City: Lamphun
Region: Lamphun
Country: Thailand
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 110.78.156.6 | attackspam | Unauthorized connection attempt from IP address 110.78.156.6 on Port 445(SMB) |
2019-11-09 05:31:40 |
| 110.78.156.97 | attackbots | Unauthorized connection attempt from IP address 110.78.156.97 on Port 445(SMB) |
2019-08-01 12:43:33 |
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '110.78.128.0 - 110.78.191.255'
% Abuse contact for '110.78.128.0 - 110.78.191.255' is 'pitoon.p@ntplc.co.th'
inetnum: 110.78.128.0 - 110.78.191.255
netname: CAT-BB-NET
descr: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
country: TH
admin-c: TU38-AP
tech-c: WP273-AP
tech-c: PD452-AP
tech-c: CB840-AP
abuse-c: AN3307-AP
status: ALLOCATED NON-PORTABLE
remarks: Personal contact # PS474-AP WP273-AP AS1145-AP
notify: pankaew@cat.net.th
mnt-by: MAINT-NTPCL-TH
mnt-lower: MAINT-NTPCL-TH
mnt-routes: MAINT-NTPCL-TH
mnt-irt: IRT-NTPCL-TH
last-modified: 2025-11-19T23:59:29Z
source: APNIC
irt: IRT-NTPCL-TH
address: 99 Chaengwattana Road, Thung Song Hong Subdistrict, Luk Si, Luksi Bangkok 10210
e-mail: pitoon.p@ntplc.co.th
abuse-mailbox: pitoon.p@ntplc.co.th
admin-c: NTPC2-AP
tech-c: NTPC2-AP
auth: # Filtered
mnt-by: MAINT-NTPCL-TH
last-modified: 2026-02-02T07:21:59Z
source: APNIC
role: ABUSE NTPCLTH
country: ZZ
address: 99 Chaengwattana Road, Thung Song Hong Subdistrict, Luk Si, Luksi Bangkok 10210
phone: +000000000
e-mail: pitoon.p@ntplc.co.th
admin-c: NTPC2-AP
tech-c: NTPC2-AP
nic-hdl: AN3307-AP
remarks: Generated from irt object IRT-NTPCL-TH
abuse-mailbox: pitoon.p@ntplc.co.th
mnt-by: APNIC-ABUSE
last-modified: 2025-11-19T01:51:42Z
source: APNIC
person: CAT Broadband
address: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
country: TH
phone: +66-261-42138
e-mail: nmc@cat.net.th
nic-hdl: CB840-AP
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2018-02-07T08:56:35Z
source: APNIC
person: Passanon dumsood
address: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
country: TH
phone: +66-261-42138
e-mail: passanon.d@cat.net.th
nic-hdl: PD452-AP
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2017-06-13T04:19:50Z
source: APNIC
person: Theerachai Udomkitpanya
address: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok
country: TH
phone: +66-261-42918
e-mail: theerachai.u@cattelecom.com
nic-hdl: TU38-AP
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2017-11-23T10:20:25Z
source: APNIC
person: Weerapong Pankaew
nic-hdl: WP273-AP
e-mail: pankaew@cat.net.th
address: CAT-BB-NET
address: 10 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
phone: +66-261-42138
fax-no: +66-261-42682
country: TH
mnt-by: MAINT-NEW
last-modified: 2008-09-25T12:45:58Z
source: APNIC
% Information related to '110.78.156.0/24AS131090'
route: 110.78.156.0/24
origin: AS131090
descr: CAT Telecom Public Company Limited
13th CAT TELECOM TOWER
NEW ROAD SRIPHRAYA BANGRAK
BANGKOK
THAILAND
mnt-by: MAINT-NTPCL-TH
last-modified: 2025-11-19T01:51:54Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.47 (WHOIS-AU4); <<>> DiG 9.10.3-P4-Ubuntu <<>> 110.78.156.173
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37124
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;110.78.156.173. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026032201 1800 900 604800 86400
;; Query time: 4 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 23 03:07:23 CST 2026
;; MSG SIZE rcvd: 107Host 173.156.78.110.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 173.156.78.110.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 178.154.200.149 | attack | [Tue Aug 25 10:57:34.802046 2020] [:error] [pid 16357:tid 139693591447296] [client 178.154.200.149:50360] [client 178.154.200.149] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "X0SMLk-qCMz0@feJdtpXZgAAAhw"] ... |
