58.253.14.200 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
58.253.14.219	attackspambots	Unauthorized connection attempt detected from IP address 58.253.14.219 to port 6656 [T]	2020-01-28 08:37:57

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 58.253.14.200
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39010
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;58.253.14.200.			IN	A

;; AUTHORITY SECTION:
.			472	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 19:48:56 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 200.14.253.58.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 200.14.253.58.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
85.57.145.133	attackspambots	Jun 22 07:17:02 WHD8 dovecot: pop3-login: Disconnected \(auth failed, 1 attempts in 14 secs\): user=\, method=PLAIN, rip=85.57.145.133, lip=10.64.89.208, session=\ Jun 22 07:17:02 WHD8 dovecot: pop3-login: Disconnected \(auth failed, 1 attempts in 17 secs\): user=\, method=PLAIN, rip=85.57.145.133, lip=10.64.89.208, session=\ Jun 22 07:34:13 WHD8 dovecot: pop3-login: Disconnected \(auth failed, 1 attempts in 70 secs\): user=\, method=PLAIN, rip=85.57.145.133, lip=10.64.89.208, session=\ Jun 22 07:34:13 WHD8 dovecot: pop3-login: Disconnected \(auth failed, 1 attempts in 68 secs\): user=\, method=PLAIN, rip=85.57.145.133, lip=10.64.89.208, session=\ Jun 22 07:49:29 WHD8 dovecot: pop3-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=85.57.14 ...	2020-06-22 17:38:10
188.166.246.46	attackbotsspam	Jun 22 05:44:05 xeon sshd[64674]: Failed password for invalid user vdp from 188.166.246.46 port 50522 ssh2	2020-06-22 17:19:49
113.160.248.153	attack	1592797797 - 06/22/2020 05:49:57 Host: 113.160.248.153/113.160.248.153 Port: 445 TCP Blocked	2020-06-22 17:19:06
223.223.190.131	attackbots	2020-06-22T00:24:38.130831xentho-1 sshd[575184]: Invalid user cecilia from 223.223.190.131 port 57215 2020-06-22T00:24:40.468274xentho-1 sshd[575184]: Failed password for invalid user cecilia from 223.223.190.131 port 57215 ssh2 2020-06-22T00:26:15.207674xentho-1 sshd[575213]: Invalid user sinusbot from 223.223.190.131 port 38049 2020-06-22T00:26:15.214252xentho-1 sshd[575213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.223.190.131 2020-06-22T00:26:15.207674xentho-1 sshd[575213]: Invalid user sinusbot from 223.223.190.131 port 38049 2020-06-22T00:26:17.843668xentho-1 sshd[575213]: Failed password for invalid user sinusbot from 223.223.190.131 port 38049 ssh2 2020-06-22T00:27:47.494405xentho-1 sshd[575230]: Invalid user bsp from 223.223.190.131 port 47137 2020-06-22T00:27:47.502229xentho-1 sshd[575230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.223.190.131 2020-06-22T00:27:47.494405xentho- ...	2020-06-22 17:10:25
59.148.20.142	attackbotsspam	Jun 21 23:50:03 cumulus sshd[24949]: Invalid user scan from 59.148.20.142 port 41264 Jun 21 23:50:03 cumulus sshd[24949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.148.20.142 Jun 21 23:50:06 cumulus sshd[24949]: Failed password for invalid user scan from 59.148.20.142 port 41264 ssh2 Jun 21 23:50:06 cumulus sshd[24949]: Received disconnect from 59.148.20.142 port 41264:11: Bye Bye [preauth] Jun 21 23:50:06 cumulus sshd[24949]: Disconnected from 59.148.20.142 port 41264 [preauth] Jun 21 23:55:33 cumulus sshd[25579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.148.20.142 user=r.r Jun 21 23:55:35 cumulus sshd[25579]: Failed password for r.r from 59.148.20.142 port 52594 ssh2 Jun 21 23:55:35 cumulus sshd[25579]: Received disconnect from 59.148.20.142 port 52594:11: Bye Bye [preauth] Jun 21 23:55:35 cumulus sshd[25579]: Disconnected from 59.148.20.142 port 52594 [preauth] ........ ------------------------------------	2020-06-22 17:34:32
192.241.142.120	attack	Jun 22 10:46:59 minden010 sshd[18890]: Failed password for root from 192.241.142.120 port 44282 ssh2 Jun 22 10:52:58 minden010 sshd[22015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.142.120 Jun 22 10:53:00 minden010 sshd[22015]: Failed password for invalid user cav from 192.241.142.120 port 60780 ssh2 ...	2020-06-22 17:41:54
41.223.4.155	attackspam	Jun 22 06:26:17 XXX sshd[43663]: Invalid user rapid from 41.223.4.155 port 39554	2020-06-22 17:07:42
202.165.224.68	attackspam	[Mon Jun 22 05:56:25.253920 2020] [:error] [pid 162402] [client 202.165.224.68:46162] [client 202.165.224.68] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 6)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "200.132.59.214"] [uri "/dana-na"] [unique_id "XvByOQB4hBpmyrL38uv-uQAAAAQ"] ...	2020-06-22 17:12:51
103.116.84.217	attackbots	firewall-block, port(s): 80/tcp	2020-06-22 17:08:39
157.245.104.96	attackbotsspam	SSHD unauthorised connection attempt (a)	2020-06-22 17:35:50
15.20.109.22	attackbots	smut spammer	2020-06-22 17:43:50
188.166.172.189	attackspambots	2020-06-22T07:44:01+0200 Failed SSH Authentication/Brute Force Attack. (Server 5)	2020-06-22 17:17:26
178.128.70.61	attack	k+ssh-bruteforce	2020-06-22 17:09:00
183.100.236.215	attack	5x Failed Password	2020-06-22 17:20:04
86.62.114.140	attackspambots	firewall-block, port(s): 445/tcp	2020-06-22 17:12:14

Recently Reported IPs

79.143.46.155	94.31.91.14	185.33.169.120	185.65.65.195
193.202.12.217	94.205.141.114	171.224.241.144	217.129.123.140
59.98.191.135	212.102.33.149	114.36.186.78	87.107.246.25
182.161.23.166	159.192.166.107	117.111.24.184	77.78.13.160
91.106.73.25	2.187.32.236	144.255.28.227	138.197.0.138