City: Bang Klam
Region: Songkhla
Country: Thailand
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 119.42.67.37 | attackbotsspam | Brute forcing email accounts |
2020-09-11 02:04:06 |
| 119.42.67.37 | attackbots | Brute forcing email accounts |
2020-09-10 17:25:53 |
| 119.42.67.37 | attackbots | Brute forcing email accounts |
2020-09-10 07:59:23 |
| 119.42.67.188 | attackbotsspam | SMB Server BruteForce Attack |
2020-06-03 15:16:31 |
| 119.42.67.135 | attackspam | suspicious action Fri, 28 Feb 2020 10:32:11 -0300 |
2020-02-28 23:15:44 |
| 119.42.67.36 | attackbotsspam | 1582615512 - 02/25/2020 08:25:12 Host: 119.42.67.36/119.42.67.36 Port: 445 TCP Blocked |
2020-02-25 17:31:52 |
| 119.42.67.45 | attackbots | Unauthorized connection attempt from IP address 119.42.67.45 on Port 445(SMB) |
2019-07-20 14:03:26 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.42.67.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5283
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;119.42.67.249. IN A
;; AUTHORITY SECTION:
. 386 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022031201 1800 900 604800 86400
;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 13 10:00:19 CST 2022
;; MSG SIZE rcvd: 106Host 249.67.42.119.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 249.67.42.119.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 184.91.78.136 | attackspambots | SSH bruteforce (Triggered fail2ban) |
2019-06-23 04:31:07 |
| 138.121.54.140 | attack | SMTP-sasl brute force ... |
2019-06-23 05:12:10 |
| 179.25.146.241 | attack | Unauthorised access (Jun 22) SRC=179.25.146.241 LEN=52 TTL=113 ID=9621 DF TCP DPT=445 WINDOW=8192 SYN |
2019-06-23 04:50:36 |
| 142.93.26.245 | attack | Jun 19 16:09:39 nbi-636 sshd[3729]: Invalid user shi from 142.93.26.245 port 36154 Jun 19 16:09:41 nbi-636 sshd[3729]: Failed password for invalid user shi from 142.93.26.245 port 36154 ssh2 Jun 19 16:09:41 nbi-636 sshd[3729]: Received disconnect from 142.93.26.245 port 36154:11: Bye Bye [preauth] Jun 19 16:09:41 nbi-636 sshd[3729]: Disconnected from 142.93.26.245 port 36154 [preauth] Jun 19 16:13:37 nbi-636 sshd[4557]: Invalid user nei from 142.93.26.245 port 38168 Jun 19 16:13:39 nbi-636 sshd[4557]: Failed password for invalid user nei from 142.93.26.245 port 38168 ssh2 Jun 19 16:13:39 nbi-636 sshd[4557]: Received disconnect from 142.93.26.245 port 38168:11: Bye Bye [preauth] Jun 19 16:13:39 nbi-636 sshd[4557]: Disconnected from 142.93.26.245 port 38168 [preauth] Jun 19 16:17:03 nbi-636 sshd[5138]: Connection closed by 142.93.26.245 port 32892 [preauth] Jun 19 16:20:13 nbi-636 sshd[5725]: Invalid user service from 142.93.26.245 port 55726 Jun 19 16:20:15 nbi-636 sshd[........ ------------------------------- |
2019-06-23 04:40:57 |
| 81.22.45.27 | attack | slow and persistent scanner |
2019-06-23 04:27:38 |
| 189.91.7.43 | attackbotsspam | failed_logins |
2019-06-23 05:01:23 |
| 180.121.178.196 | attackbots | 2019-06-22T14:45:41.052502 X postfix/smtpd[35347]: warning: unknown[180.121.178.196]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-06-22T16:00:12.452836 X postfix/smtpd[45392]: warning: unknown[180.121.178.196]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-06-22T16:34:59.386590 X postfix/smtpd[50928]: warning: unknown[180.121.178.196]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-06-23 04:50:59 |
| 115.197.102.190 | attack | Jun 21 04:16:21 eola postfix/smtpd[21845]: connect from unknown[115.197.102.190] Jun 21 04:16:22 eola postfix/smtpd[21845]: lost connection after AUTH from unknown[115.197.102.190] Jun 21 04:16:22 eola postfix/smtpd[21845]: disconnect from unknown[115.197.102.190] ehlo=1 auth=0/1 commands=1/2 Jun 21 04:16:22 eola postfix/smtpd[21845]: connect from unknown[115.197.102.190] Jun 21 04:16:23 eola postfix/smtpd[21845]: lost connection after AUTH from unknown[115.197.102.190] Jun 21 04:16:23 eola postfix/smtpd[21845]: disconnect from unknown[115.197.102.190] ehlo=1 auth=0/1 commands=1/2 Jun 21 04:16:48 eola postfix/smtpd[21845]: connect from unknown[115.197.102.190] Jun 21 04:16:49 eola postfix/smtpd[21845]: lost connection after AUTH from unknown[115.197.102.190] Jun 21 04:16:49 eola postfix/smtpd[21845]: disconnect from unknown[115.197.102.190] ehlo=1 auth=0/1 commands=1/2 Jun 21 04:16:49 eola postfix/smtpd[21845]: connect from unknown[115.197.102.190] Jun 21 04:16:50 eola ........ ------------------------------- |
2019-06-23 04:35:19 |
| 66.240.205.34 | attackspam | 22.06.2019 20:40:58 Connection to port 54984 blocked by firewall |
2019-06-23 04:44:47 |
| 119.109.202.22 | attackbots | port 23 attempt blocked |
2019-06-23 04:54:26 |
| 114.47.210.111 | attackspambots | port 23 attempt blocked |
2019-06-23 04:59:28 |
| 196.53.224.187 | attackspambots | scan z |
2019-06-23 04:36:17 |
| 58.152.215.34 | attackbots | port scan/probe/communication attempt |
2019-06-23 04:28:33 |
| 189.51.103.105 | attackspam | SMTP-sasl brute force ... |
2019-06-23 05:01:51 |
| 157.55.39.132 | attackspambots | Automatic report - Web App Attack |
2019-06-23 04:54:08 |