City: unknown
Region: unknown
Country: Thailand
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 14.207.45.169 | attackspam | Sat, 20 Jul 2019 21:54:31 +0000 likely compromised host or open proxy. ddos rate spidering |
2019-07-21 13:06:01 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.207.45.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23180
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.207.45.129. IN A
;; AUTHORITY SECTION:
. 538 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400
;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 13:37:51 CST 2022
;; MSG SIZE rcvd: 106129.45.207.14.in-addr.arpa domain name pointer mx-ll-14.207.45-129.dynamic.3bb.in.th.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
129.45.207.14.in-addr.arpa name = mx-ll-14.207.45-129.dynamic.3bb.in.th.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 37.145.145.23 | attack | Automatic report - Port Scan Attack |
2020-01-10 02:19:47 |
| 68.129.202.154 | attack | Unauthorized connection attempt detected from IP address 68.129.202.154 to port 3389 |
2020-01-10 02:15:19 |
| 104.199.33.113 | attackbots | Detected by Fail2Ban |
2020-01-10 02:12:00 |
| 183.81.79.28 | attack | Unauthorized connection attempt detected from IP address 183.81.79.28 to port 23 [T] |
2020-01-10 02:06:50 |
| 119.31.226.28 | attackbotsspam | Jan 9 02:07:03 nxxxxxxx0 sshd[29884]: Did not receive identification string from 119.31.226.28 Jan 9 02:08:46 nxxxxxxx0 sshd[29971]: Connection closed by 119.31.226.28 [preauth] Jan x@x Jan 9 02:12:31 nxxxxxxx0 sshd[30206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.31.226.28 Jan x@x Jan 9 02:12:35 nxxxxxxx0 sshd[30206]: Received disconnect from 119.31.226.28: 11: Bye Bye [preauth] Jan 9 02:19:54 nxxxxxxx0 sshd[30617]: Did not receive identification string from 119.31.226.28 Jan x@x Jan 9 02:21:46 nxxxxxxx0 sshd[30742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.31.226.28 Jan x@x Jan 9 02:21:48 nxxxxxxx0 sshd[30742]: Received disconnect from 119.31.226.28: 11: Bye Bye [preauth] Jan 9 02:23:35 nxxxxxxx0 sshd[30831]: Did not receive identification string from 119.31.226.28 Jan 9 02:25:23 nxxxxxxx0 sshd[30930]: Connection closed by 119.31.226.28 [preauth] Jan x@x Ja........ ------------------------------- |
2020-01-10 01:50:41 |
| 94.130.245.213 | attack | Jan 9 03:36:28 josie sshd[5471]: Did not receive identification string from 94.130.245.213 Jan 9 03:36:28 josie sshd[5472]: Did not receive identification string from 94.130.245.213 Jan 9 03:36:28 josie sshd[5473]: Did not receive identification string from 94.130.245.213 Jan 9 03:36:28 josie sshd[5474]: Did not receive identification string from 94.130.245.213 Jan 9 03:43:11 josie sshd[9485]: Did not receive identification string from 94.130.245.213 Jan 9 03:43:11 josie sshd[9484]: Did not receive identification string from 94.130.245.213 Jan 9 03:43:11 josie sshd[9486]: Did not receive identification string from 94.130.245.213 Jan 9 03:43:11 josie sshd[9487]: Did not receive identification string from 94.130.245.213 Jan 9 03:43:25 josie sshd[9605]: Invalid user 198.211.17.96 from 94.130.245.213 Jan 9 03:43:25 josie sshd[9605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.130.245.213 Jan 9 03:43:27 josie sshd[96........ ------------------------------- |
2020-01-10 02:13:25 |
| 35.195.183.51 | attack | fail2ban honeypot |
2020-01-10 02:14:50 |
| 92.63.194.26 | attack | Jan 9 18:07:56 sxvn sshd[941530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.26 |
2020-01-10 02:10:44 |
| 109.201.211.254 | attackbots | 20/1/9@08:04:33: FAIL: Alarm-Network address from=109.201.211.254 ... |
2020-01-10 02:12:52 |
| 42.113.103.198 | attackspambots | Automatic report - SSH Brute-Force Attack |
2020-01-10 02:08:15 |
| 91.207.66.152 | attack | Telnet/23 MH Probe, BF, Hack - |
2020-01-10 01:43:47 |
| 201.122.102.21 | attackspambots | Jan 9 14:03:14 server sshd\[32303\]: Invalid user cp from 201.122.102.21 Jan 9 14:03:14 server sshd\[32303\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.122.102.21 Jan 9 14:03:16 server sshd\[32303\]: Failed password for invalid user cp from 201.122.102.21 port 45182 ssh2 Jan 9 17:44:58 server sshd\[22535\]: Invalid user rgu from 201.122.102.21 Jan 9 17:44:58 server sshd\[22535\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.122.102.21 ... |
2020-01-10 02:21:06 |
| 111.95.141.34 | attackbots | Jan 9 16:12:33 ns381471 sshd[29658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.95.141.34 Jan 9 16:12:35 ns381471 sshd[29658]: Failed password for invalid user imode from 111.95.141.34 port 49876 ssh2 |
2020-01-10 01:51:55 |
| 114.119.159.76 | attackspam | badbot |
2020-01-10 02:16:43 |
| 95.61.93.106 | attackspambots | Telnet/23 MH Probe, BF, Hack - |
2020-01-10 01:56:35 |