Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: 1&1 IONOS SE

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Jul 11 08:52:47 ns392434 sshd[19053]: Invalid user wangxuan from 217.160.214.48 port 48758
Jul 11 08:52:47 ns392434 sshd[19053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48
Jul 11 08:52:47 ns392434 sshd[19053]: Invalid user wangxuan from 217.160.214.48 port 48758
Jul 11 08:52:49 ns392434 sshd[19053]: Failed password for invalid user wangxuan from 217.160.214.48 port 48758 ssh2
Jul 11 09:08:04 ns392434 sshd[19557]: Invalid user s from 217.160.214.48 port 49370
Jul 11 09:08:04 ns392434 sshd[19557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48
Jul 11 09:08:04 ns392434 sshd[19557]: Invalid user s from 217.160.214.48 port 49370
Jul 11 09:08:06 ns392434 sshd[19557]: Failed password for invalid user s from 217.160.214.48 port 49370 ssh2
Jul 11 09:11:15 ns392434 sshd[19677]: Invalid user casillas from 217.160.214.48 port 47526
2020-07-11 17:58:51
attackbotsspam
Jul  8 03:04:49 l02a sshd[21121]: Invalid user frappe from 217.160.214.48
Jul  8 03:04:49 l02a sshd[21121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48 
Jul  8 03:04:49 l02a sshd[21121]: Invalid user frappe from 217.160.214.48
Jul  8 03:04:51 l02a sshd[21121]: Failed password for invalid user frappe from 217.160.214.48 port 40708 ssh2
2020-07-08 11:49:11
attackbotsspam
Jul  6 20:14:09 php1 sshd\[6693\]: Invalid user xzw from 217.160.214.48
Jul  6 20:14:09 php1 sshd\[6693\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48
Jul  6 20:14:11 php1 sshd\[6693\]: Failed password for invalid user xzw from 217.160.214.48 port 46828 ssh2
Jul  6 20:17:15 php1 sshd\[6933\]: Invalid user cc from 217.160.214.48
Jul  6 20:17:15 php1 sshd\[6933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48
2020-07-07 14:45:04
attackspam
B: Abusive ssh attack
2020-06-26 21:37:21
attack
$f2bV_matches
2020-06-25 18:42:20
attackbots
Jun 19 16:50:25 django-0 sshd[20943]: Invalid user deploy from 217.160.214.48
...
2020-06-20 01:48:32
attackbots
SSH authentication failure x 6 reported by Fail2Ban
...
2020-06-01 21:04:10
attackbotsspam
" "
2020-05-28 05:02:00
attackspam
May 26 17:50:27 ns382633 sshd\[7558\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48  user=root
May 26 17:50:28 ns382633 sshd\[7558\]: Failed password for root from 217.160.214.48 port 59850 ssh2
May 26 17:54:44 ns382633 sshd\[7974\]: Invalid user weblogic from 217.160.214.48 port 43964
May 26 17:54:44 ns382633 sshd\[7974\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48
May 26 17:54:46 ns382633 sshd\[7974\]: Failed password for invalid user weblogic from 217.160.214.48 port 43964 ssh2
2020-05-27 02:18:57
attackspambots
Bruteforce detected by fail2ban
2020-05-26 11:23:52
attackspam
odoo8
...
2020-05-25 22:37:27
attack
2020-05-25T10:48:13.599285vps773228.ovh.net sshd[13832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48  user=root
2020-05-25T10:48:15.342939vps773228.ovh.net sshd[13832]: Failed password for root from 217.160.214.48 port 35310 ssh2
2020-05-25T10:51:43.333515vps773228.ovh.net sshd[13900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48  user=root
2020-05-25T10:51:45.573906vps773228.ovh.net sshd[13900]: Failed password for root from 217.160.214.48 port 39866 ssh2
2020-05-25T10:55:11.199193vps773228.ovh.net sshd[13956]: Invalid user uftp from 217.160.214.48 port 44424
...
2020-05-25 17:59:22
attack
2020-05-19T11:52:25.565579scmdmz1 sshd[19519]: Invalid user ugr from 217.160.214.48 port 32810
2020-05-19T11:52:27.831907scmdmz1 sshd[19519]: Failed password for invalid user ugr from 217.160.214.48 port 32810 ssh2
2020-05-19T11:56:11.807618scmdmz1 sshd[20014]: Invalid user kxw from 217.160.214.48 port 41476
...
2020-05-19 23:44:16
attackspam
May 16 04:45:47 piServer sshd[30338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48 
May 16 04:45:49 piServer sshd[30338]: Failed password for invalid user solr from 217.160.214.48 port 36102 ssh2
May 16 04:49:48 piServer sshd[30715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48 
...
2020-05-16 13:28:29
attackspambots
May 12 01:28:35 server1 sshd\[31333\]: Invalid user simone from 217.160.214.48
May 12 01:28:35 server1 sshd\[31333\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48 
May 12 01:28:38 server1 sshd\[31333\]: Failed password for invalid user simone from 217.160.214.48 port 45558 ssh2
May 12 01:31:59 server1 sshd\[32195\]: Invalid user mats from 217.160.214.48
May 12 01:31:59 server1 sshd\[32195\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48 
...
2020-05-12 15:52:23
attackbots
May 11 15:58:40 meumeu sshd[18529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48 
