City: unknown
Region: unknown
Country: Thailand
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 61.19.69.5 | attackbots | Jul 1 02:50:19 vpn sshd[31552]: Invalid user vastvoices from 61.19.69.5 Jul 1 02:50:19 vpn sshd[31552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.19.69.5 Jul 1 02:50:21 vpn sshd[31552]: Failed password for invalid user vastvoices from 61.19.69.5 port 54664 ssh2 Jul 1 02:50:23 vpn sshd[31552]: Failed password for invalid user vastvoices from 61.19.69.5 port 54664 ssh2 Jul 1 02:50:25 vpn sshd[31552]: Failed password for invalid user vastvoices from 61.19.69.5 port 54664 ssh2 |
2020-01-05 20:30:20 |
| 61.19.69.18 | attackbotsspam | 1577976549 - 01/02/2020 15:49:09 Host: 61.19.69.18/61.19.69.18 Port: 445 TCP Blocked |
2020-01-03 06:49:47 |
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '61.19.64.0 - 61.19.127.255'
% Abuse contact for '61.19.64.0 - 61.19.127.255' is 'pitoon.p@ntplc.co.th'
inetnum: 61.19.64.0 - 61.19.127.255
netname: CAT-ISP-NET
descr: 72 Charoenkrung Road Bangrak Bangkok THAILAND 10501
country: TH
admin-c: TC476-AP
tech-c: IC174-AP
abuse-c: AN3307-AP
status: ALLOCATED NON-PORTABLE
mnt-by: MAINT-NTPCL-TH
mnt-irt: IRT-NTPCL-TH
last-modified: 2025-11-19T23:59:27Z
source: APNIC
irt: IRT-NTPCL-TH
address: 99 Chaengwattana Road, Thung Song Hong Subdistrict, Luk Si, Luksi Bangkok 10210
e-mail: pitoon.p@ntplc.co.th
abuse-mailbox: pitoon.p@ntplc.co.th
admin-c: NTPC2-AP
tech-c: NTPC2-AP
auth: # Filtered
remarks: pitoon.p@ntplc.co.th was validated on 2026-05-05
mnt-by: MAINT-NTPCL-TH
last-modified: 2026-05-05T14:34:46Z
source: APNIC
role: ABUSE NTPCLTH
country: ZZ
address: 99 Chaengwattana Road, Thung Song Hong Subdistrict, Luk Si, Luksi Bangkok 10210
phone: +000000000
e-mail: pitoon.p@ntplc.co.th
admin-c: NTPC2-AP
tech-c: NTPC2-AP
nic-hdl: AN3307-AP
remarks: Generated from irt object IRT-NTPCL-TH
remarks: pitoon.p@ntplc.co.th was validated on 2026-05-05
abuse-mailbox: pitoon.p@ntplc.co.th
mnt-by: APNIC-ABUSE
last-modified: 2026-05-05T14:35:00Z
source: APNIC
person: IP-network CAT Telecom
nic-hdl: IC174-AP
e-mail: noc@cat.net.th
address: Data Comm. Dept. National Telecom Public Company Limited
address: NT Tower
address: 72 Charoenkrung Road Bangrak Bangkok THAILAND 10501
phone: +66-2-6142374
fax-no: +66-2-6142270
country: TH
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2022-09-05T09:44:01Z
source: APNIC
person: THIX network staff CAT Telecom
nic-hdl: TC476-AP
e-mail: admin-thix@cat.net.th
address: Data Comm. Dept. National Telecom Public Company Limited
address: NT Tower
address: 72 Charoenkrung Road Bangrak Bangkok THAILAND 10501
phone: +66-2-6142374
fax-no: +66-2-6142270
country: TH
mnt-by: MAINT-TH-THIX-CAT
last-modified: 2022-09-05T09:49:38Z
source: APNIC
% Information related to '61.19.68.0/23AS9931'
route: 61.19.68.0/23
origin: AS9931
descr: CAT Telecom Public Company Limited
13th CAT TELECOM TOWER
NEW ROAD SRIPHRAYA BANGRAK
BANGKOK
THAILAND
mnt-by: MAINT-NTPCL-TH
last-modified: 2025-11-19T01:51:40Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 61.19.69.203
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23125
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;61.19.69.203. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026071901 1800 900 604800 86400
;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jul 20 06:00:02 CST 2026
;; MSG SIZE rcvd: 105Host 203.69.19.61.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 203.69.19.61.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 5.140.164.241 | attack | Automatic report - Banned IP Access |
2019-11-12 16:48:01 |
| 51.75.52.127 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 43 - port: 8101 proto: TCP cat: Misc Attack |
2019-11-12 16:59:02 |
| 200.56.60.5 | attackspam | Nov 11 22:53:14 wbs sshd\[14108\]: Invalid user dovecot from 200.56.60.5 Nov 11 22:53:14 wbs sshd\[14108\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.56.60.5 Nov 11 22:53:16 wbs sshd\[14108\]: Failed password for invalid user dovecot from 200.56.60.5 port 16648 ssh2 Nov 11 22:57:57 wbs sshd\[14567\]: Invalid user dreams from 200.56.60.5 Nov 11 22:57:57 wbs sshd\[14567\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.56.60.5 |
2019-11-12 17:24:28 |
