144.21.69.111 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: Oracle Svenska AB

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	port scan and connect, tcp 8443 (https-alt)	2020-09-09 20:52:46
attackbots	port scan and connect, tcp 8443 (https-alt)	2020-09-09 14:50:47
attackspam	port scan and connect, tcp 8443 (https-alt)	2020-09-09 07:00:49
attack	Unauthorized connection attempt detected from IP address 144.21.69.111 to port 10443 [T]	2020-08-14 00:04:55
attack	Scanning an empty webserver with deny all robots.txt	2020-08-07 14:10:24

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 144.21.69.111
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30306
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;144.21.69.111.			IN	A

;; AUTHORITY SECTION:
.			346	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020072801 1800 900 604800 86400

;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jul 29 02:46:07 CST 2020
;; MSG SIZE  rcvd: 117

Host info

111.69.21.144.in-addr.arpa domain name pointer oc-144-21-69-111.compute.oraclecloud.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
111.69.21.144.in-addr.arpa	name = oc-144-21-69-111.compute.oraclecloud.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
141.98.9.34	attackbots	Oct 1 15:19:28 sshgateway sshd\[14825\]: Invalid user Administrator from 141.98.9.34 Oct 1 15:19:28 sshgateway sshd\[14825\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.34 Oct 1 15:19:30 sshgateway sshd\[14825\]: Failed password for invalid user Administrator from 141.98.9.34 port 34759 ssh2	2020-10-01 21:21:12
138.68.150.93	attackbotsspam	138.68.150.93 - - [01/Oct/2020:12:48:02 +0100] "POST /wp-login.php HTTP/1.1" 200 2252 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.150.93 - - [01/Oct/2020:12:48:03 +0100] "POST /wp-login.php HTTP/1.1" 200 2255 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.150.93 - - [01/Oct/2020:12:48:04 +0100] "POST /wp-login.php HTTP/1.1" 200 2204 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-10-01 21:19:24
94.26.117.190	attackbotsspam	SSH login attempts with user root.	2020-10-01 21:02:06
45.143.221.41	attack	[2020-10-01 08:30:30] NOTICE[1182] chan_sip.c: Registration from '"6003" ' failed for '45.143.221.41:5366' - Wrong password [2020-10-01 08:30:30] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-01T08:30:30.138-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="6003",SessionID="0x7f22f80a96e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.41/5366",Challenge="17f4d64d",ReceivedChallenge="17f4d64d",ReceivedHash="cad570b0db4caa845ffa622f98c46522" [2020-10-01 08:30:30] NOTICE[1182] chan_sip.c: Registration from '"6003" ' failed for '45.143.221.41:5366' - Wrong password [2020-10-01 08:30:30] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-01T08:30:30.343-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="6003",SessionID="0x7f22f8029148",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45 ...	2020-10-01 20:40:58
66.99.48.130	attackspam	$f2bV_matches	2020-10-01 21:02:56
190.0.8.134	attackbots	Brute-force attempt banned	2020-10-01 20:51:39
45.148.10.65	attackbots	Oct 1 14:45:32 server sshd[27180]: Failed password for root from 45.148.10.65 port 59502 ssh2 Oct 1 14:46:05 server sshd[27527]: Failed password for root from 45.148.10.65 port 34652 ssh2 Oct 1 14:46:38 server sshd[27809]: Failed password for root from 45.148.10.65 port 38028 ssh2	2020-10-01 21:00:32
123.125.21.125	attackbots	Connection to SSH Honeypot - Detected by HoneypotDB	2020-10-01 21:01:23
103.114.208.198	attack	Oct 1 18:10:58 lunarastro sshd[10550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.114.208.198 Oct 1 18:11:01 lunarastro sshd[10550]: Failed password for invalid user t3rr0r from 103.114.208.198 port 53881 ssh2	2020-10-01 21:10:24
78.189.90.246	attackspambots	23/tcp [2020-09-30]1pkt	2020-10-01 20:54:36
148.101.109.197	attackbots	Invalid user tmpuser from 148.101.109.197 port 56426	2020-10-01 21:12:55
45.129.33.9	attack	TCP (SYN) 45.129.33.9:49123 -> port 13732, len 44	2020-10-01 20:55:51
51.255.173.70	attackbots	Oct 1 14:53:12 srv-ubuntu-dev3 sshd[104774]: Invalid user gy from 51.255.173.70 Oct 1 14:53:12 srv-ubuntu-dev3 sshd[104774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.255.173.70 Oct 1 14:53:12 srv-ubuntu-dev3 sshd[104774]: Invalid user gy from 51.255.173.70 Oct 1 14:53:14 srv-ubuntu-dev3 sshd[104774]: Failed password for invalid user gy from 51.255.173.70 port 34986 ssh2 Oct 1 14:56:48 srv-ubuntu-dev3 sshd[105183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.255.173.70 user=root Oct 1 14:56:51 srv-ubuntu-dev3 sshd[105183]: Failed password for root from 51.255.173.70 port 42230 ssh2 Oct 1 15:00:34 srv-ubuntu-dev3 sshd[105673]: Invalid user jenny from 51.255.173.70 Oct 1 15:00:34 srv-ubuntu-dev3 sshd[105673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.255.173.70 Oct 1 15:00:34 srv-ubuntu-dev3 sshd[105673]: Invalid user jenny from 51.255 ...	2020-10-01 21:18:49
213.135.67.42	attack	Oct 1 17:55:23 dhoomketu sshd[3496660]: Invalid user monitor from 213.135.67.42 port 36200 Oct 1 17:55:23 dhoomketu sshd[3496660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.135.67.42 Oct 1 17:55:23 dhoomketu sshd[3496660]: Invalid user monitor from 213.135.67.42 port 36200 Oct 1 17:55:25 dhoomketu sshd[3496660]: Failed password for invalid user monitor from 213.135.67.42 port 36200 ssh2 Oct 1 17:58:57 dhoomketu sshd[3496683]: Invalid user seedbox from 213.135.67.42 port 43398 ...	2020-10-01 20:46:23
85.209.0.101	attackbotsspam	Oct 1 14:07:44 icinga sshd[7780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.209.0.101 Oct 1 14:07:46 icinga sshd[7781]: Failed password for root from 85.209.0.101 port 50050 ssh2 Oct 1 14:07:46 icinga sshd[7780]: Failed password for invalid user admin from 85.209.0.101 port 50032 ssh2 ...	2020-10-01 21:04:55

Recently Reported IPs

117.30.52.35	95.9.199.224	213.200.147.26	61.91.61.94
197.31.228.241	27.71.94.88	173.196.16.227	49.159.175.3
79.127.116.185	202.102.144.114	90.196.163.76	189.246.146.236
182.181.62.250	158.174.140.229	188.165.197.116	103.25.136.193
91.251.166.20	112.141.80.122	94.159.17.227	180.76.175.164