14.227.211.124

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Vietnam Posts and Telecommunications Group

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	[portscan] tcp/23 [TELNET] *(RWIN=31283)(11190859)	2019-11-19 20:15:57

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.227.211.124
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25493
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.227.211.124.			IN	A

;; AUTHORITY SECTION:
.			588	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111900 1800 900 604800 86400

;; Query time: 336 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Nov 19 20:15:53 CST 2019
;; MSG SIZE  rcvd: 118

Host info

124.211.227.14.in-addr.arpa domain name pointer static.vnpt.vn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
124.211.227.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
177.105.116.131	attackspam	Unauthorized connection attempt from IP address 177.105.116.131 on Port 445(SMB)	2020-02-13 13:59:30
120.132.3.65	attackspambots	Feb 13 05:03:02 h2177944 kernel: \[4764558.141032\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=120.132.3.65 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=36130 PROTO=TCP SPT=53603 DPT=6379 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 13 05:03:02 h2177944 kernel: \[4764558.141048\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=120.132.3.65 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=36130 PROTO=TCP SPT=53603 DPT=6379 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 13 05:33:16 h2177944 kernel: \[4766372.705852\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=120.132.3.65 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=30763 PROTO=TCP SPT=59442 DPT=49153 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 13 05:33:16 h2177944 kernel: \[4766372.705866\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=120.132.3.65 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=30763 PROTO=TCP SPT=59442 DPT=49153 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 13 05:54:33 h2177944 kernel: \[4767649.559711\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=120.132.3.65 DST=85.214.117.9 LE	2020-02-13 13:58:56
85.18.98.208	attack	Invalid user ams from 85.18.98.208 port 39899	2020-02-13 14:02:56
182.183.244.129	attackbots	scan r	2020-02-13 13:54:51
185.147.215.14	attackspam	[2020-02-13 00:15:23] NOTICE[1148] chan_sip.c: Registration from '' failed for '185.147.215.14:58742' - Wrong password [2020-02-13 00:15:23] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-13T00:15:23.493-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="4223",SessionID="0x7fd82c2348d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.14/58742",Challenge="0a584148",ReceivedChallenge="0a584148",ReceivedHash="8665e75081da493211f6f56066041245" [2020-02-13 00:15:51] NOTICE[1148] chan_sip.c: Registration from '' failed for '185.147.215.14:53428' - Wrong password [2020-02-13 00:15:51] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-13T00:15:51.683-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="4224",SessionID="0x7fd82c2aad18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.21 ...	2020-02-13 13:57:24
192.3.67.107	attack	Feb 13 05:54:41 dedicated sshd[30203]: Invalid user bitnami from 192.3.67.107 port 44694	2020-02-13 13:51:24
143.202.115.88	attackspam	DATE:2020-02-13 05:53:06, IP:143.202.115.88, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-02-13 13:58:42
218.92.0.184	attackspam	Feb 12 23:30:03 askasleikir sshd[44524]: Failed password for root from 218.92.0.184 port 52753 ssh2 Feb 12 23:30:30 askasleikir sshd[44542]: Failed password for root from 218.92.0.184 port 24485 ssh2 Feb 12 23:30:25 askasleikir sshd[44542]: Failed password for root from 218.92.0.184 port 24485 ssh2	2020-02-13 13:48:27
142.4.204.122	attackbots	Feb 13 06:19:10 sd-53420 sshd\[12655\]: Invalid user sapp from 142.4.204.122 Feb 13 06:19:10 sd-53420 sshd\[12655\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.4.204.122 Feb 13 06:19:12 sd-53420 sshd\[12655\]: Failed password for invalid user sapp from 142.4.204.122 port 47880 ssh2 Feb 13 06:21:26 sd-53420 sshd\[12891\]: Invalid user farmer from 142.4.204.122 Feb 13 06:21:26 sd-53420 sshd\[12891\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.4.204.122 ...	2020-02-13 13:37:15
213.230.84.45	attackbots	scan r	2020-02-13 14:04:02
115.78.128.169	attackspam	1581569655 - 02/13/2020 05:54:15 Host: 115.78.128.169/115.78.128.169 Port: 445 TCP Blocked	2020-02-13 14:06:29
62.197.120.198	attackbotsspam	Feb 13 05:54:15 vps647732 sshd[21820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.197.120.198 Feb 13 05:54:17 vps647732 sshd[21820]: Failed password for invalid user ct from 62.197.120.198 port 52086 ssh2 ...	2020-02-13 14:09:42
45.94.174.30	attackspam	Automatic report - Port Scan Attack	2020-02-13 13:53:21
36.82.214.124	attackbotsspam	1581569653 - 02/13/2020 05:54:13 Host: 36.82.214.124/36.82.214.124 Port: 445 TCP Blocked	2020-02-13 14:11:15
117.193.245.172	attackbotsspam	Feb 13 04:54:35 ms-srv sshd[61988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.193.245.172 Feb 13 04:54:37 ms-srv sshd[61988]: Failed password for invalid user test from 117.193.245.172 port 62269 ssh2	2020-02-13 13:55:29

Recently Reported IPs

62.103.77.120	58.69.59.99	222.79.48.142	220.77.218.212
189.134.41.242	128.14.181.110	123.9.108.46	119.118.12.240
115.54.74.125	114.244.38.34	113.237.171.243	113.222.4.93
112.15.205.129	103.209.52.27	103.103.161.159	101.108.156.254
80.117.122.132	46.12.118.167	3.15.177.160	221.204.232.74