City: Bangkok
Region: Bangkok
Country: Thailand
Internet Service Provider: Uninet
Hostname: unknown
Organization: Chulalongkorn University
Usage Type: Fixed Line ISP
| Type | Details | Datetime |
|---|---|---|
| attack | $f2bV_matches |
2020-05-07 17:05:08 |
| attackbotsspam | May 5 15:08:55 localhost sshd\[24688\]: Invalid user production from 202.29.220.114 port 52290 May 5 15:08:55 localhost sshd\[24688\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.114 May 5 15:08:57 localhost sshd\[24688\]: Failed password for invalid user production from 202.29.220.114 port 52290 ssh2 ... |
2020-05-06 01:17:51 |
| attack | Apr 27 22:17:10 melroy-server sshd[6373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.114 Apr 27 22:17:12 melroy-server sshd[6373]: Failed password for invalid user hduser from 202.29.220.114 port 57730 ssh2 ... |
2020-04-28 04:35:06 |
| attack | detected by Fail2Ban |
2020-04-27 08:50:07 |
| attackspam | SSH brute-force: detected 11 distinct usernames within a 24-hour window. |
2020-04-10 20:09:51 |
| attackspambots | Apr 8 00:40:08 mail sshd\[9994\]: Invalid user git from 202.29.220.114 Apr 8 00:40:08 mail sshd\[9994\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.114 Apr 8 00:40:10 mail sshd\[9994\]: Failed password for invalid user git from 202.29.220.114 port 5972 ssh2 ... |
2020-04-08 07:27:39 |
| attackbotsspam | 2020-03-20T14:07:44.635238 sshd[8641]: Invalid user britany from 202.29.220.114 port 61073 2020-03-20T14:07:44.651008 sshd[8641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.114 2020-03-20T14:07:44.635238 sshd[8641]: Invalid user britany from 202.29.220.114 port 61073 2020-03-20T14:07:46.153172 sshd[8641]: Failed password for invalid user britany from 202.29.220.114 port 61073 ssh2 ... |
2020-03-21 03:32:53 |
| attack | Mar 20 03:59:40 XXX sshd[28884]: Invalid user alex from 202.29.220.114 port 29896 |
2020-03-20 12:40:36 |
| attack | 2020-03-04T22:27:13.267979shield sshd\[8965\]: Invalid user ts3server from 202.29.220.114 port 10447 2020-03-04T22:27:13.274365shield sshd\[8965\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.114 2020-03-04T22:27:15.438499shield sshd\[8965\]: Failed password for invalid user ts3server from 202.29.220.114 port 10447 ssh2 2020-03-04T22:34:12.035871shield sshd\[10101\]: Invalid user cs from 202.29.220.114 port 54661 2020-03-04T22:34:12.046310shield sshd\[10101\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.114 |
2020-03-05 07:09:10 |
| attack | Invalid user user11 from 202.29.220.114 port 57698 |
2020-02-21 17:40:07 |
| attack | Unauthorized connection attempt detected from IP address 202.29.220.114 to port 2220 [J] |
2020-01-17 04:30:08 |
| attackspam | Automatic report - Banned IP Access |
2019-12-25 18:11:23 |
| attack | $f2bV_matches |
2019-12-14 07:34:18 |
| attackbots | Dec 12 22:07:45 SilenceServices sshd[21574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.114 Dec 12 22:07:47 SilenceServices sshd[21574]: Failed password for invalid user lllll from 202.29.220.114 port 46676 ssh2 Dec 12 22:14:34 SilenceServices sshd[26065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.114 |
2019-12-13 05:18:40 |
| attackspam | Dec 2 09:48:06 lnxded63 sshd[27184]: Failed password for root from 202.29.220.114 port 27096 ssh2 Dec 2 09:55:29 lnxded63 sshd[27765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.114 Dec 2 09:55:30 lnxded63 sshd[27765]: Failed password for invalid user nfs from 202.29.220.114 port 4254 ssh2 |
2019-12-02 17:04:49 |
| attackspambots | 2019-11-28T04:50:43.073028shield sshd\[19743\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.114 user=root 2019-11-28T04:50:45.353636shield sshd\[19743\]: Failed password for root from 202.29.220.114 port 39666 ssh2 2019-11-28T04:58:45.549349shield sshd\[20859\]: Invalid user server from 202.29.220.114 port 49429 2019-11-28T04:58:45.554028shield sshd\[20859\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.114 2019-11-28T04:58:47.338457shield sshd\[20859\]: Failed password for invalid user server from 202.29.220.114 port 49429 ssh2 |
