Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Nuremberg

Region: Bavaria

Country: Germany

Internet Service Provider: Contabo GmbH

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
 TCP (SYN) 161.97.104.94:51010 -> port 5038, len 44
2020-09-02 23:43:45
attackbots
Port scanning [8 denied]
2020-09-02 15:19:24
attackbots
*Port Scan* detected from 161.97.104.94 (DE/Germany/Bavaria/Munich (Ramersdorf-Perlach)/vmi436361.contaboserver.net). 4 hits in the last 200 seconds
2020-09-02 08:22:26
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 161.97.104.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8354
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;161.97.104.94.			IN	A

;; AUTHORITY SECTION:
.			487	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020090101 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 02 08:22:22 CST 2020
;; MSG SIZE  rcvd: 117
Host info
94.104.97.161.in-addr.arpa domain name pointer vmi436361.contaboserver.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
94.104.97.161.in-addr.arpa	name = vmi436361.contaboserver.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
180.100.212.73 attackbotsspam
Nov 15 20:46:17 MK-Soft-VM7 sshd[5985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.100.212.73 
Nov 15 20:46:18 MK-Soft-VM7 sshd[5985]: Failed password for invalid user support from 180.100.212.73 port 39282 ssh2
...
2019-11-16 04:14:30
157.245.105.78 attackbots
2019-11-15T14:39:29Z - RDP login failed multiple times. (157.245.105.78)
2019-11-16 03:39:57
139.155.118.190 attackspambots
Nov 15 09:57:00 web9 sshd\[28701\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.190  user=backup
Nov 15 09:57:02 web9 sshd\[28701\]: Failed password for backup from 139.155.118.190 port 55188 ssh2
Nov 15 10:01:05 web9 sshd\[29248\]: Invalid user guat from 139.155.118.190
Nov 15 10:01:05 web9 sshd\[29248\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.118.190
Nov 15 10:01:07 web9 sshd\[29248\]: Failed password for invalid user guat from 139.155.118.190 port 44609 ssh2
2019-11-16 04:13:23
68.32.152.195 attack
Port scan
2019-11-16 04:15:02
37.187.178.245 attackspambots
2019-11-15T19:32:46.738431shield sshd\[27598\]: Invalid user wwwadmin from 37.187.178.245 port 59706
2019-11-15T19:32:46.743193shield sshd\[27598\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=neuronia.psybnc.org
2019-11-15T19:32:49.303912shield sshd\[27598\]: Failed password for invalid user wwwadmin from 37.187.178.245 port 59706 ssh2
2019-11-15T19:37:00.280761shield sshd\[27958\]: Invalid user hung from 37.187.178.245 port 40890
2019-11-15T19:37:00.285111shield sshd\[27958\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=neuronia.psybnc.org
2019-11-16 03:39:14
140.143.59.171 attackspam
Nov 15 17:16:11 ns382633 sshd\[17379\]: Invalid user gowl from 140.143.59.171 port 40972
Nov 15 17:16:11 ns382633 sshd\[17379\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.59.171
Nov 15 17:16:14 ns382633 sshd\[17379\]: Failed password for invalid user gowl from 140.143.59.171 port 40972 ssh2
Nov 15 17:38:27 ns382633 sshd\[21376\]: Invalid user harleyharley. from 140.143.59.171 port 34708
Nov 15 17:38:27 ns382633 sshd\[21376\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.59.171
2019-11-16 03:35:46
81.134.41.100 attackbots
Nov 15 20:45:01 MK-Soft-VM6 sshd[14729]: Failed password for root from 81.134.41.100 port 46372 ssh2
...
2019-11-16 03:51:19
79.137.28.187 attackspambots
Nov 15 20:41:59 SilenceServices sshd[21699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.28.187
Nov 15 20:42:00 SilenceServices sshd[21699]: Failed password for invalid user evaristo from 79.137.28.187 port 40840 ssh2
Nov 15 20:45:34 SilenceServices sshd[22783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.28.187
2019-11-16 04:02:42
210.245.51.23 attackspam
2019-11-15 08:39:16 H=(210-245-51-office-net-static-ip.fpt.vn) [210.245.51.23]:45286 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/210.245.51.23)
2019-11-15 08:39:19 H=(210-245-51-office-net-static-ip.fpt.vn) [210.245.51.23]:45286 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-11-15 08:39:21 H=(210-245-51-office-net-static-ip.fpt.vn) [210.245.51.23]:45286 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
...
2019-11-16 03:46:06
81.183.209.51 attackspambots
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/81.183.209.51/ 
 
 HU - 1H : (13)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : HU 
 NAME ASN : ASN5483 
 
 IP : 81.183.209.51 
 
 CIDR : 81.182.0.0/15 
 
 PREFIX COUNT : 275 
 
 UNIQUE IP COUNT : 1368320 
 
 
 ATTACKS DETECTED ASN5483 :  
  1H - 2 
  3H - 2 
  6H - 4 
 12H - 6 
 24H - 6 
 
 DateTime : 2019-11-15 15:38:39 
 
 INFO : Server 403 - Looking for resource vulnerabilities Detected and Blocked by ADMIN  - data recovery
2019-11-16 04:10:49
202.120.40.69 attackbots
Nov 15 16:17:43 cavern sshd[6278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.120.40.69
2019-11-16 03:58:50
51.75.169.236 attackspam
Nov 15 07:05:43 web9 sshd\[4914\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.169.236  user=news
Nov 15 07:05:46 web9 sshd\[4914\]: Failed password for news from 51.75.169.236 port 58113 ssh2
Nov 15 07:09:32 web9 sshd\[5493\]: Invalid user simonian from 51.75.169.236
Nov 15 07:09:32 web9 sshd\[5493\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.169.236
Nov 15 07:09:34 web9 sshd\[5493\]: Failed password for invalid user simonian from 51.75.169.236 port 48546 ssh2
2019-11-16 04:10:33
207.154.209.159 attackbots
Automatic report - Banned IP Access
2019-11-16 03:57:21
222.186.175.202 attackbotsspam
"Fail2Ban detected SSH brute force attempt"
2019-11-16 03:40:44
106.12.5.35 attackbots
Nov 15 17:08:12 venus sshd\[10599\]: Invalid user drottning from 106.12.5.35 port 35154
Nov 15 17:08:12 venus sshd\[10599\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.5.35
Nov 15 17:08:14 venus sshd\[10599\]: Failed password for invalid user drottning from 106.12.5.35 port 35154 ssh2
...
2019-11-16 03:52:48

Recently Reported IPs

2.73.228.104 12.127.63.254 186.89.74.224 118.117.166.232
113.72.17.114 36.195.16.44 76.243.125.58 36.232.140.8
98.210.237.141 211.167.203.248 200.75.77.247 2.122.26.26
52.142.72.119 180.59.52.64 113.158.241.217 184.91.104.34
82.172.160.189 71.98.106.94 141.89.76.154 177.86.124.13