14.161.45.78 - IPInfo

Basic Info

City: Ho Chi Minh City

Region: Ho Chi Minh

Country: Vietnam

Internet Service Provider: Vietnam Posts and Telecommunications Group

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	"Fail2Ban detected SSH brute force attempt"	2019-11-02 04:33:28

Comments on same subnet:

IP	Type	Details	Datetime
14.161.45.187	attack	(sshd) Failed SSH login from 14.161.45.187 (VN/Vietnam/static.vnpt.vn): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 11 15:23:10 optimus sshd[3270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 user=root Oct 11 15:23:11 optimus sshd[3270]: Failed password for root from 14.161.45.187 port 51020 ssh2 Oct 11 15:55:09 optimus sshd[31504]: Invalid user test123 from 14.161.45.187 Oct 11 15:55:09 optimus sshd[31504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 Oct 11 15:55:10 optimus sshd[31504]: Failed password for invalid user test123 from 14.161.45.187 port 35170 ssh2	2020-10-12 04:09:04
14.161.45.187	attackbots	Oct 11 16:13:39 mx sshd[1351830]: Failed password for root from 14.161.45.187 port 47020 ssh2 Oct 11 16:14:33 mx sshd[1351838]: Invalid user uu from 14.161.45.187 port 52915 Oct 11 16:14:33 mx sshd[1351838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 Oct 11 16:14:33 mx sshd[1351838]: Invalid user uu from 14.161.45.187 port 52915 Oct 11 16:14:35 mx sshd[1351838]: Failed password for invalid user uu from 14.161.45.187 port 52915 ssh2 ...	2020-10-11 20:07:57
14.161.45.187	attackspam	$f2bV_matches	2020-10-11 12:07:15
14.161.45.187	attack	2020-10-10 16:10:30.176107-0500 localhost sshd[48225]: Failed password for root from 14.161.45.187 port 36078 ssh2	2020-10-11 05:31:23
14.161.45.187	attackbots	Invalid user tester from 14.161.45.187 port 35104	2020-09-21 02:03:57
14.161.45.187	attackbots	Invalid user tester from 14.161.45.187 port 35104	2020-09-20 18:04:22
14.161.45.187	attackbotsspam	Aug 17 07:12:39 PorscheCustomer sshd[28388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 Aug 17 07:12:41 PorscheCustomer sshd[28388]: Failed password for invalid user lisa from 14.161.45.187 port 36779 ssh2 Aug 17 07:14:24 PorscheCustomer sshd[28481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 ...	2020-08-17 13:29:25
14.161.45.187	attack	Connection to SSH Honeypot - Detected by HoneypotDB	2020-08-02 13:25:02
14.161.45.187	attackspam	Jul 23 16:54:26 Invalid user yxy from 14.161.45.187 port 40629	2020-07-23 23:09:34
14.161.45.187	attackspam	Jul 21 23:45:10 abendstille sshd\[7566\]: Invalid user mm from 14.161.45.187 Jul 21 23:45:10 abendstille sshd\[7566\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 Jul 21 23:45:12 abendstille sshd\[7566\]: Failed password for invalid user mm from 14.161.45.187 port 41466 ssh2 Jul 21 23:49:06 abendstille sshd\[11714\]: Invalid user sda from 14.161.45.187 Jul 21 23:49:06 abendstille sshd\[11714\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 ...	2020-07-22 06:38:30
14.161.45.187	attack	2020-07-21T09:08:01.919873afi-git.jinr.ru sshd[15602]: Invalid user gitolite from 14.161.45.187 port 57538 2020-07-21T09:08:01.923118afi-git.jinr.ru sshd[15602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 2020-07-21T09:08:01.919873afi-git.jinr.ru sshd[15602]: Invalid user gitolite from 14.161.45.187 port 57538 2020-07-21T09:08:03.706524afi-git.jinr.ru sshd[15602]: Failed password for invalid user gitolite from 14.161.45.187 port 57538 ssh2 2020-07-21T09:10:56.435301afi-git.jinr.ru sshd[16384]: Invalid user guest from 14.161.45.187 port 49604 ...	2020-07-21 14:28:04
14.161.45.253	attack	Jul 5 17:26:58 Host-KLAX-C dovecot: imap-login: Disconnected (auth failed, 1 attempts in 9 secs): user=, method=PLAIN, rip=14.161.45.253, lip=185.198.26.142, TLS, session= ...	2020-07-06 08:07:12
14.161.45.187	attackspam	SSH Brute-Forcing (server1)	2020-06-28 15:50:13
14.161.45.187	attackspambots	Jun 19 12:41:20 vps639187 sshd\[26885\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 user=root Jun 19 12:41:21 vps639187 sshd\[26885\]: Failed password for root from 14.161.45.187 port 60281 ssh2 Jun 19 12:44:41 vps639187 sshd\[26937\]: Invalid user ustin from 14.161.45.187 port 60197 Jun 19 12:44:41 vps639187 sshd\[26937\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 ...	2020-06-19 18:58:42
14.161.45.179	attackbotsspam	Dovecot Invalid User Login Attempt.	2020-06-10 02:40:23

