14.207.122.20 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
14.207.122.193	attackbotsspam	Attempt to attack host OS, exploiting network vulnerabilities, on 30-01-2020 04:55:16.	2020-01-30 21:20:18
14.207.122.119	attackspambots	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-02 01:08:09,853 INFO [shellcode_manager] (14.207.122.119) no match, writing hexdump (0b84678d3b9196bc4c876c0ca50cb3a3 :2130327) - MS17010 (EternalBlue)	2019-07-02 23:05:33
14.207.122.247	attackspam	firewall-block, port(s): 41878/tcp	2019-06-30 16:36:39

Type

Details

Datetime

14.207.122.193

attackbotsspam

Attempt to attack host OS, exploiting network vulnerabilities, on 30-01-2020 04:55:16.

2020-01-30 21:20:18

14.207.122.119

attackspambots

@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-02 01:08:09,853 INFO [shellcode_manager] (14.207.122.119) no match, writing hexdump (0b84678d3b9196bc4c876c0ca50cb3a3 :2130327) - MS17010 (EternalBlue)

2019-07-02 23:05:33

14.207.122.247

attackspam

firewall-block, port(s): 41878/tcp

2019-06-30 16:36:39

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.207.122.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57645
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;14.207.122.20.			IN	A

;; AUTHORITY SECTION:
.			119	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400

;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 13:19:46 CST 2022
;; MSG SIZE  rcvd: 106

