14.161.45.253 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Vietnam Posts and Telecommunications Group

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Jul 5 17:26:58 Host-KLAX-C dovecot: imap-login: Disconnected (auth failed, 1 attempts in 9 secs): user=, method=PLAIN, rip=14.161.45.253, lip=185.198.26.142, TLS, session= ...	2020-07-06 08:07:12
attackspambots	Oct 7 13:42:52 dev sshd\[10939\]: Invalid user admin from 14.161.45.253 port 44058 Oct 7 13:42:52 dev sshd\[10939\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.253 Oct 7 13:42:54 dev sshd\[10939\]: Failed password for invalid user admin from 14.161.45.253 port 44058 ssh2	2019-10-07 23:54:55

Type

Details

Datetime

attack

Jul  5 17:26:58 Host-KLAX-C dovecot: imap-login: Disconnected (auth failed, 1 attempts in 9 secs): user=, method=PLAIN, rip=14.161.45.253, lip=185.198.26.142, TLS, session=
...

2020-07-06 08:07:12

attackspambots

Oct  7 13:42:52 dev sshd\[10939\]: Invalid user admin from 14.161.45.253 port 44058
Oct  7 13:42:52 dev sshd\[10939\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.253
Oct  7 13:42:54 dev sshd\[10939\]: Failed password for invalid user admin from 14.161.45.253 port 44058 ssh2

2019-10-07 23:54:55

Comments on same subnet:

IP	Type	Details	Datetime
14.161.45.187	attack	(sshd) Failed SSH login from 14.161.45.187 (VN/Vietnam/static.vnpt.vn): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 11 15:23:10 optimus sshd[3270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 user=root Oct 11 15:23:11 optimus sshd[3270]: Failed password for root from 14.161.45.187 port 51020 ssh2 Oct 11 15:55:09 optimus sshd[31504]: Invalid user test123 from 14.161.45.187 Oct 11 15:55:09 optimus sshd[31504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 Oct 11 15:55:10 optimus sshd[31504]: Failed password for invalid user test123 from 14.161.45.187 port 35170 ssh2	2020-10-12 04:09:04
14.161.45.187	attackbots	Oct 11 16:13:39 mx sshd[1351830]: Failed password for root from 14.161.45.187 port 47020 ssh2 Oct 11 16:14:33 mx sshd[1351838]: Invalid user uu from 14.161.45.187 port 52915 Oct 11 16:14:33 mx sshd[1351838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 Oct 11 16:14:33 mx sshd[1351838]: Invalid user uu from 14.161.45.187 port 52915 Oct 11 16:14:35 mx sshd[1351838]: Failed password for invalid user uu from 14.161.45.187 port 52915 ssh2 ...	2020-10-11 20:07:57
14.161.45.187	attackspam	$f2bV_matches	2020-10-11 12:07:15
14.161.45.187	attack	2020-10-10 16:10:30.176107-0500 localhost sshd[48225]: Failed password for root from 14.161.45.187 port 36078 ssh2	2020-10-11 05:31:23
14.161.45.187	attackbots	Invalid user tester from 14.161.45.187 port 35104	2020-09-21 02:03:57
14.161.45.187	attackbots	Invalid user tester from 14.161.45.187 port 35104	2020-09-20 18:04:22
14.161.45.187	attackbotsspam	Aug 17 07:12:39 PorscheCustomer sshd[28388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 Aug 17 07:12:41 PorscheCustomer sshd[28388]: Failed password for invalid user lisa from 14.161.45.187 port 36779 ssh2 Aug 17 07:14:24 PorscheCustomer sshd[28481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 ...	2020-08-17 13:29:25
14.161.45.187	attack	Connection to SSH Honeypot - Detected by HoneypotDB	2020-08-02 13:25:02
14.161.45.187	attackspam	Jul 23 16:54:26 Invalid user yxy from 14.161.45.187 port 40629	2020-07-23 23:09:34
14.161.45.187	attackspam	Jul 21 23:45:10 abendstille sshd\[7566\]: Invalid user mm from 14.161.45.187 Jul 21 23:45:10 abendstille sshd\[7566\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 Jul 21 23:45:12 abendstille sshd\[7566\]: Failed password for invalid user mm from 14.161.45.187 port 41466 ssh2 Jul 21 23:49:06 abendstille sshd\[11714\]: Invalid user sda from 14.161.45.187 Jul 21 23:49:06 abendstille sshd\[11714\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 ...	2020-07-22 06:38:30
14.161.45.187	attack	2020-07-21T09:08:01.919873afi-git.jinr.ru sshd[15602]: Invalid user gitolite from 14.161.45.187 port 57538 2020-07-21T09:08:01.923118afi-git.jinr.ru sshd[15602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 2020-07-21T09:08:01.919873afi-git.jinr.ru sshd[15602]: Invalid user gitolite from 14.161.45.187 port 57538 2020-07-21T09:08:03.706524afi-git.jinr.ru sshd[15602]: Failed password for invalid user gitolite from 14.161.45.187 port 57538 ssh2 2020-07-21T09:10:56.435301afi-git.jinr.ru sshd[16384]: Invalid user guest from 14.161.45.187 port 49604 ...	2020-07-21 14:28:04
14.161.45.187	attackspam	SSH Brute-Forcing (server1)	2020-06-28 15:50:13
14.161.45.187	attackspambots	Jun 19 12:41:20 vps639187 sshd\[26885\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 user=root Jun 19 12:41:21 vps639187 sshd\[26885\]: Failed password for root from 14.161.45.187 port 60281 ssh2 Jun 19 12:44:41 vps639187 sshd\[26937\]: Invalid user ustin from 14.161.45.187 port 60197 Jun 19 12:44:41 vps639187 sshd\[26937\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 ...	2020-06-19 18:58:42
14.161.45.179	attackbotsspam	Dovecot Invalid User Login Attempt.	2020-06-10 02:40:23
14.161.45.187	attack	145. On Jun 7 2020 experienced a Brute Force SSH login attempt -> 80 unique times by 14.161.45.187.	2020-06-08 08:27:32

