137.226.11.21 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
137.226.113.10	attack	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-09-12 01:59:28
137.226.113.10	attackbots	Port scan denied	2020-09-11 17:50:45
137.226.113.56	attackbotsspam	4843/tcp 1883/tcp 8883/tcp... [2020-06-14/08-11]44pkt,5pt.(tcp)	2020-08-12 07:49:20
137.226.113.56	attackspam	Unauthorized connection attempt detected from IP address 137.226.113.56 to port 4840 [T]	2020-07-20 06:50:01
137.226.113.56	attackbots	Port Scan ...	2020-07-14 02:14:02
137.226.113.9	attackspambots	port scan and connect, tcp 443 (https)	2020-06-06 21:06:05
137.226.113.56	attackbots	srv02 Mass scanning activity detected Target: 102(iso-tsap) ..	2020-06-01 20:17:23
137.226.113.27	attackbots	mozilla/5.0+zgrab/0.x+(compatible;+researchscan/t12sns;++http://researchscan.comsys.rwth-aachen.de)	2020-05-31 07:27:51
137.226.113.31	attackspambots	Port Scan detected from 137.226.113.31 (DE/Germany/researchscan23.comsys.rwth-aachen.de). 5 hits in the last 35 seconds	2020-05-25 17:19:31
137.226.113.10	attack	137.226.113.10	2020-04-14 12:57:11
137.226.113.56	attack	Apr 13 15:48:24 debian-2gb-nbg1-2 kernel: \[9044698.686856\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=137.226.113.56 DST=195.201.40.59 LEN=64 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=TCP SPT=47703 DPT=102 WINDOW=65535 RES=0x00 SYN URGP=0	2020-04-14 01:14:48
137.226.113.56	attackbots	" "	2020-04-06 00:29:43
137.226.113.10	attack	Mar 5 21:51:17 debian-2gb-nbg1-2 kernel: \[5700646.129243\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=137.226.113.10 DST=195.201.40.59 LEN=1228 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=UDP SPT=50832 DPT=443 LEN=1208	2020-03-06 05:32:53
137.226.113.56	attack	Unauthorized connection attempt detected from IP address 137.226.113.56 to port 102 [J]	2020-03-03 00:36:56
137.226.113.56	attackbots	Unauthorized connection attempt detected from IP address 137.226.113.56 to port 4840 [J]	2020-03-02 02:31:27

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 137.226.11.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23569
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;137.226.11.21.			IN	A

;; AUTHORITY SECTION:
.			256	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022061102 1800 900 604800 86400

;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 12 10:18:34 CST 2022
;; MSG SIZE  rcvd: 106

