173.249.21.119

Basic Info

City: Nuremberg

Region: Bavaria

Country: Germany

Internet Service Provider: Contabo GmbH

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	...	2019-11-16 20:55:05
attackspam	fail2ban honeypot	2019-11-09 06:17:08
attackspambots	Masscan Port Scanning Tool PA	2019-11-08 14:01:10

Comments on same subnet:

IP	Type	Details	Datetime
173.249.21.236	attack	Jan 8 22:22:00 ArkNodeAT sshd\[32398\]: Invalid user www from 173.249.21.236 Jan 8 22:22:00 ArkNodeAT sshd\[32398\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.21.236 Jan 8 22:22:02 ArkNodeAT sshd\[32398\]: Failed password for invalid user www from 173.249.21.236 port 54082 ssh2	2020-01-09 06:01:07
173.249.21.236	attackbots	SSH bruteforce	2020-01-07 06:32:16
173.249.21.236	attack	Dec 26 01:40:29 dallas01 sshd[26304]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.21.236 Dec 26 01:40:32 dallas01 sshd[26304]: Failed password for invalid user mime from 173.249.21.236 port 54520 ssh2 Dec 26 01:46:11 dallas01 sshd[31289]: Failed password for root from 173.249.21.236 port 38296 ssh2	2019-12-26 19:37:46
173.249.21.236	attackspam	Dec 25 19:29:44 mout sshd[13833]: Invalid user roy from 173.249.21.236 port 41792	2019-12-26 02:46:23
173.249.21.204	attack	21.07.2019 11:04:24 - Wordpress fail Detected by ELinOX-ALM	2019-07-21 17:16:40
173.249.21.204	attackbotsspam	173.249.21.204 - - [19/Jul/2019:07:58:30 +0200] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 173.249.21.204 - - [19/Jul/2019:07:58:30 +0200] "GET /wp-login.php HTTP/1.1" 404 93 "http://netpixeldesign.net/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-07-19 16:37:10
173.249.21.204	attack	173.249.21.204 - - [18/Jul/2019:23:07:51 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 173.249.21.204 - - [18/Jul/2019:23:07:51 +0200] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 173.249.21.204 - - [18/Jul/2019:23:07:51 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 173.249.21.204 - - [18/Jul/2019:23:07:51 +0200] "POST /wp-login.php HTTP/1.1" 200 1607 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 173.249.21.204 - - [18/Jul/2019:23:07:52 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 173.249.21.204 - - [18/Jul/2019:23:07:52 +0200] "POST /wp-login.php HTTP/1.1" 200 1608 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-07-19 06:51:58

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 173.249.21.119
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51783
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;173.249.21.119.			IN	A

;; AUTHORITY SECTION:
.			355	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110800 1800 900 604800 86400

;; Query time: 107 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 08 14:01:07 CST 2019
;; MSG SIZE  rcvd: 118

