213.114.94.208

Basic Info

City: unknown

Region: unknown

Country: Sweden

Internet Service Provider: B2 Bredband AB

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	20 attempts against mh-ssh on milky.magehost.pro	2019-12-25 05:32:01

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.114.94.208
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56385
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;213.114.94.208.			IN	A

;; AUTHORITY SECTION:
.			363	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122402 1800 900 604800 86400

;; Query time: 80 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 25 05:31:58 CST 2019
;; MSG SIZE  rcvd: 118

Host info

208.94.114.213.in-addr.arpa domain name pointer ua-213-114-94-208.bbcust.telenor.se.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
208.94.114.213.in-addr.arpa	name = ua-213-114-94-208.bbcust.telenor.se.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
112.119.173.25	attackbotsspam	60001/tcp [2019-07-19]1pkt	2019-07-20 04:04:10
119.153.104.26	attack	Honeypot attack, port: 23, PTR: PTR record not found	2019-07-20 04:29:59
105.27.231.1	attackbots	445/tcp [2019-07-19]1pkt	2019-07-20 04:00:32
92.118.161.29	attackspam	401/tcp 5985/tcp 5908/tcp... [2019-05-20/07-19]57pkt,35pt.(tcp),4pt.(udp),1tp.(icmp)	2019-07-20 03:53:00
168.167.220.64	attack	Jul 19 16:43:07 *** sshd[25217]: Did not receive identification string from 168.167.220.64	2019-07-20 03:59:28
113.166.251.196	attack	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2019-07-20 04:21:46
77.247.110.213	attack	" "	2019-07-20 03:50:34
115.146.126.209	attackspam	Jul 19 20:29:11 mail sshd\[17471\]: Failed password for invalid user oracle from 115.146.126.209 port 54960 ssh2 Jul 19 20:47:34 mail sshd\[17665\]: Invalid user esther from 115.146.126.209 port 48458 Jul 19 20:47:34 mail sshd\[17665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.146.126.209 ...	2019-07-20 03:51:54
197.230.82.116	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2019-07-20 04:26:27
45.230.81.211	attack	Jul 19 18:37:47 tamoto postfix/smtpd[6835]: connect from unknown[45.230.81.211] Jul 19 18:37:53 tamoto postfix/smtpd[6835]: warning: unknown[45.230.81.211]: SASL CRAM-MD5 authentication failed: authentication failure Jul 19 18:37:54 tamoto postfix/smtpd[6835]: warning: unknown[45.230.81.211]: SASL PLAIN authentication failed: authentication failure Jul 19 18:37:55 tamoto postfix/smtpd[6835]: warning: unknown[45.230.81.211]: SASL LOGIN authentication failed: authentication failure ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=45.230.81.211	2019-07-20 03:54:12
98.2.231.48	attackbotsspam	Jul 19 20:36:46 mail sshd\[17527\]: Failed password for invalid user tomcat from 98.2.231.48 port 59545 ssh2 Jul 19 20:56:31 mail sshd\[17718\]: Invalid user docker from 98.2.231.48 port 55934 Jul 19 20:56:31 mail sshd\[17718\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.2.231.48 ...	2019-07-20 04:14:42
181.120.219.187	attack	2019-07-19T19:48:12.830036abusebot-6.cloudsearch.cf sshd\[15680\]: Invalid user ircd from 181.120.219.187 port 52678	2019-07-20 04:13:10
80.183.69.183	attackspam	23/tcp [2019-07-19]1pkt	2019-07-20 04:08:04
105.96.83.152	attack	445/tcp [2019-07-19]1pkt	2019-07-20 04:15:16
51.38.111.180	attackspambots	\[2019-07-19 15:47:59\] NOTICE\[20804\] chan_sip.c: Registration from '"4567891"\' failed for '51.38.111.180:8104' - Wrong password \[2019-07-19 15:47:59\] SECURITY\[20812\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-19T15:47:59.985-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4567891",SessionID="0x7f06f82756a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.38.111.180/8104",Challenge="0eca2408",ReceivedChallenge="0eca2408",ReceivedHash="0ba1200c58901b59abfbc110044e6c53" \[2019-07-19 15:48:02\] NOTICE\[20804\] chan_sip.c: Registration from '"4567891"\' failed for '51.38.111.180:8042' - Wrong password \[2019-07-19 15:48:02\] SECURITY\[20812\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-19T15:48:02.144-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4567891",SessionID="0x7f06f801be28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="I	2019-07-20 03:53:45

Recently Reported IPs

79.166.215.231	31.184.218.90	150.95.152.252	64.64.224.209
183.81.84.249	54.124.12.207	144.91.117.6	162.66.185.248
48.125.215.248	187.21.111.159	13.235.68.200	77.42.118.136
164.84.37.165	140.198.213.37	34.105.129.209	92.93.25.235
130.193.243.75	95.92.116.149	78.165.64.5	42.59.103.71