49.248.216.238

Basic Info

City: unknown

Region: unknown

Country: India

Internet Service Provider: Tata Teleservices Ltd

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt detected from IP address 49.248.216.238 to port 445 [T]	2020-08-14 03:57:52

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.248.216.238
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21936
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.248.216.238.			IN	A

;; AUTHORITY SECTION:
.			370	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020081301 1800 900 604800 86400

;; Query time: 74 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 14 03:57:49 CST 2020
;; MSG SIZE  rcvd: 118

Host info

238.216.248.49.in-addr.arpa domain name pointer static-238.216.248.49-tataidc.co.in.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
238.216.248.49.in-addr.arpa	name = static-238.216.248.49-tataidc.co.in.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.180.17	attackbotsspam	SSH authentication failure x 6 reported by Fail2Ban ...	2020-01-01 15:39:31
151.70.246.163	attackbotsspam	Port Scan	2020-01-01 15:10:40
185.53.88.3	attack	\[2020-01-01 01:49:24\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-01-01T01:49:24.734-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="01146812111747",SessionID="0x7f0fb4aabfc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.3/59816",ACLName="no_extension_match" \[2020-01-01 01:49:27\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-01-01T01:49:27.558-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="011442037694876",SessionID="0x7f0fb42932b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.3/57084",ACLName="no_extension_match" \[2020-01-01 01:49:40\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-01-01T01:49:40.662-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="01146812111747",SessionID="0x7f0fb41946f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.3/52058",ACLName="no_extension_m	2020-01-01 15:07:52
23.102.153.172	attack	Looking for resource vulnerabilities	2020-01-01 15:22:13
13.94.46.107	attackbotsspam	Jan 1 07:24:49 MK-Soft-VM7 sshd[10553]: Failed password for bin from 13.94.46.107 port 55398 ssh2 ...	2020-01-01 15:23:28
189.41.108.220	attackspambots	Port Scan	2020-01-01 15:05:48
51.15.87.74	attackbots	Jan 1 08:01:43 mout sshd[32407]: Invalid user lisa from 51.15.87.74 port 49896	2020-01-01 15:16:17
103.206.254.242	attack	Jan 1 07:28:46 icecube postfix/smtpd[86440]: NOQUEUE: reject: RCPT from FAST-INTERNET-103-206-254-242.solnet.net.id[103.206.254.242]: 554 5.7.1 Service unavailable; Client host [103.206.254.242] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBL422967 / https://www.spamhaus.org/query/ip/103.206.254.242 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=	2020-01-01 15:28:09
98.25.1.105	attackbotsspam	Port Scan	2020-01-01 15:19:13
123.21.242.125	attack	smtp probe/invalid login attempt	2020-01-01 15:23:53
151.80.237.223	attack	Jan 1 07:57:27 relay postfix/smtpd\[1028\]: warning: unknown\[151.80.237.223\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 1 07:58:01 relay postfix/smtpd\[1034\]: warning: unknown\[151.80.237.223\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 1 08:01:02 relay postfix/smtpd\[1037\]: warning: unknown\[151.80.237.223\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 1 08:01:36 relay postfix/smtpd\[1027\]: warning: unknown\[151.80.237.223\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 1 08:04:35 relay postfix/smtpd\[1037\]: warning: unknown\[151.80.237.223\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-01-01 15:21:17
106.39.15.168	attack	Jan 1 08:01:14 sd-53420 sshd\[1170\]: Invalid user lefty from 106.39.15.168 Jan 1 08:01:14 sd-53420 sshd\[1170\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.39.15.168 Jan 1 08:01:16 sd-53420 sshd\[1170\]: Failed password for invalid user lefty from 106.39.15.168 port 41232 ssh2 Jan 1 08:05:06 sd-53420 sshd\[2350\]: Invalid user squid from 106.39.15.168 Jan 1 08:05:06 sd-53420 sshd\[2350\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.39.15.168 ...	2020-01-01 15:16:42
14.160.86.134	attackbots	Host Scan	2020-01-01 15:39:03
218.92.0.158	attackspambots	SSH auth scanning - multiple failed logins	2020-01-01 15:00:38
45.224.107.32	attackspam	smtp probe/invalid login attempt	2020-01-01 15:27:02

Recently Reported IPs

94.139.240.216	91.124.57.108	8.115.89.219	86.102.83.238
31.23.147.179	95.223.238.179	85.26.233.144	92.108.181.227
239.222.159.17	62.33.114.219	249.181.249.242	61.2.195.196
109.155.202.41	85.217.184.26	127.120.108.146	231.84.251.245
63.127.177.218	45.141.87.42	200.49.9.211	23.31.146.241