City: unknown
Region: unknown
Country: Thailand
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '14.207.194.0 - 14.207.194.255'
% Abuse contact for '14.207.194.0 - 14.207.194.255' is 'abuseIPv4@ais.co.th'
inetnum: 14.207.194.0 - 14.207.194.255
netname: AWN-Customer
descr: ???????????????? ._???????????????????????????????????????????????????????????????????????? - Corporate Internet # 1
country: TH
admin-c: SS1413-AP
tech-c: NI36-AP
abuse-c: AE626-AP
status: ASSIGNED NON-PORTABLE
mnt-by: MAINT-TTBP-TH
mnt-irt: IRT-EDS-TTBP-TH
last-modified: 2026-04-02T08:01:28Z
source: APNIC
irt: IRT-EDS-TTBP-TH
address: 414 Phaholyothin Rd Samsen Nai Phayathai Thailand Bangkok 10400
e-mail: abuseIPv4@ais.co.th
abuse-mailbox: abuseIPv4@ais.co.th
admin-c: TTBP1-AP
tech-c: TTBP1-AP
auth: # Filtered
remarks: abuseipv4@ais.co.th was validated on 2026-02-27
mnt-by: MAINT-TTBP-TH
last-modified: 2026-02-27T03:34:38Z
source: APNIC
role: ABUSE EDSTTBPTH
country: ZZ
address: 414 Phaholyothin Rd Samsen Nai Phayathai Thailand Bangkok 10400
phone: +000000000
e-mail: abuseIPv4@ais.co.th
admin-c: TTBP1-AP
tech-c: TTBP1-AP
nic-hdl: AE626-AP
remarks: Generated from irt object IRT-EDS-TTBP-TH
remarks: abuseipv4@ais.co.th was validated on 2026-02-27
abuse-mailbox: abuseIPv4@ais.co.th
mnt-by: APNIC-ABUSE
last-modified: 2026-02-27T03:34:54Z
source: APNIC
role: SBN Co Ltd IP Planning
address: 408/60 Phaholyothin Place Building 38th floor
address: Phaholyothin Road, Samsennai,
address: Phayathai, Bangkok 10400
country: TH
phone: +66-2-615-3964
fax-no: +66-2-619-8777
e-mail: sitthips@ais.co.th
abuse-mailbox: abuseipv4@sbn.co.th
admin-c: SS1413-AP
tech-c: BS534-AP
nic-hdl: SS1413-AP
mnt-by: MAINT-AWN-CO-LTD-TH
last-modified: 2021-11-07T23:30:27Z
source: APNIC
person: Naruepon Intarayotha
nic-hdl: NI36-AP
e-mail: naruepoi@ais.co.th
address: Advanced Info Service Public Company Limited
address: 1291/1 Phaholyothin Road, Phayathai, Bangkok 10400, THAILAND
phone: +6622996000 Ext. 3803
fax-no: +6622996076
country: TH
mnt-by: MAINT-TH-AIS
last-modified: 2008-09-04T07:46:11Z
source: APNIC
% Information related to '14.207.194.0/24AS138422'
route: 14.207.194.0/24
origin: AS138422
descr: Triple T Broadband Public Company Limited
89 , Cosmo Office Park Building , Popular Road
Ban Mai Subdistrict ,
mnt-by: MAINT-TTBP-TH
last-modified: 2026-01-28T04:39:47Z
source: APNIC
% Information related to '14.207.194.0/24AS45458'
route: 14.207.194.0/24
origin: AS45458
descr: Triple T Broadband Public Company Limited
Jasmine International Tower 200 Moo 4 Chaengwattana Rd.
