Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Ravensburg

Region: Baden-Württemberg

Country: Germany

Internet Service Provider: Unitymedia BW GmbH

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackspambots
Mar 18 23:10:39 [host] kernel: [1199075.145882] [U
Mar 18 23:10:40 [host] kernel: [1199075.634278] [U
Mar 18 23:10:41 [host] kernel: [1199076.664414] [U
Mar 18 23:10:43 [host] kernel: [1199078.665084] [U
Mar 18 23:10:55 [host] kernel: [1199090.422293] [U
Mar 18 23:10:55 [host] kernel: [1199091.065255] [U
2020-03-19 10:48:02
attack
Unauthorized connection attempt detected from IP address 46.5.42.16 to port 2220 [J]
2020-01-29 03:47:31
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 46.5.42.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6663
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;46.5.42.16.			IN	A

;; AUTHORITY SECTION:
.			481	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012801 1800 900 604800 86400

;; Query time: 100 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 29 03:47:28 CST 2020
;; MSG SIZE  rcvd: 114
Host info
16.42.5.46.in-addr.arpa domain name pointer HSI-KBW-046-005-042-016.hsi8.kabel-badenwuerttemberg.de.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
16.42.5.46.in-addr.arpa	name = HSI-KBW-046-005-042-016.hsi8.kabel-badenwuerttemberg.de.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
195.54.160.21 attackbotsspam
Unauthorized SSH login attempts
2020-07-24 23:14:58
61.177.172.102 attack
Jul 24 15:39:33 marvibiene sshd[16491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.102  user=root
Jul 24 15:39:35 marvibiene sshd[16491]: Failed password for root from 61.177.172.102 port 20878 ssh2
Jul 24 15:39:38 marvibiene sshd[16491]: Failed password for root from 61.177.172.102 port 20878 ssh2
Jul 24 15:39:33 marvibiene sshd[16491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.102  user=root
Jul 24 15:39:35 marvibiene sshd[16491]: Failed password for root from 61.177.172.102 port 20878 ssh2
Jul 24 15:39:38 marvibiene sshd[16491]: Failed password for root from 61.177.172.102 port 20878 ssh2
2020-07-24 23:43:41
52.172.8.181 attackbots
2020-07-24T15:34:34.986926ns386461 sshd\[26918\]: Invalid user oracle from 52.172.8.181 port 52594
2020-07-24T15:34:34.991357ns386461 sshd\[26918\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.172.8.181
2020-07-24T15:34:36.629835ns386461 sshd\[26918\]: Failed password for invalid user oracle from 52.172.8.181 port 52594 ssh2
2020-07-24T15:47:43.391809ns386461 sshd\[6228\]: Invalid user ph from 52.172.8.181 port 41074
2020-07-24T15:47:43.396490ns386461 sshd\[6228\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.172.8.181
...
2020-07-24 23:15:39
101.108.78.151 attackspambots
1595598466 - 07/24/2020 15:47:46 Host: 101.108.78.151/101.108.78.151 Port: 445 TCP Blocked
2020-07-24 23:09:46
62.114.126.172 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-07-24 23:25:45
112.85.42.174 attackbots
Jul 24 15:11:06 marvibiene sshd[16104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.174  user=root
Jul 24 15:11:08 marvibiene sshd[16104]: Failed password for root from 112.85.42.174 port 16822 ssh2
Jul 24 15:11:11 marvibiene sshd[16104]: Failed password for root from 112.85.42.174 port 16822 ssh2
Jul 24 15:11:06 marvibiene sshd[16104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.174  user=root
Jul 24 15:11:08 marvibiene sshd[16104]: Failed password for root from 112.85.42.174 port 16822 ssh2
Jul 24 15:11:11 marvibiene sshd[16104]: Failed password for root from 112.85.42.174 port 16822 ssh2
2020-07-24 23:19:40
94.23.179.199 attackspambots
2020-07-24T10:36:47.9720111495-001 sshd[43892]: Invalid user user01 from 94.23.179.199 port 38617
2020-07-24T10:36:50.4264501495-001 sshd[43892]: Failed password for invalid user user01 from 94.23.179.199 port 38617 ssh2
