159.192.222.53

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: CAT Telecom Public Company Ltd

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Unauthorized connection attempt from IP address 159.192.222.53 on Port 445(SMB)	2019-08-20 22:09:14
attackbotsspam	Unauthorized connection attempt from IP address 159.192.222.53 on Port 445(SMB)	2019-07-25 13:55:17

Comments on same subnet:

IP	Type	Details	Datetime
159.192.222.199	attack	1579063966 - 01/15/2020 05:52:46 Host: 159.192.222.199/159.192.222.199 Port: 445 TCP Blocked	2020-01-15 16:07:21
159.192.222.90	attack	Sat, 20 Jul 2019 21:54:21 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-21 13:26:48
159.192.222.69	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-06-29 17:29:54,016 INFO [amun_request_handler] PortScan Detected on Port: 445 (159.192.222.69)	2019-06-30 09:55:28

Type

Details

Datetime

159.192.222.199

attack

1579063966 - 01/15/2020 05:52:46 Host: 159.192.222.199/159.192.222.199 Port: 445 TCP Blocked

2020-01-15 16:07:21

159.192.222.90

attack

Sat, 20 Jul 2019 21:54:21 +0000 likely compromised host or open proxy. ddos rate spidering

2019-07-21 13:26:48

159.192.222.69

attack

@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-06-29 17:29:54,016 INFO [amun_request_handler] PortScan Detected on Port: 445 (159.192.222.69)

2019-06-30 09:55:28

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.192.222.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52208
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;159.192.222.53.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072500 1800 900 604800 86400