May 11 15:58:42 meumeu sshd[18529]: Failed password for invalid user bkpuser from 217.160.214.48 port 50512 ssh2
May 11 16:02:21 meumeu sshd[19466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48 
...
2020-05-11 22:12:06
attackspambots
May  3 14:47:02 mail sshd\[32736\]: Invalid user ht from 217.160.214.48
May  3 14:47:02 mail sshd\[32736\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48
...
2020-05-04 04:06:57
attackspam
Apr 26 08:59:30 mail sshd[8113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48
Apr 26 08:59:32 mail sshd[8113]: Failed password for invalid user gisela from 217.160.214.48 port 42012 ssh2
Apr 26 09:03:23 mail sshd[8842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48
2020-04-26 15:38:43
attackbotsspam
2020-04-24T22:43:09.924033shield sshd\[25936\]: Invalid user dev from 217.160.214.48 port 60404
2020-04-24T22:43:09.927885shield sshd\[25936\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48
2020-04-24T22:43:12.309451shield sshd\[25936\]: Failed password for invalid user dev from 217.160.214.48 port 60404 ssh2
2020-04-24T22:50:41.793990shield sshd\[26918\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48  user=root
2020-04-24T22:50:43.557850shield sshd\[26918\]: Failed password for root from 217.160.214.48 port 58240 ssh2
2020-04-25 07:08:01
attackbots
2020-04-22T06:51:55.350389Z edfb67e5ee91 New connection: 217.160.214.48:54414 (172.17.0.5:2222) [session: edfb67e5ee91]
2020-04-22T07:12:14.094020Z f9c97ebc02ba New connection: 217.160.214.48:46572 (172.17.0.5:2222) [session: f9c97ebc02ba]
2020-04-22 15:19:18
attackspam
DATE:2020-04-09 17:36:34,IP:217.160.214.48,MATCHES:11,PORT:ssh
2020-04-09 23:52:16
attackspambots
Apr  8 14:34:41 ns381471 sshd[30468]: Failed password for root from 217.160.214.48 port 51096 ssh2
Apr  8 14:38:38 ns381471 sshd[30587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48
2020-04-09 02:07:29
attack
Apr  4 01:21:20 srv206 sshd[30475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48  user=root
Apr  4 01:21:22 srv206 sshd[30475]: Failed password for root from 217.160.214.48 port 59530 ssh2
...
2020-04-04 09:26:43
attackbots
2020-03-29T19:09:34.676717abusebot-7.cloudsearch.cf sshd[14262]: Invalid user jcz from 217.160.214.48 port 52662
2020-03-29T19:09:34.682151abusebot-7.cloudsearch.cf sshd[14262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48
2020-03-29T19:09:34.676717abusebot-7.cloudsearch.cf sshd[14262]: Invalid user jcz from 217.160.214.48 port 52662
2020-03-29T19:09:36.191250abusebot-7.cloudsearch.cf sshd[14262]: Failed password for invalid user jcz from 217.160.214.48 port 52662 ssh2
2020-03-29T19:18:14.299151abusebot-7.cloudsearch.cf sshd[14781]: Invalid user tar from 217.160.214.48 port 39230
2020-03-29T19:18:14.306844abusebot-7.cloudsearch.cf sshd[14781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48
2020-03-29T19:18:14.299151abusebot-7.cloudsearch.cf sshd[14781]: Invalid user tar from 217.160.214.48 port 39230
2020-03-29T19:18:16.538522abusebot-7.cloudsearch.cf sshd[14781]: Failed pa
...
2020-03-30 04:08:20
attack
Repeated brute force against a port
2020-03-29 00:02:05
attackspambots
Brute force attempt
2020-03-27 21:05:27
attackspambots
Mar 21 06:17:26 legacy sshd[18881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48
Mar 21 06:17:28 legacy sshd[18881]: Failed password for invalid user justin from 217.160.214.48 port 45154 ssh2
Mar 21 06:21:25 legacy sshd[18964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48
...
2020-03-21 15:44:23
attackbotsspam
Mar 16 01:10:30 *** sshd[29854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48  user=r.r
Mar 16 01:10:32 *** sshd[29854]: Failed password for r.r from 217.160.214.48 port 56054 ssh2
Mar 16 01:10:32 *** sshd[29854]: Received disconnect from 217.160.214.48: 11: Bye Bye [preauth]
Mar 16 01:16:38 *** sshd[30649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48  user=r.r
Mar 16 01:16:41 *** sshd[30649]: Failed password for r.r from 217.160.214.48 port 32834 ssh2
Mar 16 01:16:41 *** sshd[30649]: Received disconnect from 217.160.214.48: 11: Bye Bye [preauth]
Mar 16 01:21:34 *** sshd[31376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.160.214.48  user=r.r
Mar 16 01:21:36 *** sshd[31376]: Failed password for r.r from 217.160.214.48 port 55688 ssh2
Mar 16 01:21:36 *** sshd[31376]: Received disconnect from 217.160.214.48: 1........
-------------------------------
2020-03-19 18:03:17
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 217.160.214.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19318
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;217.160.214.48.			IN	A

