214.1.38.16 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: DoD Network Information Center

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 214.1.38.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45236
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;214.1.38.16.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070101 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jul 02 02:55:04 CST 2019
;; MSG SIZE  rcvd: 115

Host info

16.38.1.214.in-addr.arpa domain name pointer dha-38-16.health.mil.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
16.38.1.214.in-addr.arpa	name = dha-38-16.health.mil.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.147.215.8	attack	[2020-09-04 03:29:10] NOTICE[1194] chan_sip.c: Registration from '' failed for '185.147.215.8:51690' - Wrong password [2020-09-04 03:29:10] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-04T03:29:10.181-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="6943",SessionID="0x7f2ddc0e4da8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8/51690",Challenge="5247aa61",ReceivedChallenge="5247aa61",ReceivedHash="05ccd28f84a38f58bd1f5d474f5dfd1a" [2020-09-04 03:29:49] NOTICE[1194] chan_sip.c: Registration from '' failed for '185.147.215.8:63899' - Wrong password [2020-09-04 03:29:49] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-04T03:29:49.515-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5446",SessionID="0x7f2ddc0e4da8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8 ...	2020-09-04 15:30:08
118.69.71.106	attack	fail2ban	2020-09-04 15:53:52
73.186.246.242	attackbotsspam	Firewall Dropped Connection	2020-09-04 15:30:52
67.158.6.30	attackspam	Brute forcing email accounts	2020-09-04 15:45:21
94.253.211.89	attack	Sep 3 18:47:05 mellenthin postfix/smtpd[20751]: NOQUEUE: reject: RCPT from cpe-94-253-211-89.st2.cable.xnet.hr[94.253.211.89]: 554 5.7.1 Service unavailable; Client host [94.253.211.89] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/94.253.211.89; from= to= proto=ESMTP helo=	2020-09-04 15:43:22
176.194.188.66	attackbotsspam	445/tcp [2020-09-03]1pkt	2020-09-04 15:50:03
148.102.25.170	attackbots	Sep 4 07:14:49 kh-dev-server sshd[5883]: Failed password for root from 148.102.25.170 port 39422 ssh2 ...	2020-09-04 15:48:25
185.127.24.58	attackspambots	05:45:44.173 1 SMTPI-000168([185.127.24.58]) failed to open 'no-reply@womble.org'. Connection from [185.127.24.58]:62412. Error Code=unknown user account 06:09:36.205 1 SMTPI-000174([185.127.24.58]) failed to open 'no-reply@womble.org'. Connection from [185.127.24.58]:50052. Error Code=unknown user account ...	2020-09-04 15:51:53
188.226.167.212	attack	$f2bV_matches	2020-09-04 15:16:35
67.85.226.26	attackbots	SSH/22 MH Probe, BF, Hack -	2020-09-04 15:37:04
117.211.126.230	attackspambots	Sep 3 17:33:43 localhost sshd[90553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.211.126.230 user=root Sep 3 17:33:45 localhost sshd[90553]: Failed password for root from 117.211.126.230 port 39106 ssh2 Sep 3 17:37:29 localhost sshd[90875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.211.126.230 user=root Sep 3 17:37:30 localhost sshd[90875]: Failed password for root from 117.211.126.230 port 58812 ssh2 Sep 3 17:41:11 localhost sshd[91212]: Invalid user ec2-user from 117.211.126.230 port 50280 ...	2020-09-04 15:31:35
199.175.43.118	attackspam	TCP (SYN) 199.175.43.118:48966 -> port 1433, len 40	2020-09-04 15:34:50
157.0.134.164	attackbots	Ssh brute force	2020-09-04 15:42:14
183.2.102.19	attackspambots	Lines containing failures of 183.2.102.19 Sep 2 04:40:06 newdogma sshd[28433]: Invalid user csvn from 183.2.102.19 port 40690 Sep 2 04:40:06 newdogma sshd[28433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.2.102.19 Sep 2 04:40:08 newdogma sshd[28433]: Failed password for invalid user csvn from 183.2.102.19 port 40690 ssh2 Sep 2 04:40:10 newdogma sshd[28433]: Received disconnect from 183.2.102.19 port 40690:11: Bye Bye [preauth] Sep 2 04:40:10 newdogma sshd[28433]: Disconnected from invalid user csvn 183.2.102.19 port 40690 [preauth] Sep 2 04:45:26 newdogma sshd[29511]: Invalid user michael from 183.2.102.19 port 37776 Sep 2 04:45:26 newdogma sshd[29511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.2.102.19 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=183.2.102.19	2020-09-04 15:32:27
120.132.29.38	attackbotsspam	Invalid user xavier from 120.132.29.38 port 38814	2020-09-04 15:44:01

Recently Reported IPs

109.214.103.48	37.228.90.143	102.148.86.200	177.18.99.218
191.88.60.246	186.97.234.69	192.174.29.18	210.67.183.169
15.187.249.234	59.77.229.169	42.206.26.201	123.226.1.38
89.240.200.219	94.191.15.243	76.26.161.183	68.220.148.185
31.163.190.83	113.211.249.159	39.106.131.59	37.254.214.70