223.207.242.239

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: Triple T Internet PCL

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	1577172003 - 12/24/2019 08:20:03 Host: 223.207.242.239/223.207.242.239 Port: 445 TCP Blocked	2019-12-24 16:13:10

Comments on same subnet:

IP	Type	Details	Datetime
223.207.242.183	attackspam	Unauthorized connection attempt from IP address 223.207.242.183 on Port 445(SMB)	2020-06-02 03:25:07
223.207.242.85	attack	Unauthorized connection attempt from IP address 223.207.242.85 on Port 445(SMB)	2020-03-23 23:35:48

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 223.207.242.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27089
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;223.207.242.239.		IN	A

;; AUTHORITY SECTION:
.			527	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122400 1800 900 604800 86400

;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 24 16:13:07 CST 2019
;; MSG SIZE  rcvd: 119

Host info

239.242.207.223.in-addr.arpa domain name pointer mx-ll-223.207.242-239.dynamic.3bb.co.th.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
239.242.207.223.in-addr.arpa	name = mx-ll-223.207.242-239.dynamic.3bb.in.th.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
122.118.2.162	attackbotsspam	DATE:2020-09-07 15:33:52, IP:122.118.2.162, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-09-08 01:58:36
171.224.178.134	attack	1599410916 - 09/06/2020 18:48:36 Host: 171.224.178.134/171.224.178.134 Port: 445 TCP Blocked	2020-09-08 02:04:52
94.241.253.75	attackbotsspam	1599410920 - 09/06/2020 18:48:40 Host: 94.241.253.75/94.241.253.75 Port: 445 TCP Blocked	2020-09-08 02:01:37
182.122.14.95	attackspam	Sep 7 11:35:01 master sshd[14756]: Failed password for root from 182.122.14.95 port 64286 ssh2 Sep 7 11:39:38 master sshd[14838]: Failed password for root from 182.122.14.95 port 59468 ssh2 Sep 7 11:43:29 master sshd[14921]: Failed password for root from 182.122.14.95 port 48404 ssh2 Sep 7 11:47:09 master sshd[14974]: Failed password for root from 182.122.14.95 port 37334 ssh2	2020-09-08 02:23:34
107.172.211.69	attackspam	2020-09-06 11:37:32.601708-0500 localhost smtpd[58387]: NOQUEUE: reject: RCPT from unknown[107.172.211.69]: 554 5.7.1 Service unavailable; Client host [107.172.211.69] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<00fd88f0.combatserous.co>	2020-09-08 02:25:20
117.131.60.58	attackbotsspam	(sshd) Failed SSH login from 117.131.60.58 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 7 19:10:06 server sshd[31021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.131.60.58 user=root Sep 7 19:10:08 server sshd[31021]: Failed password for root from 117.131.60.58 port 16773 ssh2 Sep 7 19:14:35 server sshd[31718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.131.60.58 user=root Sep 7 19:14:37 server sshd[31718]: Failed password for root from 117.131.60.58 port 28442 ssh2 Sep 7 19:17:27 server sshd[32229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.131.60.58 user=root	2020-09-08 02:28:39
77.43.171.78	attackbotsspam	Automatic report - Port Scan Attack	2020-09-08 02:10:18
45.142.120.74	attackspambots	2020-09-07T12:08:58.879608linuxbox-skyline auth[137366]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=antispam2 rhost=45.142.120.74 ...	2020-09-08 02:10:39
195.54.160.21	attack	TCP (SYN) 195.54.160.21:52831 -> port 3000, len 44	2020-09-08 02:04:32
82.221.131.71	attackbots	Sep 7 17:12:46 abendstille sshd\[5904\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.221.131.71 user=root Sep 7 17:12:47 abendstille sshd\[5904\]: Failed password for root from 82.221.131.71 port 43174 ssh2 Sep 7 17:12:49 abendstille sshd\[5904\]: Failed password for root from 82.221.131.71 port 43174 ssh2 Sep 7 17:12:52 abendstille sshd\[5904\]: Failed password for root from 82.221.131.71 port 43174 ssh2 Sep 7 17:12:54 abendstille sshd\[5904\]: Failed password for root from 82.221.131.71 port 43174 ssh2 ...	2020-09-08 01:57:08
109.111.172.39	attackspambots	TCP (SYN) 109.111.172.39:41162 -> port 23, len 44	2020-09-08 02:18:36
124.156.244.126	attack	Port scan denied	2020-09-08 02:22:08
118.89.231.121	attackspam	Sep 7 16:19:38 ns382633 sshd\[14333\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.231.121 user=root Sep 7 16:19:40 ns382633 sshd\[14333\]: Failed password for root from 118.89.231.121 port 46178 ssh2 Sep 7 16:40:02 ns382633 sshd\[18135\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.231.121 user=root Sep 7 16:40:04 ns382633 sshd\[18135\]: Failed password for root from 118.89.231.121 port 46802 ssh2 Sep 7 16:44:49 ns382633 sshd\[19022\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.231.121 user=root	2020-09-08 02:00:43
213.178.54.106	attackspam	DATE:2020-09-06 18:48:42, IP:213.178.54.106, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2020-09-08 02:01:10
37.76.147.31	attackspam	Sep 8 01:13:26 NG-HHDC-SVS-001 sshd[16027]: Invalid user dev from 37.76.147.31 ...	2020-09-08 02:06:14

Recently Reported IPs

82.79.67.15	43.225.169.143	219.77.160.158	0.153.131.68
165.227.144.125	156.213.155.91	116.20.231.207	220.143.4.111
177.206.144.210	46.29.255.107	212.26.251.94	218.62.91.252
115.55.132.27	113.160.196.91	87.117.63.69	76.125.118.91
94.24.229.99	108.160.199.213	171.245.226.223	218.16.60.210