14.163.1.245 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Vietnam Posts and Telecommunications Group

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	445/tcp [2019-07-03]1pkt	2019-07-03 20:38:58

Comments on same subnet:

IP	Type	Details	Datetime
14.163.165.126	attackspam	Unauthorised access (Aug 27) SRC=14.163.165.126 LEN=52 TTL=47 ID=12515 DF TCP DPT=445 WINDOW=8192 SYN	2020-08-27 16:13:04
14.163.139.242	attackbotsspam	2020-08-26 07:32:54.349689-0500 localhost smtpd[9538]: NOQUEUE: reject: RCPT from unknown[14.163.139.242]: 554 5.7.1 Service unavailable; Client host [14.163.139.242] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/14.163.139.242; from= to= proto=ESMTP helo=	2020-08-27 04:09:48
14.163.179.79	attack	20/8/9@23:51:58: FAIL: Alarm-Network address from=14.163.179.79 ...	2020-08-10 16:31:02
14.163.110.219	attack	1596426845 - 08/03/2020 05:54:05 Host: 14.163.110.219/14.163.110.219 Port: 445 TCP Blocked	2020-08-03 15:33:00
14.163.115.50	attackbots	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2020-07-06 02:20:48
14.163.179.127	attackspam	Unauthorized connection attempt detected from IP address 14.163.179.127 to port 445 [T]	2020-06-24 02:15:10
14.163.154.252	attackspam	Wordpress malicious attack:[sshd]	2020-06-13 19:04:55
14.163.116.86	attackspam	1591215192 - 06/03/2020 22:13:12 Host: 14.163.116.86/14.163.116.86 Port: 445 TCP Blocked	2020-06-04 07:20:35
14.163.19.62	attackspam	Unauthorised access (May 30) SRC=14.163.19.62 LEN=52 TTL=50 ID=2573 DF TCP DPT=445 WINDOW=8192 SYN	2020-05-30 16:53:02
14.163.127.144	attack	SIP/5060 Probe, BF, Hack -	2020-05-10 03:34:51
14.163.168.151	attackbotsspam	Unauthorized connection attempt from IP address 14.163.168.151 on Port 445(SMB)	2020-04-28 20:06:46
14.163.178.236	attackspambots	Unauthorized connection attempt from IP address 14.163.178.236 on Port 445(SMB)	2020-04-14 05:18:22
14.163.108.62	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 04-04-2020 14:35:14.	2020-04-05 04:13:35
14.163.193.171	attackbotsspam	03/06/2020-00:14:54.094886 14.163.193.171 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2020-03-06 15:57:51
14.163.173.69	attackbots	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2020-03-05 20:41:45

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.163.1.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9490
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.163.1.245.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070300 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 03 20:38:52 CST 2019
;; MSG SIZE  rcvd: 116

