14.192.48.47 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Malaysia

Internet Service Provider: Light Cloud Technology

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	SSH Brute-Forcing (server2)	2020-08-18 04:39:32

Comments on same subnet:

IP	Type	Details	Datetime
14.192.48.2	attackspam	Invalid user webcam from 14.192.48.2 port 41586	2020-08-22 15:46:22

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.192.48.47
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20827
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.192.48.47.			IN	A

;; AUTHORITY SECTION:
.			355	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020081701 1800 900 604800 86400

;; Query time: 72 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Aug 18 04:39:29 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 47.48.192.14.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 47.48.192.14.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
159.89.1.19	attack	159.89.1.19 - - [29/Feb/2020:05:44:51 +0000] "POST /wp-login.php HTTP/1.1" 200 6409 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.89.1.19 - - [29/Feb/2020:05:44:52 +0000] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-02-29 15:05:47
106.105.218.18	attackbotsspam	Port probing on unauthorized port 23	2020-02-29 15:01:00
78.139.200.51	attackspam	Potential Directory Traversal Attempt.	2020-02-29 14:59:31
24.232.131.128	attack	Feb 29 07:49:26 sso sshd[17000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.232.131.128 Feb 29 07:49:29 sso sshd[17000]: Failed password for invalid user eric from 24.232.131.128 port 43012 ssh2 ...	2020-02-29 15:01:36
45.143.220.164	attack	[2020-02-29 02:14:43] NOTICE[1148] chan_sip.c: Registration from '"100501" ' failed for '45.143.220.164:5702' - Wrong password [2020-02-29 02:14:43] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-29T02:14:43.872-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="100501",SessionID="0x7fd82c81c298",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.164/5702",Challenge="0cb31305",ReceivedChallenge="0cb31305",ReceivedHash="188888e132c3469d0214a98807317db4" [2020-02-29 02:14:43] NOTICE[1148] chan_sip.c: Registration from '"100501" ' failed for '45.143.220.164:5702' - Wrong password [2020-02-29 02:14:43] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-29T02:14:43.978-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="100501",SessionID="0x7fd82c39c1e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddre ...	2020-02-29 15:33:30
106.13.37.147	attackbots	Feb 28 20:42:21 web1 sshd\[319\]: Invalid user appimgr from 106.13.37.147 Feb 28 20:42:21 web1 sshd\[319\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.37.147 Feb 28 20:42:23 web1 sshd\[319\]: Failed password for invalid user appimgr from 106.13.37.147 port 38332 ssh2 Feb 28 20:47:49 web1 sshd\[871\]: Invalid user cc from 106.13.37.147 Feb 28 20:47:49 web1 sshd\[871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.37.147	2020-02-29 15:37:43
86.122.136.157	attackbotsspam	Automatic report - Port Scan Attack	2020-02-29 15:25:11
14.161.45.187	attackspambots	Feb 29 08:22:00 silence02 sshd[25976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187 Feb 29 08:22:02 silence02 sshd[25976]: Failed password for invalid user guoyifan from 14.161.45.187 port 36942 ssh2 Feb 29 08:27:31 silence02 sshd[26219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.45.187	2020-02-29 15:28:57
213.234.26.179	attack	Invalid user xxx from 213.234.26.179 port 34281	2020-02-29 14:57:54
116.193.134.7	attack	scan z	2020-02-29 15:10:12
185.143.223.168	attack	Feb 29 08:01:25 grey postfix/smtpd\[27282\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.168\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.168\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.168\]\; from=\ to=\ proto=ESMTP helo=\<\[185.143.223.170\]\>Feb 29 08:01:25 grey postfix/smtpd\[27282\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.168\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.168\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.168\]\; from=\ to=\ proto=ESMTP helo=\<\[185.143.223.170\]\>Feb 29 08:01:25 grey postfix/smtpd\[27282\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.168\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.168\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.168\]\; from=\< ...	2020-02-29 15:17:01
93.174.93.195	attack	firewall-block, port(s): 54321/udp, 55000/udp, 55031/udp, 55040/udp, 55051/udp	2020-02-29 15:43:07
184.105.139.104	attackspambots	" "	2020-02-29 15:02:16
112.252.174.43	attackbotsspam	[portscan] Port scan	2020-02-29 15:35:01
54.39.145.31	attackspambots	Feb 28 21:00:52 web1 sshd\[2166\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.145.31 user=root Feb 28 21:00:54 web1 sshd\[2166\]: Failed password for root from 54.39.145.31 port 36804 ssh2 Feb 28 21:10:13 web1 sshd\[3112\]: Invalid user takaki from 54.39.145.31 Feb 28 21:10:13 web1 sshd\[3112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.145.31 Feb 28 21:10:14 web1 sshd\[3112\]: Failed password for invalid user takaki from 54.39.145.31 port 49302 ssh2	2020-02-29 15:37:12

Recently Reported IPs

57.75.114.148	93.212.236.150	139.234.125.252	212.70.149.4
37.211.93.210	65.26.109.22	221.226.29.194	198.98.58.127
123.205.245.111	202.74.239.140	126.36.91.6	91.132.146.158
54.174.52.134	180.249.165.239	123.191.206.65	45.169.140.34
24.234.114.110	60.37.9.219	180.76.51.143	148.23.176.222