103.214.99.149

Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
103.214.99.170	attack	Oct 8 14:52:44 www sshd\[13835\]: Invalid user BGT%VFR$ from 103.214.99.170Oct 8 14:52:47 www sshd\[13835\]: Failed password for invalid user BGT%VFR$ from 103.214.99.170 port 60122 ssh2Oct 8 14:57:33 www sshd\[13979\]: Invalid user BGT%VFR$ from 103.214.99.170 ...	2019-10-08 20:06:31
103.214.99.170	attack	2019-10-05T08:58:34.6196101495-001 sshd\[18285\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.214.99.170 user=root 2019-10-05T08:58:37.0122491495-001 sshd\[18285\]: Failed password for root from 103.214.99.170 port 57830 ssh2 2019-10-05T09:03:37.7301131495-001 sshd\[18657\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.214.99.170 user=root 2019-10-05T09:03:39.3851161495-001 sshd\[18657\]: Failed password for root from 103.214.99.170 port 43628 ssh2 2019-10-05T09:08:41.8721521495-001 sshd\[18957\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.214.99.170 user=root 2019-10-05T09:08:43.9284211495-001 sshd\[18957\]: Failed password for root from 103.214.99.170 port 57660 ssh2 ...	2019-10-05 21:20:33

Type

Details

Datetime

103.214.99.170

attack

Oct  8 14:52:44 www sshd\[13835\]: Invalid user BGT%VFR$ from 103.214.99.170Oct  8 14:52:47 www sshd\[13835\]: Failed password for invalid user BGT%VFR$ from 103.214.99.170 port 60122 ssh2Oct  8 14:57:33 www sshd\[13979\]: Invalid user BGT%VFR$ from 103.214.99.170
...

2019-10-08 20:06:31

103.214.99.170

attack

2019-10-05T08:58:34.6196101495-001 sshd\[18285\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.214.99.170  user=root
2019-10-05T08:58:37.0122491495-001 sshd\[18285\]: Failed password for root from 103.214.99.170 port 57830 ssh2
2019-10-05T09:03:37.7301131495-001 sshd\[18657\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.214.99.170  user=root
2019-10-05T09:03:39.3851161495-001 sshd\[18657\]: Failed password for root from 103.214.99.170 port 43628 ssh2
2019-10-05T09:08:41.8721521495-001 sshd\[18957\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.214.99.170  user=root
2019-10-05T09:08:43.9284211495-001 sshd\[18957\]: Failed password for root from 103.214.99.170 port 57660 ssh2
...

2019-10-05 21:20:33

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.214.99.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30438
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.214.99.149.			IN	A

;; AUTHORITY SECTION:
.			220	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022100500 1800 900 604800 86400