2019-11-28 13:05:04 |
| attackspam | Nov 21 15:57:56 localhost sshd\[35667\]: Invalid user 12345aa from 202.29.220.114 port 48371 Nov 21 15:57:56 localhost sshd\[35667\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.114 Nov 21 15:57:57 localhost sshd\[35667\]: Failed password for invalid user 12345aa from 202.29.220.114 port 48371 ssh2 Nov 21 16:02:21 localhost sshd\[35768\]: Invalid user 123Love from 202.29.220.114 port 16738 Nov 21 16:02:21 localhost sshd\[35768\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.114 ... |
2019-11-22 00:06:03 |
| attack | Nov 20 10:46:58 nextcloud sshd\[13334\]: Invalid user pul from 202.29.220.114 Nov 20 10:46:58 nextcloud sshd\[13334\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.114 Nov 20 10:47:00 nextcloud sshd\[13334\]: Failed password for invalid user pul from 202.29.220.114 port 51110 ssh2 ... |
2019-11-20 20:48:45 |
| attackspambots | failed root login |
2019-11-12 04:52:31 |
| attackbots | Jul 20 12:43:47 MK-Soft-VM6 sshd\[15955\]: Invalid user eu from 202.29.220.114 port 17622 Jul 20 12:43:47 MK-Soft-VM6 sshd\[15955\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.114 Jul 20 12:43:49 MK-Soft-VM6 sshd\[15955\]: Failed password for invalid user eu from 202.29.220.114 port 17622 ssh2 ... |
2019-07-20 21:28:55 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 202.29.220.182 | attackspam | SSH login attempts. |
2020-10-14 01:38:35 |
| 202.29.220.182 | attackspambots | SSH login attempts. |
2020-10-13 16:48:50 |
| 202.29.220.182 | attack | Invalid user user from 202.29.220.182 port 35372 |
2020-09-29 05:20:33 |
| 202.29.220.182 | attack | Time: Sat Sep 26 20:09:33 2020 +0000 IP: 202.29.220.182 (TH/Thailand/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 26 20:03:53 activeserver sshd[6574]: Invalid user Robert from 202.29.220.182 port 33538 Sep 26 20:03:55 activeserver sshd[6574]: Failed password for invalid user Robert from 202.29.220.182 port 33538 ssh2 Sep 26 20:07:41 activeserver sshd[16696]: Invalid user glassfish from 202.29.220.182 port 44370 Sep 26 20:07:43 activeserver sshd[16696]: Failed password for invalid user glassfish from 202.29.220.182 port 44370 ssh2 Sep 26 20:09:29 activeserver sshd[21447]: Invalid user logger from 202.29.220.182 port 55206 |
2020-09-28 21:39:58 |
| 202.29.220.182 | attackbots | Invalid user butter from 202.29.220.182 port 40360 |
2020-08-25 20:45:36 |
| 202.29.220.182 | attackbots | Invalid user butter from 202.29.220.182 port 40360 |
2020-08-25 12:01:30 |
| 202.29.220.182 | attackbots | SmallBizIT.US 1 packets to tcp(22) |
2020-05-17 08:00:30 |
| 202.29.220.182 | attackbotsspam | 2020-05-10T22:50:21.267589abusebot-2.cloudsearch.cf sshd[28121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.182 user=root 2020-05-10T22:50:23.063609abusebot-2.cloudsearch.cf sshd[28121]: Failed password for root from 202.29.220.182 port 60416 ssh2 2020-05-10T22:50:24.918975abusebot-2.cloudsearch.cf sshd[28124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.182 user=root 2020-05-10T22:50:27.126589abusebot-2.cloudsearch.cf sshd[28124]: Failed password for root from 202.29.220.182 port 37680 ssh2 2020-05-10T22:50:28.885261abusebot-2.cloudsearch.cf sshd[28126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.182 user=root 2020-05-10T22:50:31.308531abusebot-2.cloudsearch.cf sshd[28126]: Failed password for root from 202.29.220.182 port 41378 ssh2 2020-05-10T22:50:33.025459abusebot-2.cloudsearch.cf sshd[28128]: pam_unix(sshd:auth): ... |
2020-05-11 07:52:38 |
| 202.29.220.182 | attackspambots | Mar 1 09:42:40 ift sshd\[43986\]: Failed password for root from 202.29.220.182 port 52464 ssh2Mar 1 09:42:44 ift sshd\[43989\]: Failed password for root from 202.29.220.182 port 54486 ssh2Mar 1 09:42:48 ift sshd\[43998\]: Failed password for root from 202.29.220.182 port 56150 ssh2Mar 1 09:42:53 ift sshd\[44000\]: Failed password for root from 202.29.220.182 port 57551 ssh2Mar 1 09:42:58 ift sshd\[44006\]: Failed password for root from 202.29.220.182 port 59394 ssh2 ... |
