14.160.39.222 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Vietnam Posts and Telecommunications Group

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Jul 19 01:45:55 Host-KLAX-C dovecot: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=14.160.39.222, lip=185.198.26.142, TLS: Disconnected, session=<+xoylMaqiqQOoCfe> ...	2020-07-19 23:42:40

Type

Details

Datetime

attackbots

Jul 19 01:45:55 Host-KLAX-C dovecot: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=14.160.39.222, lip=185.198.26.142, TLS: Disconnected, session=<+xoylMaqiqQOoCfe>
...

2020-07-19 23:42:40

Comments on same subnet:

IP	Type	Details	Datetime
14.160.39.26	attack	Unauthorized connection attempt from IP address 14.160.39.26 on port 993	2020-09-14 03:03:30
14.160.39.26	attack	Dovecot Invalid User Login Attempt.	2020-09-13 19:01:04
14.160.39.26	attack	CMS (WordPress or Joomla) login attempt.	2020-09-01 18:26:43
14.160.39.26	attack	Dovecot Invalid User Login Attempt.	2020-08-04 13:59:51
14.160.39.18	attackbots	(imapd) Failed IMAP login from 14.160.39.18 (VN/Vietnam/static.vnpt.vn): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 16 08:20:43 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=14.160.39.18, lip=5.63.12.44, TLS, session=	2020-07-16 17:26:53
14.160.39.18	attack	Dovecot Invalid User Login Attempt.	2020-07-13 17:49:28
14.160.39.26	attackbots	(imapd) Failed IMAP login from 14.160.39.26 (VN/Vietnam/static.vnpt.vn): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 12 00:36:05 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=14.160.39.26, lip=5.63.12.44, TLS, session=	2020-07-12 06:22:21
14.160.39.138	attackspam	Dovecot Invalid User Login Attempt.	2020-07-04 10:52:36
14.160.39.138	attackspam	Dovecot Invalid User Login Attempt.	2020-05-28 15:01:02
14.160.39.138	attack	Dovecot Invalid User Login Attempt.	2020-04-25 17:17:29
14.160.39.138	attackbotsspam	Dovecot Invalid User Login Attempt.	2020-04-24 02:00:00
14.160.39.138	attackspambots	Dovecot Invalid User Login Attempt.	2020-04-19 12:01:37
14.160.39.154	attackbotsspam	Mar 5 21:58:26 sigma sshd\[23720\]: Invalid user ubnt from 14.160.39.154Mar 5 21:58:29 sigma sshd\[23720\]: Failed password for invalid user ubnt from 14.160.39.154 port 53419 ssh2 ...	2020-03-06 07:23:29
14.160.39.106	attackspam	Invalid user admin from 14.160.39.106 port 55310	2020-01-22 00:06:09
14.160.39.106	attackspam	SSH bruteforce (Triggered fail2ban)	2019-12-21 07:56:14

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.160.39.222
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5667
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.160.39.222.			IN	A

;; AUTHORITY SECTION:
.			330	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020071900 1800 900 604800 86400

;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jul 19 23:42:34 CST 2020
;; MSG SIZE  rcvd: 117

Host info

222.39.160.14.in-addr.arpa domain name pointer static.vnpt.vn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
222.39.160.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
123.190.236.241	attackbots	23/tcp 23/tcp 2323/tcp [2019-07-17/18]3pkt	2019-07-19 22:02:25
178.17.174.10	attackbots	3389BruteforceFW21	2019-07-19 21:37:38
70.24.197.243	attack	Jul 15 01:16:56 srv01 sshd[27510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=qubcpq0634w-lp130-04-70-24-197-243.dsl.bell.ca user=jira Jul 15 01:16:58 srv01 sshd[27510]: Failed password for jira from 70.24.197.243 port 54309 ssh2 Jul 15 01:17:01 srv01 sshd[27510]: Failed password for jira from 70.24.197.243 port 54309 ssh2 Jul 15 01:17:02 srv01 sshd[27510]: Failed password for jira from 70.24.197.243 port 54309 ssh2 Jul 15 01:17:05 srv01 sshd[27510]: Failed password for jira from 70.24.197.243 port 54309 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=70.24.197.243	2019-07-19 22:29:20
139.162.121.165	attackbotsspam	8080/tcp 8080/tcp 8080/tcp... [2019-05-18/07-19]88pkt,1pt.(tcp)	2019-07-19 22:17:15
24.188.239.163	attackbotsspam	SSH/22 MH Probe, BF, Hack -	2019-07-19 22:33:36
183.131.82.99	attackbots	Triggered by Fail2Ban at Ares web server	2019-07-19 22:27:24
31.146.1.198	attack	Jul 19 08:49:02 srv-4 sshd\[27987\]: Invalid user admin from 31.146.1.198 Jul 19 08:49:02 srv-4 sshd\[27987\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.146.1.198 Jul 19 08:49:04 srv-4 sshd\[27987\]: Failed password for invalid user admin from 31.146.1.198 port 52782 ssh2 ...	2019-07-19 21:41:22
82.162.61.103	attackbotsspam	445/tcp 445/tcp 445/tcp... [2019-05-28/07-19]14pkt,1pt.(tcp)	2019-07-19 22:39:41
151.80.166.73	attack	st-nyc1-01 recorded 3 login violations from 151.80.166.73 and was blocked at 2019-07-19 14:02:59. 151.80.166.73 has been blocked on 46 previous occasions. 151.80.166.73's first attempt was recorded at 2019-07-19 01:48:53	2019-07-19 22:05:30
89.133.103.216	attack	Jul 19 14:02:55 mail sshd\[23630\]: Invalid user luo from 89.133.103.216\ Jul 19 14:02:57 mail sshd\[23630\]: Failed password for invalid user luo from 89.133.103.216 port 37126 ssh2\ Jul 19 14:07:35 mail sshd\[23673\]: Invalid user odoo from 89.133.103.216\ Jul 19 14:07:37 mail sshd\[23673\]: Failed password for invalid user odoo from 89.133.103.216 port 33334 ssh2\ Jul 19 14:12:14 mail sshd\[23755\]: Invalid user research from 89.133.103.216\ Jul 19 14:12:16 mail sshd\[23755\]: Failed password for invalid user research from 89.133.103.216 port 57778 ssh2\	2019-07-19 21:40:31
93.92.250.5	attackspam	Repeated attempts against wp-login	2019-07-19 22:44:42
203.195.155.100	attackbotsspam	Jul 19 07:07:27 localhost sshd\[34657\]: Invalid user klaus from 203.195.155.100 port 58502 Jul 19 07:07:27 localhost sshd\[34657\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.155.100 ...	2019-07-19 21:53:48
92.46.110.2	attackbots	445/tcp 445/tcp [2019-07-11/19]2pkt	2019-07-19 22:28:25
157.230.248.121	attackspambots	WordPress wp-login brute force :: 157.230.248.121 0.104 BYPASS [19/Jul/2019:22:53:57 1000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-07-19 21:43:35
190.86.175.1	attackbots	445/tcp 445/tcp 445/tcp... [2019-05-19/07-19]13pkt,1pt.(tcp)	2019-07-19 22:31:16

Recently Reported IPs

13.233.188.4	185.81.94.50	113.55.118.203	203.171.107.60
220.169.108.32	2.187.6.110	190.72.5.222	155.155.49.213
190.15.177.84	179.111.58.149	36.56.110.114	177.170.15.224
122.254.0.114	122.116.222.41	73.189.130.241	23.105.196.142
14.161.28.19	51.255.29.195	154.0.51.149	39.101.185.232