Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: San Antonio

Region: Texas

Country: United States

Internet Service Provider: Microsoft Corporation

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
Dear user,
 
The IP address [13.85.152.27] experienced 2 failed attempts when attempting to log into SSH running on AstroParrotsNAS within 5 minutes, and was blocked at Mon Sep 14 00:04:10 2020.
 
From AstroParrotsNAS
2020-09-18 20:28:56
attackbots
Dear user,
 
The IP address [13.85.152.27] experienced 2 failed attempts when attempting to log into SSH running on AstroParrotsNAS within 5 minutes, and was blocked at Mon Sep 14 00:04:10 2020.
 
From AstroParrotsNAS
2020-09-18 12:47:48
attackbotsspam
Dear user,
 
The IP address [13.85.152.27] experienced 2 failed attempts when attempting to log into SSH running on AstroParrotsNAS within 5 minutes, and was blocked at Mon Sep 14 00:04:10 2020.
 
From AstroParrotsNAS
2020-09-18 03:03:04
attackspam
Invalid user ansible from 13.85.152.27 port 34664
2020-09-17 00:02:47
attackspam
Invalid user ansible from 13.85.152.27 port 34664
2020-09-16 16:19:12
attackspambots
Sep 15 16:58:39 gitlab-ci sshd\[25715\]: Invalid user ec2-user from 13.85.152.27Sep 15 16:58:40 gitlab-ci sshd\[25717\]: Invalid user ansible from 13.85.152.27
...
2020-09-16 01:21:32
attackspambots
<6 unauthorized SSH connections
2020-09-15 17:13:08
attackbotsspam
$f2bV_matches
2020-09-14 00:58:26
attackspam
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-13T07:34:04Z and 2020-09-13T07:34:11Z
2020-09-13 16:48:24
attackbotsspam
Sep 12 11:42:30 XXXXXX sshd[37506]: Invalid user ec2-user from 13.85.152.27 port 38212
2020-09-12 20:57:25
attack
Invalid user ansible from 13.85.152.27 port 49806
2020-09-12 12:59:15
attack
Sep 11 21:26:20 dev0-dcde-rnet sshd[3893]: Failed password for root from 13.85.152.27 port 56074 ssh2
Sep 11 21:26:20 dev0-dcde-rnet sshd[3895]: Failed password for root from 13.85.152.27 port 34230 ssh2
2020-09-12 04:48:52
attackbotsspam
[ssh] SSH attack
2020-09-10 02:29:23
attack
leo_www
2020-09-03 12:17:05
attackspam
$lgm
2020-09-03 04:35:36
attackspambots
Sep  1 19:31:01 dcd-gentoo sshd[20633]: User root from 13.85.152.27 not allowed because none of user's groups are listed in AllowGroups
Sep  1 19:31:03 dcd-gentoo sshd[20636]: User root from 13.85.152.27 not allowed because none of user's groups are listed in AllowGroups
Sep  1 19:32:58 dcd-gentoo sshd[20693]: Invalid user ec2-user from 13.85.152.27 port 50800
...
2020-09-02 02:12:37
attackbotsspam
2020-09-01T00:03:37.102868abusebot-6.cloudsearch.cf sshd[15260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.85.152.27  user=root
2020-09-01T00:03:39.713571abusebot-6.cloudsearch.cf sshd[15260]: Failed password for root from 13.85.152.27 port 34268 ssh2
2020-09-01T00:03:39.015858abusebot-6.cloudsearch.cf sshd[15262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.85.152.27  user=root
2020-09-01T00:03:41.430833abusebot-6.cloudsearch.cf sshd[15262]: Failed password for root from 13.85.152.27 port 50536 ssh2
2020-09-01T00:03:41.623155abusebot-6.cloudsearch.cf sshd[15264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.85.152.27  user=root
2020-09-01T00:03:43.782424abusebot-6.cloudsearch.cf sshd[15264]: Failed password for root from 13.85.152.27 port 38624 ssh2
2020-09-01T00:03:47.077724abusebot-6.cloudsearch.cf sshd[15266]: pam_unix(sshd:auth): authenticat
...
2020-09-01 08:13:42
attack
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-08-30T23:02:17Z
2020-08-31 07:52:53
attackspambots
 TCP (SYN) 13.85.152.27:54920 -> port 22, len 48
2020-08-30 07:48:25
attack
Aug 27 02:11:41 master sshd[28500]: Did not receive identification string from 13.85.152.27
Aug 27 02:11:41 master sshd[28501]: Did not receive identification string from 13.85.152.27
Aug 27 02:11:41 master sshd[28502]: Did not receive identification string from 13.85.152.27
Aug 27 02:11:41 master sshd[28503]: Did not receive identification string from 13.85.152.27
Aug 27 02:11:41 master sshd[28504]: Did not receive identification string from 13.85.152.27
Aug 27 02:11:59 master sshd[28505]: Failed password for root from 13.85.152.27 port 57900 ssh2
Aug 27 02:11:59 master sshd[28509]: Failed password for root from 13.85.152.27 port 33332 ssh2
Aug 27 02:11:59 master sshd[28506]: Failed password for root from 13.85.152.27 port 58418 ssh2
Aug 27 02:12:01 master sshd[28511]: Failed password for root from 13.85.152.27 port 45814 ssh2
Aug 27 02:12:01 master sshd[28513]: Failed password for root from 13.85.152.27 port 49060 ssh2
2020-08-27 07:57:05
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.85.152.27
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51566
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;13.85.152.27.			IN	A