| 159.89.235.61 | attack | Nov 12 09:20:37 OPSO sshd\[21150\]: Invalid user secretar from 159.89.235.61 port 39082 Nov 12 09:20:37 OPSO sshd\[21150\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.235.61 Nov 12 09:20:40 OPSO sshd\[21150\]: Failed password for invalid user secretar from 159.89.235.61 port 39082 ssh2 Nov 12 09:24:28 OPSO sshd\[21610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.235.61 user=root Nov 12 09:24:30 OPSO sshd\[21610\]: Failed password for root from 159.89.235.61 port 47608 ssh2 |
2019-11-12 16:46:40 |
| 149.202.59.85 | attackbots | Nov 12 09:25:49 server sshd\[8285\]: Invalid user bill from 149.202.59.85 Nov 12 09:25:49 server sshd\[8285\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.ip-149-202-59.eu Nov 12 09:25:51 server sshd\[8285\]: Failed password for invalid user bill from 149.202.59.85 port 60289 ssh2 Nov 12 09:46:54 server sshd\[14173\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.ip-149-202-59.eu user=root Nov 12 09:46:56 server sshd\[14173\]: Failed password for root from 149.202.59.85 port 38834 ssh2 ... |
2019-11-12 17:03:02 |
| 103.236.201.174 | attackspam | 103.236.201.174 - - [12/Nov/2019:08:30:22 +0100] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.236.201.174 - - [12/Nov/2019:08:31:05 +0100] "POST /wp-login.php HTTP/1.1" 200 1239 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.236.201.174 - - [12/Nov/2019:08:31:12 +0100] "POST /wp-login.php HTTP/1.1" 200 1239 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.236.201.174 - - [12/Nov/2019:08:31:17 +0100] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.236.201.174 - - [12/Nov/2019:08:31:34 +0100] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.236.201.174 - - [12/Nov/2019:08:32:14 +0100] "POST /wp-login.php HTTP/1.1" 200 1239 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-11-12 17:16:04 |
| 111.231.50.90 | attackspam | Nov 12 09:41:32 MK-Soft-Root1 sshd[18362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.50.90 Nov 12 09:41:34 MK-Soft-Root1 sshd[18362]: Failed password for invalid user xk from 111.231.50.90 port 49950 ssh2 ... |
2019-11-12 16:46:22 |
| 187.73.210.140 | attack | Nov 12 04:00:32 TORMINT sshd\[5045\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.73.210.140 user=root Nov 12 04:00:34 TORMINT sshd\[5045\]: Failed password for root from 187.73.210.140 port 36501 ssh2 Nov 12 04:05:45 TORMINT sshd\[5271\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.73.210.140 user=root ... |
2019-11-12 17:17:40 |
| 218.78.15.235 | attackspambots | Nov 12 10:28:42 server sshd\[32458\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.15.235 user=sync Nov 12 10:28:44 server sshd\[32458\]: Failed password for sync from 218.78.15.235 port 58196 ssh2 Nov 12 10:33:22 server sshd\[17613\]: Invalid user migliore from 218.78.15.235 port 36886 Nov 12 10:33:22 server sshd\[17613\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.15.235 Nov 12 10:33:23 server sshd\[17613\]: Failed password for invalid user migliore from 218.78.15.235 port 36886 ssh2 |
2019-11-12 16:48:20 |
| 178.128.217.135 | attackbots | Nov 12 10:11:12 server sshd\[20512\]: Invalid user Snu33yb3ar from 178.128.217.135 port 39848 Nov 12 10:11:12 server sshd\[20512\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.217.135 Nov 12 10:11:14 server sshd\[20512\]: Failed password for invalid user Snu33yb3ar from 178.128.217.135 port 39848 ssh2 Nov 12 10:15:36 server sshd\[13477\]: Invalid user 123 from 178.128.217.135 port 48592 Nov 12 10:15:36 server sshd\[13477\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.217.135 |
2019-11-12 16:56:38 |
| 110.152.87.245 | attack | $f2bV_matches |
2019-11-12 17:15:37 |
| 123.161.205.21 | attackspam | " " |
2019-11-12 17:23:59 |
| 83.172.105.208 | attack | 11/12/2019-07:29:32.993908 83.172.105.208 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 87 |
2019-11-12 16:53:15 |
| 94.23.209.106 | attackspam | schuetzenmusikanten.de 94.23.209.106 \[12/Nov/2019:07:29:30 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4285 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/60.0.3112.113 Safari/537.36" SCHUETZENMUSIKANTEN.DE 94.23.209.106 \[12/Nov/2019:07:29:30 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4285 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/60.0.3112.113 Safari/537.36" |
2019-11-12 16:54:31 |
| 89.248.162.168 | attackspambots | Excessive Port-Scanning |
2019-11-12 16:45:43 |