Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Hungary

Internet Service Provider: DIGI Tavkozlesi es Szolgaltato Kft.

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackbots
Unauthorized connection attempt from IP address 94.21.158.164 on Port 445(SMB)
2019-11-29 08:18:54
Comments on same subnet:
IP Type Details Datetime
94.21.158.175 attackbotsspam
php WP PHPmyadamin ABUSE blocked for 12h
2020-07-23 06:18:11
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.21.158.164
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49017
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.21.158.164.			IN	A

;; AUTHORITY SECTION:
.			418	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112802 1800 900 604800 86400

;; Query time: 122 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 29 08:18:51 CST 2019
;; MSG SIZE  rcvd: 117
Host info
164.158.21.94.in-addr.arpa domain name pointer 94-21-158-164.pool.digikabel.hu.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
164.158.21.94.in-addr.arpa	name = 94-21-158-164.pool.digikabel.hu.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
91.185.193.101 attack
Oct 22 19:01:32 [host] sshd[20170]: Invalid user usuario from 91.185.193.101
Oct 22 19:01:32 [host] sshd[20170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.185.193.101
Oct 22 19:01:34 [host] sshd[20170]: Failed password for invalid user usuario from 91.185.193.101 port 44679 ssh2
2019-10-23 01:03:05
200.233.220.185 attackspambots
2019-10-21 x@x
2019-10-21 09:19:58 unexpected disconnection while reading SMTP command from (200-233-220-185.static.ctbctelecom.com.br) [200.233.220.185]:33996 I=[10.100.18.21]:25 (error: Connection reset by peer)
2019-10-21 x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=200.233.220.185
2019-10-23 01:23:36
222.186.15.18 attackspam
Oct 22 18:32:18 fr01 sshd[21481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.18  user=root
Oct 22 18:32:20 fr01 sshd[21481]: Failed password for root from 222.186.15.18 port 20829 ssh2
...
2019-10-23 01:13:34
178.62.9.122 attackbotsspam
Automatic report - Banned IP Access
2019-10-23 01:33:10
193.200.173.160 attack
Oct 22 13:46:17 [host] sshd[14413]: Invalid user kishori from 193.200.173.160
Oct 22 13:46:17 [host] sshd[14413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.200.173.160
Oct 22 13:46:19 [host] sshd[14413]: Failed password for invalid user kishori from 193.200.173.160 port 48929 ssh2
2019-10-23 01:14:54
118.101.7.207 attackbots
2019-10-21 x@x
2019-10-21 09:31:40 unexpected disconnection while reading SMTP command from ([118.101.7.207]) [118.101.7.207]:46452 I=[10.100.18.22]:25 (error: Connection reset by peer)
2019-10-21 x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=118.101.7.207
2019-10-23 01:35:34
80.211.30.166 attack
Oct 22 19:42:47 server sshd\[12527\]: Invalid user brody from 80.211.30.166
Oct 22 19:42:47 server sshd\[12527\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.30.166 
Oct 22 19:42:49 server sshd\[12527\]: Failed password for invalid user brody from 80.211.30.166 port 60210 ssh2
Oct 22 19:53:26 server sshd\[15096\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.30.166  user=root
Oct 22 19:53:28 server sshd\[15096\]: Failed password for root from 80.211.30.166 port 51182 ssh2
...
2019-10-23 01:27:56
51.68.126.45 attackspam
$f2bV_matches
2019-10-23 01:32:43
103.205.68.2 attack
Oct 22 18:52:47 [host] sshd[20008]: Invalid user download from 103.205.68.2
Oct 22 18:52:47 [host] sshd[20008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.205.68.2
Oct 22 18:52:49 [host] sshd[20008]: Failed password for invalid user download from 103.205.68.2 port 60372 ssh2
2019-10-23 01:24:01
106.13.195.84 attackspam
Oct 22 18:22:08 SilenceServices sshd[17534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.195.84
Oct 22 18:22:10 SilenceServices sshd[17534]: Failed password for invalid user czj!@# from 106.13.195.84 port 60738 ssh2
Oct 22 18:28:04 SilenceServices sshd[19058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.195.84
2019-10-23 01:08:32
109.65.54.73 attackspambots
2019-10-21 x@x
2019-10-21 09:45:31 unexpected disconnection while reading SMTP command from bzq-109-65-54-73.red.bezeqint.net [109.65.54.73]:21599 I=[10.100.18.21]:25 (error: Connection reset by peer)
2019-10-21 x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=109.65.54.73
2019-10-23 01:18:29
45.125.66.55 attackbots
\[2019-10-22 13:05:00\] SECURITY\[2046\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-22T13:05:00.811-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="7136201148767414007",SessionID="0x7f6130286de8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.125.66.55/59770",ACLName="no_extension_match"
\[2019-10-22 13:05:44\] SECURITY\[2046\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-22T13:05:44.982-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="6717201148134454002",SessionID="0x7f6130804e48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.125.66.55/50173",ACLName="no_extension_match"
\[2019-10-22 13:06:03\] SECURITY\[2046\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-22T13:06:03.499-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="6301101148122518048",SessionID="0x7f6130477218",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.125.66.55/52327",ACLNam
2019-10-23 01:10:25
113.183.239.87 attackspambots
Brute force attempt
2019-10-23 01:39:49
206.189.30.73 attackbotsspam
Oct 22 15:03:54 pkdns2 sshd\[17387\]: Invalid user mara from 206.189.30.73Oct 22 15:03:56 pkdns2 sshd\[17387\]: Failed password for invalid user mara from 206.189.30.73 port 53554 ssh2Oct 22 15:07:35 pkdns2 sshd\[17570\]: Invalid user 1z2x3 from 206.189.30.73Oct 22 15:07:37 pkdns2 sshd\[17570\]: Failed password for invalid user 1z2x3 from 206.189.30.73 port 35812 ssh2Oct 22 15:11:13 pkdns2 sshd\[17774\]: Invalid user security from 206.189.30.73Oct 22 15:11:15 pkdns2 sshd\[17774\]: Failed password for invalid user security from 206.189.30.73 port 46290 ssh2
...
2019-10-23 01:21:47
182.61.136.53 attackbotsspam
Unauthorized SSH login attempts
2019-10-23 01:14:34

Recently Reported IPs

139.180.172.46 78.155.61.27 27.66.124.219 187.188.33.74
27.254.204.196 122.225.12.62 106.54.185.31 5.13.211.114
170.244.99.62 154.121.24.140 36.84.155.90 180.242.12.184
189.154.119.160 119.73.65.10 168.53.207.164 226.51.237.248
222.175.161.234 45.178.3.61 1.175.126.167 67.205.10.77