City: unknown
Region: unknown
Country: Thailand
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
IP | Type | Details | Datetime |
---|---|---|---|
14.207.42.89 | attackspambots | 2019-12-29 23:48:56 plain_virtual_exim authenticator failed for mx-ll-14.207.42-89.dynamic.3bb.co.th ([127.0.0.1]) [14.207.42.89]: 535 Incorrect authentication data ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.207.42.89 |
2019-12-30 08:21:41 |
14.207.42.142 | attack | Lines containing failures of 14.207.42.142 2019-11-04 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.207.42.142 |
2019-11-05 06:48:58 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.207.42.73
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20139
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.207.42.73. IN A
;; AUTHORITY SECTION:
. 59 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400
;; Query time: 75 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 17:58:13 CST 2022
;; MSG SIZE rcvd: 105
73.42.207.14.in-addr.arpa domain name pointer mx-ll-14.207.42-73.dynamic.3bb.in.th.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
73.42.207.14.in-addr.arpa name = mx-ll-14.207.42-73.dynamic.3bb.in.th.
Authoritative answers can be found from:
IP | Type | Details | Datetime |
---|---|---|---|
185.100.128.30 | attackbots | www.geburtshaus-fulda.de 185.100.128.30 \[19/Nov/2019:22:10:34 +0100\] "POST /wp-login.php HTTP/1.1" 200 6383 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.geburtshaus-fulda.de 185.100.128.30 \[19/Nov/2019:22:10:34 +0100\] "POST /wp-login.php HTTP/1.1" 200 6387 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.geburtshaus-fulda.de 185.100.128.30 \[19/Nov/2019:22:10:34 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4107 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-11-20 08:40:18 |
85.67.147.238 | attack | Nov 19 11:27:41 : SSH login attempts with invalid user |
2019-11-20 08:13:27 |
124.235.206.130 | attackspam | 2019-11-19T23:29:19.064001scmdmz1 sshd\[18930\]: Invalid user sv from 124.235.206.130 port 43557 2019-11-19T23:29:19.066970scmdmz1 sshd\[18930\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.235.206.130 2019-11-19T23:29:20.717465scmdmz1 sshd\[18930\]: Failed password for invalid user sv from 124.235.206.130 port 43557 ssh2 ... |
2019-11-20 08:20:21 |
94.191.94.148 | attackspam | 2019-11-19T21:10:47.321738homeassistant sshd[20509]: Invalid user lavinia from 94.191.94.148 port 51992 2019-11-19T21:10:47.328297homeassistant sshd[20509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.94.148 ... |
2019-11-20 08:31:45 |
159.203.201.10 | attackspambots | firewall-block, port(s): 27019/tcp |
2019-11-20 08:30:59 |
59.120.189.234 | attack | Nov 20 04:38:52 areeb-Workstation sshd[18208]: Failed password for root from 59.120.189.234 port 49384 ssh2 ... |
2019-11-20 08:16:43 |
106.245.160.140 | attackspambots | Nov 19 23:50:44 venus sshd\[18390\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.160.140 user=root Nov 19 23:50:46 venus sshd\[18390\]: Failed password for root from 106.245.160.140 port 49088 ssh2 Nov 19 23:54:28 venus sshd\[18424\]: Invalid user com from 106.245.160.140 port 57062 Nov 19 23:54:28 venus sshd\[18424\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.160.140 ... |
2019-11-20 08:11:35 |
80.82.64.73 | attackspambots | Port scan on 6 port(s): 1050 1065 1078 1096 1098 1100 |
2019-11-20 08:37:19 |
192.185.176.190 | attackbotsspam | Probing for vulnerable PHP code /xnxbh1mu.php |
2019-11-20 08:12:31 |
206.81.11.216 | attackbotsspam | Nov 19 22:35:13 srv01 sshd[20958]: Invalid user hertelaas from 206.81.11.216 port 39414 Nov 19 22:35:13 srv01 sshd[20958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.11.216 Nov 19 22:35:13 srv01 sshd[20958]: Invalid user hertelaas from 206.81.11.216 port 39414 Nov 19 22:35:15 srv01 sshd[20958]: Failed password for invalid user hertelaas from 206.81.11.216 port 39414 ssh2 Nov 19 22:38:42 srv01 sshd[21133]: Invalid user samba from 206.81.11.216 port 48074 ... |
2019-11-20 08:25:46 |
219.156.163.84 | attack | Telnetd brute force attack detected by fail2ban |
2019-11-20 08:09:21 |
85.186.22.16 | attack | Automatic report - Port Scan Attack |
2019-11-20 08:43:56 |
195.154.223.226 | attackspam | Nov 19 23:49:55 server sshd\[3287\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=e1.messaggio.agency user=apache Nov 19 23:49:57 server sshd\[3287\]: Failed password for apache from 195.154.223.226 port 60044 ssh2 Nov 20 00:10:48 server sshd\[8712\]: Invalid user taurus from 195.154.223.226 Nov 20 00:10:48 server sshd\[8712\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=e1.messaggio.agency Nov 20 00:10:51 server sshd\[8712\]: Failed password for invalid user taurus from 195.154.223.226 port 46164 ssh2 ... |
2019-11-20 08:29:31 |
89.122.138.47 | attackbotsspam | Automatic report - Port Scan Attack |
2019-11-20 08:39:45 |
45.148.10.62 | attack | 26/tcp 465/tcp 587/tcp... [2019-09-21/11-19]34pkt,6pt.(tcp) |
2019-11-20 08:43:19 |