;; AUTHORITY SECTION:
.			141	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031900 1800 900 604800 86400

;; Query time: 94 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 19 18:03:12 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 48.214.160.217.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 48.214.160.217.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
125.25.57.33 attack
125.25.57.33 - - [24/Apr/2020:22:30:17 +0200] "GET /awstats.pl?config=www.haustechnikdialog.de%2Fredirect.ashx%3Furl%3Dhttps%3A%2F%2Fsouldja.de%2Fohrringe&lang=en&output=main HTTP/1.0" 404 280 "https://oraux.pnzone.net/" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.3) Gecko/20100101 Firefox/42.0"
2020-04-25 05:23:59
49.235.229.211 attack
SSH brute force attempt
2020-04-25 05:38:02
51.79.55.107 attackbotsspam
$f2bV_matches
2020-04-25 05:57:11
189.146.21.89 attackbots
Unauthorized connection attempt from IP address 189.146.21.89 on Port 445(SMB)
2020-04-25 05:28:20
106.38.33.70 attack
Apr 24 23:21:01 h2779839 sshd[5960]: Invalid user demo from 106.38.33.70 port 50842
Apr 24 23:21:01 h2779839 sshd[5960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.38.33.70
Apr 24 23:21:01 h2779839 sshd[5960]: Invalid user demo from 106.38.33.70 port 50842
Apr 24 23:21:03 h2779839 sshd[5960]: Failed password for invalid user demo from 106.38.33.70 port 50842 ssh2
Apr 24 23:25:00 h2779839 sshd[6008]: Invalid user sonia from 106.38.33.70 port 54638
Apr 24 23:25:00 h2779839 sshd[6008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.38.33.70
Apr 24 23:25:00 h2779839 sshd[6008]: Invalid user sonia from 106.38.33.70 port 54638
Apr 24 23:25:02 h2779839 sshd[6008]: Failed password for invalid user sonia from 106.38.33.70 port 54638 ssh2
Apr 24 23:28:40 h2779839 sshd[6035]: Invalid user adrien from 106.38.33.70 port 58404
...
2020-04-25 05:42:40
46.61.82.217 attackbotsspam
Unauthorized connection attempt from IP address 46.61.82.217 on Port 445(SMB)
2020-04-25 05:22:39
218.92.0.145 attackbotsspam
[MK-Root1] SSH login failed
2020-04-25 05:45:35
41.93.32.88 attack
invalid user admin1 from 41.93.32.88 port 59278
2020-04-25 05:57:27
202.175.46.170 attackspambots
SSH Invalid Login
2020-04-25 05:55:19
132.232.218.246 attackspam
Apr 24 23:11:30 santamaria sshd\[29831\]: Invalid user user from 132.232.218.246
Apr 24 23:11:30 santamaria sshd\[29831\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.218.246
Apr 24 23:11:32 santamaria sshd\[29831\]: Failed password for invalid user user from 132.232.218.246 port 52858 ssh2
...
2020-04-25 05:51:59
220.164.193.238 attackspambots
Automatic report - Banned IP Access
2020-04-25 05:47:29
104.248.171.81 attackspambots
Apr 24 22:56:01 mail sshd[9389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.171.81
Apr 24 22:56:04 mail sshd[9389]: Failed password for invalid user lorin from 104.248.171.81 port 41154 ssh2
Apr 24 22:59:48 mail sshd[10103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.171.81
2020-04-25 05:22:09
49.247.196.128 attackspam
firewall-block, port(s): 15009/tcp
2020-04-25 05:53:13
174.45.109.103 attack
SSH Brute-Force Attack
2020-04-25 05:25:07
123.54.68.171 attack
1587760221 - 04/24/2020 22:30:21 Host: 123.54.68.171/123.54.68.171 Port: 445 TCP Blocked
2020-04-25 05:18:58

Recently Reported IPs

119.204.133.9 200.56.44.192 80.19.66.179 189.112.179.115
129.204.188.227 114.176.176.163 105.104.197.42 78.217.153.69
103.131.247.226 178.164.216.163 165.22.213.5 223.204.71.194
81.201.57.80 60.16.95.95 92.68.120.28 217.112.142.231
59.55.170.19 178.205.178.66 123.97.31.109 181.33.8.93