;; Query time: 10 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 25 13:55:04 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 53.222.192.159.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 53.222.192.159.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
78.186.35.173	attackbots	Unauthorized connection attempt from IP address 78.186.35.173 on Port 445(SMB)	2020-06-19 05:02:14
217.112.142.145	attackbots	Jun 18 10:03:02 mail.srvfarm.net postfix/smtpd[1383425]: NOQUEUE: reject: RCPT from lovely.yobaat.com[217.112.142.145]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Jun 18 10:09:17 mail.srvfarm.net postfix/smtpd[1382543]: NOQUEUE: reject: RCPT from lovely.yobaat.com[217.112.142.145]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Jun 18 10:09:17 mail.srvfarm.net postfix/smtpd[1383766]: NOQUEUE: reject: RCPT from lovely.yobaat.com[217.112.142.145]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Jun 18 10:09:17 mail.srvfarm.net postfix/smtpd[1383765]: NOQU	2020-06-19 04:33:08
222.186.30.76	attack	Jun 19 03:51:54 itv-usvr-02 sshd[20458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.76 user=root Jun 19 03:51:57 itv-usvr-02 sshd[20458]: Failed password for root from 222.186.30.76 port 38110 ssh2	2020-06-19 04:54:03
188.0.188.28	attackbots	Unauthorized connection attempt from IP address 188.0.188.28 on Port 445(SMB)	2020-06-19 05:12:36
190.145.12.233	attackbots	$f2bV_matches	2020-06-19 04:46:26
103.242.14.68	attack	Registration form abuse	2020-06-19 04:50:42
125.94.149.98	attackspambots	Port probing on unauthorized port 445	2020-06-19 04:59:07
212.118.18.151	attack	Unauthorized connection attempt from IP address 212.118.18.151 on Port 445(SMB)	2020-06-19 05:07:55
209.141.34.95	attackbots	Jun 18 22:46:22 mellenthin sshd[31715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.34.95 user=root Jun 18 22:46:24 mellenthin sshd[31715]: Failed password for invalid user root from 209.141.34.95 port 36476 ssh2	2020-06-19 05:09:01
212.244.23.44	attackspambots	Jun 18 10:03:45 mail.srvfarm.net postfix/smtps/smtpd[1383642]: warning: unknown[212.244.23.44]: SASL PLAIN authentication failed: Jun 18 10:03:45 mail.srvfarm.net postfix/smtps/smtpd[1383642]: lost connection after AUTH from unknown[212.244.23.44] Jun 18 10:05:24 mail.srvfarm.net postfix/smtps/smtpd[1382769]: warning: unknown[212.244.23.44]: SASL PLAIN authentication failed: Jun 18 10:05:24 mail.srvfarm.net postfix/smtps/smtpd[1382769]: lost connection after AUTH from unknown[212.244.23.44] Jun 18 10:11:15 mail.srvfarm.net postfix/smtps/smtpd[1384169]: warning: unknown[212.244.23.44]: SASL PLAIN authentication failed:	2020-06-19 04:34:03
202.77.105.100	attackbotsspam	Invalid user test from 202.77.105.100 port 56241	2020-06-19 05:11:52
91.121.173.41	attackspambots	Jun 18 23:33:05 master sshd[11191]: Failed password for root from 91.121.173.41 port 52968 ssh2 Jun 18 23:42:48 master sshd[11193]: Failed password for invalid user nwu from 91.121.173.41 port 38808 ssh2 Jun 18 23:45:50 master sshd[11211]: Failed password for invalid user test from 91.121.173.41 port 39402 ssh2	2020-06-19 05:04:02
91.144.84.197	attackspam	Jun 18 10:07:27 mail.srvfarm.net postfix/smtps/smtpd[1384171]: warning: unknown[91.144.84.197]: SASL PLAIN authentication failed: Jun 18 10:07:27 mail.srvfarm.net postfix/smtps/smtpd[1384171]: lost connection after AUTH from unknown[91.144.84.197] Jun 18 10:09:33 mail.srvfarm.net postfix/smtps/smtpd[1383619]: warning: unknown[91.144.84.197]: SASL PLAIN authentication failed: Jun 18 10:09:33 mail.srvfarm.net postfix/smtps/smtpd[1383619]: lost connection after AUTH from unknown[91.144.84.197] Jun 18 10:11:22 mail.srvfarm.net postfix/smtps/smtpd[1383000]: warning: unknown[91.144.84.197]: SASL PLAIN authentication failed:	2020-06-19 04:37:46
218.92.0.138	attack	Jun 18 20:46:24 localhost sshd[119778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.138 user=root Jun 18 20:46:26 localhost sshd[119778]: Failed password for root from 218.92.0.138 port 19914 ssh2 Jun 18 20:46:30 localhost sshd[119778]: Failed password for root from 218.92.0.138 port 19914 ssh2 Jun 18 20:46:24 localhost sshd[119778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.138 user=root Jun 18 20:46:26 localhost sshd[119778]: Failed password for root from 218.92.0.138 port 19914 ssh2 Jun 18 20:46:30 localhost sshd[119778]: Failed password for root from 218.92.0.138 port 19914 ssh2 Jun 18 20:46:24 localhost sshd[119778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.138 user=root Jun 18 20:46:26 localhost sshd[119778]: Failed password for root from 218.92.0.138 port 19914 ssh2 Jun 18 20:46:30 localhost sshd[119778]: Failed pa ...	2020-06-19 04:55:20
45.162.21.212	attack	Jun 18 10:10:25 mail.srvfarm.net postfix/smtps/smtpd[1384169]: warning: unknown[45.162.21.212]: SASL PLAIN authentication failed: Jun 18 10:10:26 mail.srvfarm.net postfix/smtps/smtpd[1384169]: lost connection after AUTH from unknown[45.162.21.212] Jun 18 10:12:40 mail.srvfarm.net postfix/smtps/smtpd[1384169]: warning: unknown[45.162.21.212]: SASL PLAIN authentication failed: Jun 18 10:12:41 mail.srvfarm.net postfix/smtps/smtpd[1384169]: lost connection after AUTH from unknown[45.162.21.212] Jun 18 10:15:57 mail.srvfarm.net postfix/smtps/smtpd[1384169]: warning: unknown[45.162.21.212]: SASL PLAIN authentication failed:	2020-06-19 04:39:49

Recently Reported IPs

114.237.188.129	14.181.35.182	174.35.25.53	112.113.193.98
192.190.42.38	88.190.152.99	60.190.114.82	51.77.147.51
72.236.128.109	179.97.223.188	178.124.162.94	14.249.15.82
103.53.77.174	42.116.169.209	134.209.29.180	168.235.77.222
113.176.107.98	178.128.89.7	220.191.239.5	54.175.16.243