2020-07-24T10:40:42.8142731495-001 sshd[44114]: Invalid user benjamin from 94.23.179.199 port 51414
2020-07-24T10:40:42.8176121495-001 sshd[44114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.23.179.199
2020-07-24T10:40:42.8142731495-001 sshd[44114]: Invalid user benjamin from 94.23.179.199 port 51414
2020-07-24T10:40:44.8617241495-001 sshd[44114]: Failed password for invalid user benjamin from 94.23.179.199 port 51414 ssh2
...
2020-07-24 23:19:51
89.215.168.133 attackspam
Jul 24 14:39:38 jumpserver sshd[224872]: Invalid user mdn from 89.215.168.133 port 55926
Jul 24 14:39:41 jumpserver sshd[224872]: Failed password for invalid user mdn from 89.215.168.133 port 55926 ssh2
Jul 24 14:43:45 jumpserver sshd[224916]: Invalid user usuario from 89.215.168.133 port 39176
...
2020-07-24 23:07:51
81.68.76.104 attackspam
Lines containing failures of 81.68.76.104 (max 1000)
Jul 20 04:33:29 localhost sshd[31940]: User r.r from 81.68.76.104 not allowed because listed in DenyUsers
Jul 20 04:33:30 localhost sshd[31940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.76.104  user=r.r
Jul 20 04:33:32 localhost sshd[31940]: Failed password for invalid user r.r from 81.68.76.104 port 57382 ssh2
Jul 20 04:33:32 localhost sshd[31940]: Connection closed by invalid user r.r 81.68.76.104 port 57382 [preauth]
Jul 20 04:33:33 localhost sshd[31963]: User r.r from 81.68.76.104 not allowed because listed in DenyUsers
Jul 20 04:33:34 localhost sshd[31963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.76.104  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=81.68.76.104
2020-07-24 23:12:54
217.182.205.37 attackbotsspam
Jul 24 15:00:27 ip-172-31-61-156 sshd[15141]: Failed password for invalid user Linux from 217.182.205.37 port 53132 ssh2
Jul 24 15:00:25 ip-172-31-61-156 sshd[15141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.205.37
Jul 24 15:00:25 ip-172-31-61-156 sshd[15141]: Invalid user Linux from 217.182.205.37
Jul 24 15:00:27 ip-172-31-61-156 sshd[15141]: Failed password for invalid user Linux from 217.182.205.37 port 53132 ssh2
Jul 24 15:04:32 ip-172-31-61-156 sshd[15396]: Invalid user nivea from 217.182.205.37
...
2020-07-24 23:44:10
106.75.3.59 attackbots
Jul 24 16:48:47 piServer sshd[2767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.3.59 
Jul 24 16:48:49 piServer sshd[2767]: Failed password for invalid user transfer from 106.75.3.59 port 16778 ssh2
Jul 24 16:55:11 piServer sshd[3308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.3.59 
...
2020-07-24 23:26:17
120.92.11.9 attackbotsspam
Jul 24 15:47:11 sxvn sshd[207170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.11.9
2020-07-24 23:47:57
213.39.55.13 attack
2020-07-24T17:57:06.553384afi-git.jinr.ru sshd[25144]: Failed password for test from 213.39.55.13 port 46740 ssh2
2020-07-24T17:59:02.007094afi-git.jinr.ru sshd[25586]: Invalid user dallas from 213.39.55.13 port 53314
2020-07-24T17:59:02.010370afi-git.jinr.ru sshd[25586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.39.55.13
2020-07-24T17:59:02.007094afi-git.jinr.ru sshd[25586]: Invalid user dallas from 213.39.55.13 port 53314
2020-07-24T17:59:04.064505afi-git.jinr.ru sshd[25586]: Failed password for invalid user dallas from 213.39.55.13 port 53314 ssh2
...
2020-07-24 23:39:12
46.161.27.75 attack
Port scan on 5 port(s): 2992 6886 9009 10101 33884
2020-07-24 23:25:15
212.64.70.9 attack
Brute-force attempt banned
2020-07-24 23:39:36

Recently Reported IPs

147.232.18.67 157.24.192.61 46.211.156.192 176.199.114.99
5.13.5.169 97.192.55.158 1.246.222.85 186.112.28.136
64.36.19.86 221.236.59.42 190.201.155.143 144.139.109.94
218.250.251.31 58.71.215.130 105.139.172.44 218.250.8.11
211.224.204.131 56.95.35.23 210.186.51.211 88.8.197.137