14.162.95.64 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Vietnam Posts and Telecommunications Group

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	2019-09-19T11:56:44.979184+01:00 suse sshd[19892]: User root from 14.162.95.64 not allowed because not listed in AllowUsers 2019-09-19T11:56:48.505084+01:00 suse sshd[19892]: error: PAM: Authentication failure for illegal user root from 14.162.95.64 2019-09-19T11:56:44.979184+01:00 suse sshd[19892]: User root from 14.162.95.64 not allowed because not listed in AllowUsers 2019-09-19T11:56:48.505084+01:00 suse sshd[19892]: error: PAM: Authentication failure for illegal user root from 14.162.95.64 2019-09-19T11:56:44.979184+01:00 suse sshd[19892]: User root from 14.162.95.64 not allowed because not listed in AllowUsers 2019-09-19T11:56:48.505084+01:00 suse sshd[19892]: error: PAM: Authentication failure for illegal user root from 14.162.95.64 2019-09-19T11:56:48.506808+01:00 suse sshd[19892]: Failed keyboard-interactive/pam for invalid user root from 14.162.95.64 port 16772 ssh2 ...	2019-09-19 20:03:04

Type

Details

Datetime

attackspam

2019-09-19T11:56:44.979184+01:00 suse sshd[19892]: User root from 14.162.95.64 not allowed because not listed in AllowUsers
2019-09-19T11:56:48.505084+01:00 suse sshd[19892]: error: PAM: Authentication failure for illegal user root from 14.162.95.64
2019-09-19T11:56:44.979184+01:00 suse sshd[19892]: User root from 14.162.95.64 not allowed because not listed in AllowUsers
2019-09-19T11:56:48.505084+01:00 suse sshd[19892]: error: PAM: Authentication failure for illegal user root from 14.162.95.64
2019-09-19T11:56:44.979184+01:00 suse sshd[19892]: User root from 14.162.95.64 not allowed because not listed in AllowUsers
2019-09-19T11:56:48.505084+01:00 suse sshd[19892]: error: PAM: Authentication failure for illegal user root from 14.162.95.64
2019-09-19T11:56:48.506808+01:00 suse sshd[19892]: Failed keyboard-interactive/pam for invalid user root from 14.162.95.64 port 16772 ssh2
...

2019-09-19 20:03:04

Comments on same subnet:

IP	Type	Details	Datetime
14.162.95.193	attackspam	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2020-03-16 21:42:11
14.162.95.240	attackspambots	Unauthorized connection attempt from IP address 14.162.95.240 on Port 445(SMB)	2019-10-31 03:21:03

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.162.95.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28428
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.162.95.64.			IN	A

;; AUTHORITY SECTION:
.			581	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091802 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 19 20:03:01 CST 2019
;; MSG SIZE  rcvd: 116

Host info

64.95.162.14.in-addr.arpa domain name pointer static.vnpt.vn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
64.95.162.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.176.27.42	attackspam	01/10/2020-19:48:57.205533 185.176.27.42 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-01-11 08:58:22
201.218.215.162	attackspambots	20/1/10@16:07:54: FAIL: Alarm-Network address from=201.218.215.162 20/1/10@16:07:55: FAIL: Alarm-Network address from=201.218.215.162 ...	2020-01-11 08:40:54
186.12.96.86	attackspambots	Jan 10 22:07:57 grey postfix/smtpd\[30701\]: NOQUEUE: reject: RCPT from unknown\[186.12.96.86\]: 554 5.7.1 Service unavailable\; Client host \[186.12.96.86\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=186.12.96.86\; from=\ to=\ proto=ESMTP helo=\<\[186.12.96.86\]\> ...	2020-01-11 08:39:48
93.74.138.83	attack	Jan 10 22:06:56 grey postfix/smtpd\[29868\]: NOQUEUE: reject: RCPT from material.impeler.volia.net\[93.74.138.83\]: 554 5.7.1 Service unavailable\; Client host \[93.74.138.83\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[93.74.138.83\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-01-11 09:19:17
219.93.106.33	attackspambots	Invalid user admin from 219.93.106.33 port 50696	2020-01-11 08:53:08
222.186.175.181	attack	Jan 11 01:43:01 MK-Soft-VM6 sshd[31633]: Failed password for root from 222.186.175.181 port 11025 ssh2 Jan 11 01:43:06 MK-Soft-VM6 sshd[31633]: Failed password for root from 222.186.175.181 port 11025 ssh2 ...	2020-01-11 08:45:43
49.235.192.88	attackbots	Jan 10 21:44:04 firewall sshd[28122]: Invalid user postfix from 49.235.192.88 Jan 10 21:44:06 firewall sshd[28122]: Failed password for invalid user postfix from 49.235.192.88 port 55220 ssh2 Jan 10 21:46:56 firewall sshd[28212]: Invalid user ubuntu from 49.235.192.88 ...	2020-01-11 09:07:35
45.140.206.139	attack	B: Magento admin pass test (wrong country)	2020-01-11 09:04:47
141.101.143.24	attack	(From matthaei.sue@yahoo.com) Acquiring GOV backlinks is one of the most sought-after link building strategies that’s still popular among SEO experts today. More info: https://www.monkeydigital.io/product/gov-backlinks/ thanks and regards Mike monkeydigital.co@gmail.com	2020-01-11 13:00:53
211.169.249.156	attackspambots	Jan 11 04:01:47 lcl-usvr-02 sshd[7954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.169.249.156 user=root Jan 11 04:01:49 lcl-usvr-02 sshd[7954]: Failed password for root from 211.169.249.156 port 38384 ssh2 Jan 11 04:05:07 lcl-usvr-02 sshd[8620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.169.249.156 user=root Jan 11 04:05:08 lcl-usvr-02 sshd[8620]: Failed password for root from 211.169.249.156 port 33916 ssh2 Jan 11 04:06:53 lcl-usvr-02 sshd[8989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.169.249.156 user=root Jan 11 04:06:55 lcl-usvr-02 sshd[8989]: Failed password for root from 211.169.249.156 port 50042 ssh2 ...	2020-01-11 09:18:45
183.83.15.78	attackspam	Unauthorized connection attempt detected from IP address 183.83.15.78 to port 1433	2020-01-11 09:10:03
129.226.160.122	attackspambots	Jan 10 21:15:38 ws12vmsma01 sshd[58243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.160.122 Jan 10 21:15:38 ws12vmsma01 sshd[58243]: Invalid user bj from 129.226.160.122 Jan 10 21:15:39 ws12vmsma01 sshd[58243]: Failed password for invalid user bj from 129.226.160.122 port 37538 ssh2 ...	2020-01-11 08:47:56
24.35.200.123	attackspambots	scan z	2020-01-11 08:46:56
54.38.242.233	attackbots	Jan 11 04:59:46 IngegnereFirenze sshd[25748]: User root from 54.38.242.233 not allowed because not listed in AllowUsers ...	2020-01-11 13:02:55
128.70.16.70	attack	Automatic report - Port Scan Attack	2020-01-11 08:53:59

Recently Reported IPs

37.114.184.180	23.249.164.136	212.29.163.101	220.179.219.112
2.35.149.194	177.93.70.5	157.230.125.58	141.98.80.78
63.117.211.194	49.83.1.30	27.67.187.161	183.83.65.44
177.220.173.186	152.160.218.16	212.28.94.242	80.82.64.171
183.157.174.86	205.224.142.79	198.128.63.112	179.26.252.29