Host info

245.1.163.14.in-addr.arpa domain name pointer static.vnpt.vn.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
245.1.163.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
113.180.106.20	attack	ICMP MH Probe, Scan /Distributed -	2020-03-26 21:30:21
107.170.37.74	attack	Repeated brute force against a port	2020-03-26 21:31:53
120.92.173.154	attackbots	Mar 26 12:16:13 ip-172-31-62-245 sshd\[12710\]: Invalid user test from 120.92.173.154\ Mar 26 12:16:14 ip-172-31-62-245 sshd\[12710\]: Failed password for invalid user test from 120.92.173.154 port 49040 ssh2\ Mar 26 12:21:06 ip-172-31-62-245 sshd\[12779\]: Invalid user linux from 120.92.173.154\ Mar 26 12:21:08 ip-172-31-62-245 sshd\[12779\]: Failed password for invalid user linux from 120.92.173.154 port 14846 ssh2\ Mar 26 12:26:00 ip-172-31-62-245 sshd\[12877\]: Invalid user bright from 120.92.173.154\	2020-03-26 20:49:12
118.67.185.109	attack	ICMP MH Probe, Scan /Distributed -	2020-03-26 20:50:14
51.83.75.97	attackspambots	Mar 26 13:37:27 srv-ubuntu-dev3 sshd[71070]: Invalid user deploy4 from 51.83.75.97 Mar 26 13:37:27 srv-ubuntu-dev3 sshd[71070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.75.97 Mar 26 13:37:27 srv-ubuntu-dev3 sshd[71070]: Invalid user deploy4 from 51.83.75.97 Mar 26 13:37:28 srv-ubuntu-dev3 sshd[71070]: Failed password for invalid user deploy4 from 51.83.75.97 port 50228 ssh2 Mar 26 13:41:06 srv-ubuntu-dev3 sshd[71683]: Invalid user student from 51.83.75.97 Mar 26 13:41:07 srv-ubuntu-dev3 sshd[71683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.75.97 Mar 26 13:41:06 srv-ubuntu-dev3 sshd[71683]: Invalid user student from 51.83.75.97 Mar 26 13:41:08 srv-ubuntu-dev3 sshd[71683]: Failed password for invalid user student from 51.83.75.97 port 35060 ssh2 Mar 26 13:44:58 srv-ubuntu-dev3 sshd[72325]: Invalid user mv from 51.83.75.97 ...	2020-03-26 20:45:51
128.199.148.36	attack	Too many connections or unauthorized access detected from Arctic banned ip	2020-03-26 20:48:00
69.94.138.189	attackspambots	SpamScore above: 10.0	2020-03-26 21:14:50
94.138.208.158	attackbots	Mar 26 13:56:03 vps sshd[337316]: Failed password for invalid user browser from 94.138.208.158 port 36114 ssh2 Mar 26 13:59:41 vps sshd[353878]: Invalid user law from 94.138.208.158 port 49778 Mar 26 13:59:41 vps sshd[353878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.138.208.158 Mar 26 13:59:43 vps sshd[353878]: Failed password for invalid user law from 94.138.208.158 port 49778 ssh2 Mar 26 14:03:32 vps sshd[376892]: Invalid user huangjie from 94.138.208.158 port 35220 ...	2020-03-26 21:11:57
129.211.104.34	attackbots	Mar 26 09:25:38 firewall sshd[27620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.104.34 Mar 26 09:25:38 firewall sshd[27620]: Invalid user sdco from 129.211.104.34 Mar 26 09:25:40 firewall sshd[27620]: Failed password for invalid user sdco from 129.211.104.34 port 52836 ssh2 ...	2020-03-26 21:10:56
36.46.142.80	attackbotsspam	(sshd) Failed SSH login from 36.46.142.80 (CN/China/-): 5 in the last 3600 secs	2020-03-26 20:51:58
91.134.235.254	attackbotsspam	Brute force attempt	2020-03-26 21:23:03
129.211.63.79	attack	Invalid user web3 from 129.211.63.79 port 35636	2020-03-26 21:34:51
185.12.21.199	attack	Automatic report - Port Scan Attack	2020-03-26 21:03:57
211.147.234.110	attack	Mar 26 12:25:18 TCP Attack: SRC=211.147.234.110 DST=[Masked] LEN=40 TOS=0x08 PREC=0x20 TTL=98 PROTO=TCP SPT=6000 DPT=14334 WINDOW=16384 RES=0x00 SYN URGP=0	2020-03-26 21:38:45
49.88.112.69	attackspam	Mar 26 14:10:47 server sshd[8111]: Failed password for root from 49.88.112.69 port 45550 ssh2 Mar 26 14:10:50 server sshd[8111]: Failed password for root from 49.88.112.69 port 45550 ssh2 Mar 26 14:10:53 server sshd[8111]: Failed password for root from 49.88.112.69 port 45550 ssh2	2020-03-26 21:18:36

Recently Reported IPs

85.105.43.165	214.169.211.58	95.135.82.93	24.224.180.136
124.248.240.84	1.169.247.162	93.22.229.24	21.248.90.48
175.148.24.24	208.74.51.130	91.204.114.148	36.75.143.237
98.45.118.119	84.200.70.57	175.148.116.148	123.23.171.24
61.223.59.7	202.22.226.52	183.83.131.52	83.103.193.224