IP address


.00014.225.212.124
Shodan(more info)
Passive DNS
Tags:

Threat categories

TLRoleCategoryDetails
25 dst cc malware_family: elf.inc, win.netc

Origin AS
AS135905 - VNPT-AS-VN
BGP Prefix
14.225.212.0/24
geo
Vietnam, Haiphong
🕑 Asia/Bangkok
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
14.224.0.0 - 14.255.255.255
last_activity
2026-08-28 00:00:00
rep
0.0
reserved_range
0
Shodan's InternetDB
Open ports: 22, 80, 443, 7000, 8001, 8085, 8086, 8087, 21116, 30005, 50050
Tags: proxy, c2, eol-product, self-signed
CPEs: cpe:/a:f5:nginx:1.18.0, cpe:/a:getbootstrap:bootstrap:5.3.3, cpe:/a:helpsystems:cobalt_strike, cpe:/o:linux:linux_kernel, cpe:/a:rustdesk:rustdesk, cpe:/a:apache:http_server:2.4.65, cpe:/a:python:python, cpe:/a:encode:uvicorn, cpe:/a:openbsd:openssh:8.9p1, cpe:/o:canonical:ubuntu_linux, cpe:/a:php:php:8.1.34, cpe:/o:debian:debian_linux
ts_added
2026-08-28 07:15:43.179000
ts_last_update
2026-09-19 07:15:52.592000

Warden event timeline

DShield event timeline