94.21.174.218 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Hungary

Internet Service Provider: DIGI Tavkozlesi es Szolgaltato Kft.

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Automatic report - Port Scan Attack	2020-05-06 22:49:08

Comments on same subnet:

IP	Type	Details	Datetime
94.21.174.58	attack	Oct 31 22:15:10 server sshd\[18033\]: Invalid user pi from 94.21.174.58 port 50290 Oct 31 22:15:10 server sshd\[18033\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.21.174.58 Oct 31 22:15:10 server sshd\[18068\]: Invalid user pi from 94.21.174.58 port 50294 Oct 31 22:15:10 server sshd\[18068\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.21.174.58 Oct 31 22:15:12 server sshd\[18033\]: Failed password for invalid user pi from 94.21.174.58 port 50290 ssh2	2019-11-01 04:55:26
94.21.174.58	attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/94.21.174.58/ HU - 1H : (23) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : HU NAME ASN : ASN20845 IP : 94.21.174.58 CIDR : 94.21.0.0/16 PREFIX COUNT : 108 UNIQUE IP COUNT : 586496 ATTACKS DETECTED ASN20845 : 1H - 1 3H - 1 6H - 2 12H - 4 24H - 5 DateTime : 2019-10-30 15:22:38 INFO : Port SSH 22 Scan Detected and Blocked by ADMIN - data recovery	2019-10-31 00:35:59

Type

Details

Datetime

94.21.174.58

attack

Oct 31 22:15:10 server sshd\[18033\]: Invalid user pi from 94.21.174.58 port 50290
Oct 31 22:15:10 server sshd\[18033\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.21.174.58
Oct 31 22:15:10 server sshd\[18068\]: Invalid user pi from 94.21.174.58 port 50294
Oct 31 22:15:10 server sshd\[18068\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.21.174.58
Oct 31 22:15:12 server sshd\[18033\]: Failed password for invalid user pi from 94.21.174.58 port 50290 ssh2

2019-11-01 04:55:26

94.21.174.58

attack

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/94.21.174.58/ 
 
 HU - 1H : (23)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : HU 
 NAME ASN : ASN20845 
 
 IP : 94.21.174.58 
 
 CIDR : 94.21.0.0/16 
 
 PREFIX COUNT : 108 
 
 UNIQUE IP COUNT : 586496 
 
 
 ATTACKS DETECTED ASN20845 :  
  1H - 1 
  3H - 1 
  6H - 2 
 12H - 4 
 24H - 5 
 
 DateTime : 2019-10-30 15:22:38 
 
 INFO : Port SSH 22 Scan Detected and Blocked by ADMIN  - data recovery

2019-10-31 00:35:59

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.21.174.218
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50294
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.21.174.218.			IN	A

;; AUTHORITY SECTION:
.			346	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050600 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 06 22:48:59 CST 2020
;; MSG SIZE  rcvd: 117

Host info

218.174.21.94.in-addr.arpa domain name pointer 94-21-174-218.pool.digikabel.hu.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
218.174.21.94.in-addr.arpa	name = 94-21-174-218.pool.digikabel.hu.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
23.30.131.102	attackbots	27.11.2019 15:53:32 - RDP Login Fail Detected by https://www.elinox.de/RDP-Wächter	2019-11-28 00:44:28
196.52.43.58	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-11-28 00:25:32
196.52.43.53	attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-11-28 00:45:03
91.121.86.62	attackbotsspam	Nov 27 17:57:48 meumeu sshd[19774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.86.62 Nov 27 17:57:50 meumeu sshd[19774]: Failed password for invalid user alex from 91.121.86.62 port 51934 ssh2 Nov 27 18:03:51 meumeu sshd[20946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.86.62 ...	2019-11-28 01:04:51
31.148.127.217	attackbotsspam	UTC: 2019-11-26 port: 80/tcp	2019-11-28 00:52:54
117.218.63.25	attackspam	Nov 27 17:48:04 vps647732 sshd[31168]: Failed password for root from 117.218.63.25 port 60962 ssh2 ...	2019-11-28 00:59:56
131.108.91.172	attack	UTC: 2019-11-26 port: 23/tcp	2019-11-28 00:41:32
101.85.192.230	attackbotsspam	$f2bV_matches	2019-11-28 00:38:20
202.162.196.139	attack	Fail2Ban Ban Triggered	2019-11-28 00:36:38
77.247.109.46	attack	\[2019-11-27 11:29:45\] NOTICE\[2754\] chan_sip.c: Registration from '"1002" \' failed for '77.247.109.46:5663' - Wrong password \[2019-11-27 11:29:45\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-27T11:29:45.630-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1002",SessionID="0x7f26c445f668",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.46/5663",Challenge="78f6685c",ReceivedChallenge="78f6685c",ReceivedHash="1c44aafb7b39335405d307fab6976004" \[2019-11-27 11:29:45\] NOTICE\[2754\] chan_sip.c: Registration from '"1002" \' failed for '77.247.109.46:5663' - Wrong password \[2019-11-27 11:29:45\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-27T11:29:45.755-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1002",SessionID="0x7f26c4ab1d88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UD	2019-11-28 00:32:44
196.52.43.126	attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-11-28 01:04:20
93.174.93.195	attackspambots	Nov 27 14:50:54 TCP Attack: SRC=93.174.93.195 DST=[Masked] LEN=40 TOS=0x08 PREC=0x20 TTL=246 PROTO=TCP SPT=45203 DPT=23975 WINDOW=1024 RES=0x00 SYN URGP=0	2019-11-28 00:19:00
111.246.17.213	attackspambots	UTC: 2019-11-26 port: 26/tcp	2019-11-28 00:20:16
46.38.144.57	attack	Nov 27 17:10:14 webserver postfix/smtpd\[25608\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 27 17:11:00 webserver postfix/smtpd\[25608\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 27 17:11:48 webserver postfix/smtpd\[25608\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 27 17:12:35 webserver postfix/smtpd\[26548\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 27 17:13:22 webserver postfix/smtpd\[26548\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-11-28 00:28:07
128.75.167.133	attackbots	Automatic report - Port Scan Attack	2019-11-28 00:37:51

Recently Reported IPs

167.172.102.74	84.246.229.135	81.42.204.189	45.146.254.110
41.193.209.106	39.36.93.141	190.206.79.236	192.141.200.12
190.200.77.4	195.12.28.34	176.44.205.43	31.14.107.52
171.235.63.54	125.161.107.154	81.210.119.98	218.173.81.36
194.247.178.11	110.74.179.124	94.172.162.245	125.122.223.249