212.203.49.214

Basic Info

City: unknown

Region: unknown

Country: Switzerland

Internet Service Provider: Leunet AG

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Port scan and direct access per IP instead of hostname	2019-08-09 18:26:18

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 212.203.49.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62433
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;212.203.49.214.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080900 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Aug 09 18:25:58 CST 2019
;; MSG SIZE  rcvd: 118

Host info

214.49.203.212.in-addr.arpa domain name pointer cust.dynamic.leunet.ch.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
214.49.203.212.in-addr.arpa	name = cust.dynamic.leunet.ch.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
171.11.254.110	attackspam	1588249430 - 04/30/2020 14:23:50 Host: 171.11.254.110/171.11.254.110 Port: 445 TCP Blocked	2020-05-01 04:40:08
59.26.31.4	attackbots	1588280106 - 05/01/2020 03:55:06 Host: 59.26.31.4/59.26.31.4 Port: 23 TCP Blocked ...	2020-05-01 05:15:51
61.85.46.81	attackbotsspam	Honeypot attack, port: 81, PTR: PTR record not found	2020-05-01 05:00:13
106.52.96.44	attackbotsspam	Apr 30 17:00:39 ns382633 sshd\[12278\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.96.44 user=root Apr 30 17:00:41 ns382633 sshd\[12278\]: Failed password for root from 106.52.96.44 port 42982 ssh2 Apr 30 17:04:17 ns382633 sshd\[12638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.96.44 user=root Apr 30 17:04:19 ns382633 sshd\[12638\]: Failed password for root from 106.52.96.44 port 35040 ssh2 Apr 30 17:05:28 ns382633 sshd\[13148\]: Invalid user fff from 106.52.96.44 port 45752 Apr 30 17:05:28 ns382633 sshd\[13148\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.96.44	2020-05-01 04:47:28
78.128.113.76	attackspambots	Apr 30 23:01:34 web01.agentur-b-2.de postfix/smtpd[315025]: lost connection after CONNECT from unknown[78.128.113.76] Apr 30 23:01:42 web01.agentur-b-2.de postfix/smtpd[315025]: lost connection after CONNECT from unknown[78.128.113.76] Apr 30 23:01:43 web01.agentur-b-2.de postfix/smtpd[320816]: lost connection after CONNECT from unknown[78.128.113.76] Apr 30 23:01:44 web01.agentur-b-2.de postfix/smtpd[318764]: warning: unknown[78.128.113.76]: SASL PLAIN authentication failed: Apr 30 23:01:44 web01.agentur-b-2.de postfix/smtpd[318764]: lost connection after AUTH from unknown[78.128.113.76]	2020-05-01 05:14:51
153.122.35.115	attackspambots	Fail2Ban Ban Triggered (2)	2020-05-01 04:38:40
213.208.139.202	attackbots	Brute forcing email accounts	2020-05-01 04:51:03
218.92.0.199	attack	Apr 30 22:55:11 pve1 sshd[8626]: Failed password for root from 218.92.0.199 port 11171 ssh2 Apr 30 22:55:13 pve1 sshd[8626]: Failed password for root from 218.92.0.199 port 11171 ssh2 ...	2020-05-01 04:59:03
134.249.155.251	attackbotsspam	scan z	2020-05-01 04:55:25
94.102.52.44	attack	Apr 30 22:34:42 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.197.126, session= Apr 30 22:37:24 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.197.126, session= Apr 30 22:39:10 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.197.126, session= Apr 30 22:41:39 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.197.126, session= Apr 30 22:42:14 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=,	2020-05-01 05:13:41
121.177.48.24	attackspam	Port probing on unauthorized port 26	2020-05-01 04:47:03
61.244.121.21	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-05-01 04:49:32
70.63.80.180	attackspam	Automatic report - XMLRPC Attack	2020-05-01 04:45:53
222.186.30.35	attack	Apr 30 22:35:40 legacy sshd[6770]: Failed password for root from 222.186.30.35 port 43235 ssh2 Apr 30 22:35:48 legacy sshd[6772]: Failed password for root from 222.186.30.35 port 29479 ssh2 ...	2020-05-01 04:38:03
162.243.138.122	attackspam	Unauthorized connection attempt from IP address 162.243.138.122 on port 587	2020-05-01 04:59:39

Recently Reported IPs

128.71.120.55	103.129.98.40	216.181.216.227	212.3.49.119
80.240.165.147	24.15.205.252	24.255.155.148	198.252.106.72
107.15.255.224	105.70.107.145	186.226.216.253	156.211.54.103
101.99.12.183	88.250.46.143	118.185.40.66	59.92.98.112
185.66.230.248	131.196.250.99	82.80.61.215	221.215.180.12