124.121.92.11 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: True Internet Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Honeypot attack, port: 81, PTR: ppp-124-121-92-11.revip2.asianet.co.th.	2020-01-13 18:20:30

Comments on same subnet:

IP	Type	Details	Datetime
124.121.92.142	attack	Unauthorized connection attempt detected from IP address 124.121.92.142 to port 81 [J]	2020-01-17 19:22:34

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.121.92.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31299
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;124.121.92.11.			IN	A

;; AUTHORITY SECTION:
.			388	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011300 1800 900 604800 86400

;; Query time: 119 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 13 18:20:28 CST 2020
;; MSG SIZE  rcvd: 117

Host info

11.92.121.124.in-addr.arpa domain name pointer ppp-124-121-92-11.revip2.asianet.co.th.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
11.92.121.124.in-addr.arpa	name = ppp-124-121-92-11.revip2.asianet.co.th.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.108.106.251	attackbotsspam	[2020-09-10 17:07:17] NOTICE[1239] chan_sip.c: Registration from '' failed for '185.108.106.251:49929' - Wrong password [2020-09-10 17:07:17] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-10T17:07:17.038-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="6836",SessionID="0x7f4d480fdcc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.108.106.251/49929",Challenge="0664e3bf",ReceivedChallenge="0664e3bf",ReceivedHash="132a0182518dade350444b72aaa8bd2f" [2020-09-10 17:07:47] NOTICE[1239] chan_sip.c: Registration from '' failed for '185.108.106.251:63448' - Wrong password [2020-09-10 17:07:47] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-10T17:07:47.789-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7064",SessionID="0x7f4d481284c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.108 ...	2020-09-11 05:19:55
167.114.114.114	attackspam	(sshd) Failed SSH login from 167.114.114.114 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 10 15:04:41 idl1-dfw sshd[2052266]: Invalid user ftpuser1 from 167.114.114.114 port 39818 Sep 10 15:04:43 idl1-dfw sshd[2052266]: Failed password for invalid user ftpuser1 from 167.114.114.114 port 39818 ssh2 Sep 10 15:15:51 idl1-dfw sshd[2077458]: Invalid user ctrac from 167.114.114.114 port 42602 Sep 10 15:15:53 idl1-dfw sshd[2077458]: Failed password for invalid user ctrac from 167.114.114.114 port 42602 ssh2 Sep 10 15:19:08 idl1-dfw sshd[2084649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.114.114 user=root	2020-09-11 04:48:47
111.229.31.134	attackbots	2020-09-10T11:58:19.413361morrigan.ad5gb.com sshd[478141]: Invalid user developer from 111.229.31.134 port 39982	2020-09-11 05:25:32
148.235.57.183	attackbotsspam	Sep 10 21:48:55 mout sshd[26276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.235.57.183 user=root Sep 10 21:48:57 mout sshd[26276]: Failed password for root from 148.235.57.183 port 33819 ssh2 Sep 10 21:48:58 mout sshd[26276]: Disconnected from authenticating user root 148.235.57.183 port 33819 [preauth]	2020-09-11 05:13:35
92.63.197.53	attack	Fail2Ban Ban Triggered	2020-09-11 05:15:40
110.88.160.179	attackspam	Sep 10 17:30:53 firewall sshd[24665]: Failed password for root from 110.88.160.179 port 45082 ssh2 Sep 10 17:33:37 firewall sshd[24766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.88.160.179 user=root Sep 10 17:33:39 firewall sshd[24766]: Failed password for root from 110.88.160.179 port 50088 ssh2 ...	2020-09-11 04:48:02
85.173.248.51	attackbots	20/9/10@12:58:12: FAIL: Alarm-Network address from=85.173.248.51 20/9/10@12:58:12: FAIL: Alarm-Network address from=85.173.248.51 ...	2020-09-11 05:32:14
41.138.49.150	attackbots	Icarus honeypot on github	2020-09-11 04:46:10
223.215.160.131	attackspambots	[MK-VM6] Blocked by UFW	2020-09-11 05:05:12
183.82.107.226	attackspambots	20/9/10@12:58:35: FAIL: Alarm-Network address from=183.82.107.226 ...	2020-09-11 05:11:38
114.67.112.67	attackbots	Sep 10 21:13:37 vps639187 sshd\[24460\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.112.67 user=root Sep 10 21:13:39 vps639187 sshd\[24460\]: Failed password for root from 114.67.112.67 port 45634 ssh2 Sep 10 21:16:32 vps639187 sshd\[24502\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.112.67 user=root ...	2020-09-11 05:31:08
176.31.225.213	attackbotsspam	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-09-11 05:00:29
185.234.218.84	attack	Sep 10 17:00:43 mail postfix/smtpd\[6220\]: warning: unknown\[185.234.218.84\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Sep 10 17:38:48 mail postfix/smtpd\[7112\]: warning: unknown\[185.234.218.84\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Sep 10 18:18:46 mail postfix/smtpd\[9017\]: warning: unknown\[185.234.218.84\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Sep 10 18:59:32 mail postfix/smtpd\[10497\]: warning: unknown\[185.234.218.84\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\	2020-09-11 05:27:07
74.120.14.51	attack	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-11 05:01:08
162.142.125.27	attack	Fail2Ban Ban Triggered	2020-09-11 05:06:02

Recently Reported IPs

18.85.212.182	17.86.190.185	198.144.108.109	175.211.66.93
68.37.48.226	117.171.44.92	113.161.180.119	149.48.64.119
52.204.19.100	172.147.126.71	193.56.67.203	140.83.241.193
93.120.133.138	121.139.105.136	36.82.100.207	203.205.35.187
191.55.128.37	151.143.97.188	101.64.40.185	45.123.2.198