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.161.45.253
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25220
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.161.45.253.			IN	A

;; AUTHORITY SECTION:
.			341	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100701 1800 900 604800 86400

;; Query time: 101 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 07 23:54:49 CST 2019
;; MSG SIZE  rcvd: 117

Host info

253.45.161.14.in-addr.arpa domain name pointer static.vnpt.vn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
253.45.161.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.75.218.71	attack	Jul 4 00:12:26 server sshd[8885]: Failed password for invalid user mcserver from 106.75.218.71 port 55626 ssh2 Jul 4 00:15:35 server sshd[12398]: Failed password for invalid user winter from 106.75.218.71 port 47992 ssh2 Jul 4 00:18:42 server sshd[15736]: Failed password for invalid user production from 106.75.218.71 port 40356 ssh2	2020-07-04 06:53:32
114.104.135.127	attackspambots	Jul 3 22:57:36 srv01 postfix/smtpd\[17412\]: warning: unknown\[114.104.135.127\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 3 22:57:47 srv01 postfix/smtpd\[17412\]: warning: unknown\[114.104.135.127\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 3 22:58:03 srv01 postfix/smtpd\[17412\]: warning: unknown\[114.104.135.127\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 3 22:58:21 srv01 postfix/smtpd\[17412\]: warning: unknown\[114.104.135.127\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 3 22:58:32 srv01 postfix/smtpd\[17412\]: warning: unknown\[114.104.135.127\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-07-04 06:58:52
185.143.75.81	attackbotsspam	2020-07-04T00:36:09.246272www postfix/smtpd[5909]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2020-07-04T00:36:34.259541www postfix/smtpd[5909]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2020-07-04T00:36:55.409406www postfix/smtpd[5909]: warning: unknown[185.143.75.81]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-07-04 06:41:04
137.117.134.83	attackspam	Lines containing failures of 137.117.134.83 Jul 1 01:52:01 cdb sshd[17995]: Invalid user hl from 137.117.134.83 port 52578 Jul 1 01:52:01 cdb sshd[17995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.117.134.83 Jul 1 01:52:03 cdb sshd[17995]: Failed password for invalid user hl from 137.117.134.83 port 52578 ssh2 Jul 1 01:52:03 cdb sshd[17995]: Received disconnect from 137.117.134.83 port 52578:11: Bye Bye [preauth] Jul 1 01:52:03 cdb sshd[17995]: Disconnected from invalid user hl 137.117.134.83 port 52578 [preauth] Jul 1 02:07:54 cdb sshd[20039]: Invalid user wordpress from 137.117.134.83 port 37922 Jul 1 02:07:54 cdb sshd[20039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.117.134.83 Jul 1 02:07:56 cdb sshd[20039]: Failed password for invalid user wordpress from 137.117.134.83 port 37922 ssh2 Jul 1 02:07:56 cdb sshd[20039]: Received disconnect from 137.117.134.83 por........ ------------------------------	2020-07-04 07:20:09
142.134.130.112	attack	1593806506 - 07/03/2020 22:01:46 Host: 142.134.130.112/142.134.130.112 Port: 445 TCP Blocked	2020-07-04 06:40:13