2020-08-25 13:57:52 |
| 123.206.104.162 | attackspam | Aug 25 07:23:42 home sshd[368944]: Failed password for root from 123.206.104.162 port 40498 ssh2 Aug 25 07:26:32 home sshd[369943]: Invalid user oper from 123.206.104.162 port 42856 Aug 25 07:26:32 home sshd[369943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.104.162 Aug 25 07:26:32 home sshd[369943]: Invalid user oper from 123.206.104.162 port 42856 Aug 25 07:26:35 home sshd[369943]: Failed password for invalid user oper from 123.206.104.162 port 42856 ssh2 ... |
2020-08-25 13:59:46 |
| 45.167.9.103 | attackspambots | Attempted Brute Force (dovecot) |
2020-08-25 14:17:07 |
| 115.42.127.133 | attackbotsspam | Aug 25 07:51:03 [host] sshd[28119]: Invalid user k Aug 25 07:51:03 [host] sshd[28119]: pam_unix(sshd: Aug 25 07:51:05 [host] sshd[28119]: Failed passwor |
2020-08-25 13:51:50 |
| 179.211.255.130 | attackspam | Aug 24 16:19:34 sachi sshd\[17553\]: Invalid user ftp from 179.211.255.130 Aug 24 16:19:34 sachi sshd\[17553\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.211.255.130 Aug 24 16:19:35 sachi sshd\[17553\]: Failed password for invalid user ftp from 179.211.255.130 port 57617 ssh2 Aug 24 16:23:40 sachi sshd\[20060\]: Invalid user kkk from 179.211.255.130 Aug 24 16:23:40 sachi sshd\[20060\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.211.255.130 |
2020-08-25 14:21:48 |
| 157.245.40.76 | attack | Automatic report generated by Wazuh |
2020-08-25 13:55:25 |
| 132.154.83.255 | attack | Port Scan ... |
2020-08-25 14:00:42 |
| 93.113.111.193 | attack | 93.113.111.193 - - [25/Aug/2020:02:20:20 +0200] "GET /wp-login.php HTTP/1.1" 200 8537 "http://hansjuergenjaworski.de/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 93.113.111.193 - - [25/Aug/2020:06:27:31 +0200] "GET /wp-login.php HTTP/1.1" 200 9040 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 93.113.111.193 - - [25/Aug/2020:06:27:32 +0200] "POST /wp-login.php HTTP/1.1" 200 9357 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-08-25 14:10:22 |
| 59.42.207.45 | attackspambots | Aug 24 20:52:25 mockhub sshd[21129]: Failed password for root from 59.42.207.45 port 50487 ssh2 ... |
2020-08-25 14:03:32 |
| 45.153.248.6 | attackbots | From rsistema-poa=fredextintores.com.br@consultorempresarial10.live Tue Aug 25 00:57:14 2020 Received: from nwu1otdmzdhk.consultorempresarial10.live ([45.153.248.6]:55979) |
2020-08-25 14:12:28 |
| 81.68.136.122 | attackbotsspam | Failed password for invalid user jerry from 81.68.136.122 port 36986 ssh2 |
2020-08-25 13:57:33 |
| 162.216.113.66 | attackbots | 162.216.113.66 - - [25/Aug/2020:05:18:45 +0000] "POST /wp-login.php HTTP/1.1" 200 2077 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 162.216.113.66 - - [25/Aug/2020:05:18:47 +0000] "POST /wp-login.php HTTP/1.1" 200 2055 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 162.216.113.66 - - [25/Aug/2020:05:18:49 +0000] "POST /wp-login.php HTTP/1.1" 200 2052 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 162.216.113.66 - - [25/Aug/2020:05:18:51 +0000] "POST /wp-login.php HTTP/1.1" 200 2052 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 162.216.113.66 - - [25/Aug/2020:05:18:52 +0000] "POST /xmlrpc.php HTTP/1.1" 200 236 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" |
2020-08-25 13:51:36 |
| 179.191.123.46 | attackspam | Total attacks: 2 |
2020-08-25 14:07:23 |
| 187.190.40.112 | attackspam | (sshd) Failed SSH login from 187.190.40.112 (MX/Mexico/fixed-187-190-40-112.totalplay.net): 12 in the last 3600 secs |
2020-08-25 13:52:18 |
| 185.216.195.194 | attack | 0,37-02/03 [bc01/m88] PostRequest-Spammer scoring: essen |
2020-08-25 14:10:08 |