14.207.4.145 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
14.207.43.165	attackspambots	TCP (SYN) 14.207.43.165:6483 -> port 2323, len 44	2020-09-11 01:57:02
14.207.43.165	attack	Telnet/23 MH Probe, Scan, BF, Hack -	2020-09-10 17:18:54
14.207.43.165	attackbotsspam	SP-Scan 6227:23 detected 2020.09.09 11:04:53 blocked until 2020.10.29 03:07:40	2020-09-10 07:52:06
14.207.44.88	attackbotsspam	Sql/code injection probe	2020-06-25 07:37:18
14.207.46.220	attack	1586436916 - 04/09/2020 14:55:16 Host: 14.207.46.220/14.207.46.220 Port: 445 TCP Blocked	2020-04-10 05:54:40
14.207.43.158	attackspam	Unauthorized connection attempt from IP address 14.207.43.158 on Port 445(SMB)	2020-04-01 19:49:21
14.207.43.232	attackbots	1584434416 - 03/17/2020 09:40:16 Host: 14.207.43.232/14.207.43.232 Port: 445 TCP Blocked	2020-03-18 00:54:51
14.207.46.177	attackbotsspam	2020-03-1304:53:091jCbNk-0003DA-Dj\<=info@whatsup2013.chH=$localhost$[14.207.46.177]:41254P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2402id=181DABF8F32709BA66632A92665F8666@whatsup2013.chT="fromDarya"forwarmnightswithyou@protonmail.comsulaiman.ay145212@gmail.com2020-03-1304:52:341jCbNB-0003Al-E5\<=info@whatsup2013.chH=$localhost$[113.172.223.107]:48066P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2396id=6164D2818A5E70C31F1A53EB1F2C114A@whatsup2013.chT="fromDarya"fordonehadenough@gmail.comxavior.j.suarez.52511@gmail.com2020-03-1304:53:221jCbNx-0003EM-SB\<=info@whatsup2013.chH=$localhost$[14.186.226.226]:49779P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2428id=F2F7411219CDE3508C89C0788CE75291@whatsup2013.chT="fromDarya"forjoseph_b55@yahoo.comakiff786@icloud.com2020-03-1304:52:311jCbMi-00039A-R1\<=info@whatsup2013.chH=$localhost$[197.251.224.136]:55287P=esmtpsaX	2020-03-13 15:29:29
14.207.41.233	attack	Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools	2020-01-31 14:26:04
14.207.41.149	attackbots	Unauthorized connection attempt from IP address 14.207.41.149 on Port 445(SMB)	2020-01-24 06:15:01
14.207.41.9	attack	Invalid user admin from 14.207.41.9 port 51850	2020-01-19 02:52:58
14.207.41.9	attackspam	Invalid user admin from 14.207.41.9 port 51850	2020-01-18 04:48:57
14.207.42.89	attackspambots	2019-12-29 23:48:56 plain_virtual_exim authenticator failed for mx-ll-14.207.42-89.dynamic.3bb.co.th ([127.0.0.1]) [14.207.42.89]: 535 Incorrect authentication data ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.207.42.89	2019-12-30 08:21:41
14.207.40.232	attackbots	1577041415 - 12/22/2019 20:03:35 Host: 14.207.40.232/14.207.40.232 Port: 445 TCP Blocked	2019-12-23 05:17:55
14.207.42.142	attack	Lines containing failures of 14.207.42.142 2019-11-04 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.207.42.142	2019-11-05 06:48:58

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.207.4.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51255
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;14.207.4.145.			IN	A

;; AUTHORITY SECTION:
.			538	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 13:36:20 CST 2022
;; MSG SIZE  rcvd: 105

