14.161.35.139 - IPInfo

Basic Info

City: Ho Chi Minh City

Region: Ho Chi Minh

Country: Vietnam

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
14.161.35.9	attackbots	2019-07-08 03:39:23 1hkIck-000064-GQ SMTP connection from \(static.vnpt.vn\) \[14.161.35.9\]:34929 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-08 03:39:30 1hkIcr-00006C-MN SMTP connection from \(static.vnpt.vn\) \[14.161.35.9\]:35013 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-08 03:39:34 1hkIcv-00006H-L4 SMTP connection from \(static.vnpt.vn\) \[14.161.35.9\]:35049 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-02-04 23:17:37
14.161.35.9	attackbotsspam	Trying to deliver email spam, but blocked by RBL	2019-07-03 17:25:32
14.161.35.88	attackspambots	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-06-27 12:46:58,958 INFO [amun_request_handler] PortScan Detected on Port: 445 (14.161.35.88)	2019-06-27 23:40:04

Type

Details

Datetime

14.161.35.9

attackbots

2019-07-08 03:39:23 1hkIck-000064-GQ SMTP connection from \(static.vnpt.vn\) \[14.161.35.9\]:34929 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-07-08 03:39:30 1hkIcr-00006C-MN SMTP connection from \(static.vnpt.vn\) \[14.161.35.9\]:35013 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-07-08 03:39:34 1hkIcv-00006H-L4 SMTP connection from \(static.vnpt.vn\) \[14.161.35.9\]:35049 I=\[193.107.88.166\]:25 closed by DROP in ACL
...

2020-02-04 23:17:37

14.161.35.9

attackbotsspam

Trying to deliver email spam, but blocked by RBL

2019-07-03 17:25:32

14.161.35.88

attackspambots

@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-06-27 12:46:58,958 INFO [amun_request_handler] PortScan Detected on Port: 445 (14.161.35.88)

2019-06-27 23:40:04

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.161.35.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11401
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;14.161.35.139.			IN	A

;; AUTHORITY SECTION:
.			488	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2021091001 1800 900 604800 86400

;; Query time: 26 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Sep 11 12:12:18 CST 2021
;; MSG SIZE  rcvd: 106

Host info

139.35.161.14.in-addr.arpa domain name pointer static.vnpt.vn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
139.35.161.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
51.68.44.158	attack	Invalid user uucp from 51.68.44.158 port 47952	2019-12-26 04:43:28
114.104.1.138	attack	RDP Bruteforce	2019-12-26 05:08:12
197.155.234.157	attack	2019-12-25T16:02:02.253973stark.klein-stark.info sshd\[22322\]: Invalid user gaarder from 197.155.234.157 port 35194 2019-12-25T16:02:02.262075stark.klein-stark.info sshd\[22322\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.155.234.157 2019-12-25T16:02:04.407030stark.klein-stark.info sshd\[22322\]: Failed password for invalid user gaarder from 197.155.234.157 port 35194 ssh2 ...	2019-12-26 04:42:49
46.229.168.153	attackspam	Automated report (2019-12-25T19:35:46+00:00). Scraper detected at this address.	2019-12-26 04:47:08
112.85.42.94	attack	Dec 25 20:19:01 game-panel sshd[2562]: Failed password for root from 112.85.42.94 port 53346 ssh2 Dec 25 20:19:04 game-panel sshd[2562]: Failed password for root from 112.85.42.94 port 53346 ssh2 Dec 25 20:19:06 game-panel sshd[2562]: Failed password for root from 112.85.42.94 port 53346 ssh2	2019-12-26 04:48:42
88.250.132.68	attack	Telnet/23 MH Probe, BF, Hack -	2019-12-26 05:11:39
93.192.246.128	attack	SSH/22 MH Probe, BF, Hack -	2019-12-26 04:46:38
92.222.82.169	attackspambots	Dec 25 21:33:35 s1 sshd\[5001\]: Invalid user system from 92.222.82.169 port 48036 Dec 25 21:33:35 s1 sshd\[5001\]: Failed password for invalid user system from 92.222.82.169 port 48036 ssh2 Dec 25 21:35:48 s1 sshd\[5868\]: Invalid user test from 92.222.82.169 port 43684 Dec 25 21:35:48 s1 sshd\[5868\]: Failed password for invalid user test from 92.222.82.169 port 43684 ssh2 Dec 25 21:37:59 s1 sshd\[5950\]: Invalid user ftpuser from 92.222.82.169 port 39332 Dec 25 21:37:59 s1 sshd\[5950\]: Failed password for invalid user ftpuser from 92.222.82.169 port 39332 ssh2 ...	2019-12-26 05:05:34
106.52.106.61	attack	Dec 25 16:49:54 MK-Soft-VM7 sshd[9394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.106.61 Dec 25 16:49:56 MK-Soft-VM7 sshd[9394]: Failed password for invalid user jpmorgan from 106.52.106.61 port 53638 ssh2 ...	2019-12-26 04:43:12
180.107.54.27	attack	$f2bV_matches	2019-12-26 04:51:06
122.51.245.135	attackspambots	2019-12-25T16:49:25.103329vps751288.ovh.net sshd\[26066\]: Invalid user systemadministrator from 122.51.245.135 port 54888 2019-12-25T16:49:25.112473vps751288.ovh.net sshd\[26066\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.245.135 2019-12-25T16:49:27.553820vps751288.ovh.net sshd\[26066\]: Failed password for invalid user systemadministrator from 122.51.245.135 port 54888 ssh2 2019-12-25T16:51:01.363264vps751288.ovh.net sshd\[26070\]: Invalid user test from 122.51.245.135 port 35876 2019-12-25T16:51:01.371611vps751288.ovh.net sshd\[26070\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.245.135	2019-12-26 04:44:13
188.166.228.244	attack	Automatic report - Banned IP Access	2019-12-26 04:45:04
37.49.230.74	attackbots	\[2019-12-25 15:47:46\] NOTICE\[2839\] chan_sip.c: Registration from '"3300" \' failed for '37.49.230.74:5325' - Wrong password \[2019-12-25 15:47:46\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-25T15:47:46.142-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="3300",SessionID="0x7f0fb40f7cf8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.230.74/5325",Challenge="5b4bb7d5",ReceivedChallenge="5b4bb7d5",ReceivedHash="b6dbe0527336314a6f290ae399934d61" \[2019-12-25 15:47:46\] NOTICE\[2839\] chan_sip.c: Registration from '"3300" \' failed for '37.49.230.74:5325' - Wrong password \[2019-12-25 15:47:46\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-25T15:47:46.303-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="3300",SessionID="0x7f0fb4734bf8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/3	2019-12-26 05:00:42
37.59.51.51	attackbots	Automatic report - SSH Brute-Force Attack	2019-12-26 05:03:01
167.71.205.13	attack	Dec 25 20:18:29 debian-2gb-nbg1-2 kernel: \[954242.693612\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=167.71.205.13 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x40 TTL=242 ID=54393 PROTO=TCP SPT=32767 DPT=8545 WINDOW=1024 RES=0x00 SYN URGP=0	2019-12-26 04:35:33

Recently Reported IPs

113.190.242.228	113.169.91.147	118.70.28.233	113.160.225.42
113.161.144.115	14.161.2.49	115.79.219.111	113.190.44.50
45.122.251.74	101.53.38.68	14.238.82.10	113.161.162.93
118.69.109.78	27.74.253.123	27.74.250.209	118.70.67.118
113.161.41.224	27.72.103.208	123.25.85.194	14.232.162.143