Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Vietnam Posts and Telecommunications Group

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspambots
Unauthorised access (Jun 22) SRC=14.161.19.54 LEN=52 TTL=117 ID=19375 DF TCP DPT=445 WINDOW=8192 SYN
2019-06-22 15:22:21
Comments on same subnet:
IP Type Details Datetime
14.161.19.79 attack
1598327910 - 08/25/2020 05:58:30 Host: 14.161.19.79/14.161.19.79 Port: 445 TCP Blocked
...
2020-08-25 13:26:09
14.161.196.45 attackbots
Icarus honeypot on github
2020-08-03 15:37:37
14.161.197.21 attack
DATE:2020-05-12 23:11:17, IP:14.161.197.21, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)
2020-05-13 08:22:11
14.161.19.179 attackspam
20/4/15@08:12:48: FAIL: Alarm-Network address from=14.161.19.179
20/4/15@08:12:48: FAIL: Alarm-Network address from=14.161.19.179
...
2020-04-15 21:01:46
14.161.19.243 attack
$f2bV_matches
2020-03-25 15:29:05
14.161.19.20 attackbotsspam
IMAP
2020-02-24 00:03:28
14.161.19.132 attackspambots
445/tcp 445/tcp
[2020-01-13/02-10]2pkt
2020-02-11 05:23:52
14.161.19.51 attack
Unauthorized connection attempt from IP address 14.161.19.51 on Port 445(SMB)
2020-02-06 02:35:58
14.161.19.225 attackbotsspam
IMAP
2019-12-20 05:38:20
14.161.19.98 attackspam
Sep 29 10:51:10 ny01 sshd[11267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.19.98
Sep 29 10:51:12 ny01 sshd[11267]: Failed password for invalid user admin from 14.161.19.98 port 37382 ssh2
Sep 29 10:56:20 ny01 sshd[12486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.19.98
2019-09-29 23:09:31
14.161.19.168 attackbotsspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-20 05:23:23,283 INFO [shellcode_manager] (14.161.19.168) no match, writing hexdump (3fe902d36c8654465c231193cc2d7853 :2448919) - MS17010 (EternalBlue)
2019-07-21 16:14:05
14.161.19.134 attack
Brute force attempt
2019-07-16 09:56:31
14.161.19.98 attackspambots
Automatic report - Web App Attack
2019-06-24 17:08:38
14.161.19.98 attack
Jun 22 06:36:55 raspberrypi sshd\[3076\]: Invalid user test from 14.161.19.98 port 42922
Jun 22 06:36:55 raspberrypi sshd\[3076\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.19.98
Jun 22 06:36:58 raspberrypi sshd\[3076\]: Failed password for invalid user test from 14.161.19.98 port 42922 ssh2
Jun 22 06:38:43 raspberrypi sshd\[3085\]: Invalid user test from 14.161.19.98 port 59618
Jun 22 06:38:43 raspberrypi sshd\[3085\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.19.98
...
2019-06-22 13:45:29
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.161.19.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64422
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.161.19.54.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062001 1800 900 604800 86400

