned IP Access	2020-05-14 07:52:43
132.232.32.228	attackspambots	Invalid user info from 132.232.32.228 port 52302	2020-05-14 07:41:33
178.217.169.247	attackspambots	SSH Invalid Login	2020-05-14 07:46:26
152.67.7.117	attackspam	bruteforce detected	2020-05-14 07:50:51
152.136.226.156	attack	Invalid user systest from 152.136.226.156 port 52070	2020-05-14 07:46:44
14.234.89.248	attackbots	May 13 23:05:48 debian-2gb-nbg1-2 kernel: \[11662804.550131\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=14.234.89.248 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=46 ID=49039 PROTO=TCP SPT=41443 DPT=8000 WINDOW=37222 RES=0x00 SYN URGP=0	2020-05-14 08:11:40
185.142.239.16	attackbots	srv02 Mass scanning activity detected Target: 3689(daap) ..	2020-05-14 08:03:30
110.35.173.2	attackbots	DATE:2020-05-14 01:51:52, IP:110.35.173.2, PORT:ssh SSH brute force auth (docker-dc)	2020-05-14 08:08:46
118.193.34.233	attack	May 14 00:47:47 vps639187 sshd\[416\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.193.34.233 user=root May 14 00:47:49 vps639187 sshd\[416\]: Failed password for root from 118.193.34.233 port 53764 ssh2 May 14 00:52:30 vps639187 sshd\[506\]: Invalid user nathan from 118.193.34.233 port 46694 May 14 00:52:30 vps639187 sshd\[506\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.193.34.233 ...	2020-05-14 08:13:10
93.168.37.8	attack	SSH bruteforce more then 50 syn to 22 port per 10 seconds.	2020-05-14 08:09:12

最近上报的IP列表

153.36.9.169	2001:b011:c044:1304:d83f:3358:3fbb:f6e7	132.255.141.233	154.118.48.102
12.232.169.219	78.187.242.93	37.252.2.48	186.237.0.23
105.138.149.102	143.202.208.125	178.180.130.183	154.72.170.88
58.64.139.235	100.167.136.67	103.53.169.229	219.102.206.165
202.46.36.154	95.90.224.32	109.68.42.194	3.161.238.9