City: unknown
Region: unknown
Country: Thailand
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 14.207.66.24 | attack | 1586798208 - 04/13/2020 19:16:48 Host: 14.207.66.24/14.207.66.24 Port: 445 TCP Blocked |
2020-04-14 04:49:28 |
| 14.207.66.220 | attack | Lines containing failures of 14.207.66.220 Nov 11 23:25:19 shared12 sshd[31743]: Invalid user admin from 14.207.66.220 port 43397 Nov 11 23:25:19 shared12 sshd[31743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.207.66.220 Nov 11 23:25:21 shared12 sshd[31743]: Failed password for invalid user admin from 14.207.66.220 port 43397 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.207.66.220 |
2019-11-12 07:28:34 |
| 14.207.66.162 | attackbots | Chat Spam |
2019-10-18 16:39:38 |
| 14.207.66.19 | attackspambots | Scanning random ports - tries to find possible vulnerable services |
2019-09-01 19:20:06 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.207.66.203
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6653
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.207.66.203. IN A
;; AUTHORITY SECTION:
. 599 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400
;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 13:40:37 CST 2022
;; MSG SIZE rcvd: 106
203.66.207.14.in-addr.arpa domain name pointer mx-ll-14.207.66-203.dynamic.3bb.co.th.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
203.66.207.14.in-addr.arpa name = mx-ll-14.207.66-203.dynamic.3bb.co.th.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 125.215.207.44 | attack | Jun 8 06:28:23 ns382633 sshd\[23295\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.215.207.44 user=root Jun 8 06:28:25 ns382633 sshd\[23295\]: Failed password for root from 125.215.207.44 port 47817 ssh2 Jun 8 06:37:35 ns382633 sshd\[24806\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.215.207.44 user=root Jun 8 06:37:37 ns382633 sshd\[24806\]: Failed password for root from 125.215.207.44 port 51275 ssh2 Jun 8 06:41:08 ns382633 sshd\[25584\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.215.207.44 user=root |
2020-06-08 13:26:11 |
| 184.22.122.109 | attackspambots | 445/tcp [2020-06-08]1pkt |
2020-06-08 13:09:28 |
| 91.121.76.43 | attack | 91.121.76.43 - - [08/Jun/2020:05:54:27 +0200] "GET /wp-login.php HTTP/1.1" 200 1900 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 91.121.76.43 - - [08/Jun/2020:05:54:28 +0200] "POST /wp-login.php HTTP/1.1" 200 2031 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 91.121.76.43 - - [08/Jun/2020:05:54:28 +0200] "GET /wp-login.php HTTP/1.1" 200 1900 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 91.121.76.43 - - [08/Jun/2020:05:54:28 +0200] "POST /wp-login.php HTTP/1.1" 200 2008 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 91.121.76.43 - - [08/Jun/2020:05:54:28 +0200] "GET /wp-login.php HTTP/1.1" 200 1900 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 91.121.76.43 - - [08/Jun/2020:05:54:28 +0200] "POST /wp-login.php HTTP/1.1" 200 2009 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/6 ... |
2020-06-08 13:24:55 |
| 128.199.143.19 | attackbots | 2020-06-08T01:03:10.6931991495-001 sshd[54210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.143.19 user=root 2020-06-08T01:03:12.7219131495-001 sshd[54210]: Failed password for root from 128.199.143.19 port 52776 ssh2 2020-06-08T01:06:59.7637991495-001 sshd[54323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.143.19 user=root 2020-06-08T01:07:01.8977641495-001 sshd[54323]: Failed password for root from 128.199.143.19 port 55326 ssh2 2020-06-08T01:10:39.2150421495-001 sshd[54451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.143.19 user=root 2020-06-08T01:10:41.5498691495-001 sshd[54451]: Failed password for root from 128.199.143.19 port 57880 ssh2 ... |
2020-06-08 13:48:22 |
| 59.127.22.212 | attackspam | 88/tcp [2020-06-07/08]2pkt |
2020-06-08 13:40:59 |
| 41.165.19.242 | attackspambots | Port probing on unauthorized port 445 |
2020-06-08 13:46:02 |
| 51.77.109.98 | attack | 2020-06-08T04:48:53.083582shield sshd\[30865\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.109.98 user=root 2020-06-08T04:48:54.795907shield sshd\[30865\]: Failed password for root from 51.77.109.98 port 45994 ssh2 2020-06-08T04:53:00.528135shield sshd\[32014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.109.98 user=root 2020-06-08T04:53:01.816396shield sshd\[32014\]: Failed password for root from 51.77.109.98 port 46986 ssh2 2020-06-08T04:57:11.625639shield sshd\[611\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.109.98 user=root |
2020-06-08 13:14:47 |
| 206.189.85.88 | attackbots | SS5,WP GET /wp-login.php GET /wp-login.php |
2020-06-08 13:36:16 |
| 1.160.90.158 | attackbotsspam | 23/tcp [2020-06-08]1pkt |
2020-06-08 13:29:37 |
| 49.232.174.219 | attackbotsspam | Jun 8 01:58:18 firewall sshd[8876]: Failed password for root from 49.232.174.219 port 25439 ssh2 Jun 8 02:01:33 firewall sshd[8999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.174.219 user=root Jun 8 02:01:35 firewall sshd[8999]: Failed password for root from 49.232.174.219 port 63229 ssh2 ... |
2020-06-08 13:17:43 |
| 185.39.10.47 | attackbotsspam | Persistent port scanning [25 denied] |
2020-06-08 13:51:21 |
| 220.133.113.167 | attackspam | 81/tcp [2020-06-08]1pkt |
2020-06-08 13:33:07 |
| 41.141.139.150 | attackspambots | Jun 8 03:54:39 DDOS Attack: SRC=41.141.139.150 DST=[Masked] LEN=40 TOS=0x08 PREC=0x20 TTL=243 PROTO=TCP SPT=11082 DPT=993 WINDOW=0 RES=0x00 RST URGP=0 |
2020-06-08 13:12:05 |
| 220.76.205.178 | attackbots | Jun 7 19:20:22 hanapaa sshd\[13615\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.76.205.178 user=root Jun 7 19:20:24 hanapaa sshd\[13615\]: Failed password for root from 220.76.205.178 port 39492 ssh2 Jun 7 19:24:17 hanapaa sshd\[14053\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.76.205.178 user=root Jun 7 19:24:20 hanapaa sshd\[14053\]: Failed password for root from 220.76.205.178 port 41247 ssh2 Jun 7 19:28:08 hanapaa sshd\[14495\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.76.205.178 user=root |
2020-06-08 13:33:25 |
| 178.239.150.41 | attackbotsspam | Port probing on unauthorized port 8080 |
2020-06-08 13:40:06 |