AbuseIPDB » 61.7.142.214

61.7.142.214 was found in our database!

This IP was reported 65 times. Confidence of Abuse is 25%: ?

25%

ISP	National Telecom Public Company Limited 7 Fl. 72. CAT TELECOM TOWER Bangrak Bangkok Thailand
Usage Type	Fixed Line ISP
ASN	AS131090
Domain Name	cattelecom.com
Country	Thailand
City	Chiang Mai, Chiang Mai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 61.7.142.214

Whois 61.7.142.214

IP Abuse Reports for 61.7.142.214:

This IP address has been reported a total of 65 times from 24 distinct sources. 61.7.142.214 was first reported on January 29th 2023, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
10dencehispahard SL	2024-06-03 20:00:04 (1 year ago)	Unauthorized login attempts [ spamlogs]	Brute-Force
NxtGenIT	2024-06-01 14:00:09 (1 year ago)	61.7.142.214 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attemp ... show more61.7.142.214 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attempt show less	Brute-Force
Anonymous	2024-05-25 03:25:36 (1 year ago)	Ports: *; Direction: 0; Trigger: LF_DISTSMTP	Brute-Force SSH
NxtGenIT	2024-05-24 07:24:36 (1 year ago)	61.7.142.214 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attemp ... show more61.7.142.214 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attempt show less	Brute-Force
TPI-Abuse	2024-05-21 11:52:58 (1 year ago)	(mod_security) mod_security (id:217291) triggered by 61.7.142.214 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:217291) triggered by 61.7.142.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 21 07:52:54.830382 2024] [security2:error] [pid 15106] [client 61.7.142.214:60767] [client 61.7.142.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(\\\\n|\\\\r)" at ARGS_NAMES:\\r\\nfromwhere. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "145"] [id "217291"] [rev "2"] [msg "HTTP Header Injection Attack via payload (CR/LF detected)||killeramps.com|F|2"] [data "Matched Data: \\x0d found within ARGS_NAMES:\\x5cr\\x5cnfromwhere: \\x0d\\x0afromwhere"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "killeramps.com"] [uri "/g12contact.php"] [unique_id "ZkyLFrbmojPcUJX2PXfTSAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-05-09 14:01:49 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 61.7.142.214 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210492) triggered by 61.7.142.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 09 10:01:40.988693 2024] [security2:error] [pid 23364:tid 47164115920640] [client 61.7.142.214:41564] [client 61.7.142.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aafm.us"] [uri "/wp-config.php~"] [unique_id "ZjzXRMaSzUMPqfRl3f3irAAAAUU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-04-30 00:38:19 (1 year ago)	VPN Logon Failed: AAA user authentication Rejected	Brute-Force
lp	2024-04-19 01:56:15 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 61.7.142.214 2024-04-19T00:59:3 ... show moreUnauthorized VPN login attempts: 1 attempts were recorded from 61.7.142.214 2024-04-19T00:59:38+02:00 vpn Access-Reject '[email protected]' station: 61.7.142.214 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
Anonymous	2024-04-08 15:20:54 (1 year ago)	Ports: *; Direction: 0; Trigger: LF_DISTSMTP	Brute-Force SSH
Fusl	2024-04-03 08:00:52 (1 year ago)	received unsolicited smtp data stream: MIME-Version: 1.0 Date: Wed, 03 Apr 2024 09:37:34 ... show morereceived unsolicited smtp data stream: MIME-Version: 1.0 Date: Wed, 03 Apr 2024 09:37:34 +0200 Message-ID: <F3C05FC3E1EA95681926DF80073F679F6F762D76@unknown> Content-Type: multipart/mixed; boundary="------------010208080505020701050104" X-Priority: 3 (Normal) From: "Beautyrq Iamue" <[email protected]> To: [email protected] Subject: Hello my friend EkfNfjkjsdD --------------010208080505020701050104 Content-Type: multipart/alternative; boundary="------------070801090301090208070708" --------------070801090301090208070708 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable Good Day Dear I live in The russian federation. How are you at the moment?= I would love to get acquainted with you personally considerably more close= =2E So what is your name? I m a single and I am attempting to find a buddy,= real relationship and responsibility. I'm a very joyful and nurturing pers= on. I wanna love and grow loved. Please tell me more regarding you...i anti= cipate to hear from you. H show less	Email Spam
unhfree.net	2024-03-19 15:19:38 (1 year ago)	Mar 19 11:39:37 canopus postfix/smtpd[3538274]: NOQUEUE: reject: RCPT from unknown[61.7.142.214]: 55 ... show moreMar 19 11:39:37 canopus postfix/smtpd[3538274]: NOQUEUE: reject: RCPT from unknown[61.7.142.214]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost.> Mar 19 11:53:11 canopus postfix/smtpd[3538528]: NOQUEUE: reject: RCPT from unknown[61.7.142.214]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost.> Mar 19 13:54:30 canopus postfix/smtpd[3538948]: NOQUEUE: reject: RCPT from unknown[61.7.142.214]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost.> Mar 19 15:05:22 canopus postfix/smtpd[3592391]: NOQUEUE: reject: RCPT from unknown[61.7.142.214]: 554 5.7.1 <jonathanneathery@ymail ... show less	Brute-Force Exploited Host