2020-03-01 15:55:04 |
| 202.29.220.182 | attackspambots | Invalid user robi from 202.29.220.182 port 53440 |
2020-02-28 09:14:36 |
| 202.29.220.182 | attackspam | Invalid user root2 from 202.29.220.182 port 52458 |
2020-02-24 14:39:18 |
| 202.29.220.186 | attackbots | $f2bV_matches |
2020-02-11 03:13:03 |
| 202.29.220.186 | attackbots | $f2bV_matches |
2019-10-31 01:08:41 |
| 202.29.220.186 | attack | Oct 29 23:03:16 server sshd\[26155\]: Invalid user pi from 202.29.220.186 Oct 29 23:03:16 server sshd\[26156\]: Invalid user pi from 202.29.220.186 Oct 29 23:03:16 server sshd\[26155\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.186 Oct 29 23:03:16 server sshd\[26156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.220.186 Oct 29 23:03:18 server sshd\[26155\]: Failed password for invalid user pi from 202.29.220.186 port 60898 ssh2 ... |
2019-10-30 04:37:15 |
| 202.29.220.186 | attackbots | Oct 26 22:29:35 tor-proxy-08 sshd\[4913\]: Invalid user pi from 202.29.220.186 port 56850 Oct 26 22:29:35 tor-proxy-08 sshd\[4914\]: Invalid user pi from 202.29.220.186 port 56852 Oct 26 22:29:35 tor-proxy-08 sshd\[4913\]: Connection closed by 202.29.220.186 port 56850 \[preauth\] Oct 26 22:29:36 tor-proxy-08 sshd\[4914\]: Connection closed by 202.29.220.186 port 56852 \[preauth\] ... |
2019-10-27 04:35:12 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 202.29.220.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46336
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;202.29.220.114. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019051200 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun May 12 22:21:11 CST 2019
;; MSG SIZE rcvd: 118
Host 114.220.29.202.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 114.220.29.202.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 218.241.191.1 | attack | Aug 13 09:35:02 srv206 sshd[862]: Invalid user ftpuser from 218.241.191.1 ... |
2019-08-13 16:08:24 |
| 109.169.84.10 | attackspambots | Brute forcing Wordpress login |
2019-08-13 15:07:13 |
| 196.134.7.242 | attackspambots | Unauthorized connection attempt from IP address 196.134.7.242 on Port 445(SMB) |
2019-08-13 15:42:15 |
| 89.184.91.121 | attackspam | Brute forcing Wordpress login |
2019-08-13 15:17:11 |
| 46.209.12.178 | attack | Unauthorized connection attempt from IP address 46.209.12.178 on Port 445(SMB) |
2019-08-13 15:41:42 |
| 66.163.188.240 | attack | SMTP/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM - |
2019-08-13 15:38:51 |
| 52.224.13.144 | attackspambots | Brute forcing Wordpress login |
2019-08-13 15:24:22 |
| 177.154.43.126 | attackbotsspam | Aug 13 10:29:39 server sshd\[27745\]: Invalid user jack from 177.154.43.126 port 33570 Aug 13 10:29:39 server sshd\[27745\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.154.43.126 Aug 13 10:29:41 server sshd\[27745\]: Failed password for invalid user jack from 177.154.43.126 port 33570 ssh2 Aug 13 10:35:05 server sshd\[19606\]: Invalid user gaurav from 177.154.43.126 port 25417 Aug 13 10:35:05 server sshd\[19606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.154.43.126 |
2019-08-13 15:54:56 |
| 112.85.42.229 | attackbotsspam | Splunk® : Brute-Force login attempt on SSH: Aug 13 03:40:23 testbed sshd[10336]: Failed password for root from 112.85.42.229 port 50215 ssh2 |
2019-08-13 15:42:41 |
| 43.250.127.98 | attackbots | Sending SPAM email |
2019-08-13 15:59:28 |
| 182.65.24.92 | attackbots | Brute forcing Wordpress login |
2019-08-13 14:56:32 |
| 108.61.200.148 | attack | Brute forcing Wordpress login |
2019-08-13 15:08:20 |
| 103.137.87.28 | attack | Aug 13 09:35:16 lnxweb61 sshd[12434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.137.87.28 |
2019-08-13 15:44:25 |
| 45.119.215.199 | attackspam | Brute forcing Wordpress login |
2019-08-13 15:30:03 |
| 91.134.248.253 | attackbotsspam | Brute forcing Wordpress login |
2019-08-13 15:14:30 |