125.160.182.243	attack	IMAP attempted sync	2020-07-04 06:53:15
175.144.206.42	attackbotsspam	Automatic report - Port Scan	2020-07-04 06:47:11
118.163.135.17	attack	(imapd) Failed IMAP login from 118.163.135.17 (TW/Taiwan/118-163-135-17.HINET-IP.hinet.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 4 00:31:40 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 4 secs): user=, method=PLAIN, rip=118.163.135.17, lip=5.63.12.44, session=	2020-07-04 06:50:39
112.85.42.200	attack	Jul 4 01:07:23 abendstille sshd\[31249\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.200 user=root Jul 4 01:07:25 abendstille sshd\[31249\]: Failed password for root from 112.85.42.200 port 39518 ssh2 Jul 4 01:07:45 abendstille sshd\[31619\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.200 user=root Jul 4 01:07:47 abendstille sshd\[31619\]: Failed password for root from 112.85.42.200 port 5547 ssh2 Jul 4 01:07:50 abendstille sshd\[31619\]: Failed password for root from 112.85.42.200 port 5547 ssh2 ...	2020-07-04 07:12:54
199.249.230.165	attack	199.249.230.165 - - \[03/Jul/2020:22:01:34 +0200\] "GET /wp-json/wp/v2/users/6 HTTP/1.1" 404 123 "-" "Mozilla/5.0 $Windows NT 10.0\; Win64\; x64\; rv:68.0$ Gecko/20100101 Firefox/68.0" 199.249.230.165 - - \[03/Jul/2020:22:01:35 +0200\] "GET /wp-json/wp/v2/users/7 HTTP/1.1" 404 123 "-" "Mozilla/5.0 $Windows NT 10.0\; Win64\; x64\; rv:68.0$ Gecko/20100101 Firefox/68.0" 199.249.230.165 - - \[03/Jul/2020:22:01:36 +0200\] "GET /wp-json/wp/v2/users/8 HTTP/1.1" 404 123 "-" "Mozilla/5.0 $Windows NT 10.0\; Win64\; x64\; rv:68.0$ Gecko/20100101 Firefox/68.0" 199.249.230.165 - - \[03/Jul/2020:22:01:36 +0200\] "GET /wp-json/wp/v2/users/9 HTTP/1.1" 404 123 "-" "Mozilla/5.0 $Windows NT 10.0\; Win64\; x64\; rv:68.0$ Gecko/20100101 Firefox/68.0" ...	2020-07-04 06:56:31
71.43.31.237	attack	(mod_security) mod_security (id:230011) triggered by 71.43.31.237 (US/United States/rrcs-71-43-31-237.se.biz.rr.com): 5 in the last 3600 secs	2020-07-04 07:21:37
177.136.39.254	attackbots	Jul 4 00:19:27 sip sshd[830224]: Invalid user sll from 177.136.39.254 port 65534 Jul 4 00:19:29 sip sshd[830224]: Failed password for invalid user sll from 177.136.39.254 port 65534 ssh2 Jul 4 00:22:12 sip sshd[830250]: Invalid user idc from 177.136.39.254 port 9532 ...	2020-07-04 06:44:24
194.26.29.33	attackspam	Jul 4 00:51:02 debian-2gb-nbg1-2 kernel: \[16075283.207902\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=194.26.29.33 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=31343 PROTO=TCP SPT=55864 DPT=1122 WINDOW=1024 RES=0x00 SYN URGP=0	2020-07-04 07:11:05
71.76.140.36	attackbots	Unauthorized connection attempt from IP address 71.76.140.36 on Port 445(SMB)	2020-07-04 06:54:04
200.89.124.151	attackspambots	Unauthorized connection attempt from IP address 200.89.124.151 on Port 445(SMB)	2020-07-04 07:06:16

Recently Reported IPs

190.48.96.15	195.37.211.40	103.48.25.59	151.101.129.57
37.114.131.161	31.21.40.179	91.96.25.235	110.93.248.170
167.71.59.12	79.133.107.153	191.249.57.241	95.128.242.174
35.236.153.13	52.164.218.220	195.239.118.162	13.54.136.1
41.38.109.132	118.248.15.61	150.109.231.12	106.208.133.124