189.213.21.244

Basic Info

City: unknown

Region: unknown

Country: Mexico

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
189.213.217.91	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-03-16 18:42:25
189.213.214.50	attackspambots	Attempt to attack host OS, exploiting network vulnerabilities, on 02-01-2020 23:05:31.	2020-01-03 08:54:37
189.213.21.140	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2019-11-27 18:23:15
189.213.210.35	attackspam	Aug 28 14:40:26 aat-srv002 sshd[21667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.213.210.35 Aug 28 14:40:28 aat-srv002 sshd[21667]: Failed password for invalid user alanturing from 189.213.210.35 port 11747 ssh2 Aug 28 14:44:50 aat-srv002 sshd[21768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.213.210.35 Aug 28 14:44:53 aat-srv002 sshd[21768]: Failed password for invalid user ubuntu from 189.213.210.35 port 37813 ssh2 ...	2019-08-29 03:46:51
189.213.210.35	attackspambots	Invalid user taivi from 189.213.210.35 port 22625	2019-08-28 16:17:53
189.213.210.35	attackspambots	Aug 27 11:39:53 rpi sshd[23611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.213.210.35 Aug 27 11:39:54 rpi sshd[23611]: Failed password for invalid user huey from 189.213.210.35 port 53438 ssh2	2019-08-27 18:08:51
189.213.210.35	attack	Invalid user ca from 189.213.210.35 port 55597	2019-08-26 09:05:25
189.213.210.35	attackbots	Aug 17 16:18:08 TORMINT sshd\[2053\]: Invalid user training from 189.213.210.35 Aug 17 16:18:08 TORMINT sshd\[2053\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.213.210.35 Aug 17 16:18:10 TORMINT sshd\[2053\]: Failed password for invalid user training from 189.213.210.35 port 50679 ssh2 ...	2019-08-18 04:32:26
189.213.210.35	attackspambots	May 4 13:33:40 server sshd\[83886\]: Invalid user qe from 189.213.210.35 May 4 13:33:40 server sshd\[83886\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.213.210.35 May 4 13:33:42 server sshd\[83886\]: Failed password for invalid user qe from 189.213.210.35 port 60598 ssh2 ...	2019-08-01 09:12:34
189.213.210.35	attack	Automatic report - Banned IP Access	2019-07-31 09:38:59
189.213.210.35	attackbotsspam	Jul 16 21:11:53 animalibera sshd[20545]: Invalid user lzt from 189.213.210.35 port 49449 ...	2019-07-17 05:20:53
189.213.210.35	attack	Jul 16 13:08:23 animalibera sshd[559]: Invalid user lori from 189.213.210.35 port 40569 ...	2019-07-16 21:13:20
189.213.210.35	attackbotsspam	Feb 23 12:28:02 motanud sshd\[27593\]: Invalid user webuser from 189.213.210.35 port 56894 Feb 23 12:28:02 motanud sshd\[27593\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.213.210.35 Feb 23 12:28:03 motanud sshd\[27593\]: Failed password for invalid user webuser from 189.213.210.35 port 56894 ssh2	2019-07-03 02:31:47

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 189.213.21.244
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38612
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;189.213.21.244.			IN	A

;; AUTHORITY SECTION:
.			335	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020701 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 03:12:51 CST 2022
;; MSG SIZE  rcvd: 107