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.161.45.78
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22141
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.161.45.78.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110101 1800 900 604800 86400

;; Query time: 50 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 02 04:33:25 CST 2019
;; MSG SIZE  rcvd: 116

Host info

78.45.161.14.in-addr.arpa domain name pointer static.vnpt.vn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
78.45.161.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
75.132.6.243	attackbots	Sep 29 23:51:10 tuotantolaitos sshd[20271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.132.6.243 ...	2020-10-01 03:39:07
49.51.51.53	attack	[Sat Sep 05 22:56:03 2020] - DDoS Attack From IP: 49.51.51.53 Port: 40468	2020-10-01 03:47:29
45.143.223.105	attackspam	Attempting fraudulent international toll traffic	2020-10-01 03:57:16
118.89.63.234	attackbots	Invalid user admin from 118.89.63.234 port 36044	2020-10-01 03:42:28
93.114.184.8	attackbotsspam	93.114.184.8 - - [30/Sep/2020:20:46:23 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 93.114.184.8 - - [30/Sep/2020:20:46:24 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 93.114.184.8 - - [30/Sep/2020:20:46:24 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-10-01 03:56:54
202.213.241.239	attack	Sep 30 09:19:04 ns382633 sshd\[11068\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.213.241.239 user=root Sep 30 09:19:07 ns382633 sshd\[11068\]: Failed password for root from 202.213.241.239 port 47705 ssh2 Sep 30 09:19:20 ns382633 sshd\[11116\]: Invalid user steam from 202.213.241.239 port 48253 Sep 30 09:19:20 ns382633 sshd\[11116\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.213.241.239 Sep 30 09:19:21 ns382633 sshd\[11116\]: Failed password for invalid user steam from 202.213.241.239 port 48253 ssh2	2020-10-01 03:51:09
138.68.5.192	attackbotsspam	2020-09-30T20:35:42.805752lavrinenko.info sshd[27593]: Invalid user pcguest from 138.68.5.192 port 45358 2020-09-30T20:35:42.816406lavrinenko.info sshd[27593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.5.192 2020-09-30T20:35:42.805752lavrinenko.info sshd[27593]: Invalid user pcguest from 138.68.5.192 port 45358 2020-09-30T20:35:44.962136lavrinenko.info sshd[27593]: Failed password for invalid user pcguest from 138.68.5.192 port 45358 ssh2 2020-09-30T20:40:01.048089lavrinenko.info sshd[27670]: Invalid user mcserver from 138.68.5.192 port 51278 ...	2020-10-01 04:13:59
35.200.203.6	attackspambots	"FiveM Server Denial of Service Attack ~ JamesUK Anti DDos!"	2020-10-01 03:54:44
51.83.216.235	attackspam	TCP (SYN) 51.83.216.235:44763 -> port 3355, len 44	2020-10-01 03:53:32
49.232.114.29	attackbotsspam	Sep 30 15:15:51 vm1 sshd[22905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.114.29 Sep 30 15:15:53 vm1 sshd[22905]: Failed password for invalid user copy from 49.232.114.29 port 50432 ssh2 ...	2020-10-01 04:13:45
185.200.118.53	attack	UDP port : 1194	2020-10-01 03:39:47
14.244.141.129	attackbots	1601412073 - 09/29/2020 22:41:13 Host: 14.244.141.129/14.244.141.129 Port: 445 TCP Blocked	2020-10-01 04:05:35
202.155.211.226	attackspambots	$f2bV_matches	2020-10-01 03:55:40
78.42.135.172	attackbotsspam	2020-09-30T19:46:59.147147shield sshd\[28903\]: Invalid user target from 78.42.135.172 port 41396 2020-09-30T19:46:59.156556shield sshd\[28903\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=hsi-kbw-078-042-135-172.hsi3.kabel-badenwuerttemberg.de 2020-09-30T19:47:01.685746shield sshd\[28903\]: Failed password for invalid user target from 78.42.135.172 port 41396 ssh2 2020-09-30T19:51:09.724462shield sshd\[29453\]: Invalid user admin from 78.42.135.172 port 49018 2020-09-30T19:51:09.736018shield sshd\[29453\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=hsi-kbw-078-042-135-172.hsi3.kabel-badenwuerttemberg.de	2020-10-01 04:03:16
138.68.236.50	attackbotsspam	Brute-force attempt banned	2020-10-01 03:58:18

Recently Reported IPs

155.10.4.181	217.51.73.84	82.22.197.98	250.192.49.199
144.114.62.36	149.91.178.71	199.218.160.16	45.140.107.43
176.188.203.29	8.195.76.69	166.172.159.58	123.21.179.103
223.208.178.60	236.234.80.231	189.96.36.81	252.135.72.199
91.117.174.141	207.134.24.222	17.52.78.181	72.94.187.24