;; Query time: 4 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jun 21 07:16:14 CST 2019
;; MSG SIZE  rcvd: 116
Host info
54.19.161.14.in-addr.arpa domain name pointer static.vdc.com.vn.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
54.19.161.14.in-addr.arpa	name = static.vdc.com.vn.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
87.214.234.168 attack
firewall-block, port(s): 5555/tcp
2020-03-20 09:26:24
134.209.185.131 attack
Mar 19 22:03:06 firewall sshd[2331]: Failed password for invalid user mattermos from 134.209.185.131 port 59352 ssh2
Mar 19 22:09:32 firewall sshd[2683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.185.131  user=root
Mar 19 22:09:34 firewall sshd[2683]: Failed password for root from 134.209.185.131 port 53004 ssh2
...
2020-03-20 09:21:22
101.95.162.58 attackspambots
20/3/19@17:49:55: FAIL: Alarm-Network address from=101.95.162.58
20/3/19@17:49:56: FAIL: Alarm-Network address from=101.95.162.58
...
2020-03-20 09:36:52
94.21.243.204 attackspambots
SSH brute force
2020-03-20 10:02:33
171.220.243.128 attackbotsspam
Mar 20 01:55:20 lukav-desktop sshd\[32243\]: Invalid user ts4 from 171.220.243.128
Mar 20 01:55:20 lukav-desktop sshd\[32243\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.220.243.128
Mar 20 01:55:22 lukav-desktop sshd\[32243\]: Failed password for invalid user ts4 from 171.220.243.128 port 39552 ssh2
Mar 20 02:00:50 lukav-desktop sshd\[32309\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.220.243.128  user=root
Mar 20 02:00:52 lukav-desktop sshd\[32309\]: Failed password for root from 171.220.243.128 port 57682 ssh2
2020-03-20 09:41:02
10.255.37.137 attack
firewall-block, port(s): 18787/tcp
2020-03-20 09:33:24
54.37.136.213 attackspambots
2020-03-20T01:15:38.425593upcloud.m0sh1x2.com sshd[6444]: Invalid user ubuntu from 54.37.136.213 port 51448
2020-03-20 09:46:48
206.189.134.14 attack
206.189.134.14 - - [20/Mar/2020:00:32:17 +0100] "GET /wp-login.php HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
206.189.134.14 - - [20/Mar/2020:00:32:20 +0100] "POST /wp-login.php HTTP/1.1" 200 7362 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
206.189.134.14 - - [20/Mar/2020:00:32:21 +0100] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-03-20 10:02:16
103.208.34.199 attackbotsspam
Mar 19 23:12:01 vps647732 sshd[8087]: Failed password for root from 103.208.34.199 port 58440 ssh2
Mar 19 23:12:51 vps647732 sshd[8125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.208.34.199
...
2020-03-20 09:18:07
87.251.74.7 attackbots
firewall-block, port(s): 5523/tcp, 7312/tcp, 7777/tcp, 9954/tcp, 10000/tcp, 10050/tcp, 29999/tcp, 50100/tcp
2020-03-20 09:51:04
84.38.180.179 attack
Invalid user lusifen from 84.38.180.179 port 60106
2020-03-20 09:26:46
14.18.107.61 attack
SSH auth scanning - multiple failed logins
2020-03-20 10:01:56
222.186.175.151 attackbotsspam
2020-03-20T02:14:58.353151vps773228.ovh.net sshd[5666]: Failed password for root from 222.186.175.151 port 33778 ssh2
2020-03-20T02:15:01.541778vps773228.ovh.net sshd[5666]: Failed password for root from 222.186.175.151 port 33778 ssh2
2020-03-20T02:15:05.151674vps773228.ovh.net sshd[5666]: Failed password for root from 222.186.175.151 port 33778 ssh2
2020-03-20T02:15:07.977920vps773228.ovh.net sshd[5666]: Failed password for root from 222.186.175.151 port 33778 ssh2
2020-03-20T02:15:10.559739vps773228.ovh.net sshd[5666]: Failed password for root from 222.186.175.151 port 33778 ssh2
...
2020-03-20 09:22:22
178.128.168.87 attackbotsspam
SSH Brute Force
2020-03-20 09:52:02
91.134.140.242 attack
Mar 20 01:04:50 ourumov-web sshd\[8824\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.140.242  user=root
Mar 20 01:04:53 ourumov-web sshd\[8824\]: Failed password for root from 91.134.140.242 port 51768 ssh2
Mar 20 01:17:29 ourumov-web sshd\[9720\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.140.242  user=root
...
2020-03-20 09:43:33

Recently Reported IPs

145.234.87.71 142.44.158.48 91.188.179.222 87.135.45.207
80.234.42.196 18.76.195.163 68.183.179.113 220.205.5.148
90.125.54.244 45.71.208.65 18.246.120.218 194.35.248.22
210.56.60.135 107.102.116.180 108.178.61.61 23.89.100.170
112.243.135.166 66.70.231.227 119.113.254.46 66.57.55.210