mnt-by: MAINT-TTBP-TH
last-modified: 2025-08-14T06:46:16Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.36-SNAPSHOT (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.207.194.27
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59011
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.207.194.27. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026041201 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 13 12:02:28 CST 2026
;; MSG SIZE rcvd: 106Host 27.194.207.14.in-addr.arpa not found: 2(SERVFAIL)
server can't find 14.207.194.27.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 212.248.9.206 | attackspam | C1,WP GET /nelson/wp-login.php |
2019-08-10 12:23:36 |
| 79.106.44.2 | attack | Automatic report - Port Scan Attack |
2019-08-10 12:16:48 |
| 51.68.243.1 | attack | Aug 10 06:37:59 SilenceServices sshd[3320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.243.1 Aug 10 06:38:01 SilenceServices sshd[3320]: Failed password for invalid user lmondon from 51.68.243.1 port 54190 ssh2 Aug 10 06:41:56 SilenceServices sshd[6512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.243.1 |
2019-08-10 12:42:21 |
| 115.84.92.10 | attack | Automatic report - Banned IP Access |
2019-08-10 12:01:19 |
| 185.176.27.54 | attackbotsspam | Port scan on 17 port(s): 3537 3539 3544 3596 3616 3636 3659 3665 3684 3844 3854 3856 3948 4008 4233 4249 4269 |
2019-08-10 12:26:28 |
| 128.199.128.215 | attackbotsspam | Automatic report - Banned IP Access |
2019-08-10 12:19:35 |
| 157.230.212.42 | attack | WordPress wp-login brute force :: 157.230.212.42 0.048 BYPASS [10/Aug/2019:12:44:50 1000] [censored_4] "POST /wp-login.php HTTP/1.1" 200 3989 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-08-10 11:57:04 |
| 198.89.121.71 | attackbots | Aug 10 04:42:54 vps sshd[1774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.89.121.71 Aug 10 04:42:56 vps sshd[1774]: Failed password for invalid user bad from 198.89.121.71 port 37648 ssh2 Aug 10 04:42:59 vps sshd[1780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.89.121.71 ... |
2019-08-10 12:37:11 |
| 43.227.66.153 | attackspambots | SSH bruteforce (Triggered fail2ban) |
2019-08-10 12:26:48 |
| 103.218.243.13 | attackspambots | Aug 10 05:56:49 tuxlinux sshd[49337]: Invalid user merlin from 103.218.243.13 port 35834 Aug 10 05:56:49 tuxlinux sshd[49337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.218.243.13 Aug 10 05:56:49 tuxlinux sshd[49337]: Invalid user merlin from 103.218.243.13 port 35834 Aug 10 05:56:49 tuxlinux sshd[49337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.218.243.13 Aug 10 05:56:49 tuxlinux sshd[49337]: Invalid user merlin from 103.218.243.13 port 35834 Aug 10 05:56:49 tuxlinux sshd[49337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.218.243.13 Aug 10 05:56:51 tuxlinux sshd[49337]: Failed password for invalid user merlin from 103.218.243.13 port 35834 ssh2 ... |
2019-08-10 12:31:48 |
| 5.253.19.43 | attackspam | Looking for resource vulnerabilities |
2019-08-10 11:59:39 |
| 49.89.227.103 | attack | 2019-08-10T09:43:41.610865enmeeting.mahidol.ac.th sshd\[14392\]: User root from 49.89.227.103 not allowed because not listed in AllowUsers 2019-08-10T09:43:41.733752enmeeting.mahidol.ac.th sshd\[14392\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.89.227.103 user=root 2019-08-10T09:43:44.306369enmeeting.mahidol.ac.th sshd\[14392\]: Failed password for invalid user root from 49.89.227.103 port 36184 ssh2 ... |
2019-08-10 12:18:46 |
| 82.209.236.138 | attackspam | Aug 9 23:53:31 debian sshd\[30112\]: Invalid user ksg from 82.209.236.138 port 36454 Aug 9 23:53:31 debian sshd\[30112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.209.236.138 Aug 9 23:53:33 debian sshd\[30112\]: Failed password for invalid user ksg from 82.209.236.138 port 36454 ssh2 ... |
2019-08-10 12:19:11 |
| 177.8.254.250 | attack | Aug 10 05:42:51 srv-4 sshd\[23223\]: Invalid user admin from 177.8.254.250 Aug 10 05:42:51 srv-4 sshd\[23223\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.8.254.250 Aug 10 05:42:53 srv-4 sshd\[23223\]: Failed password for invalid user admin from 177.8.254.250 port 50702 ssh2 ... |
2019-08-10 12:39:45 |
| 89.43.78.201 | attackspambots | Aug 10 12:03:52 our-server-hostname postfix/smtpd[6234]: connect from unknown[89.43.78.201] Aug 10 12:03:54 our-server-hostname sqlgrey: grey: new: 89.43.78.201(89.43.78.201), x@x -> x@x Aug x@x Aug x@x Aug x@x Aug 10 12:03:55 our-server-hostname sqlgrey: grey: new: 89.43.78.201(89.43.78.201), x@x -> x@x Aug x@x Aug x@x Aug x@x Aug 10 12:03:56 our-server-hostname sqlgrey: grey: new: 89.43.78.201(89.43.78.201), x@x -> x@x Aug x@x Aug x@x Aug x@x Aug 10 12:03:57 our-server-hostname postfix/smtpd[6234]: disconnect from unknown[89.43.78.201] Aug 10 12:04:09 our-server-hostname postfix/smtpd[31780]: connect from unknown[89.43.78.201] Aug x@x Aug x@x Aug 10 12:04:10 our-server-hostname postfix/smtpd[31780]: EBC70A4007C: client=unknown[89.43.78.201] Aug 10 12:04:11 our-server-hostname postfix/smtpd[25188]: BDE35A40043: client=unknown[127.0.0.1], orig_client=unknown[89.43.78.201] Aug 10 12:04:11 our-server-hostname amavis[17356]: (17356-11) Passed CLEAN, [89.43.78.201] [89.43.7........ ------------------------------- |
2019-08-10 12:31:16 |