14.161.45.83 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Vietnam Posts and Telecommunications Group

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	This IP Address sent many spam to @bit.co.id mhamdanrifai@gmail.com is administrator	2019-12-26 16:32:50

Comments on same subnet:

IP	Type	Details	Datetime
14.161.45.187	attack	(sshd) Failed SSH login from 14.161.45.187 (VN/Vietnam/static.vnpt.vn): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 11 15:23:10 optimus sshd[3270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 user=root Oct 11 15:23:11 optimus sshd[3270]: Failed password for root from 14.161.45.187 port 51020 ssh2 Oct 11 15:55:09 optimus sshd[31504]: Invalid user test123 from 14.161.45.187 Oct 11 15:55:09 optimus sshd[31504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 Oct 11 15:55:10 optimus sshd[31504]: Failed password for invalid user test123 from 14.161.45.187 port 35170 ssh2	2020-10-12 04:09:04
14.161.45.187	attackbots	Oct 11 16:13:39 mx sshd[1351830]: Failed password for root from 14.161.45.187 port 47020 ssh2 Oct 11 16:14:33 mx sshd[1351838]: Invalid user uu from 14.161.45.187 port 52915 Oct 11 16:14:33 mx sshd[1351838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 Oct 11 16:14:33 mx sshd[1351838]: Invalid user uu from 14.161.45.187 port 52915 Oct 11 16:14:35 mx sshd[1351838]: Failed password for invalid user uu from 14.161.45.187 port 52915 ssh2 ...	2020-10-11 20:07:57
14.161.45.187	attackspam	$f2bV_matches	2020-10-11 12:07:15
14.161.45.187	attack	2020-10-10 16:10:30.176107-0500 localhost sshd[48225]: Failed password for root from 14.161.45.187 port 36078 ssh2	2020-10-11 05:31:23
14.161.45.187	attackbots	Invalid user tester from 14.161.45.187 port 35104	2020-09-21 02:03:57
14.161.45.187	attackbots	Invalid user tester from 14.161.45.187 port 35104	2020-09-20 18:04:22
14.161.45.187	attackbotsspam	Aug 17 07:12:39 PorscheCustomer sshd[28388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 Aug 17 07:12:41 PorscheCustomer sshd[28388]: Failed password for invalid user lisa from 14.161.45.187 port 36779 ssh2 Aug 17 07:14:24 PorscheCustomer sshd[28481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 ...	2020-08-17 13:29:25
14.161.45.187	attack	Connection to SSH Honeypot - Detected by HoneypotDB	2020-08-02 13:25:02
14.161.45.187	attackspam	Jul 23 16:54:26 Invalid user yxy from 14.161.45.187 port 40629	2020-07-23 23:09:34
14.161.45.187	attackspam	Jul 21 23:45:10 abendstille sshd\[7566\]: Invalid user mm from 14.161.45.187 Jul 21 23:45:10 abendstille sshd\[7566\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 Jul 21 23:45:12 abendstille sshd\[7566\]: Failed password for invalid user mm from 14.161.45.187 port 41466 ssh2 Jul 21 23:49:06 abendstille sshd\[11714\]: Invalid user sda from 14.161.45.187 Jul 21 23:49:06 abendstille sshd\[11714\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 ...	2020-07-22 06:38:30
14.161.45.187	attack	2020-07-21T09:08:01.919873afi-git.jinr.ru sshd[15602]: Invalid user gitolite from 14.161.45.187 port 57538 2020-07-21T09:08:01.923118afi-git.jinr.ru sshd[15602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 2020-07-21T09:08:01.919873afi-git.jinr.ru sshd[15602]: Invalid user gitolite from 14.161.45.187 port 57538 2020-07-21T09:08:03.706524afi-git.jinr.ru sshd[15602]: Failed password for invalid user gitolite from 14.161.45.187 port 57538 ssh2 2020-07-21T09:10:56.435301afi-git.jinr.ru sshd[16384]: Invalid user guest from 14.161.45.187 port 49604 ...	2020-07-21 14:28:04
14.161.45.253	attack	Jul 5 17:26:58 Host-KLAX-C dovecot: imap-login: Disconnected (auth failed, 1 attempts in 9 secs): user=, method=PLAIN, rip=14.161.45.253, lip=185.198.26.142, TLS, session= ...	2020-07-06 08:07:12
14.161.45.187	attackspam	SSH Brute-Forcing (server1)	2020-06-28 15:50:13
14.161.45.187	attackspambots	Jun 19 12:41:20 vps639187 sshd\[26885\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 user=root Jun 19 12:41:21 vps639187 sshd\[26885\]: Failed password for root from 14.161.45.187 port 60281 ssh2 Jun 19 12:44:41 vps639187 sshd\[26937\]: Invalid user ustin from 14.161.45.187 port 60197 Jun 19 12:44:41 vps639187 sshd\[26937\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 ...	2020-06-19 18:58:42
14.161.45.179	attackbotsspam	Dovecot Invalid User Login Attempt.	2020-06-10 02:40:23

