1.214.214.210 - IPInfo

Basic Info

City: Mapo-gu

Region: Seoul Special City

Country: South Korea

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.214.214.170	attackbotsspam	SSH Scan	2020-01-31 15:48:32
1.214.214.170	attackspambots	Unauthorized connection attempt detected from IP address 1.214.214.170 to port 80 [J]	2020-01-26 01:08:56
1.214.214.170	attack	Unauthorized connection attempt detected from IP address 1.214.214.170 to port 80	2020-01-04 08:16:13
1.214.214.170	attackbots	Unauthorized connection attempt detected from IP address 1.214.214.170 to port 80	2019-12-31 03:49:52

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.214.214.210
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60560
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.214.214.210.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025032002 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 21 12:10:10 CST 2025
;; MSG SIZE  rcvd: 106

Host info

Host 210.214.214.1.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 210.214.214.1.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
177.74.182.206	attackbotsspam	(smtpauth) Failed SMTP AUTH login from 177.74.182.206 (BR/Brazil/177-74-182-206.dynamic.mdnetfibra.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-06-04 08:23:24 plain authenticator failed for 177-74-182-206.dynamic.mdnetfibra.com [177.74.182.206]: 535 Incorrect authentication data (set_id=training)	2020-06-04 15:49:15
151.238.124.94	attackspambots	(imapd) Failed IMAP login from 151.238.124.94 (IR/Iran/151-238-124-94.shatel.ir): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jun 4 08:23:49 ir1 dovecot[2885757]: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=151.238.124.94, lip=5.63.12.44, session=<9gh8FzqnuDSX7nxe>	2020-06-04 15:32:33
203.73.219.150	attackspam	kidness.family 203.73.219.150 [04/Jun/2020:05:53:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4265 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" kidness.family 203.73.219.150 [04/Jun/2020:05:53:07 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4265 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36"	2020-06-04 15:58:52
111.231.87.209	attack	Failed password for root from 111.231.87.209 port 53538 ssh2	2020-06-04 15:43:21
190.165.166.138	attackspambots	190.165.166.138 (CO/Colombia/adsl-190-165-166-138.une.net.co), 12 distributed sshd attacks on account [root] in the last 3600 secs	2020-06-04 15:44:31
222.186.175.151	attack	Jun 4 04:21:01 firewall sshd[31862]: Failed password for root from 222.186.175.151 port 55334 ssh2 Jun 4 04:21:05 firewall sshd[31862]: Failed password for root from 222.186.175.151 port 55334 ssh2 Jun 4 04:21:08 firewall sshd[31862]: Failed password for root from 222.186.175.151 port 55334 ssh2 ...	2020-06-04 15:40:42
85.140.114.34	attackbotsspam	kidness.family 85.140.114.34 [04/Jun/2020:05:53:56 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4265 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" kidness.family 85.140.114.34 [04/Jun/2020:05:54:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4265 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36"	2020-06-04 15:29:47
106.12.184.202	attack	Jun 3 18:54:35 auw2 sshd\[29894\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.184.202 user=root Jun 3 18:54:37 auw2 sshd\[29894\]: Failed password for root from 106.12.184.202 port 39012 ssh2 Jun 3 18:58:44 auw2 sshd\[30194\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.184.202 user=root Jun 3 18:58:46 auw2 sshd\[30194\]: Failed password for root from 106.12.184.202 port 36920 ssh2 Jun 3 19:02:51 auw2 sshd\[30476\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.184.202 user=root	2020-06-04 15:36:02
106.12.91.36	attackbotsspam	$f2bV_matches	2020-06-04 15:42:04
103.242.200.38	attack	Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-06-04 15:31:40
36.67.70.196	attackspambots	Jun 4 10:01:24 lukav-desktop sshd\[10720\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.67.70.196 user=root Jun 4 10:01:26 lukav-desktop sshd\[10720\]: Failed password for root from 36.67.70.196 port 49852 ssh2 Jun 4 10:05:33 lukav-desktop sshd\[31155\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.67.70.196 user=root Jun 4 10:05:35 lukav-desktop sshd\[31155\]: Failed password for root from 36.67.70.196 port 53388 ssh2 Jun 4 10:09:39 lukav-desktop sshd\[3663\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.67.70.196 user=root	2020-06-04 15:57:23
159.203.30.208	attack	Jun 4 05:39:05 Ubuntu-1404-trusty-64-minimal sshd\[12582\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.30.208 user=root Jun 4 05:39:06 Ubuntu-1404-trusty-64-minimal sshd\[12582\]: Failed password for root from 159.203.30.208 port 40089 ssh2 Jun 4 05:49:27 Ubuntu-1404-trusty-64-minimal sshd\[17223\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.30.208 user=root Jun 4 05:49:30 Ubuntu-1404-trusty-64-minimal sshd\[17223\]: Failed password for root from 159.203.30.208 port 52021 ssh2 Jun 4 05:53:11 Ubuntu-1404-trusty-64-minimal sshd\[19454\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.30.208 user=root	2020-06-04 15:57:00
222.135.77.101	attack	(sshd) Failed SSH login from 222.135.77.101 (CN/China/-): 5 in the last 3600 secs	2020-06-04 15:16:53
185.130.184.207	attackbots	[2020-06-04 03:06:02] NOTICE[1288] chan_sip.c: Registration from '' failed for '185.130.184.207:63764' - Wrong password [2020-06-04 03:06:02] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-04T03:06:02.105-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7354",SessionID="0x7f4d740fb4f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.130.184.207/63764",Challenge="0ceb5080",ReceivedChallenge="0ceb5080",ReceivedHash="a0e6f29d038e21428cd2de0443dab941" [2020-06-04 03:06:27] NOTICE[1288] chan_sip.c: Registration from '' failed for '185.130.184.207:60206' - Wrong password [2020-06-04 03:06:27] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-04T03:06:27.069-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="409",SessionID="0x7f4d7403c148",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.130.1 ...	2020-06-04 15:13:44
222.186.15.158	attackbots	Jun 4 09:44:42 vmi345603 sshd[24663]: Failed password for root from 222.186.15.158 port 15769 ssh2 Jun 4 09:44:45 vmi345603 sshd[24663]: Failed password for root from 222.186.15.158 port 15769 ssh2 ...	2020-06-04 15:48:18

Recently Reported IPs

154.64.143.175	245.0.0.244	57.25.82.52	181.0.139.21
220.162.119.104	100.84.49.239	251.15.188.251	17.13.92.230
104.238.220.195	8.114.198.241	192.168.2.234	123.20.171.42
92.93.152.131	70.118.254.41	124.218.77.223	194.153.113.0
214.109.240.157	209.55.123.200	206.33.235.186	133.247.77.145