;; Query time: 78 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 06 00:58:38 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 149.99.214.103.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 149.99.214.103.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
110.43.208.237	attackspambots	[MK-VM4] Blocked by UFW	2020-04-10 03:50:43
217.182.67.242	attackspambots	Apr 9 21:19:13 silence02 sshd[18579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.67.242 Apr 9 21:19:15 silence02 sshd[18579]: Failed password for invalid user rails from 217.182.67.242 port 57959 ssh2 Apr 9 21:23:37 silence02 sshd[19028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.67.242	2020-04-10 03:29:33
193.142.146.21	attack	prod8 ...	2020-04-10 03:48:28
183.88.232.215	attackspam	(imapd) Failed IMAP login from 183.88.232.215 (TH/Thailand/mx-ll-183.88.232-215.dynamic.3bb.co.th): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 9 17:28:17 ir1 dovecot[566034]: imap-login: Disconnected (auth failed, 1 attempts in 8 secs): user=, method=PLAIN, rip=183.88.232.215, lip=5.63.12.44, session=	2020-04-10 03:47:23
104.238.73.216	attackbots	104.238.73.216 - - [09/Apr/2020:21:19:39 +0200] "POST /wp-login.php HTTP/1.0" 200 2504 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.238.73.216 - - [09/Apr/2020:21:19:40 +0200] "POST /wp-login.php HTTP/1.0" 200 2485 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-04-10 03:42:46
61.6.230.28	attackspambots	Wordpress login scanning	2020-04-10 03:57:39
218.92.0.165	attackspambots	Apr 10 02:21:55 webhost01 sshd[462]: Failed password for root from 218.92.0.165 port 4075 ssh2 Apr 10 02:22:04 webhost01 sshd[462]: Failed password for root from 218.92.0.165 port 4075 ssh2 ...	2020-04-10 03:27:06
114.69.249.194	attack	Apr 9 19:38:53 vps333114 sshd[531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.69.249.194 Apr 9 19:38:55 vps333114 sshd[531]: Failed password for invalid user radware from 114.69.249.194 port 33042 ssh2 ...	2020-04-10 03:47:36
222.186.175.215	attack	04/09/2020-15:22:34.445839 222.186.175.215 Protocol: 6 ET SCAN Potential SSH Scan	2020-04-10 03:24:53
188.128.39.127	attackbots	2020-04-09T21:17:51.763294ns386461 sshd\[21185\]: Invalid user a from 188.128.39.127 port 54506 2020-04-09T21:17:51.767810ns386461 sshd\[21185\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.128.39.127 2020-04-09T21:17:53.873361ns386461 sshd\[21185\]: Failed password for invalid user a from 188.128.39.127 port 54506 ssh2 2020-04-09T21:32:09.001346ns386461 sshd\[2163\]: Invalid user sftp from 188.128.39.127 port 59490 2020-04-09T21:32:09.005773ns386461 sshd\[2163\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.128.39.127 ...	2020-04-10 03:35:56
74.56.131.113	attackbots	SSH Brute Force	2020-04-10 03:24:23
178.62.37.78	attackbotsspam	Apr 9 14:52:15 ns381471 sshd[5492]: Failed password for jira from 178.62.37.78 port 44734 ssh2	2020-04-10 03:40:16
222.186.31.166	attackspambots	Apr 9 19:23:25 scw-6657dc sshd[5030]: Failed password for root from 222.186.31.166 port 37123 ssh2 Apr 9 19:23:25 scw-6657dc sshd[5030]: Failed password for root from 222.186.31.166 port 37123 ssh2 Apr 9 19:23:27 scw-6657dc sshd[5030]: Failed password for root from 222.186.31.166 port 37123 ssh2 ...	2020-04-10 03:25:25
202.148.28.83	attack	Apr 9 17:58:05 ns382633 sshd\[31424\]: Invalid user lab from 202.148.28.83 port 48824 Apr 9 17:58:05 ns382633 sshd\[31424\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.148.28.83 Apr 9 17:58:06 ns382633 sshd\[31424\]: Failed password for invalid user lab from 202.148.28.83 port 48824 ssh2 Apr 9 18:06:01 ns382633 sshd\[938\]: Invalid user admin from 202.148.28.83 port 41118 Apr 9 18:06:01 ns382633 sshd\[938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.148.28.83	2020-04-10 03:51:46
66.33.212.120	attackbotsspam	66.33.212.120 - - [09/Apr/2020:14:58:07 +0200] "GET /wp-login.php HTTP/1.1" 200 5702 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 66.33.212.120 - - [09/Apr/2020:14:58:08 +0200] "POST /wp-login.php HTTP/1.1" 200 6601 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 66.33.212.120 - - [09/Apr/2020:14:58:09 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-04-10 03:56:36

Recently Reported IPs

2.15.95.189	194.196.22.60	166.79.210.66	123.100.203.169
220.112.123.119	169.141.138.144	216.127.1.114	233.186.130.8
86.212.178.26	9.150.105.248	94.180.100.36	78.33.76.138
138.11.46.47	161.216.41.57	92.246.1.14	237.170.68.208
46.8.113.219	249.123.64.203	98.141.63.112	205.35.30.124