City: unknown
Region: unknown
Country: Thailand
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 58.11.14.95 | attackspambots | Honeypot attack, port: 81, PTR: ppp-58-11-14-95.revip2.asianet.co.th. |
2020-02-19 21:12:35 |
| 58.11.14.227 | attackspambots | Unauthorized connection attempt detected from IP address 58.11.14.227 to port 23 [J] |
2020-01-18 17:57:38 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 58.11.14.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23813
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;58.11.14.107. IN A
;; AUTHORITY SECTION:
. 111 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400
;; Query time: 72 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 12:26:50 CST 2022
;; MSG SIZE rcvd: 105107.14.11.58.in-addr.arpa domain name pointer ppp-58-11-14-107.revip2.asianet.co.th.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
107.14.11.58.in-addr.arpa name = ppp-58-11-14-107.revip2.asianet.co.th.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.59.74.143 | spam | SCAMMERS!!! |
2019-06-21 03:09:55 |
| 185.244.25.235 | attack | SSH Brute-Force reported by Fail2Ban |
2019-06-21 13:06:59 |
| 180.163.220.3 | attackspambots | IP: 180.163.220.3 ASN: AS4812 China Telecom (Group) Port: World Wide Web HTTP 80 Found in one or more Blacklists Date: 21/06/2019 4:46:16 AM UTC |
2019-06-21 13:00:53 |
| 73.12.40.150 | attack | Fast-RDP-Brute Bruteforce Activity |
2019-06-20 01:00:05 |
| 114.6.6.200 | normal | Tggg |
2019-06-15 16:36:44 |
| 190.135.88.61 | attack | 445/tcp [2019-06-12]1pkt |
2019-06-12 10:45:04 |
| 80.82.70.39 | attack | Attacking home routers |
2019-06-21 11:23:58 |
| 141.8.144.1 | attackspam | IP: 141.8.144.1 ASN: AS13238 YANDEX LLC Port: World Wide Web HTTP 80 Date: 21/06/2019 4:46:02 AM UTC |
2019-06-21 13:07:59 |
| 134.209.97.9 | proxy | 134.209.97.9 |
2019-06-19 17:02:10 |
| 59.36.132.140 | attack | 59.36.132.140 - - [21/Jun/2019:09:08:42 +0800] "GET /ueditor.all.js HTTP/1.1" 301 194 "http://118.25.52.138:80/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1700.76 Safari/537.36" 59.36.132.140 - - [21/Jun/2019:09:08:42 +0800] "GET /wikilib.d/PmWiki.ChangeLog HTTP/1.1" 301 194 "http://118.25.52.138:80/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1700.76 Safari/537.36" 59.36.132.140 - - [21/Jun/2019:09:08:42 +0800] "GET /4e5e5d7364f443e28fbf0d3ae744a59a HTTP/1.1" 301 194 "http://118.25.52.138:80/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1700.76 Safari/537.36" 59.36.132.140 - - [21/Jun/2019:09:08:42 +0800] "GET /jenkins/ HTTP/1.1" 301 194 "http://118.25.52.138:80/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1700.76 Safari/537.36" 59.36.132.140 - - [21/Jun/2019:09:08:43 +0800] "GET /console/login/LoginForm.jsp HTTP/1.1" 301 194 "http://118.25.52.138:80/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1700.76 Safari/537.36" 59.36.132.140 - - [21/Jun/2019:09:08:43 +0800] "GET /solr/ HTTP/1.1" 301 194 "http://118.25.52.138:80/" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ |
2019-06-21 09:10:52 |
| 184.18.206.153 | attackspambots | RDP Bruteforce |
2019-06-21 13:11:25 |
| 5.83.182.102 | attackspam | Jun 21 05:53:31 reporting4 sshd[27954]: Invalid user admin from 5.83.182.102 Jun 21 05:53:31 reporting4 sshd[27954]: Failed none for invalid user admin from 5.83.182.102 port 55107 ssh2 Jun 21 05:53:33 reporting4 sshd[27954]: Failed password for invalid user admin from 5.83.182.102 port 55107 ssh2 Jun 21 05:54:40 reporting4 sshd[28900]: Invalid user admin from 5.83.182.102 Jun 21 05:54:40 reporting4 sshd[28900]: Failed none for invalid user admin from 5.83.182.102 port 40578 ssh2 Jun 21 05:54:42 reporting4 sshd[28900]: Failed password for invalid user admin from 5.83.182.102 port 40578 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=5.83.182.102 |
2019-06-21 12:09:30 |
| 138.94.199.14 | attackspam | Jun 21 06:32:03 srv1 postfix/smtpd[12605]: connect from 138-94-199-14.infomaisnet.net.br[138.94.199.14] Jun x@x Jun x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=138.94.199.14 |
2019-06-21 13:12:37 |
| 117.193.157.141 | attackbotsspam | Attempts to probe for or exploit a Drupal 7.67 site on url: /wp-login.php. Reported by the module https://www.drupal.org/project/abuseipdb. |
2019-06-21 13:09:03 |
| 205.185.114.87 | attack | Invalid user admin from 205.185.114.87 port 46312 |
2019-06-12 10:46:37 |