213.109.164.12

Basic Info

City: unknown

Region: unknown

Country: Czech Republic

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
213.109.164.150	attackspam	Automatic report - XMLRPC Attack	2020-03-01 16:43:01

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.109.164.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18678
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;213.109.164.12.			IN	A

;; AUTHORITY SECTION:
.			295	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 19 01:37:16 CST 2022
;; MSG SIZE  rcvd: 107

Host info

12.164.109.213.in-addr.arpa domain name pointer srvb1.endora.cz.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
12.164.109.213.in-addr.arpa	name = srvb1.endora.cz.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
79.77.190.109	attack	Netgear DGN Device Remote Command Execution Vulnerability	2019-09-26 18:00:53
62.210.86.8	attackbots	\[2019-09-26 00:09:56\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '62.210.86.8:52796' - Wrong password \[2019-09-26 00:09:56\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-26T00:09:56.061-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="881111111",SessionID="0x7f1e1c0e2d88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.86.8/52796",Challenge="42ceec3f",ReceivedChallenge="42ceec3f",ReceivedHash="8392f93a0308bcf8ee7b86453e1457f0" \[2019-09-26 00:12:57\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '62.210.86.8:60448' - Wrong password \[2019-09-26 00:12:57\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-26T00:12:57.020-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="100031",SessionID="0x7f1e1c011788",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/6	2019-09-26 18:28:29
180.244.232.44	attackspambots	Attempt to attack host OS, exploiting network vulnerabilities, on 26-09-2019 04:45:27.	2019-09-26 17:43:59
178.140.223.140	attackbotsspam	SSH Bruteforce attack	2019-09-26 18:20:34
14.172.89.84	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 26-09-2019 04:45:25.	2019-09-26 17:47:16
120.28.104.62	attack	Unauthorized connection attempt from IP address 120.28.104.62 on Port 445(SMB)	2019-09-26 17:50:46
49.235.7.47	attackspam	Invalid user pos3 from 49.235.7.47 port 41154	2019-09-26 17:45:57
218.72.76.143	attack	Sep 24 12:01:41 xb3 sshd[4051]: reveeclipse mapping checking getaddrinfo for 143.76.72.218.broad.hz.zj.dynamic.163data.com.cn [218.72.76.143] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 24 12:01:43 xb3 sshd[4051]: Failed password for invalid user qazwsxedc from 218.72.76.143 port 50078 ssh2 Sep 24 12:01:44 xb3 sshd[4051]: Received disconnect from 218.72.76.143: 11: Bye Bye [preauth] Sep 24 12:05:26 xb3 sshd[817]: reveeclipse mapping checking getaddrinfo for 143.76.72.218.broad.hz.zj.dynamic.163data.com.cn [218.72.76.143] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 24 12:05:28 xb3 sshd[817]: Failed password for invalid user p4$$w0rd from 218.72.76.143 port 55356 ssh2 Sep 24 12:05:28 xb3 sshd[817]: Received disconnect from 218.72.76.143: 11: Bye Bye [preauth] Sep 24 12:08:56 xb3 sshd[11925]: reveeclipse mapping checking getaddrinfo for 143.76.72.218.broad.hz.zj.dynamic.163data.com.cn [218.72.76.143] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 24 12:08:57 xb3 sshd[11925]: Failed passw........ -------------------------------	2019-09-26 18:06:50
218.93.22.135	attackspam	376 packets to port 22	2019-09-26 17:59:16
123.207.88.97	attack	Sep 25 23:48:33 web1 sshd\[32306\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.88.97 user=mysql Sep 25 23:48:35 web1 sshd\[32306\]: Failed password for mysql from 123.207.88.97 port 38642 ssh2 Sep 25 23:53:01 web1 sshd\[32704\]: Invalid user cloud from 123.207.88.97 Sep 25 23:53:01 web1 sshd\[32704\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.88.97 Sep 25 23:53:03 web1 sshd\[32704\]: Failed password for invalid user cloud from 123.207.88.97 port 50698 ssh2	2019-09-26 17:56:38
183.103.35.206	attackspam	2019-09-26T06:15:26.071465abusebot.cloudsearch.cf sshd\[18857\]: Invalid user admin from 183.103.35.206 port 55884	2019-09-26 18:23:33
79.155.35.226	attackbotsspam	Sep 25 02:16:06 lvps87-230-18-107 sshd[21997]: Invalid user univershostnameaetsrechenzentrum from 79.155.35.226 Sep 25 02:16:08 lvps87-230-18-107 sshd[21997]: Failed password for invalid user univershostnameaetsrechenzentrum from 79.155.35.226 port 36876 ssh2 Sep 25 02:16:08 lvps87-230-18-107 sshd[21997]: Received disconnect from 79.155.35.226: 11: Bye Bye [preauth] Sep 25 02:19:42 lvps87-230-18-107 sshd[22067]: Invalid user ogrish123 from 79.155.35.226 Sep 25 02:19:44 lvps87-230-18-107 sshd[22067]: Failed password for invalid user ogrish123 from 79.155.35.226 port 50138 ssh2 Sep 25 02:19:44 lvps87-230-18-107 sshd[22067]: Received disconnect from 79.155.35.226: 11: Bye Bye [preauth] Sep 25 02:23:15 lvps87-230-18-107 sshd[22201]: Invalid user omega from 79.155.35.226 Sep 25 02:23:17 lvps87-230-18-107 sshd[22201]: Failed password for invalid user omega from 79.155.35.226 port 35166 ssh2 Sep 25 02:23:17 lvps87-230-18-107 sshd[22201]: Received disconnect from 79.155.35.226:........ -------------------------------	2019-09-26 18:14:08
113.162.14.170	attackbots	Attempt to attack host OS, exploiting network vulnerabilities, on 26-09-2019 04:45:21.	2019-09-26 17:54:52
202.73.9.76	attackbotsspam	Sep 26 13:01:38 pkdns2 sshd\[33298\]: Invalid user kafka from 202.73.9.76Sep 26 13:01:40 pkdns2 sshd\[33298\]: Failed password for invalid user kafka from 202.73.9.76 port 57466 ssh2Sep 26 13:05:35 pkdns2 sshd\[33498\]: Invalid user onlyssh from 202.73.9.76Sep 26 13:05:37 pkdns2 sshd\[33498\]: Failed password for invalid user onlyssh from 202.73.9.76 port 39160 ssh2Sep 26 13:09:26 pkdns2 sshd\[33676\]: Invalid user factorio from 202.73.9.76Sep 26 13:09:28 pkdns2 sshd\[33676\]: Failed password for invalid user factorio from 202.73.9.76 port 48546 ssh2 ...	2019-09-26 18:09:36
129.211.141.207	attackspambots	2019-09-26T10:08:45.836955abusebot-5.cloudsearch.cf sshd\[12464\]: Invalid user gerrit2 from 129.211.141.207 port 60778	2019-09-26 18:27:44

Recently Reported IPs

213.109.224.233	213.109.164.45	213.109.75.230	213.109.79.13
213.109.76.162	213.109.78.220	213.109.79.10	213.109.79.12
213.110.17.246	213.109.79.11	213.110.195.146	213.110.60.166
213.110.250.198	213.111.87.99	213.112.155.18	213.112.119.244
213.114.126.107	213.121.201.156	213.121.32.49	213.121.32.59