14.248.85.69 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Vietnam Posts and Telecommunications Group

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	May 10 14:27:59 server1 sshd\[4457\]: Failed password for postgres from 14.248.85.69 port 60262 ssh2 May 10 14:32:21 server1 sshd\[5877\]: Invalid user soto from 14.248.85.69 May 10 14:32:21 server1 sshd\[5877\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.248.85.69 May 10 14:32:24 server1 sshd\[5877\]: Failed password for invalid user soto from 14.248.85.69 port 48518 ssh2 May 10 14:36:54 server1 sshd\[7818\]: Invalid user zte from 14.248.85.69 ...	2020-05-11 04:41:07

Type

Details

Datetime

attack

May 10 14:27:59 server1 sshd\[4457\]: Failed password for postgres from 14.248.85.69 port 60262 ssh2
May 10 14:32:21 server1 sshd\[5877\]: Invalid user soto from 14.248.85.69
May 10 14:32:21 server1 sshd\[5877\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.248.85.69 
May 10 14:32:24 server1 sshd\[5877\]: Failed password for invalid user soto from 14.248.85.69 port 48518 ssh2
May 10 14:36:54 server1 sshd\[7818\]: Invalid user zte from 14.248.85.69
...

2020-05-11 04:41:07

Comments on same subnet:

IP	Type	Details	Datetime
14.248.85.156	attackbots	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2020-09-09 00:24:49
14.248.85.156	attack	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2020-09-08 15:55:51
14.248.85.156	attackbots	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2020-09-08 08:30:45
14.248.85.3	attack	1591588161 - 06/08/2020 05:49:21 Host: 14.248.85.3/14.248.85.3 Port: 445 TCP Blocked	2020-06-08 16:50:35
14.248.85.19	attackspambots	unauthorized connection attempt	2020-02-04 15:29:14
14.248.85.95	attackspambots	Unauthorized connection attempt detected from IP address 14.248.85.95 to port 445	2019-12-21 13:11:37
14.248.85.95	attackspam	445/tcp 445/tcp 445/tcp... [2019-08-26/10-04]6pkt,1pt.(tcp)	2019-10-05 03:17:13

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.248.85.69
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48750
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.248.85.69.			IN	A

;; AUTHORITY SECTION:
.			271	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051001 1800 900 604800 86400

;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 11 04:41:04 CST 2020
;; MSG SIZE  rcvd: 116

Host info

69.85.248.14.in-addr.arpa domain name pointer static.vnpt.vn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
69.85.248.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
210.124.68.2	attackbots	Unauthorized connection attempt from IP address 210.124.68.2 on Port 445(SMB)	2019-08-12 17:58:48
94.98.203.60	attackbotsspam	Aug 12 12:02:34 www sshd\[443\]: Invalid user 123456 from 94.98.203.60Aug 12 12:02:36 www sshd\[443\]: Failed password for invalid user 123456 from 94.98.203.60 port 29972 ssh2Aug 12 12:08:47 www sshd\[487\]: Invalid user 123 from 94.98.203.60 ...	2019-08-12 17:26:09
176.124.17.182	attackspam	Unauthorized connection attempt from IP address 176.124.17.182 on Port 445(SMB)	2019-08-12 18:01:38
191.82.15.100	attack	Telnet Server BruteForce Attack	2019-08-12 17:32:34
213.186.244.4	attackbotsspam	frenzy	2019-08-12 17:12:20
196.41.17.62	attackspambots	2019-08-11 21:31:36 H=(lpmotors.it) [196.41.17.62]:40026 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-08-11 21:31:37 H=(lpmotors.it) [196.41.17.62]:40026 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/196.41.17.62) 2019-08-11 21:31:38 H=(lpmotors.it) [196.41.17.62]:40026 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/196.41.17.62) ...	2019-08-12 17:46:31
116.196.114.125	attack	Aug 12 05:03:38 SilenceServices sshd[23400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.114.125 Aug 12 05:03:39 SilenceServices sshd[23400]: Failed password for invalid user ubiqube from 116.196.114.125 port 56616 ssh2 Aug 12 05:05:20 SilenceServices sshd[24731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.114.125	2019-08-12 17:50:07
180.246.158.6	attack	Aug 12 10:02:10 MK-Soft-VM6 sshd\[22074\]: Invalid user eddie from 180.246.158.6 port 59632 Aug 12 10:02:10 MK-Soft-VM6 sshd\[22074\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.246.158.6 Aug 12 10:02:12 MK-Soft-VM6 sshd\[22074\]: Failed password for invalid user eddie from 180.246.158.6 port 59632 ssh2 ...	2019-08-12 18:09:17
182.30.202.140	attackbotsspam	Unauthorized connection attempt from IP address 182.30.202.140 on Port 445(SMB)	2019-08-12 18:11:51
139.199.88.93	attackspam	$f2bV_matches_ltvn	2019-08-12 17:14:10
14.161.16.254	attack	Unauthorized connection attempt from IP address 14.161.16.254 on Port 445(SMB)	2019-08-12 18:06:43
211.151.248.26	attackspambots	SMB Server BruteForce Attack	2019-08-12 17:51:13
185.36.81.145	attackspambots	Rude login attack (9 tries in 1d)	2019-08-12 17:54:55
211.232.166.249	attack	Aug 11 21:55:22 aat-srv002 sshd[25456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.232.166.249 Aug 11 21:55:23 aat-srv002 sshd[25456]: Failed password for invalid user belea from 211.232.166.249 port 49866 ssh2 Aug 11 22:01:15 aat-srv002 sshd[25584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.232.166.249 Aug 11 22:01:17 aat-srv002 sshd[25584]: Failed password for invalid user patalano from 211.232.166.249 port 44396 ssh2 ...	2019-08-12 18:00:48
77.247.181.165	attackspam	Unauthorized SSH login attempts	2019-08-12 17:48:13

Recently Reported IPs

47.56.156.201	2400:6180:0:d0::3c9c:4001	177.129.8.138	220.135.223.195
188.170.195.108	73.120.104.149	250.149.49.134	213.146.201.125
227.218.11.231	85.127.250.201	10.241.11.24	184.176.170.215
182.171.164.71	139.178.82.211	159.9.140.79	52.95.198.249
116.68.157.112	131.147.228.107	113.85.40.127	95.78.88.167