Host info

119.21.249.173.in-addr.arpa domain name pointer vmi163657.contaboserver.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
119.21.249.173.in-addr.arpa	name = vmi163657.contaboserver.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
129.226.174.139	attack	DATE:2020-05-28 16:08:31, IP:129.226.174.139, PORT:ssh SSH brute force auth (docker-dc)	2020-05-28 23:51:54
1.220.226.173	attack	May 28 14:01:14 fhem-rasp sshd[8932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.220.226.173 user=root May 28 14:01:16 fhem-rasp sshd[8932]: Failed password for root from 1.220.226.173 port 54921 ssh2 ...	2020-05-28 23:21:13
69.11.55.144	attackspambots	May 28 16:38:48 server sshd[11315]: Failed password for root from 69.11.55.144 port 34878 ssh2 May 28 16:43:32 server sshd[15095]: Failed password for root from 69.11.55.144 port 51902 ssh2 May 28 16:47:25 server sshd[18255]: Failed password for root from 69.11.55.144 port 57760 ssh2	2020-05-28 23:29:15
95.91.75.52	attackspambots	abuseConfidenceScore blocked for 12h	2020-05-28 23:43:29
112.134.191.205	attackspam	Unauthorized connection attempt from IP address 112.134.191.205 on Port 445(SMB)	2020-05-28 23:54:58
58.69.161.45	attackbots	Unauthorized connection attempt from IP address 58.69.161.45 on Port 445(SMB)	2020-05-28 23:40:12
185.214.164.10	attackbotsspam	1 attempts against mh-modsecurity-ban on crop	2020-05-28 23:11:21
165.22.191.129	attackspam	165.22.191.129 - - \[28/May/2020:14:01:00 +0200\] "POST /wp-login.php HTTP/1.0" 200 5674 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 165.22.191.129 - - \[28/May/2020:14:01:02 +0200\] "POST /wp-login.php HTTP/1.0" 200 5474 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 165.22.191.129 - - \[28/May/2020:14:01:03 +0200\] "POST /wp-login.php HTTP/1.0" 200 5490 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-05-28 23:36:18
178.128.93.138	attackspam	1590667288 - 05/28/2020 19:01:28 Host: 178.128.93.138/178.128.93.138 Port: 8080 TCP Blocked ...	2020-05-28 23:08:27
2.60.85.191	attackspambots	Unauthorized connection attempt from IP address 2.60.85.191 on Port 139(NETBIOS)	2020-05-28 23:19:49
51.75.70.30	attack	SSH Bruteforce Attempt (failed auth)	2020-05-28 23:28:06
222.186.30.167	attack	May 28 17:41:00 abendstille sshd\[4362\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.167 user=root May 28 17:41:02 abendstille sshd\[4362\]: Failed password for root from 222.186.30.167 port 37133 ssh2 May 28 17:41:04 abendstille sshd\[4362\]: Failed password for root from 222.186.30.167 port 37133 ssh2 May 28 17:41:07 abendstille sshd\[4362\]: Failed password for root from 222.186.30.167 port 37133 ssh2 May 28 17:41:09 abendstille sshd\[4529\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.167 user=root ...	2020-05-28 23:41:54
178.40.40.254	attack	May 28 05:17:56 mockhub sshd[19977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.40.40.254 May 28 05:17:58 mockhub sshd[19977]: Failed password for invalid user cvs from 178.40.40.254 port 45210 ssh2 ...	2020-05-28 23:54:41
58.250.89.46	attack	detected by Fail2Ban	2020-05-28 23:31:28
197.234.221.131	attackspam	for ; Thu, 28 May 2020 12:04:01 +0200 Received: from [192.168.43.130] (unknown [197.234.221.131]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by parus.kemcity.ru (Postfix) with ESMTPSA id 8AF4646216; Thu, 28 May 2020 15:41:47 +0700 (NOVT) Content-Type: text/plain; charset="iso-8859-1" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Description: Mail message body Subject: COMPENSATION VIE ATM CARD DELIVERY To: Recipients From: UNITED@nmmx7.e.nsc.no, NATION@nmmx7.e.nsc.no, "< united.nation09@hotmail.com>"@nmmx7.e.nsc.no Date: Thu, 28 May 2020 10:55:58 +0100 Reply-To: ruthoge01@gmail.com Message-Id: <20200528102419.3896419822B@nmmx7.e.nsc.no> X-Telenor_id: 3896419822B X-XClient-IP-Addr: 212.75.217.98 X-Source-IP: 212.75.217.98 X-Scanned-By: MIMEDefang 2.84 on 10.	2020-05-28 23:51:40

Recently Reported IPs

185.17.128.158	165.22.61.114	175.214.231.224	111.150.90.182
84.117.163.220	52.157.250.71	138.128.1.142	83.99.2.32
117.86.95.165	42.125.183.185	159.147.36.23	188.191.201.174
217.99.227.88	188.227.119.254	173.212.229.216	81.28.107.54
104.43.14.13	167.71.38.105	45.55.40.27	46.101.0.232