Host info

21.11.226.137.in-addr.arpa domain name pointer kff21.ghi.rwth-aachen.de.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
21.11.226.137.in-addr.arpa	name = kff21.ghi.rwth-aachen.de.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
113.10.156.189	attack	Sep 22 14:18:54 eventyay sshd[21988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.10.156.189 Sep 22 14:18:56 eventyay sshd[21988]: Failed password for invalid user cal from 113.10.156.189 port 39876 ssh2 Sep 22 14:23:38 eventyay sshd[22143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.10.156.189 ...	2019-09-22 20:36:58
106.13.150.14	attackbotsspam	2019-09-22T09:47:42.401434abusebot-5.cloudsearch.cf sshd\[27719\]: Invalid user ftpuser from 106.13.150.14 port 57862	2019-09-22 20:39:40
61.19.23.30	attackspambots	2019-09-22T08:36:11.338436abusebot-7.cloudsearch.cf sshd\[22324\]: Invalid user demo from 61.19.23.30 port 48992	2019-09-22 20:10:52
114.40.190.231	attack	Honeypot attack, port: 23, PTR: 114-40-190-231.dynamic-ip.hinet.net.	2019-09-22 20:02:43
82.208.162.115	attackspambots	Sep 21 17:43:12 friendsofhawaii sshd\[12430\]: Invalid user louis from 82.208.162.115 Sep 21 17:43:12 friendsofhawaii sshd\[12430\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.208.162.115 Sep 21 17:43:14 friendsofhawaii sshd\[12430\]: Failed password for invalid user louis from 82.208.162.115 port 58218 ssh2 Sep 21 17:47:26 friendsofhawaii sshd\[12788\]: Invalid user arun from 82.208.162.115 Sep 21 17:47:26 friendsofhawaii sshd\[12788\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.208.162.115	2019-09-22 20:18:05
94.191.119.176	attack	Sep 22 06:14:47 eventyay sshd[11457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.119.176 Sep 22 06:14:49 eventyay sshd[11457]: Failed password for invalid user fei from 94.191.119.176 port 32889 ssh2 Sep 22 06:20:18 eventyay sshd[11576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.119.176 ...	2019-09-22 20:41:53
175.197.74.237	attack	Sep 22 07:02:06 intra sshd\[64539\]: Invalid user oracle from 175.197.74.237Sep 22 07:02:08 intra sshd\[64539\]: Failed password for invalid user oracle from 175.197.74.237 port 50055 ssh2Sep 22 07:06:58 intra sshd\[64581\]: Invalid user admin from 175.197.74.237Sep 22 07:07:00 intra sshd\[64581\]: Failed password for invalid user admin from 175.197.74.237 port 27303 ssh2Sep 22 07:11:49 intra sshd\[64674\]: Invalid user github from 175.197.74.237Sep 22 07:11:51 intra sshd\[64674\]: Failed password for invalid user github from 175.197.74.237 port 5708 ssh2 ...	2019-09-22 20:29:42
78.110.154.177	attackspambots	Unauthorized IMAP connection attempt	2019-09-22 20:47:33
218.15.58.3	attackbotsspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/218.15.58.3/ CN - 1H : (91) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4134 IP : 218.15.58.3 CIDR : 218.15.0.0/18 PREFIX COUNT : 5430 UNIQUE IP COUNT : 106919680 WYKRYTE ATAKI Z ASN4134 : 1H - 1 3H - 3 6H - 6 12H - 13 24H - 22 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery	2019-09-22 20:13:06
84.158.228.91	attackbots	Sep 22 08:14:33 josie sshd[31631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.158.228.91 user=r.r Sep 22 08:14:36 josie sshd[31631]: Failed password for r.r from 84.158.228.91 port 46630 ssh2 Sep 22 08:14:38 josie sshd[31631]: Failed password for r.r from 84.158.228.91 port 46630 ssh2 Sep 22 08:14:40 josie sshd[31631]: Failed password for r.r from 84.158.228.91 port 46630 ssh2 Sep 22 08:14:42 josie sshd[31631]: Failed password for r.r from 84.158.228.91 port 46630 ssh2 Sep 22 08:14:44 josie sshd[31631]: Failed password for r.r from 84.158.228.91 port 46630 ssh2 Sep 22 08:14:47 josie sshd[31631]: Failed password for r.r from 84.158.228.91 port 46630 ssh2 Sep 22 08:14:47 josie sshd[31631]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.158.228.91 user=r.r ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=84.158.228.91	2019-09-22 20:45:14
77.247.109.72	attackbotsspam	\[2019-09-22 08:13:23\] NOTICE\[2270\] chan_sip.c: Registration from '"2000" \' failed for '77.247.109.72:5473' - Wrong password \[2019-09-22 08:13:23\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-22T08:13:23.268-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2000",SessionID="0x7fcd8c57a408",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.72/5473",Challenge="15ca42ec",ReceivedChallenge="15ca42ec",ReceivedHash="95aeed355a669f7f5ea75eaff55666b5" \[2019-09-22 08:13:23\] NOTICE\[2270\] chan_sip.c: Registration from '"2000" \' failed for '77.247.109.72:5473' - Wrong password \[2019-09-22 08:13:23\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-22T08:13:23.391-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2000",SessionID="0x7fcd8c856e68",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UD	2019-09-22 20:48:19
114.67.66.199	attackbotsspam	ssh failed login	2019-09-22 20:36:13
88.247.250.201	attack	Sep 22 12:45:18 vps691689 sshd[10391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.247.250.201 Sep 22 12:45:20 vps691689 sshd[10391]: Failed password for invalid user gabe from 88.247.250.201 port 59114 ssh2 ...	2019-09-22 20:23:33
51.38.130.198	attackspam	Sep 22 11:38:30 ns315508 sshd[14634]: Invalid user basti from 51.38.130.198 port 36020 Sep 22 11:39:24 ns315508 sshd[14721]: Invalid user testftp from 51.38.130.198 port 37584 Sep 22 11:40:18 ns315508 sshd[14726]: Invalid user andrey from 51.38.130.198 port 39148 ...	2019-09-22 20:18:19
200.122.249.203	attackspambots	Sep 22 14:47:53 MK-Soft-VM7 sshd[1344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.122.249.203 Sep 22 14:47:55 MK-Soft-VM7 sshd[1344]: Failed password for invalid user guest from 200.122.249.203 port 39859 ssh2 ...	2019-09-22 20:53:29

Recently Reported IPs

137.226.11.11	43.134.106.134	137.226.11.100	137.226.11.107
43.154.8.94	137.226.7.60	137.226.29.65	137.226.10.189
137.226.10.203	137.226.10.207	137.226.13.208	178.38.76.184
27.109.14.94	31.28.27.127	192.241.219.83	31.209.196.249
59.7.194.219	34.125.80.198	34.126.179.63	119.172.61.218