IP address
Shodan(more info)

Passive DNS

Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 25 | dst | cc | malware_family: elf.inc, win.netc |
- Origin AS
- AS135905 - VNPT-AS-VN
- BGP Prefix
- 14.225.212.0/24
- geo
- Vietnam, Haiphong
- 🕑 Asia/Bangkok
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 14.224.0.0 - 14.255.255.255
- last_activity
- 2026-08-28 00:00:00
- rep
- 0.0
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 22, 80, 443, 7000, 8001, 8085, 8086, 8087, 21116, 30005, 50050
- Tags: proxy, c2, eol-product, self-signed
- CPEs: cpe:/a:f5:nginx:1.18.0, cpe:/a:getbootstrap:bootstrap:5.3.3, cpe:/a:helpsystems:cobalt_strike, cpe:/o:linux:linux_kernel, cpe:/a:rustdesk:rustdesk, cpe:/a:apache:http_server:2.4.65, cpe:/a:python:python, cpe:/a:encode:uvicorn, cpe:/a:openbsd:openssh:8.9p1, cpe:/o:canonical:ubuntu_linux, cpe:/a:php:php:8.1.34, cpe:/o:debian:debian_linux
- ts_added
- 2026-08-28 07:15:43.179000
- ts_last_update
- 2026-09-19 07:15:52.592000
Warden event timeline
DShield event timeline

