IP address

Passive DNS

Tags: Residential proxy

IP blacklists: blocklist.de SSH
14.161.40.22 is listed on the blocklist.de SSH blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing SSH attacks.
Type of feed: primary (feed detail page)

Last checked at: 2026-09-20 16:05:00.449000
Was present on blacklist at: 2026-09-19 16:05, 2026-09-19 22:05, 2026-09-20 04:05, 2026-09-20 10:05, 2026-09-20 16:05
AbuseIPDB
14.161.40.22 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-09-20 04:00:00.576000
Was present on blacklist at: 2026-09-20 04:00
Residential proxy info (data provided by Layer3 Intel): Last seen: 2026-09-17 08:49:29}; Percent days seen: 10 %; Networks: INFATICA, BOTTINGTOOLS, GONZOPROXY, BYTEFUL, PROXY-SELLER, PROXYMA, MANGOPROXY, FLEXYPROXIES, PURAROUTE, GSOCKS; Details: https://layer3intel.com/context/14.161.40.22

TL	Role	Category	Details
41	src	login	protocol: ssh
25	src	—

Origin AS: AS45899 - VNPT-AS-VN
BGP Prefix: 14.161.40.0/21
geo: Vietnam, Ho Chi Minh City; 🕑 Asia/Ho_Chi_Minh
hostname: (null)
Address block ('inetnum' or 'NetRange' in whois database): 14.160.0.0 - 14.191.255.255
rep: 0.2928932188134524
reserved_range: 0
Shodan's InternetDB: Open ports: 21, 22, 88, 444, 1723, 2222, 3000, 8444, 8554, 8888, 8889; Tags: vpn; CPEs: cpe:/o:debian:debian_linux, cpe:/a:openbsd:openssh:9.2p1, cpe:/o:linux:linux_kernel
ts_added: 2026-09-19 16:09:03.682000
ts_last_update: 2026-09-20 16:09:11.537000

Warden event timeline

DShield event timeline

Presence on blacklists