;; AUTHORITY SECTION:
.			373	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020082602 1800 900 604800 86400

;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Aug 27 07:57:01 CST 2020
;; MSG SIZE  rcvd: 116
Host info
Host 27.152.85.13.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 27.152.85.13.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
116.241.26.178 attackspambots
Unauthorized connection attempt detected from IP address 116.241.26.178 to port 5555 [J]
2020-01-28 18:37:17
43.224.229.38 attackspam
Ref: mx Logwatch report
2020-01-28 18:41:40
58.45.8.14 attack
unauthorized connection attempt
2020-01-28 18:29:26
104.178.56.243 attack
Unauthorized connection attempt detected from IP address 104.178.56.243 to port 81 [J]
2020-01-28 18:14:10
186.149.46.4 attackspambots
Fail2Ban - SSH Bruteforce Attempt
2020-01-28 18:10:56
70.105.222.173 attackbotsspam
unauthorized connection attempt
2020-01-28 18:05:25
201.164.44.130 attack
unauthorized connection attempt
2020-01-28 18:01:37
69.76.240.206 attackbots
Unauthorized connection attempt detected from IP address 69.76.240.206 to port 81 [J]
2020-01-28 18:18:44
220.186.176.104 attackbots
unauthorized connection attempt
2020-01-28 18:30:58
120.92.123.150 attackbots
Unauthorized connection attempt detected from IP address 120.92.123.150 to port 80 [J]
2020-01-28 18:12:43
37.78.47.41 attackspambots
unauthorized connection attempt
2020-01-28 18:42:44
102.65.189.136 attack
unauthorized connection attempt
2020-01-28 18:39:39
80.211.136.132 attackbotsspam
Unauthorized connection attempt detected from IP address 80.211.136.132 to port 80 [J]
2020-01-28 18:04:56
162.62.16.15 attack
Unauthorized connection attempt detected from IP address 162.62.16.15 to port 6379 [J]
2020-01-28 18:20:59
27.105.56.54 attack
unauthorized connection attempt
2020-01-28 17:59:38

Recently Reported IPs

41.116.96.104 24.169.230.14 78.123.108.173 221.187.142.120
159.72.196.237 97.212.18.220 80.6.203.28 188.131.142.46
187.184.128.246 14.145.245.228 24.169.70.85 80.155.173.207
187.17.54.80 74.62.252.57 63.112.14.90 178.34.240.137
96.3.163.89 106.223.135.213 83.226.68.136 151.21.4.146