Host info

244.21.213.189.in-addr.arpa domain name pointer 189-213-21-244.static.axtel.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
244.21.213.189.in-addr.arpa	name = 189-213-21-244.static.axtel.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.75.100.18	attackspam	$f2bV_matches	2019-11-25 17:04:26
157.245.233.164	attackbotsspam	xmlrpc attack	2019-11-25 17:10:02
202.120.39.141	attackbots	25.11.2019 06:35:17 Connection to port 2222 blocked by firewall	2019-11-25 16:51:58
76.95.139.30	attackspambots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/76.95.139.30/ US - 1H : (111) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : US NAME ASN : ASN20001 IP : 76.95.139.30 CIDR : 76.94.0.0/15 PREFIX COUNT : 405 UNIQUE IP COUNT : 6693632 ATTACKS DETECTED ASN20001 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 2 DateTime : 2019-11-25 07:28:18 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-25 16:53:23
41.214.139.226	attackspam	Automatic report - Banned IP Access	2019-11-25 16:41:52
152.136.225.47	attack	Nov 25 11:03:12 sauna sshd[224430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.225.47 Nov 25 11:03:15 sauna sshd[224430]: Failed password for invalid user barney from 152.136.225.47 port 57156 ssh2 ...	2019-11-25 17:04:11
103.91.54.100	attackbots	Nov 24 21:49:50 tdfoods sshd\[4853\]: Invalid user tas from 103.91.54.100 Nov 24 21:49:50 tdfoods sshd\[4853\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.91.54.100 Nov 24 21:49:52 tdfoods sshd\[4853\]: Failed password for invalid user tas from 103.91.54.100 port 56502 ssh2 Nov 24 21:57:18 tdfoods sshd\[5424\]: Invalid user parrnell from 103.91.54.100 Nov 24 21:57:18 tdfoods sshd\[5424\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.91.54.100	2019-11-25 17:09:42
49.235.38.225	attack	Nov 25 08:52:35 server sshd\[3195\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.38.225 user=root Nov 25 08:52:37 server sshd\[3195\]: Failed password for root from 49.235.38.225 port 33752 ssh2 Nov 25 09:27:49 server sshd\[11481\]: Invalid user amelia from 49.235.38.225 Nov 25 09:27:49 server sshd\[11481\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.38.225 Nov 25 09:27:52 server sshd\[11481\]: Failed password for invalid user amelia from 49.235.38.225 port 41486 ssh2 ...	2019-11-25 17:10:17
195.154.112.212	attackspambots	Nov 24 21:36:50 ACSRAD auth.info sshd[8133]: Invalid user starlyn from 195.154.112.212 port 44968 Nov 24 21:36:50 ACSRAD auth.info sshd[8133]: Failed password for invalid user starlyn from 195.154.112.212 port 44968 ssh2 Nov 24 21:36:50 ACSRAD auth.info sshd[8133]: Received disconnect from 195.154.112.212 port 44968:11: Bye Bye [preauth] Nov 24 21:36:50 ACSRAD auth.info sshd[8133]: Disconnected from 195.154.112.212 port 44968 [preauth] Nov 24 21:36:50 ACSRAD auth.notice sshguard[3276]: Attack from "195.154.112.212" on service 100 whostnameh danger 10. Nov 24 21:36:50 ACSRAD auth.notice sshguard[3276]: Attack from "195.154.112.212" on service 100 whostnameh danger 10. Nov 24 21:36:50 ACSRAD auth.notice sshguard[3276]: Attack from "195.154.112.212" on service 100 whostnameh danger 10. Nov 24 21:36:50 ACSRAD auth.warn sshguard[3276]: Blocking "195.154.112.212/32" forever (3 attacks in 0 secs, after 2 abuses over 1237 secs.) ........ ----------------------------------------------- https://www.blocklist.de/en/vi	2019-11-25 17:17:35
90.225.57.209	attack	90.225.57.209 was recorded 5 times by 1 hosts attempting to connect to the following ports: 51413. Incident counter (4h, 24h, all-time): 5, 5, 5	2019-11-25 17:19:01
114.34.195.231	attackbotsspam	Caught in portsentry honeypot	2019-11-25 16:55:20
49.234.203.221	attackbots	Port scan on 3 port(s): 2375 2376 4243	2019-11-25 16:46:49
157.230.251.115	attackbotsspam	Nov 25 07:21:29 vmanager6029 sshd\[11049\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.251.115 user=root Nov 25 07:21:32 vmanager6029 sshd\[11049\]: Failed password for root from 157.230.251.115 port 43770 ssh2 Nov 25 07:28:44 vmanager6029 sshd\[11137\]: Invalid user pcap from 157.230.251.115 port 50816 Nov 25 07:28:44 vmanager6029 sshd\[11137\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.251.115	2019-11-25 16:41:29
63.80.184.101	attackbotsspam	Nov 25 07:28:10 smtp postfix/smtpd[43175]: NOQUEUE: reject: RCPT from nut.sapuxfiori.com[63.80.184.101]: 554 5.7.1 Service unavailable; Client host [63.80.184.101] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= ...	2019-11-25 16:59:55
113.161.1.111	attackspambots	Nov 25 08:20:36 pkdns2 sshd\[43542\]: Address 113.161.1.111 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Nov 25 08:20:36 pkdns2 sshd\[43542\]: Invalid user dorri from 113.161.1.111Nov 25 08:20:38 pkdns2 sshd\[43542\]: Failed password for invalid user dorri from 113.161.1.111 port 34220 ssh2Nov 25 08:27:43 pkdns2 sshd\[43824\]: Address 113.161.1.111 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Nov 25 08:27:43 pkdns2 sshd\[43824\]: Invalid user kazmer from 113.161.1.111Nov 25 08:27:46 pkdns2 sshd\[43824\]: Failed password for invalid user kazmer from 113.161.1.111 port 51834 ssh2 ...	2019-11-25 17:12:03

Recently Reported IPs

36.90.17.59	41.33.47.150	112.197.212.65	112.169.24.146
188.166.95.165	78.29.4.218	178.200.140.115	13.234.74.253
212.119.41.213	14.226.253.193	188.13.85.118	187.163.164.30
77.83.85.76	49.51.94.86	189.207.23.158	176.88.83.242
89.25.16.212	179.181.100.43	114.119.158.196	172.70.90.91