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.161.45.83
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58471
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.161.45.83.			IN	A

;; AUTHORITY SECTION:
.			490	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122600 1800 900 604800 86400

;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Dec 26 16:32:47 CST 2019
;; MSG SIZE  rcvd: 116

Host info

83.45.161.14.in-addr.arpa domain name pointer static.vnpt.vn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
83.45.161.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
179.124.31.100	attackbotsspam	" "	2020-02-17 19:41:56
176.100.173.50	attack	[portscan] tcp/23 [TELNET] *(RWIN=63103)(02171127)	2020-02-17 20:19:07
200.41.86.59	attackspambots	Feb 17 02:06:50 plusreed sshd[12377]: Invalid user tester from 200.41.86.59 ...	2020-02-17 20:06:06
118.48.211.197	attackbots	SSH invalid-user multiple login attempts	2020-02-17 20:03:18
103.57.141.118	attack	Brute-force general attack.	2020-02-17 20:10:12
112.85.42.180	attackspam	2020-02-05T11:12:57.106Z CLOSE host=112.85.42.180 port=19162 fd=4 time=20.015 bytes=9 ...	2020-02-17 19:52:11
64.98.36.139	attackbotsspam	SSH login attempts.	2020-02-17 19:38:03
159.203.143.58	attack	Feb 17 12:27:33 dedicated sshd[22830]: Invalid user kborsi from 159.203.143.58 port 35484	2020-02-17 19:46:34
140.213.59.254	attackbotsspam	[Mon Feb 17 11:54:56.501374 2020] [:error] [pid 11333:tid 140577555363584] [client 140.213.59.254:42402] [client 140.213.59.254] ModSecurity: Access denied with code 403 (phase 4). Pattern match "^5\\\\d{2}$" at RESPONSE_STATUS. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/RESPONSE-950-DATA-LEAKAGES.conf"] [line "118"] [id "950100"] [msg "The Application Returned a 500-Level Status Code"] [data "Matched Data: 500 found within RESPONSE_STATUS: 500"] [severity "ERROR"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-disclosure"] [tag "WASCTC/WASC-13"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.6"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-hujan-bulanan/prakiraan-curah-hujan-bulanan/555557608-prakiraan-bulanan-curah-hujan-bulan-januari-tahun-2020-update-dari-analisis-bulan-september-2019"] [unique_id "XkocoCKsjobM@NabR@cILAAAAAE"], refe ...	2020-02-17 19:54:13
14.229.162.176	attack	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2020-02-17 20:04:43
58.11.2.18	attack	SSH login attempts.	2020-02-17 19:47:21
107.170.76.170	attack	Feb 17 11:25:50 ks10 sshd[905847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.76.170 Feb 17 11:25:52 ks10 sshd[905847]: Failed password for invalid user shutdown from 107.170.76.170 port 39014 ssh2 ...	2020-02-17 20:01:22
222.186.42.75	attackbotsspam	Feb 17 09:06:44 firewall sshd[29921]: Failed password for root from 222.186.42.75 port 59971 ssh2 Feb 17 09:06:46 firewall sshd[29921]: Failed password for root from 222.186.42.75 port 59971 ssh2 Feb 17 09:06:50 firewall sshd[29921]: Failed password for root from 222.186.42.75 port 59971 ssh2 ...	2020-02-17 20:09:49
81.133.142.45	attackbots	ssh brute force	2020-02-17 20:00:52
122.51.188.20	attack	Feb 17 10:04:31 host sshd[11840]: Invalid user dominick from 122.51.188.20 port 41510 ...	2020-02-17 19:50:26

Recently Reported IPs

119.108.84.15	117.95.8.129	113.176.92.134	95.142.120.7
1.55.68.121	208.97.189.248	58.49.94.62	120.78.185.116
118.208.46.90	185.136.150.201	185.121.139.43	89.237.192.100
42.117.20.59	49.234.205.111	175.23.87.118	125.163.16.236
123.148.218.248	194.182.88.78	31.167.96.159	175.4.254.50