City: unknown
Region: unknown
Country: Thailand
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.49.45.28 | attackbotsspam | Unauthorized connection attempt from IP address 49.49.45.28 on Port 445(SMB) |
2020-08-31 23:32:50 |
| 49.49.45.89 | attackbots | Unauthorised access (Aug 7) SRC=49.49.45.89 LEN=52 TOS=0x10 PREC=0x40 TTL=113 ID=10200 DF TCP DPT=445 WINDOW=8192 SYN |
2020-08-07 14:50:50 |
| 49.49.45.237 | attackspambots | Mar 10 10:07:38 pl3server sshd[32621]: Did not receive identification string from 49.49.45.237 Mar 10 10:07:45 pl3server sshd[352]: reveeclipse mapping checking getaddrinfo for mx-ll-49.49.45-237.dynamic.3bb.co.th [49.49.45.237] failed - POSSIBLE BREAK-IN ATTEMPT! Mar 10 10:07:45 pl3server sshd[352]: Invalid user nagesh from 49.49.45.237 Mar 10 10:07:45 pl3server sshd[352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.49.45.237 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=49.49.45.237 |
2020-03-10 22:19:08 |
| 49.49.45.220 | attack | firewall-block, port(s): 26/tcp |
2019-11-30 15:17:28 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.49.45.59
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41164
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;49.49.45.59. IN A
;; AUTHORITY SECTION:
. 302 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400
;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 00:35:00 CST 2022
;; MSG SIZE rcvd: 10459.45.49.49.in-addr.arpa domain name pointer mx-ll-49.49.45-59.dynamic.3bb.in.th.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
59.45.49.49.in-addr.arpa name = mx-ll-49.49.45-59.dynamic.3bb.in.th.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.82.153.143 | attack | 2020-01-01 15:53:23 dovecot_login authenticator failed for \(\[45.82.153.143\]\) \[45.82.153.143\]: 535 Incorrect authentication data \(set_id=abuse@opso.it\) 2020-01-01 15:53:33 dovecot_login authenticator failed for \(\[45.82.153.143\]\) \[45.82.153.143\]: 535 Incorrect authentication data 2020-01-01 15:53:44 dovecot_login authenticator failed for \(\[45.82.153.143\]\) \[45.82.153.143\]: 535 Incorrect authentication data 2020-01-01 15:53:51 dovecot_login authenticator failed for \(\[45.82.153.143\]\) \[45.82.153.143\]: 535 Incorrect authentication data 2020-01-01 15:54:05 dovecot_login authenticator failed for \(\[45.82.153.143\]\) \[45.82.153.143\]: 535 Incorrect authentication data |
2020-01-01 23:22:27 |
| 49.232.162.53 | attackbotsspam | $f2bV_matches |
2020-01-01 23:21:14 |
| 51.91.212.79 | attackbotsspam | 01/01/2020-15:54:06.289534 51.91.212.79 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 53 |
2020-01-01 23:23:16 |
| 187.44.113.33 | attackbots | Jan 1 16:04:58 srv-ubuntu-dev3 sshd[61963]: Invalid user jgreen from 187.44.113.33 Jan 1 16:04:58 srv-ubuntu-dev3 sshd[61963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.44.113.33 Jan 1 16:04:58 srv-ubuntu-dev3 sshd[61963]: Invalid user jgreen from 187.44.113.33 Jan 1 16:05:01 srv-ubuntu-dev3 sshd[61963]: Failed password for invalid user jgreen from 187.44.113.33 port 57416 ssh2 Jan 1 16:07:44 srv-ubuntu-dev3 sshd[62206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.44.113.33 user=root Jan 1 16:07:45 srv-ubuntu-dev3 sshd[62206]: Failed password for root from 187.44.113.33 port 41288 ssh2 Jan 1 16:10:33 srv-ubuntu-dev3 sshd[62588]: Invalid user Airi from 187.44.113.33 Jan 1 16:10:33 srv-ubuntu-dev3 sshd[62588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.44.113.33 Jan 1 16:10:33 srv-ubuntu-dev3 sshd[62588]: Invalid user Airi from 187.4 ... |
2020-01-01 23:27:03 |
| 36.81.138.52 | attack | 1577859711 - 01/01/2020 07:21:51 Host: 36.81.138.52/36.81.138.52 Port: 445 TCP Blocked |
