City: unknown
Region: unknown
Country: India
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.99.111.141
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20263
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.99.111.141. IN A
;; AUTHORITY SECTION:
. 582 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 13:56:26 CST 2022
;; MSG SIZE rcvd: 106141.111.99.14.in-addr.arpa domain name pointer static-141.111.99.14-tataidc.co.in.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
141.111.99.14.in-addr.arpa name = static-141.111.99.14-tataidc.co.in.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 14.162.220.43 | attack | Attempts against SMTP/SSMTP |
2020-02-22 22:18:20 |
| 185.130.59.48 | attackspambots | [munged]::443 185.130.59.48 - - [22/Feb/2020:14:09:48 +0100] "POST /[munged]: HTTP/1.1" 200 7819 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 185.130.59.48 - - [22/Feb/2020:14:12:20 +0100] "POST /[munged]: HTTP/1.1" 200 7819 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 185.130.59.48 - - [22/Feb/2020:14:12:20 +0100] "POST /[munged]: HTTP/1.1" 200 7819 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-02-22 22:37:51 |
| 222.186.190.2 | attackspam | Feb 22 15:20:31 mail sshd\[3547\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.2 user=root Feb 22 15:20:33 mail sshd\[3547\]: Failed password for root from 222.186.190.2 port 38820 ssh2 Feb 22 15:20:36 mail sshd\[3547\]: Failed password for root from 222.186.190.2 port 38820 ssh2 ... |
2020-02-22 22:22:37 |
| 116.104.91.214 | attackbotsspam | Unauthorised access (Feb 22) SRC=116.104.91.214 LEN=40 TTL=43 ID=52038 TCP DPT=8080 WINDOW=7328 SYN Unauthorised access (Feb 21) SRC=116.104.91.214 LEN=40 TTL=43 ID=4998 TCP DPT=8080 WINDOW=7328 SYN Unauthorised access (Feb 19) SRC=116.104.91.214 LEN=40 TTL=43 ID=44411 TCP DPT=8080 WINDOW=7328 SYN Unauthorised access (Feb 16) SRC=116.104.91.214 LEN=40 TTL=43 ID=1364 TCP DPT=23 WINDOW=64576 SYN |
2020-02-22 22:43:54 |
| 200.105.234.131 | attackspam | Feb 22 14:15:47 MK-Soft-VM6 sshd[29751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.105.234.131 ... |
2020-02-22 22:19:29 |
| 177.69.85.145 | attack | Feb 22 10:09:38 firewall sshd[23053]: Invalid user oracle from 177.69.85.145 Feb 22 10:09:41 firewall sshd[23053]: Failed password for invalid user oracle from 177.69.85.145 port 38742 ssh2 Feb 22 10:13:01 firewall sshd[23153]: Invalid user cpanelphpmyadmin from 177.69.85.145 ... |
2020-02-22 22:07:50 |
| 45.143.220.191 | attack | [2020-02-22 09:07:07] NOTICE[1148][C-0000b164] chan_sip.c: Call from '' (45.143.220.191:57072) to extension '0046586739261' rejected because extension not found in context 'public'. [2020-02-22 09:07:07] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-22T09:07:07.546-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="0046586739261",SessionID="0x7fd82c4c0778",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.191/57072",ACLName="no_extension_match" [2020-02-22 09:14:57] NOTICE[1148][C-0000b16b] chan_sip.c: Call from '' (45.143.220.191:59479) to extension '01146586739261' rejected because extension not found in context 'public'. [2020-02-22 09:14:57] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-22T09:14:57.279-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="01146586739261",SessionID="0x7fd82c9bc688",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45. ... |
2020-02-22 22:16:46 |
| 222.186.175.212 | attackspam | 2020-02-22T14:05:55.758100shield sshd\[17727\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.212 user=root 2020-02-22T14:05:57.701290shield sshd\[17727\]: Failed password for root from 222.186.175.212 port 9274 ssh2 2020-02-22T14:06:00.657420shield sshd\[17727\]: Failed password for root from 222.186.175.212 port 9274 ssh2 2020-02-22T14:06:04.026808shield sshd\[17727\]: Failed password for root from 222.186.175.212 port 9274 ssh2 2020-02-22T14:06:07.278720shield sshd\[17727\]: Failed password for root from 222.186.175.212 port 9274 ssh2 |
2020-02-22 22:06:59 |
| 51.75.195.25 | attackspambots | Feb 22 08:40:40 askasleikir sshd[123558]: Failed password for invalid user server from 51.75.195.25 port 41534 ssh2 |
2020-02-22 22:50:54 |
| 222.186.42.75 | attackspambots | 2020-02-22T15:18:34.948964scmdmz1 sshd[15365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.75 user=root 2020-02-22T15:18:37.423873scmdmz1 sshd[15365]: Failed password for root from 222.186.42.75 port 55808 ssh2 2020-02-22T15:18:39.871614scmdmz1 sshd[15365]: Failed password for root from 222.186.42.75 port 55808 ssh2 2020-02-22T15:18:34.948964scmdmz1 sshd[15365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.75 user=root 2020-02-22T15:18:37.423873scmdmz1 sshd[15365]: Failed password for root from 222.186.42.75 port 55808 ssh2 2020-02-22T15:18:39.871614scmdmz1 sshd[15365]: Failed password for root from 222.186.42.75 port 55808 ssh2 2020-02-22T15:18:34.948964scmdmz1 sshd[15365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.75 user=root 2020-02-22T15:18:37.423873scmdmz1 sshd[15365]: Failed password for root from 222.186.42.75 port 55808 ssh2 2020-02-2 |
2020-02-22 22:18:50 |
| 163.172.185.190 | attackbotsspam | Feb 22 14:12:15 nextcloud sshd\[17673\]: Invalid user tecnici from 163.172.185.190 Feb 22 14:12:15 nextcloud sshd\[17673\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.185.190 Feb 22 14:12:16 nextcloud sshd\[17673\]: Failed password for invalid user tecnici from 163.172.185.190 port 34498 ssh2 |
2020-02-22 22:41:17 |
| 222.186.31.83 | attackspam | 22.02.2020 14:02:41 SSH access blocked by firewall |
2020-02-22 22:04:10 |
| 5.196.74.190 | attack | Feb 22 15:33:51 vps647732 sshd[23739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.74.190 Feb 22 15:33:53 vps647732 sshd[23739]: Failed password for invalid user denzel from 5.196.74.190 port 60680 ssh2 ... |
2020-02-22 22:38:52 |
| 103.44.144.53 | attackbots | suspicious action Sat, 22 Feb 2020 10:12:13 -0300 |
2020-02-22 22:47:31 |
| 114.134.88.242 | attack | port scan and connect, tcp 1433 (ms-sql-s) |
2020-02-22 22:35:57 |