Host info

145.4.207.14.in-addr.arpa domain name pointer mx-ll-14.207.4-145.dynamic.3bb.co.th.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
145.4.207.14.in-addr.arpa	name = mx-ll-14.207.4-145.dynamic.3bb.co.th.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
103.248.83.249	attackspam	Feb 5 05:50:10 silence02 sshd[28601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.248.83.249 Feb 5 05:50:13 silence02 sshd[28601]: Failed password for invalid user hayden from 103.248.83.249 port 38262 ssh2 Feb 5 05:53:36 silence02 sshd[28836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.248.83.249	2020-02-05 14:32:15
159.65.174.81	attackspam	Unauthorized connection attempt detected from IP address 159.65.174.81 to port 8452 [J]	2020-02-05 14:11:56
46.246.63.6	attackbots	Scanned 1 times in the last 24 hours on port 22	2020-02-05 14:03:52
222.186.30.167	attackspambots	2020-02-05T07:21:56.708518scmdmz1 sshd[2311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.167 user=root 2020-02-05T07:21:58.848723scmdmz1 sshd[2311]: Failed password for root from 222.186.30.167 port 60010 ssh2 2020-02-05T07:22:01.625960scmdmz1 sshd[2311]: Failed password for root from 222.186.30.167 port 60010 ssh2 2020-02-05T07:21:56.708518scmdmz1 sshd[2311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.167 user=root 2020-02-05T07:21:58.848723scmdmz1 sshd[2311]: Failed password for root from 222.186.30.167 port 60010 ssh2 2020-02-05T07:22:01.625960scmdmz1 sshd[2311]: Failed password for root from 222.186.30.167 port 60010 ssh2 2020-02-05T07:21:56.708518scmdmz1 sshd[2311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.167 user=root 2020-02-05T07:21:58.848723scmdmz1 sshd[2311]: Failed password for root from 222.186.30.167 port 60010 ssh2 2020-02-0	2020-02-05 14:28:33
119.29.133.210	attack	Feb 4 20:09:11 sachi sshd\[21202\]: Invalid user admin from 119.29.133.210 Feb 4 20:09:11 sachi sshd\[21202\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.133.210 Feb 4 20:09:13 sachi sshd\[21202\]: Failed password for invalid user admin from 119.29.133.210 port 37606 ssh2 Feb 4 20:13:32 sachi sshd\[21567\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.133.210 user=root Feb 4 20:13:34 sachi sshd\[21567\]: Failed password for root from 119.29.133.210 port 57256 ssh2	2020-02-05 14:15:12
43.229.89.113	attackbotsspam	DATE:2020-02-05 05:52:21, IP:43.229.89.113, PORT:1433 MSSQL brute force auth on honeypot server (epe-honey1-hq)	2020-02-05 14:43:28
211.226.54.253	attack	Feb 5 05:53:55 grey postfix/smtpd\[27214\]: NOQUEUE: reject: RCPT from unknown\[211.226.54.253\]: 554 5.7.1 Service unavailable\; Client host \[211.226.54.253\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=211.226.54.253\; from=\ to=\ proto=ESMTP helo=\<\[211.226.54.253\]\> ...	2020-02-05 14:20:13
94.25.235.66	attack	Automatic report - Port Scan	2020-02-05 14:30:23
116.97.30.204	attackbots	1580878454 - 02/05/2020 05:54:14 Host: 116.97.30.204/116.97.30.204 Port: 445 TCP Blocked	2020-02-05 14:07:48
139.155.55.30	attack	Feb 5 02:54:45 vps46666688 sshd[5031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.55.30 Feb 5 02:54:47 vps46666688 sshd[5031]: Failed password for invalid user shonta from 139.155.55.30 port 51042 ssh2 ...	2020-02-05 14:06:44
13.59.252.86	attack	5x Failed Password	2020-02-05 14:31:25
103.77.158.118	attackspambots	Hacking	2020-02-05 14:29:54
117.193.245.29	attackbotsspam	$f2bV_matches	2020-02-05 14:25:59
117.0.197.119	attackbotsspam	Unauthorized connection attempt detected from IP address 117.0.197.119 to port 80 [J]	2020-02-05 14:15:42
137.59.162.170	attackspam	Feb 5 05:53:34 ArkNodeAT sshd\[24629\]: Invalid user webmaster from 137.59.162.170 Feb 5 05:53:34 ArkNodeAT sshd\[24629\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.59.162.170 Feb 5 05:53:36 ArkNodeAT sshd\[24629\]: Failed password for invalid user webmaster from 137.59.162.170 port 54007 ssh2	2020-02-05 14:28:13

Recently Reported IPs

14.207.4.134	14.207.4.16	14.207.4.143	14.207.4.168
14.207.4.159	14.207.4.163	14.207.4.160	229.190.67.219
14.207.4.15	14.207.4.172	14.207.4.187	14.207.4.195
14.207.4.188	14.207.4.174	14.207.4.178	14.207.4.202
14.207.4.21	14.207.4.23	14.207.4.230	14.207.4.226