114.99.0.224 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
114.99.0.204	attackbots	MAIL: User Login Brute Force Attempt	2020-03-12 06:36:16
114.99.0.62	attackbots	Lines containing failures of 114.99.0.62 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=114.99.0.62	2020-02-26 10:31:16
114.99.0.3	attack	Unauthorized connection attempt detected from IP address 114.99.0.3 to port 6656 [T]	2020-01-30 14:48:32
114.99.0.140	attack	Unauthorized connection attempt detected from IP address 114.99.0.140 to port 6656 [T]	2020-01-27 04:32:38
114.99.0.120	attackbots	Brute force attempt	2020-01-11 05:46:41
114.99.0.30	attack	Brute force attempt	2020-01-10 07:21:34
114.99.0.221	attackspambots	Nov 9 01:05:41 eola postfix/smtpd[31453]: connect from unknown[114.99.0.221] Nov 9 01:05:41 eola postfix/smtpd[31453]: NOQUEUE: reject: RCPT from unknown[114.99.0.221]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=<36hp89k> Nov 9 01:05:41 eola postfix/smtpd[31453]: disconnect from unknown[114.99.0.221] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4 Nov 9 01:05:42 eola postfix/smtpd[31453]: connect from unknown[114.99.0.221] Nov 9 01:05:43 eola postfix/smtpd[31453]: lost connection after AUTH from unknown[114.99.0.221] Nov 9 01:05:43 eola postfix/smtpd[31453]: disconnect from unknown[114.99.0.221] ehlo=1 auth=0/1 commands=1/2 Nov 9 01:05:43 eola postfix/smtpd[31453]: connect from unknown[114.99.0.221] Nov 9 01:05:44 eola postfix/smtpd[31453]: lost connection after AUTH from unknown[114.99.0.221] Nov 9 01:05:44 eola postfix/smtpd[31453]: disconnect from unknown[114.99.0.221] ehlo=1 auth=0/1 commands=1/2 Nov 9 01:05:44 eola........ -------------------------------	2019-11-09 17:59:40
114.99.0.39	attackbotsspam	Oct 1 04:33:59 mxgate1 postfix/postscreen[15902]: CONNECT from [114.99.0.39]:51190 to [176.31.12.44]:25 Oct 1 04:33:59 mxgate1 postfix/dnsblog[15906]: addr 114.99.0.39 listed by domain zen.spamhaus.org as 127.0.0.11 Oct 1 04:33:59 mxgate1 postfix/dnsblog[15906]: addr 114.99.0.39 listed by domain zen.spamhaus.org as 127.0.0.4 Oct 1 04:33:59 mxgate1 postfix/dnsblog[15904]: addr 114.99.0.39 listed by domain b.barracudacentral.org as 127.0.0.2 Oct 1 04:34:00 mxgate1 postfix/dnsblog[15907]: addr 114.99.0.39 listed by domain cbl.abuseat.org as 127.0.0.2 Oct 1 04:34:05 mxgate1 postfix/postscreen[15902]: DNSBL rank 4 for [114.99.0.39]:51190 Oct x@x Oct 1 04:34:06 mxgate1 postfix/postscreen[15902]: DISCONNECT [114.99.0.39]:51190 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=114.99.0.39	2019-10-04 14:58:59

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.99.0.224
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17575
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;114.99.0.224.			IN	A

;; AUTHORITY SECTION:
.			588	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400