Fusl	2024-02-24 02:17:20 (1 year ago)	received unsolicited smtp data stream: MIME-Version: 1.0 Date: Sat, 24 Feb 2024 02:53:08 ... show morereceived unsolicited smtp data stream: MIME-Version: 1.0 Date: Sat, 24 Feb 2024 02:53:08 +0100 Message-ID: <7D2B0620E220A9EFADCD7DE2908568B94214CEC8@unknown> Content-Type: multipart/mixed; boundary="------------030809040508090405070208" X-Priority: 3 (Normal) From: "Miah Sweetnv" <[email protected]> To: [email protected] Subject: Hi, FDkjfNfjkjsW --------------030809040508090405070208 Content-Type: multipart/alternative; boundary="------------050905040304030405080106" --------------050905040304030405080106 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hello man! I am from Russian federation. So how are you doing today? I wou= ld love to become acquainted with you personally more closer. What is your = name? I m single and I am attempting to find a friend, real love as well as= dependability. I m an incredibly joyful and nurturing woman. I would like = to love and grow cherished. Make sure you describe to me more about yoursel= f...i look ahead to hear from you. I re show less	Email Spam
Fusl	2024-02-12 19:24:28 (1 year ago)	received unsolicited smtp data stream: MIME-Version: 1.0 Date: Mon, 12 Feb 2024 20:01:48 ... show morereceived unsolicited smtp data stream: MIME-Version: 1.0 Date: Mon, 12 Feb 2024 20:01:48 +0100 Message-ID: <5E8C56E71F8F4FAAAE5E3AF34094B6419E072856@unknown> Content-Type: multipart/mixed; boundary="------------070606040303050506010703" X-Priority: 3 (Normal) From: "Ladygj Sunkl" <[email protected]> To: [email protected] Subject: Good afternoon! EkfNfjkjsdD --------------070606040303050506010703 Content-Type: multipart/alternative; boundary="------------060509090204030503000105" --------------060509090204030503000105 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi my great friend I'm living in The russia. How r u doing right this mome= nt? I want to become informed about you more better. What is your name? I m= unmarried and I am on the search for a friend, love and responsibility. I'= m an exceptionally joyful and caring girl. I will really love and grow ador= ed. Make sure you inform me more about yourself...i anticipate to hear from= you. Let's hope when ever yo show less	Email Spam
Fusl	2023-09-18 07:35:30 (1 year ago)	received unsolicited smtp data stream: MIME-Version: 1.0 Date: Mon, 18 Sep 2023 09:19:42 ... show morereceived unsolicited smtp data stream: MIME-Version: 1.0 Date: Mon, 18 Sep 2023 09:19:42 +0200 Message-ID: <00CC5BCA9DF94232BA8F1BE13F128E3DB54ADD20@unknown> Content-Type: multipart/mixed; boundary="------------000906080306000302000903" X-Priority: 3 (Normal) From: "Medu Beautyoo" <[email protected]> To: [email protected] Subject: Hey there my awesome mate. FDkjfNfjkjsW --------------000906080306000302000903 Content-Type: multipart/alternative; boundary="------------040106070209070102070909" --------------040106070209070102070909 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hey hey my dear mate. I am from Russia. How are you doing? I need to becom= e familiar you considerably more deeper. So what is your name? I am unmarri= ed and I am struggling to find a friend, adoration as well as dependability= =2E I m a really joyful and nurturing girl. I wanna love and be adored. You= should inform to me much more about yourself...i look ahead to hear from y= ou. I show less	Email Spam
Fusl	2023-07-30 12:12:00 (1 year ago)	received unsolicited smtp data stream: MIME-Version: 1.0 Date: Sun, 30 Jul 2023 13:59:01 ... show morereceived unsolicited smtp data stream: MIME-Version: 1.0 Date: Sun, 30 Jul 2023 13:59:01 +0200 Message-ID: <D87045C4BDEE90A04E7A5D983629999B78C7797C@unknown> Content-Type: multipart/mixed; boundary="------------080208070109090500080108" X-Priority: 3 (Normal) From: "Midi Miyy" <[email protected]> To: [email protected] Subject: Hello my new pen-friend, EkfNfjkjsdD --------------080208070109090500080108 Content-Type: multipart/alternative; boundary="------------000306060203090700040601" --------------000306060203090700040601 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable Good Day Sweetheart! I am residing The russian federation. How are you now= a days? I desire to become informed about you personally a lot more deeper= =2E And what is your name? I m single and I am on the search for a friend, = real relationship as well as responsibilities. I m a very supportive and ca= ring person. I would like to love and be cherished. Please tell me much mor= e about your self...i look f show less	Email Spam

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