14.207.3.20 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
14.207.3.189	attackbotsspam	Chat Spam	2019-09-16 15:40:50
14.207.32.51	attackspam	Unauthorized connection attempt from IP address 14.207.32.51 on Port 445(SMB)	2019-07-22 17:10:07
14.207.34.186	attackspam	Unauthorized connection attempt from IP address 14.207.34.186 on Port 445(SMB)	2019-07-13 03:53:11
14.207.31.183	attackbots	Automatic report - SSH Brute-Force Attack	2019-07-05 09:07:24

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.207.3.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46800
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;14.207.3.20.			IN	A

;; AUTHORITY SECTION:
.			340	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 13:34:42 CST 2022
;; MSG SIZE  rcvd: 104

Host info

20.3.207.14.in-addr.arpa domain name pointer mx-ll-14.207.3-20.dynamic.3bb.co.th.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
20.3.207.14.in-addr.arpa	name = mx-ll-14.207.3-20.dynamic.3bb.co.th.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
107.189.10.174	attackbotsspam	$f2bV_matches	2020-09-08 17:36:17
217.182.66.235	attack	...	2020-09-08 17:38:10
220.120.106.254	attack	ssh brute force	2020-09-08 17:17:11
148.72.209.191	attack	148.72.209.191 - - [08/Sep/2020:08:25:08 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.72.209.191 - - [08/Sep/2020:08:25:11 +0200] "POST /wp-login.php HTTP/1.1" 200 2698 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.72.209.191 - - [08/Sep/2020:08:25:12 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.72.209.191 - - [08/Sep/2020:08:25:16 +0200] "POST /wp-login.php HTTP/1.1" 200 2672 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.72.209.191 - - [08/Sep/2020:08:25:16 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.72.209.191 - - [08/Sep/2020:08:25:18 +0200] "POST /wp-login.php HTTP/1.1" 200 2673 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/201001 ...	2020-09-08 17:43:49
106.13.173.187	attackbotsspam	Sep 8 07:14:14 root sshd[3855]: Failed password for root from 106.13.173.187 port 41222 ssh2 ...	2020-09-08 17:45:26
121.204.153.151	attackbotsspam	Sep 8 09:50:13 ns382633 sshd\[12930\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.204.153.151 user=root Sep 8 09:50:15 ns382633 sshd\[12930\]: Failed password for root from 121.204.153.151 port 53246 ssh2 Sep 8 09:56:41 ns382633 sshd\[14214\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.204.153.151 user=root Sep 8 09:56:43 ns382633 sshd\[14214\]: Failed password for root from 121.204.153.151 port 49596 ssh2 Sep 8 09:59:15 ns382633 sshd\[14568\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.204.153.151 user=root	2020-09-08 17:19:27
41.82.208.182	attackbots	Sep 8 11:48:27 localhost sshd[2238332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.82.208.182 user=root Sep 8 11:48:29 localhost sshd[2238332]: Failed password for root from 41.82.208.182 port 33118 ssh2 ...	2020-09-08 17:18:36
49.235.99.209	attackspambots	Lines containing failures of 49.235.99.209 (max 1000) Sep 7 03:53:33 archiv sshd[6557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.99.209 user=r.r Sep 7 03:53:36 archiv sshd[6557]: Failed password for r.r from 49.235.99.209 port 56642 ssh2 Sep 7 03:53:36 archiv sshd[6557]: Received disconnect from 49.235.99.209 port 56642:11: Bye Bye [preauth] Sep 7 03:53:36 archiv sshd[6557]: Disconnected from 49.235.99.209 port 56642 [preauth] Sep 7 04:05:51 archiv sshd[6699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.99.209 user=r.r Sep 7 04:05:53 archiv sshd[6699]: Failed password for r.r from 49.235.99.209 port 52180 ssh2 Sep 7 04:05:53 archiv sshd[6699]: Received disconnect from 49.235.99.209 port 52180:11: Bye Bye [preauth] Sep 7 04:05:53 archiv sshd[6699]: Disconnected from 49.235.99.209 port 52180 [preauth] Sep 7 04:08:49 archiv sshd[6741]: pam_unix(sshd:auth): aut........ ------------------------------	2020-09-08 17:37:29
189.229.94.38	attack	Icarus honeypot on github	2020-09-08 17:33:09
81.129.253.102	attackspam	Automatic report - Port Scan Attack	2020-09-08 17:27:44
213.87.102.18	attack	Honeypot attack, port: 445, PTR: service-18.mrdv-7.mtsnet.ru.	2020-09-08 17:43:35
103.57.141.20	attackbotsspam	Automatic report - Port Scan Attack	2020-09-08 17:32:29
190.247.245.238	attackbots	2020-09-07 18:49:11 1kFKKL-0000AG-7f SMTP connection from $238-245-247-190.fibertel.com.ar$ \[190.247.245.238\]:26210 I=\[193.107.88.166\]:25 closed by DROP in ACL 2020-09-07 18:49:18 1kFKKS-0000AS-S3 SMTP connection from $238-245-247-190.fibertel.com.ar$ \[190.247.245.238\]:26255 I=\[193.107.88.166\]:25 closed by DROP in ACL 2020-09-07 18:49:27 1kFKKb-0000AY-5O SMTP connection from $238-245-247-190.fibertel.com.ar$ \[190.247.245.238\]:26281 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-09-08 17:16:05
109.132.116.56	attackbotsspam	Sep 8 10:47:06 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=109.132.116.56, lip=172.104.140.148, session=<4fcZYcmuaulthHQ4> Sep 8 10:47:12 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=109.132.116.56, lip=172.104.140.148, session=<14c3YcmubulthHQ4> Sep 8 10:47:12 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=109.132.116.56, lip=172.104.140.148, session= Sep 8 10:47:23 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=109.132.116.56, lip=172.104.140.148, session=<7cDfYcmud+lthHQ4> Sep 8 10:47:25 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=109.132.116.56, lip=172.104.140.14 ...	2020-09-08 17:23:27
24.172.60.138	attackspambots	Automatic report - Banned IP Access	2020-09-08 17:44:36

Recently Reported IPs

14.207.3.197	14.207.3.204	14.207.3.190	14.207.3.227
14.207.3.235	14.207.3.244	14.207.3.248	14.207.3.23
14.207.3.225	14.207.3.24	14.207.3.250	14.207.3.254
14.207.3.32	14.207.3.26	14.207.3.252	14.207.3.38
14.207.3.40	14.207.3.29	14.207.3.43	14.207.3.35