Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Kleinblittersdorf

Region: Saarland

Country: Germany

Internet Service Provider: intersaar GmbH

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
suspicious action Wed, 26 Feb 2020 10:35:57 -0300
2020-02-27 02:24:17
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.135.4.164
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7256
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;213.135.4.164.			IN	A

;; AUTHORITY SECTION:
.			593	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110501 1800 900 604800 86400

;; Query time: 115 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 06 01:25:33 CST 2019
;; MSG SIZE  rcvd: 117
Host info
164.4.135.213.in-addr.arpa domain name pointer ip-213-135-4-164.intersaar.de.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
164.4.135.213.in-addr.arpa	name = ip-213-135-4-164.intersaar.de.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
222.186.175.216 attackbots
Sep  3 22:35:50 nopemail auth.info sshd[20036]: Unable to negotiate with 222.186.175.216 port 14478: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth]
...
2020-09-04 04:37:29
49.233.51.204 attackspam
Sep  3 21:02:25 mout sshd[17584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.51.204  user=root
Sep  3 21:02:27 mout sshd[17584]: Failed password for root from 49.233.51.204 port 50888 ssh2
2020-09-04 05:08:11
112.26.44.112 attackbotsspam
Invalid user marc from 112.26.44.112 port 52377
2020-09-04 05:09:00
125.160.17.32 attackbotsspam
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-09-04 04:45:00
43.226.236.222 attack
Failed password for invalid user emily from 43.226.236.222 port 47289 ssh2
2020-09-04 04:49:49
185.220.102.246 attack
Sep  3 16:23:42 plusreed sshd[8529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.102.246  user=root
Sep  3 16:23:44 plusreed sshd[8529]: Failed password for root from 185.220.102.246 port 29116 ssh2
Sep  3 16:23:47 plusreed sshd[8529]: Failed password for root from 185.220.102.246 port 29116 ssh2
Sep  3 16:23:42 plusreed sshd[8529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.102.246  user=root
Sep  3 16:23:44 plusreed sshd[8529]: Failed password for root from 185.220.102.246 port 29116 ssh2
Sep  3 16:23:47 plusreed sshd[8529]: Failed password for root from 185.220.102.246 port 29116 ssh2
...
2020-09-04 04:43:25
177.85.172.145 attackbots
Sep  3 20:54:08 instance-2 sshd[16100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.85.172.145 
Sep  3 20:54:10 instance-2 sshd[16100]: Failed password for invalid user ubuntu from 177.85.172.145 port 57802 ssh2
Sep  3 21:00:41 instance-2 sshd[16189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.85.172.145
2020-09-04 05:02:01
49.232.137.54 attackbotsspam
Sep  3 20:32:03 game-panel sshd[20632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.137.54
Sep  3 20:32:05 game-panel sshd[20632]: Failed password for invalid user odoo from 49.232.137.54 port 50054 ssh2
Sep  3 20:36:28 game-panel sshd[20825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.137.54
2020-09-04 04:48:39
60.175.90.102 attack
Icarus honeypot on github
2020-09-04 04:42:11
128.199.92.187 attackbotsspam
Invalid user sdi from 128.199.92.187 port 33094
2020-09-04 05:04:26
13.57.26.19 attack
Icarus honeypot on github
2020-09-04 04:41:10
167.172.231.95 attackbots
daft bot

"GET / HTTP/1.0" "-" "Mozilla/5.0 (compatible; NetcraftSurveyAgent/1.0; +info@netcraft.com)"
2020-09-04 04:57:25
107.172.211.29 attack
2020-09-03 11:48:11.817564-0500  localhost smtpd[18583]: NOQUEUE: reject: RCPT from unknown[107.172.211.29]: 554 5.7.1 Service unavailable; Client host [107.172.211.29] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<00fd88a8.healthyprodu.co>
2020-09-04 04:41:57
213.108.161.64 attackspambots
Attempted Brute Force (dovecot)
2020-09-04 04:45:25
185.220.102.245 attack
Sep  3 21:41:31 vpn01 sshd[9489]: Failed password for root from 185.220.102.245 port 14418 ssh2
Sep  3 21:41:41 vpn01 sshd[9489]: error: maximum authentication attempts exceeded for root from 185.220.102.245 port 14418 ssh2 [preauth]
...
2020-09-04 04:55:41

Recently Reported IPs

51.255.174.146 176.113.80.46 120.79.217.171 176.113.80.211
95.180.66.254 92.247.181.15 185.211.247.110 95.57.174.214
45.76.33.131 2400:8500:1302:819:150:95:135:190 189.156.199.46 88.255.217.70
171.241.96.39 179.182.213.164 201.55.198.91 64.233.172.206
39.104.75.219 37.59.63.219 178.62.18.121 178.222.28.62