;; Query time: 25 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 05 03:40:02 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 224.0.99.114.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 224.0.99.114.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
41.41.128.125	attack	Web app attack attempts, scanning for vulnerability. Date: 2020 Jan 11. 04:48:21 Source IP: 41.41.128.125 Portion of the log(s): 41.41.128.125 - [11/Jan/2020:04:48:19 +0100] "GET /help-e.php HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0" 41.41.128.125 - [11/Jan/2020:04:48:19 +0100] GET /logon.php 41.41.128.125 - [11/Jan/2020:04:48:18 +0100] GET /db_pma.php 41.41.128.125 - [11/Jan/2020:04:48:18 +0100] GET /db_cts.php 41.41.128.125 - [11/Jan/2020:04:48:18 +0100] GET /test.php 41.41.128.125 - [11/Jan/2020:04:48:18 +0100] GET /_query.php 41.41.128.125 - [11/Jan/2020:04:48:18 +0100] GET /java.php 41.41.128.125 - [11/Jan/2020:04:48:18 +0100] GET /help.php 41.41.128.125 - [11/Jan/2020:04:48:18 +0100] GET /webdav/ 41.41.128.125 - [11/Jan/2020:04:48:17 +0100] OST /forums/index.php 41.41.128.125 - [11/Jan/2020:04:48:17 +0100] POST /forum/index.php 41.41.128.125 - [11/Jan/2020:04:48:16 +0100] POST /bbs/index.php	2020-01-11 14:20:56
218.81.198.14	attack	Automatic report - Port Scan Attack	2020-01-11 14:46:32
31.14.142.109	attack	2020-01-11T05:57:29.513818centos sshd\[29208\]: Invalid user user from 31.14.142.109 port 49257 2020-01-11T05:57:29.518553centos sshd\[29208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.109 2020-01-11T05:57:31.002478centos sshd\[29208\]: Failed password for invalid user user from 31.14.142.109 port 49257 ssh2	2020-01-11 14:18:07
128.14.134.170	attackspam	Unauthorized connection attempt detected from IP address 128.14.134.170 to port 8080	2020-01-11 14:54:33
185.176.27.122	attackspambots	01/11/2020-01:00:42.063677 185.176.27.122 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-01-11 14:06:10
92.118.161.5	attackspambots	Jan 11 05:56:49 debian-2gb-nbg1-2 kernel: \[977918.416529\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=92.118.161.5 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=22778 PROTO=TCP SPT=63410 DPT=111 WINDOW=1024 RES=0x00 SYN URGP=0	2020-01-11 14:42:55
67.71.194.71	attack	Jan 11 05:57:35 grey postfix/smtpd\[14148\]: NOQUEUE: reject: RCPT from unknown\[67.71.194.71\]: 554 5.7.1 Service unavailable\; Client host \[67.71.194.71\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[67.71.194.71\]\; from=\ to=\ proto=ESMTP helo=\<\[67.71.194.71\]\> ...	2020-01-11 14:15:49
77.247.108.77	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 70 - port: 5038 proto: TCP cat: Misc Attack	2020-01-11 14:45:32
51.158.24.203	attackspambots	ET CINS Active Threat Intelligence Poor Reputation IP group 42 - port: 5060 proto: UDP cat: Misc Attack	2020-01-11 14:47:59
218.92.0.175	attackspambots	2019-11-24 23:21:53,147 fail2ban.actions [774]: NOTICE [sshd] Ban 218.92.0.175 2019-11-25 04:05:46,300 fail2ban.actions [774]: NOTICE [sshd] Ban 218.92.0.175 2019-11-25 08:20:27,964 fail2ban.actions [774]: NOTICE [sshd] Ban 218.92.0.175 ...	2020-01-11 14:16:16
50.239.163.172	attackbotsspam	3x Failed Password	2020-01-11 14:23:45
132.232.52.86	attackspam	Jan 11 06:18:43 ip-172-31-4-191 sshd\[2111\]: Invalid user gopher from 132.232.52.86 Jan 11 06:21:30 ip-172-31-4-191 sshd\[2114\]: Invalid user backuppc from 132.232.52.86 Jan 11 06:24:44 ip-172-31-4-191 sshd\[2116\]: Invalid user cron from 132.232.52.86 ...	2020-01-11 14:46:15
112.85.42.173	attackspam	Jan 11 07:50:45 nextcloud sshd\[4164\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.173 user=root Jan 11 07:50:48 nextcloud sshd\[4164\]: Failed password for root from 112.85.42.173 port 44201 ssh2 Jan 11 07:50:51 nextcloud sshd\[4164\]: Failed password for root from 112.85.42.173 port 44201 ssh2 ...	2020-01-11 14:56:18
203.136.22.250	attackspam	1578718597 - 01/11/2020 05:56:37 Host: 203.136.22.250/203.136.22.250 Port: 445 TCP Blocked	2020-01-11 14:50:58
221.5.11.110	attackbots	spam	2020-01-11 14:44:30

Recently Reported IPs

114.99.0.223	114.99.0.231	114.99.0.228	114.99.0.238
114.99.0.237	114.99.0.240	114.99.0.24	114.99.0.242
114.99.0.232	114.99.0.244	115.225.52.174	114.99.0.246
159.226.180.31	114.99.0.248	114.99.0.249	114.99.0.252
115.225.52.21	114.99.0.26	114.99.0.250	114.99.0.254