14.232.58.68 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Vietnam Posts and Telecommunications Group

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2020-02-27 20:50:23

Comments on same subnet:

IP	Type	Details	Datetime
14.232.58.161	attackspambots	445/tcp [2019-09-28]1pkt	2019-09-28 19:25:43

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.232.58.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2193
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.232.58.68.			IN	A

;; AUTHORITY SECTION:
.			468	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022700 1800 900 604800 86400

;; Query time: 158 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 27 20:50:11 CST 2020
;; MSG SIZE  rcvd: 116

Host info

68.58.232.14.in-addr.arpa domain name pointer static.vnpt.vn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
68.58.232.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
93.23.63.130	attackbots	2019-09-23 13:25:02 1iCMSh-0007X6-EI SMTP connection from 130.63.23.93.rev.sfr.net \[93.23.63.130\]:27323 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-09-23 13:25:27 1iCMT4-0007ZA-T3 SMTP connection from 130.63.23.93.rev.sfr.net \[93.23.63.130\]:27422 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-09-23 13:25:41 1iCMTL-0007ZN-3X SMTP connection from 130.63.23.93.rev.sfr.net \[93.23.63.130\]:27485 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-01-28 02:48:38
159.203.201.108	attack	43056/tcp 4331/tcp 60001/tcp... [2019-12-01/2020-01-27]46pkt,42pt.(tcp),1pt.(udp)	2020-01-28 02:44:58
138.68.242.220	attackspam	Unauthorized connection attempt detected from IP address 138.68.242.220 to port 2220 [J]	2020-01-28 02:48:13
185.173.35.25	attack	993/tcp 2323/tcp 3000/tcp... [2019-11-29/2020-01-27]55pkt,40pt.(tcp),2pt.(udp)	2020-01-28 02:44:16
170.130.187.50	attackbots	161/udp 21/tcp 88/tcp... [2019-11-26/2020-01-27]53pkt,12pt.(tcp),1pt.(udp)	2020-01-28 02:39:52
95.56.216.166	attack	15:54:49 warning denied winbox/dude connect from 95.56.216.166 15:54:49 warning denied winbox/dude connect from 95.56.216.166 15:54:49 warning denied winbox/dude connect from 95.56.216.166 15:54:50 warning denied winbox/dude connect from 95.56.216.166 15:54:50 warning denied winbox/dude connect from 95.56.216.166 15:54:50 warning denied winbox/dude connect from 95.56.216.166 15:54:50 warning denied winbox/dude connect from 95.56.216.166 15:54:51 warning denied winbox/dude connect from 95.56.216.166	2020-01-28 02:30:34
61.7.135.109	attack	1580123825 - 01/27/2020 12:17:05 Host: 61.7.135.109/61.7.135.109 Port: 445 TCP Blocked	2020-01-28 02:34:39
165.227.104.253	attackspambots	Unauthorized connection attempt detected from IP address 165.227.104.253 to port 2220 [J]	2020-01-28 02:34:24
93.221.250.159	attack	2019-06-22 15:29:16 1heg4v-0006ME-Om SMTP connection from p5dddfa9f.dip0.t-ipconnect.de \[93.221.250.159\]:43263 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-06-22 15:29:35 1heg5G-0006MV-0F SMTP connection from p5dddfa9f.dip0.t-ipconnect.de \[93.221.250.159\]:43402 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-06-22 15:29:49 1heg5T-0006Mf-3K SMTP connection from p5dddfa9f.dip0.t-ipconnect.de \[93.221.250.159\]:43494 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-01-28 02:52:44
124.205.139.75	attack	Jan 27 20:27:17 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=124.205.139.75, lip=212.111.212.230, session=\ Jan 27 20:27:27 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 8 secs\): user=\, method=PLAIN, rip=124.205.139.75, lip=212.111.212.230, session=\ Jan 27 20:27:41 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 12 secs\): user=\, method=PLAIN, rip=124.205.139.75, lip=212.111.212.230, session=\ Jan 27 20:37:04 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=124.205.139.75, lip=212.111.212.230, session=\ Jan 27 20:37:13 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 8 secs\): user=\, method=PLAIN, rip=124.205.139.75, lip= ...	2020-01-28 03:06:14
170.106.76.4	attackspam	Unauthorized connection attempt detected from IP address 170.106.76.4 to port 2121 [J]	2020-01-28 02:57:20
93.22.154.119	attackbotsspam	2019-07-08 01:07:51 1hkGG2-0005Et-RL SMTP connection from 119.154.22.93.rev.sfr.net \[93.22.154.119\]:14735 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-08 01:08:44 1hkGGq-0005FS-JA SMTP connection from 119.154.22.93.rev.sfr.net \[93.22.154.119\]:14988 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-08 01:09:13 1hkGHN-0005Hk-F4 SMTP connection from 119.154.22.93.rev.sfr.net \[93.22.154.119\]:15112 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-01-28 02:54:24
138.68.228.1	attackbotsspam	May 18 03:58:22 ubuntu sshd[11762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.228.1 May 18 03:58:24 ubuntu sshd[11762]: Failed password for invalid user teste from 138.68.228.1 port 41526 ssh2 May 18 04:01:27 ubuntu sshd[11886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.228.1	2020-01-28 03:03:32
198.108.67.111	attackspam	firewall-block, port(s): 12321/tcp	2020-01-28 02:33:55
78.189.189.203	attack	Unauthorized connection attempt detected from IP address 78.189.189.203 to port 445	2020-01-28 03:08:10

Recently Reported IPs

36.84.56.95	182.65.118.139	104.248.125.17	61.170.220.44
119.123.100.13	36.74.35.248	190.25.232.4	58.140.66.68
111.205.235.54	124.158.183.178	114.25.52.112	194.127.179.229
58.187.123.153	190.205.150.62	179.95.115.219	110.159.37.191
49.206.212.190	137.74.85.17	114.5.252.247	76.31.44.164