14.252.103.42 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Vietnam Posts and Telecommunications Group

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Unauthorized connection attempt detected from IP address 14.252.103.42 to port 88 [J]	2020-01-18 19:45:39

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.252.103.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60256
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.252.103.42.			IN	A

;; AUTHORITY SECTION:
.			588	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011800 1800 900 604800 86400

;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 18 19:45:36 CST 2020
;; MSG SIZE  rcvd: 117

Host info

42.103.252.14.in-addr.arpa domain name pointer static.vnpt.vn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
42.103.252.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
46.252.205.153	attack	Automatic report - Banned IP Access	2020-02-25 04:36:12
185.176.27.6	attackspambots	Feb 24 20:46:17 debian-2gb-nbg1-2 kernel: \[4832777.200072\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.6 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=43069 PROTO=TCP SPT=46884 DPT=4882 WINDOW=1024 RES=0x00 SYN URGP=0	2020-02-25 04:12:21
77.247.110.88	attack	[2020-02-24 14:40:56] NOTICE[1148] chan_sip.c: Registration from '' failed for '77.247.110.88:58888' - Wrong password [2020-02-24 14:40:56] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-24T14:40:56.034-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="222369",SessionID="0x7fd82c80d368",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.88/58888",Challenge="2cb44062",ReceivedChallenge="2cb44062",ReceivedHash="44a6ed0e2f5a8c29f97c05bb620bbefd" [2020-02-24 14:40:56] NOTICE[1148] chan_sip.c: Registration from '' failed for '77.247.110.88:58886' - Wrong password [2020-02-24 14:40:56] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-24T14:40:56.043-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="222369",SessionID="0x7fd82c6cd778",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.88/58886",Chal ...	2020-02-25 03:57:11
118.99.124.26	attackspam	Email rejected due to spam filtering	2020-02-25 04:16:02
103.145.27.126	attackbots	Feb 24 05:06:14 woof sshd[1454]: Invalid user default from 103.145.27.126 Feb 24 05:06:14 woof sshd[1454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.145.27.126 Feb 24 05:06:16 woof sshd[1454]: Failed password for invalid user default from 103.145.27.126 port 42170 ssh2 Feb 24 05:06:17 woof sshd[1454]: Received disconnect from 103.145.27.126: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=103.145.27.126	2020-02-25 04:08:38
90.6.159.47	attackbotsspam	Feb 24 14:18:24 h1946882 sshd[7123]: Failed password for invalid user p= i from 90.6.159.47 port 44070 ssh2 Feb 24 14:18:24 h1946882 sshd[7124]: Failed password for invalid user p= i from 90.6.159.47 port 44072 ssh2 Feb 24 14:18:24 h1946882 sshd[7123]: Connection closed by 90.6.159.47 [= preauth] Feb 24 14:18:24 h1946882 sshd[7124]: Connection closed by 90.6.159.47 [= preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=90.6.159.47	2020-02-25 04:26:53
105.235.130.14	attack	Email rejected due to spam filtering	2020-02-25 04:09:33
111.12.1.203	attackbotsspam	2020-02-24T14:09:54.729745vt1.awoom.xyz sshd[13828]: Invalid user man from 111.12.1.203 port 44530 2020-02-24T14:09:54.743581vt1.awoom.xyz sshd[13828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.12.1.203 2020-02-24T14:09:54.729745vt1.awoom.xyz sshd[13828]: Invalid user man from 111.12.1.203 port 44530 2020-02-24T14:09:56.379606vt1.awoom.xyz sshd[13828]: Failed password for invalid user man from 111.12.1.203 port 44530 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=111.12.1.203	2020-02-25 04:11:45
119.147.88.77	attackbots	Invalid user admin from 119.147.88.77 port 43450	2020-02-25 04:11:04
54.39.10.56	attackspam	Automatic report - SSH Brute-Force Attack	2020-02-25 04:01:08
212.156.51.34	attackspambots	Unauthorized connection attempt detected from IP address 212.156.51.34 to port 445	2020-02-25 03:59:04
14.247.86.136	attackbotsspam	Feb 24 14:22:56 grey postfix/smtpd\[9592\]: NOQUEUE: reject: RCPT from unknown\[14.247.86.136\]: 554 5.7.1 Service unavailable\; Client host \[14.247.86.136\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[14.247.86.136\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-25 03:58:50
112.133.251.41	attackspambots	Email rejected due to spam filtering	2020-02-25 04:00:11
92.63.194.81	attack	Fake ip hit me	2020-02-25 04:44:36
177.11.41.201	attackspam	Port 22 Scan, PTR: None	2020-02-25 04:09:06

Recently Reported IPs

191.240.229.167	190.140.196.83	182.218.197.150	180.97.31.201
179.197.14.205	178.45.10.242	177.137.208.50	159.192.221.208
154.47.130.184	148.240.203.165	146.120.168.252	143.255.243.190
131.148.21.94	123.194.2.35	118.32.217.60	113.173.209.243
109.92.195.166	103.90.206.179	103.70.39.81	95.9.202.55