Host info

20.122.207.14.in-addr.arpa domain name pointer mx-ll-14.207.122-20.dynamic.3bb.in.th.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
20.122.207.14.in-addr.arpa	name = mx-ll-14.207.122-20.dynamic.3bb.in.th.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
23.94.190.119	attack	Aug 4 23:19:20 xxxxxxx7446550 sshd[13338]: reveeclipse mapping checking getaddrinfo for 23-94-190-119-host.colocrossing.com [23.94.190.119] failed - POSSIBLE BREAK-IN ATTEMPT! Aug 4 23:19:20 xxxxxxx7446550 sshd[13338]: Invalid user ubnt from 23.94.190.119 Aug 4 23:19:20 xxxxxxx7446550 sshd[13338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.190.119 Aug 4 23:19:22 xxxxxxx7446550 sshd[13338]: Failed password for invalid user ubnt from 23.94.190.119 port 33946 ssh2 Aug 4 23:19:22 xxxxxxx7446550 sshd[13342]: Received disconnect from 23.94.190.119: 11: Bye Bye Aug 4 23:19:30 xxxxxxx7446550 sshd[13446]: reveeclipse mapping checking getaddrinfo for 23-94-190-119-host.colocrossing.com [23.94.190.119] failed - POSSIBLE BREAK-IN ATTEMPT! Aug 4 23:19:30 xxxxxxx7446550 sshd[13446]: Invalid user admin from 23.94.190.119 Aug 4 23:19:30 xxxxxxx7446550 sshd[13446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui........ -------------------------------	2020-08-09 23:55:53
106.12.26.167	attackbots	Aug 9 13:19:03 game-panel sshd[25168]: Failed password for root from 106.12.26.167 port 49708 ssh2 Aug 9 13:22:44 game-panel sshd[25329]: Failed password for root from 106.12.26.167 port 53706 ssh2	2020-08-09 23:20:46
94.233.240.176	attackbotsspam	20/8/9@10:02:55: FAIL: Alarm-Network address from=94.233.240.176 20/8/9@10:02:55: FAIL: Alarm-Network address from=94.233.240.176 ...	2020-08-09 23:37:07
103.96.220.115	attack	2020-08-09T12:06:51.149383shield sshd\[29080\]: Invalid user admin321... from 103.96.220.115 port 43102 2020-08-09T12:06:51.158246shield sshd\[29080\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.96.220.115 2020-08-09T12:06:53.390848shield sshd\[29080\]: Failed password for invalid user admin321... from 103.96.220.115 port 43102 ssh2 2020-08-09T12:12:02.904871shield sshd\[29642\]: Invalid user Qaz123456789! from 103.96.220.115 port 60932 2020-08-09T12:12:02.911684shield sshd\[29642\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.96.220.115	2020-08-09 23:17:55
121.121.177.200	attackspambots	Aug 9 16:19:47 PorscheCustomer sshd[29228]: Failed password for root from 121.121.177.200 port 45987 ssh2 Aug 9 16:24:32 PorscheCustomer sshd[29357]: Failed password for root from 121.121.177.200 port 47750 ssh2 ...	2020-08-09 23:22:28
93.174.93.195	attack	93.174.93.195 was recorded 5 times by 3 hosts attempting to connect to the following ports: 1793,1799. Incident counter (4h, 24h, all-time): 5, 36, 12823	2020-08-09 23:45:07
109.69.1.178	attack	(sshd) Failed SSH login from 109.69.1.178 (AL/Albania/ptr.abcom.al): 5 in the last 3600 secs	2020-08-09 23:21:42
123.207.97.250	attack	Aug 9 15:13:41 cosmoit sshd[24353]: Failed password for root from 123.207.97.250 port 40920 ssh2	2020-08-10 00:01:57
13.71.21.123	attackbots	"fail2ban match"	2020-08-09 23:26:26
87.251.74.18	attack	Port scan on 9 port(s): 2010 2012 3003 4321 10007 30000 40001 43390 54321	2020-08-09 23:32:56
109.140.45.146	attackspam	Aug 9 14:11:31 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=109.140.45.146, lip=172.104.140.148, session= Aug 9 14:11:37 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=109.140.45.146, lip=172.104.140.148, session=<00EKvXCsgfBtjC2S> Aug 9 14:11:37 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=109.140.45.146, lip=172.104.140.148, session= Aug 9 14:11:43 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=109.140.45.146, lip=172.104.140.148, session=<5VBlvXCsj/BtjC2S> Aug 9 14:11:49 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=109.140.45.146, lip=172.104.140.14 ...	2020-08-09 23:32:04
222.186.175.183	attackspambots	Aug 9 10:55:08 NPSTNNYC01T sshd[22255]: Failed password for root from 222.186.175.183 port 47706 ssh2 Aug 9 10:55:20 NPSTNNYC01T sshd[22255]: error: maximum authentication attempts exceeded for root from 222.186.175.183 port 47706 ssh2 [preauth] Aug 9 10:55:25 NPSTNNYC01T sshd[22300]: Failed password for root from 222.186.175.183 port 38068 ssh2 ...	2020-08-09 23:18:25
220.126.163.237	attackbots	Aug 9 15:11:26 hosting sshd[20952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.126.163.237 user=admin Aug 9 15:11:29 hosting sshd[20952]: Failed password for admin from 220.126.163.237 port 55859 ssh2 Aug 9 15:11:31 hosting sshd[20955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.126.163.237 user=admin Aug 9 15:11:33 hosting sshd[20955]: Failed password for admin from 220.126.163.237 port 55983 ssh2 Aug 9 15:11:36 hosting sshd[20958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.126.163.237 user=admin Aug 9 15:11:38 hosting sshd[20958]: Failed password for admin from 220.126.163.237 port 56106 ssh2 ...	2020-08-09 23:40:19
113.128.246.50	attackspam	prod11 ...	2020-08-09 23:17:40
85.209.0.252	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2020-08-09 23:33:45

Recently Reported IPs

14.207.122.221	14.207.122.206	14.207.122.217	14.207.122.244
14.207.122.226	14.207.122.250	14.207.122.251	14.207.122.249
14.207.122.237	14.207.122.232	14.207.122.31	14.207.122.40
14.207.122.26	14.207.122.37	14.207.122.42	14.207.122.5
14.207.122.57	14.207.122.51	14.207.122.44	14.207.122.7