216.245.211.14

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
216.245.211.42	attack	01/13/2020-08:56:41.273097 216.245.211.42 Protocol: 17 ET SCAN Sipvicious Scan	2020-01-13 23:22:09
216.245.211.42	attackspambots	SIPVicious Scanner Detection, PTR: 42-211-245-216.static.reverse.lstn.net.	2020-01-12 07:29:58
216.245.211.170	attackbotsspam	Jun 25 18:53:48 h2421860 postfix/postscreen[8363]: CONNECT from [216.245.211.170]:51100 to [85.214.119.52]:25 Jun 25 18:53:48 h2421860 postfix/dnsblog[8370]: addr 216.245.211.170 listed by domain Unknown.trblspam.com as 185.53.179.7 Jun 25 18:53:48 h2421860 postfix/postscreen[8363]: PREGREET 14 after 0.13 from [216.245.211.170]:51100: HELO vut.com Jun 25 18:53:48 h2421860 postfix/smtpd[8372]: connect from hostnextra.com[216.245.211.170] Jun x@x Jun 25 18:53:49 h2421860 postfix/smtpd[8372]: warning: non-SMTP command from hostnextra.com[216.245.211.170]: Received: 1 Jun 25 18:53:49 h2421860 postfix/smtpd[8372]: disconnect from hostnextra.com[216.245.211.170] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=216.245.211.170	2019-06-26 10:07:27

Type

Details

Datetime

216.245.211.42

attack

01/13/2020-08:56:41.273097 216.245.211.42 Protocol: 17 ET SCAN Sipvicious Scan

2020-01-13 23:22:09

216.245.211.42

attackspambots

SIPVicious Scanner Detection, PTR: 42-211-245-216.static.reverse.lstn.net.

2020-01-12 07:29:58

216.245.211.170

attackbotsspam

Jun 25 18:53:48 h2421860 postfix/postscreen[8363]: CONNECT from [216.245.211.170]:51100 to [85.214.119.52]:25
Jun 25 18:53:48 h2421860 postfix/dnsblog[8370]: addr 216.245.211.170 listed by domain Unknown.trblspam.com as 185.53.179.7
Jun 25 18:53:48 h2421860 postfix/postscreen[8363]: PREGREET 14 after 0.13 from [216.245.211.170]:51100: HELO vut.com

Jun 25 18:53:48 h2421860 postfix/smtpd[8372]: connect from hostnextra.com[216.245.211.170]
Jun x@x
Jun 25 18:53:49 h2421860 postfix/smtpd[8372]: warning: non-SMTP command from hostnextra.com[216.245.211.170]: Received: 1
Jun 25 18:53:49 h2421860 postfix/smtpd[8372]: disconnect from hostnextra.com[216.245.211.170]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=216.245.211.170

2019-06-26 10:07:27

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 216.245.211.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31464
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;216.245.211.14.			IN	A

;; AUTHORITY SECTION:
.			217	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 220 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 22:45:08 CST 2022
;; MSG SIZE  rcvd: 107

Host info

14.211.245.216.in-addr.arpa domain name pointer 14-211-245-216.static.reverse.lstn.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
14.211.245.216.in-addr.arpa	name = 14-211-245-216.static.reverse.lstn.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
114.237.140.109	attackbots	Jan 17 13:59:24 grey postfix/smtpd\[16169\]: NOQUEUE: reject: RCPT from unknown\[114.237.140.109\]: 554 5.7.1 Service unavailable\; Client host \[114.237.140.109\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[114.237.140.109\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-01-18 02:23:36
46.38.144.179	attackspam	Jan 17 18:51:24 relay postfix/smtpd\[28681\]: warning: unknown\[46.38.144.179\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 17 18:51:39 relay postfix/smtpd\[4473\]: warning: unknown\[46.38.144.179\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 17 18:52:11 relay postfix/smtpd\[29209\]: warning: unknown\[46.38.144.179\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 17 18:52:27 relay postfix/smtpd\[4478\]: warning: unknown\[46.38.144.179\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 17 18:52:58 relay postfix/smtpd\[31572\]: warning: unknown\[46.38.144.179\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-01-18 02:08:21
223.93.188.234	attack	SIP/5060 Probe, BF, Hack -	2020-01-18 02:07:17
115.236.35.107	attack	Unauthorized connection attempt detected from IP address 115.236.35.107 to port 2220 [J]	2020-01-18 02:40:05
182.219.172.224	attack	Unauthorized connection attempt detected from IP address 182.219.172.224 to port 2220 [J]	2020-01-18 02:33:11
213.226.11.149	attack	Sent mail to target address hacked/leaked from abandonia in 2016	2020-01-18 02:15:40
106.13.84.151	attackbots	Unauthorized connection attempt detected from IP address 106.13.84.151 to port 2220 [J]	2020-01-18 02:42:11
122.114.239.229	attackbotsspam	Invalid user deploy from 122.114.239.229 port 37022	2020-01-18 02:38:43
129.204.87.153	attackbotsspam	Invalid user melissa from 129.204.87.153 port 39611	2020-01-18 02:37:25
116.87.14.197	attackbots	Automatic report - Banned IP Access	2020-01-18 02:14:18
201.16.160.194	attackspambots	[ssh] SSH attack	2020-01-18 02:24:49
79.133.1.21	attackspam	auto-add	2020-01-18 02:43:31
118.89.201.225	attackspam	Jan 17 14:02:39 server sshd\[20105\]: Invalid user prom from 118.89.201.225 Jan 17 14:02:40 server sshd\[20105\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.201.225 Jan 17 14:02:42 server sshd\[20105\]: Failed password for invalid user prom from 118.89.201.225 port 53496 ssh2 Jan 17 21:36:11 server sshd\[5067\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.201.225 user=root Jan 17 21:36:13 server sshd\[5067\]: Failed password for root from 118.89.201.225 port 37816 ssh2 ...	2020-01-18 02:39:36
51.89.64.18	attackspambots	1 attempts against mh-modsecurity-ban on ice.magehost.pro	2020-01-18 02:04:49
203.148.20.254	attackbotsspam	Invalid user ftpupload from 203.148.20.254 port 36672	2020-01-18 02:29:50

Recently Reported IPs

35.111.233.180	220.125.119.221	190.129.72.229	189.137.3.131
2.189.19.101	222.165.224.199	198.211.55.235	120.85.91.225
62.94.22.176	175.184.164.189	82.212.74.194	49.236.212.88
124.65.151.18	120.85.114.141	58.213.235.252	103.124.138.61
103.25.44.34	54.198.119.19	43.129.27.213	5.200.88.218