2020-01-01 22:56:08 |
| 46.38.144.117 | attackbots | Too many connections or unauthorized access detected from Yankee banned ip |
2020-01-01 23:29:12 |
| 27.54.42.19 | attackspambots | Jan 1 15:54:46 debian-2gb-nbg1-2 kernel: \[149818.187169\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=27.54.42.19 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=59214 PROTO=TCP SPT=56805 DPT=522 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-01-01 23:01:29 |
| 183.82.138.172 | attackbotsspam | 1577890487 - 01/01/2020 15:54:47 Host: 183.82.138.172/183.82.138.172 Port: 445 TCP Blocked |
2020-01-01 23:01:08 |
| 222.186.175.151 | attackbots | Jan 1 11:49:59 server sshd\[14340\]: Failed password for root from 222.186.175.151 port 51672 ssh2 Jan 1 18:22:18 server sshd\[32653\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.151 user=root Jan 1 18:22:18 server sshd\[32651\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.151 user=root Jan 1 18:22:19 server sshd\[32653\]: Failed password for root from 222.186.175.151 port 60900 ssh2 Jan 1 18:22:19 server sshd\[32660\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.151 user=root ... |
2020-01-01 23:22:51 |
| 106.12.81.233 | attack | 2020-01-01T08:15:12.512102shield sshd\[19845\]: Invalid user adm02 from 106.12.81.233 port 35930 2020-01-01T08:15:12.516355shield sshd\[19845\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.81.233 2020-01-01T08:15:14.766715shield sshd\[19845\]: Failed password for invalid user adm02 from 106.12.81.233 port 35930 ssh2 2020-01-01T08:18:08.364024shield sshd\[20847\]: Invalid user casino from 106.12.81.233 port 56484 2020-01-01T08:18:08.368365shield sshd\[20847\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.81.233 |
2020-01-01 22:44:29 |
| 46.166.187.11 | attackbotsspam | \[2020-01-01 10:05:13\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-01-01T10:05:13.748-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="011442037698133",SessionID="0x7f0fb447f838",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.187.11/62427",ACLName="no_extension_match" \[2020-01-01 10:06:34\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-01-01T10:06:34.542-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011442037698133",SessionID="0x7f0fb4ca4128",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.187.11/58129",ACLName="no_extension_match" \[2020-01-01 10:09:09\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-01-01T10:09:09.041-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="011442037698133",SessionID="0x7f0fb4a2dfd8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.187.11/56287",ACLName="no_ex |
2020-01-01 23:23:27 |
| 222.186.175.155 | attackbots | Jan 1 16:20:53 Ubuntu-1404-trusty-64-minimal sshd\[32283\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.155 user=root Jan 1 16:20:55 Ubuntu-1404-trusty-64-minimal sshd\[32283\]: Failed password for root from 222.186.175.155 port 14296 ssh2 Jan 1 16:21:13 Ubuntu-1404-trusty-64-minimal sshd\[32412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.155 user=root Jan 1 16:21:15 Ubuntu-1404-trusty-64-minimal sshd\[32412\]: Failed password for root from 222.186.175.155 port 34510 ssh2 Jan 1 16:21:43 Ubuntu-1404-trusty-64-minimal sshd\[32613\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.155 user=root |
2020-01-01 23:24:47 |
| 31.184.177.6 | attackbots | $f2bV_matches |
2020-01-01 22:46:10 |
| 134.209.17.42 | attackbotsspam | SSH Bruteforce attempt |
2020-01-01 23:04:24 |
| 71.6.167.142 | attack | Unauthorized connection attempt detected from IP address 71.6.167.142 to port 119 |
2020-01-01 23:15:06 |