14.250.18.11 - IPInfo

Basic Info

City: Ho Chi Minh City

Region: Ho Chi Minh

Country: Vietnam

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
14.250.180.122	attackbots	Feb 14 02:53:35 pi sshd[30233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.250.180.122 Feb 14 02:53:37 pi sshd[30233]: Failed password for invalid user router from 14.250.180.122 port 61056 ssh2	2020-03-14 04:38:01

Type

Details

Datetime

14.250.180.122

attackbots

Feb 14 02:53:35 pi sshd[30233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.250.180.122 
Feb 14 02:53:37 pi sshd[30233]: Failed password for invalid user router from 14.250.180.122 port 61056 ssh2

2020-03-14 04:38:01

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.250.18.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7427
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;14.250.18.11.			IN	A

;; AUTHORITY SECTION:
.			534	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023021500 1800 900 604800 86400

;; Query time: 44 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 15 21:42:36 CST 2023
;; MSG SIZE  rcvd: 105

Host info

11.18.250.14.in-addr.arpa domain name pointer static.vnpt.vn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
11.18.250.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
68.116.41.6	attackspambots		2020-02-17 06:31:02
106.12.99.173	attack	$f2bV_matches	2020-02-17 06:21:26
5.45.207.56	attackbotsspam	[Mon Feb 17 00:36:06.084814 2020] [:error] [pid 22419:tid 139751726249728] [client 5.45.207.56:54369] [client 5.45.207.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "Xkl9hu5kk8ywDLZJ9PARrAAAADs"] ...	2020-02-17 06:17:50
194.40.240.96	attackspam	Automatic report - Banned IP Access	2020-02-17 06:10:56
184.164.97.84	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-17 06:16:43
148.70.236.112	attack	SSH authentication failure x 6 reported by Fail2Ban ...	2020-02-17 06:19:53
14.244.103.191	attackspam	1581860500 - 02/16/2020 14:41:40 Host: 14.244.103.191/14.244.103.191 Port: 445 TCP Blocked	2020-02-17 06:28:57
167.114.185.237	attack	Feb 16 22:04:11 ArkNodeAT sshd\[32689\]: Invalid user mysql from 167.114.185.237 Feb 16 22:04:11 ArkNodeAT sshd\[32689\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.185.237 Feb 16 22:04:13 ArkNodeAT sshd\[32689\]: Failed password for invalid user mysql from 167.114.185.237 port 42028 ssh2	2020-02-17 06:26:07
124.156.167.50	attackspambots	TCP port 1522: Scan and connection	2020-02-17 06:04:06
178.154.171.111	attackspam	[Mon Feb 17 01:48:49.109263 2020] [:error] [pid 3979:tid 139656729896704] [client 178.154.171.111:64793] [client 178.154.171.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XkmOkervBbhTzGgGKH7FjwAAADs"] ...	2020-02-17 06:29:39
5.196.74.190	attackbotsspam	Feb 17 03:27:51 gw1 sshd[23250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.74.190 Feb 17 03:27:54 gw1 sshd[23250]: Failed password for invalid user ftpuser from 5.196.74.190 port 37405 ssh2 ...	2020-02-17 06:32:55
157.245.107.214	attackbots	IP blocked	2020-02-17 06:00:46
58.19.1.42	attackspam	Feb 17 00:27:29 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 4 secs$: user=\, method=PLAIN, rip=58.19.1.42, lip=212.111.212.230, session=\ Feb 17 00:27:36 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 8 secs$: user=\, method=PLAIN, rip=58.19.1.42, lip=212.111.212.230, session=\ Feb 17 00:27:39 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 9 secs$: user=\, method=PLAIN, rip=58.19.1.42, lip=212.111.212.230, session=\ Feb 17 00:27:49 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 12 secs$: user=\, method=PLAIN, rip=58.19.1.42, lip=212.111.212.230, session=\ Feb 17 00:27:52 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 12 secs$: user=\, method=PLAIN, rip=58.19.1.42, lip=212.111.212.230, sessi ...	2020-02-17 06:32:43
93.81.177.176	attackspam	Port 1433 Scan	2020-02-17 06:17:02
116.100.159.178	attack	firewall-block, port(s): 8291/tcp	2020-02-17 06:12:33

Recently Reported IPs

26.33.122.145	148.14.164.63	163.166.108.254	145.225.230.208
49.156.46.86	81.202.188.14	45.52.224.175	118.194.20.81
138.56.167.40	45.22.170.149	41.71.97.47	111.72.49.92
236.89.21.142	224.75.89.153	248.120.103.201	104.65.194.110
56.134.255.80	30.191.96.199	147.89.170.88	36.89.70.153