14.160.23.139 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Vietnam

Internet Service Provider: Vietnam Posts and Telecommunications Group

Hostname: unknown

Organization: VNPT Corp

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	postfix (unknown user, SPF fail or relay access denied)	2019-12-20 14:11:09
attackbots	2019-08-22 23:59:20 H=(static.vnpt.vn) [14.160.23.139]:36511 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11, 127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/14.160.23.139) 2019-08-22 23:59:20 H=(static.vnpt.vn) [14.160.23.139]:36511 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11, 127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/14.160.23.139) 2019-08-22 23:59:22 H=(static.vnpt.vn) [14.160.23.139]:36511 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4, 127.0.0.11) (https://www.spamhaus.org/query/ip/14.160.23.139) ...	2019-08-23 19:26:24

Type

Details

Datetime

attack

postfix (unknown user, SPF fail or relay access denied)

2019-12-20 14:11:09

attackbots

2019-08-22 23:59:20 H=(static.vnpt.vn) [14.160.23.139]:36511 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11, 127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/14.160.23.139)
2019-08-22 23:59:20 H=(static.vnpt.vn) [14.160.23.139]:36511 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11, 127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/14.160.23.139)
2019-08-22 23:59:22 H=(static.vnpt.vn) [14.160.23.139]:36511 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4, 127.0.0.11) (https://www.spamhaus.org/query/ip/14.160.23.139)
...

2019-08-23 19:26:24

Comments on same subnet:

IP	Type	Details	Datetime
14.160.23.159	attack	Attempt to login to microsoft account	2021-12-23 22:06:51
14.160.23.170	attackbots	failed_logins	2020-08-06 08:40:06
14.160.23.141	attack	1595567805 - 07/24/2020 07:16:45 Host: 14.160.23.141/14.160.23.141 Port: 445 TCP Blocked	2020-07-24 18:35:57
14.160.23.170	attackbotsspam	Dovecot Invalid User Login Attempt.	2020-07-24 15:05:26
14.160.23.170	attack	Dovecot Invalid User Login Attempt.	2020-06-27 02:11:27
14.160.23.159	attack	SMB Server BruteForce Attack	2020-06-25 18:38:54
14.160.23.170	attackbots	Dovecot Invalid User Login Attempt.	2020-05-08 01:25:19
14.160.23.211	attack	Unauthorized connection attempt from IP address 14.160.23.211 on Port 445(SMB)	2020-03-09 18:18:14
14.160.232.165	attack	Honeypot attack, port: 5555, PTR: static.vnpt.vn.	2020-03-07 23:57:24
14.160.238.45	attackbotsspam	Feb 18 05:00:38 host2 sshd[2732]: Address 14.160.238.45 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Feb 18 05:00:38 host2 sshd[2732]: Invalid user admin from 14.160.238.45 Feb 18 05:00:38 host2 sshd[2732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.160.238.45 Feb 18 05:00:40 host2 sshd[2732]: Failed password for invalid user admin from 14.160.238.45 port 53658 ssh2 Feb 18 05:00:41 host2 sshd[2732]: Connection closed by 14.160.238.45 [preauth] Feb 18 05:00:48 host2 sshd[3490]: Address 14.160.238.45 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Feb 18 05:00:48 host2 sshd[3490]: Invalid user admin from 14.160.238.45 Feb 18 05:00:48 host2 sshd[3490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.160.238.45 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.160.238.45	2020-02-19 02:54:54
14.160.236.218	attack	" "	2020-02-12 02:51:58

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.160.23.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10608
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.160.23.139.			IN	A

;; AUTHORITY SECTION:
.			2804	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019050601 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Tue May 07 01:31:10 +08 2019
;; MSG SIZE  rcvd: 117

Host info

139.23.160.14.in-addr.arpa domain name pointer static.vnpt.vn.

Nslookup info:

Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
139.23.160.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
81.22.45.252	attackspambots	08/02/2019-21:52:03.775377 81.22.45.252 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 79	2019-08-03 10:17:00
190.204.107.184	attack	445/tcp [2019-08-02]1pkt	2019-08-03 10:28:38
139.9.29.30	attackspambots	2019-08-03T00:38:06.366748abusebot-6.cloudsearch.cf sshd\[30731\]: Invalid user it from 139.9.29.30 port 57010	2019-08-03 10:36:46
106.52.26.30	attackspambots	$f2bV_matches_ltvn	2019-08-03 10:26:56
36.81.200.42	attackbots	445/tcp 445/tcp 445/tcp [2019-08-02]3pkt	2019-08-03 10:53:49
112.243.178.119	attackbotsspam	firewall-block, port(s): 23/tcp	2019-08-03 10:15:54
122.121.97.191	attack	firewall-block, port(s): 23/tcp	2019-08-03 10:46:35
89.35.39.194	attackbotsspam	08/02/2019-21:19:43.129068 89.35.39.194 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 95	2019-08-03 10:52:30
94.249.1.1	attack	23/tcp [2019-08-02]1pkt	2019-08-03 10:20:00
14.161.6.201	attackbots	Aug 2 22:20:26 pkdns2 sshd\[26903\]: Address 14.161.6.201 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Aug 2 22:20:26 pkdns2 sshd\[26903\]: Invalid user pi from 14.161.6.201Aug 2 22:20:26 pkdns2 sshd\[26905\]: Address 14.161.6.201 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Aug 2 22:20:26 pkdns2 sshd\[26905\]: Invalid user pi from 14.161.6.201Aug 2 22:20:28 pkdns2 sshd\[26905\]: Failed password for invalid user pi from 14.161.6.201 port 43126 ssh2Aug 2 22:20:28 pkdns2 sshd\[26903\]: Failed password for invalid user pi from 14.161.6.201 port 43128 ssh2 ...	2019-08-03 10:50:31
177.73.77.245	attack	Bruteforcing port 3389 (Remote Desktop) - Exceed maximum 10 attempts/hour	2019-08-03 11:05:30
144.202.34.120	attackspam	SSH invalid-user multiple login attempts	2019-08-03 10:55:17
134.209.155.239	attackspambots	Invalid user fake from 134.209.155.239 port 34816	2019-08-03 10:47:20
77.247.108.152	attack	08/02/2019-22:09:41.897239 77.247.108.152 Protocol: 17 ET SCAN Sipvicious User-Agent Detected (friendly-scanner)	2019-08-03 10:32:48
167.114.153.77	attackbots	frenzy	2019-08-03 10:42:08

Recently Reported IPs

209.97.186.86	49.76.14.175	188.114.30.125	89.86.175.106
89.120.27.33	181.167.114.85	105.230.56.172	116.212.131.90
148.231.113.228	102.118.117.203	189.36.145.109	1.246.27.161
39.187.135.188	210.211.101.200	79.166.146.234	126.40.96.92
200.6.188.2	5.189.160.21	121.118.240.12	96.114.188.117