City: Bangkok
Region: Bangkok
Country: Thailand
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '203.188.225.0 - 203.188.225.255'
% Abuse contact for '203.188.225.0 - 203.188.225.255' is 'system_team@uih.co.th'
inetnum: 203.188.225.0 - 203.188.225.255
netname: CMI
descr: China Mobile International Limited
country: TH
admin-c: TK812-AP
tech-c: TK812-AP
abuse-c: AU80-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-TH-BENCHA
mnt-irt: IRT-UIH-TH
last-modified: 2025-11-26T04:01:49Z
source: APNIC
irt: IRT-UIH-TH
address: 499 Benchachinda Bldg., Fl-4B
address: Vibhavadi-Rangsit Rd.,
address: Ladyao, Chatuchak 10900
e-mail: system_team@uih.co.th
abuse-mailbox: system_team@uih.co.th
admin-c: ST1220-AP
tech-c: ST1220-AP
auth: # Filtered
remarks: system_team@uih.co.th was validated on 2026-08-12
mnt-by: MAINT-TH-BENCHA
last-modified: 2026-08-12T14:56:01Z
source: APNIC
role: ABUSE UIHTH
country: ZZ
address: 499 Benchachinda Bldg., Fl-4B
address: Vibhavadi-Rangsit Rd.,
address: Ladyao, Chatuchak 10900
phone: +000000000
e-mail: system_team@uih.co.th
admin-c: ST1220-AP
tech-c: ST1220-AP
nic-hdl: AU80-AP
remarks: Generated from irt object IRT-UIH-TH
remarks: system_team@uih.co.th was validated on 2026-08-12
abuse-mailbox: system_team@uih.co.th
mnt-by: APNIC-ABUSE
last-modified: 2026-08-12T14:56:36Z
source: APNIC
person: Trinai Kaewkruewan
address: 499 Benchachinda Building, Kamphaeng Phet 6 Road
country: TH
phone: +6620165111
e-mail: trinai_k@uih.co.th
nic-hdl: TK812-AP
mnt-by: MAINT-TH-BENCHA
last-modified: 2022-07-25T07:45:33Z
source: APNIC
% Information related to '203.188.225.0/24AS38794'
route: 203.188.225.0/24
origin: AS38794
descr: IP Delegation subnet to customer DC in Thailand.
mnt-by: MAINT-TH-BENCHA
last-modified: 2025-11-26T04:03:57Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU4); <<>> DiG 9.10.3-P4-Ubuntu <<>> 203.188.225.25
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7316
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;203.188.225.25. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026091100 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 11 23:41:58 CST 2026
;; MSG SIZE rcvd: 107Host 25.225.188.203.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 25.225.188.203.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 78.166.46.47 | attack | Automatic report - Port Scan Attack |
2019-11-04 13:22:36 |
| 80.211.245.103 | attackspambots | $f2bV_matches |
2019-11-04 13:28:59 |
| 88.214.26.45 | attack | 11/04/2019-05:57:32.403024 88.214.26.45 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 96 |
2019-11-04 13:00:03 |
| 77.40.104.49 | attackspambots | 11/04/2019-00:44:40.966875 77.40.104.49 Protocol: 6 SURICATA SMTP tls rejected |
2019-11-04 08:03:43 |
| 69.176.95.240 | attackspam | 2019-11-04T04:57:17.218874abusebot-5.cloudsearch.cf sshd\[11459\]: Invalid user bjorn from 69.176.95.240 port 45796 |
2019-11-04 13:12:08 |
| 54.37.235.40 | attackbotsspam | 54.37.235.40 - - [03/Nov/2019:23:21:58 +0100] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 54.37.235.40 - - [03/Nov/2019:23:21:59 +0100] "GET /wp-login.php HTTP/1.1" 200 1238 "http://thinklarge.fr/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 54.37.235.40 - - [03/Nov/2019:23:21:59 +0100] "GET /wp-login.php HTTP/1.1" 200 1238 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 54.37.235.40 - - [03/Nov/2019:23:21:59 +0100] "POST /wp-login.php HTTP/1.1" 200 1635 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 54.37.235.40 - - [03/Nov/2019:23:29:16 +0100] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 54.37.235.40 - - [03/Nov/2019:23:29:16 +0100] "GET /wp-login.php HTTP/1.1" 200 1238 "http://thinklarge.fr/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_6 |
2019-11-04 07:57:14 |
| 45.136.110.47 | attackbotsspam | firewall-block, port(s): 6781/tcp, 6789/tcp, 6972/tcp, 7026/tcp, 7210/tcp, 7444/tcp, 7848/tcp, 7936/tcp, 8011/tcp, 8073/tcp, 8168/tcp |
2019-11-04 08:04:07 |
| 1.201.140.126 | attackbotsspam | Nov 4 08:53:36 microserver sshd[12045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.201.140.126 user=root Nov 4 08:53:38 microserver sshd[12045]: Failed password for root from 1.201.140.126 port 39743 ssh2 Nov 4 08:58:05 microserver sshd[12631]: Invalid user cent from 1.201.140.126 port 58697 Nov 4 08:58:05 microserver sshd[12631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.201.140.126 Nov 4 08:58:07 microserver sshd[12631]: Failed password for invalid user cent from 1.201.140.126 port 58697 ssh2 |
2019-11-04 13:07:09 |
| 106.12.68.192 | attackspambots | 3x Failed Password |
2019-11-04 13:19:59 |
| 181.40.125.250 | attackbots | Triggered by Fail2Ban at Vostok web server |
2019-11-04 08:05:06 |
| 106.12.16.179 | attackspam | Nov 4 07:16:03 server sshd\[16766\]: Invalid user service from 106.12.16.179 port 57606 Nov 4 07:16:03 server sshd\[16766\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.16.179 Nov 4 07:16:04 server sshd\[16766\]: Failed password for invalid user service from 106.12.16.179 port 57606 ssh2 Nov 4 07:20:47 server sshd\[17668\]: User root from 106.12.16.179 not allowed because listed in DenyUsers Nov 4 07:20:47 server sshd\[17668\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.16.179 user=root |
2019-11-04 13:26:25 |
| 114.45.146.30 | attack | Portscan detected |
2019-11-04 08:07:55 |
| 222.186.175.220 | attackspam | k+ssh-bruteforce |
2019-11-04 13:15:01 |
| 88.89.44.167 | attack | Nov 4 02:24:02 server sshd\[13878\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ti0177a400-1693.bb.online.no user=root Nov 4 02:24:04 server sshd\[13878\]: Failed password for root from 88.89.44.167 port 56490 ssh2 Nov 4 02:27:57 server sshd\[15050\]: Invalid user 1234 from 88.89.44.167 Nov 4 02:27:57 server sshd\[15050\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ti0177a400-1693.bb.online.no Nov 4 02:28:00 server sshd\[15050\]: Failed password for invalid user 1234 from 88.89.44.167 port 48606 ssh2 ... |
2019-11-04 07:59:48 |
| 173.249.8.156 | attackspam | 173.249.8.156 - - \[03/Nov/2019:23:29:05 +0100\] "GET http://chekfast.zennolab.com/proxy.php HTTP/1.1" 404 47 "RefererString" "Mozilla/5.0 \(Windows NT 10.0\; WOW64\; rv:45.0\) Gecko/20100101 Firefox/45.0" ... |
2019-11-04 08:00:58 |