13.94.136.66 - IPInfo

Basic Info

City: Amsterdam

Region: North Holland

Country: Netherlands

Internet Service Provider: Microsoft Corporation

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Oct 13 23:45:42 vps647732 sshd[6846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.94.136.66 Oct 13 23:45:43 vps647732 sshd[6846]: Failed password for invalid user suva from 13.94.136.66 port 53884 ssh2 ...	2020-10-14 06:04:09

Type

Details

Datetime

attackspambots

Oct 13 23:45:42 vps647732 sshd[6846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.94.136.66
Oct 13 23:45:43 vps647732 sshd[6846]: Failed password for invalid user suva from 13.94.136.66 port 53884 ssh2
...

2020-10-14 06:04:09

Comments on same subnet:

IP	Type	Details	Datetime
13.94.136.234	attackbotsspam	Invalid user ts from 13.94.136.234 port 35052	2020-03-21 03:04:00
13.94.136.234	attack	2020-03-04T14:19:37.741984vps773228.ovh.net sshd[29182]: Invalid user fredportela from 13.94.136.234 port 50028 2020-03-04T14:19:37.752246vps773228.ovh.net sshd[29182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.94.136.234 2020-03-04T14:19:37.741984vps773228.ovh.net sshd[29182]: Invalid user fredportela from 13.94.136.234 port 50028 2020-03-04T14:19:39.358603vps773228.ovh.net sshd[29182]: Failed password for invalid user fredportela from 13.94.136.234 port 50028 ssh2 2020-03-04T14:28:22.829072vps773228.ovh.net sshd[29307]: Invalid user xhchen from 13.94.136.234 port 54032 2020-03-04T14:28:22.840787vps773228.ovh.net sshd[29307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.94.136.234 2020-03-04T14:28:22.829072vps773228.ovh.net sshd[29307]: Invalid user xhchen from 13.94.136.234 port 54032 2020-03-04T14:28:24.853654vps773228.ovh.net sshd[29307]: Failed password for invalid user xhchen from 13.94 ...	2020-03-04 22:25:08

Type

Details

Datetime

13.94.136.234

attackbotsspam

Invalid user ts from 13.94.136.234 port 35052

2020-03-21 03:04:00

13.94.136.234

attack

2020-03-04T14:19:37.741984vps773228.ovh.net sshd[29182]: Invalid user fredportela from 13.94.136.234 port 50028
2020-03-04T14:19:37.752246vps773228.ovh.net sshd[29182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.94.136.234
2020-03-04T14:19:37.741984vps773228.ovh.net sshd[29182]: Invalid user fredportela from 13.94.136.234 port 50028
2020-03-04T14:19:39.358603vps773228.ovh.net sshd[29182]: Failed password for invalid user fredportela from 13.94.136.234 port 50028 ssh2
2020-03-04T14:28:22.829072vps773228.ovh.net sshd[29307]: Invalid user xhchen from 13.94.136.234 port 54032
2020-03-04T14:28:22.840787vps773228.ovh.net sshd[29307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.94.136.234
2020-03-04T14:28:22.829072vps773228.ovh.net sshd[29307]: Invalid user xhchen from 13.94.136.234 port 54032
2020-03-04T14:28:24.853654vps773228.ovh.net sshd[29307]: Failed password for invalid user xhchen from 13.94
...

2020-03-04 22:25:08

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.94.136.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26601
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;13.94.136.66.			IN	A

;; AUTHORITY SECTION:
.			527	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020101301 1800 900 604800 86400

;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 14 06:04:05 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 66.136.94.13.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 66.136.94.13.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
141.98.81.194	attackbots	[portscan] tcp/22 [SSH] [scan/connect: 8 time(s)] in blocklist.de:'listed [ssh]' *(RWIN=29200)(10090804)	2020-10-09 21:05:07
180.76.139.54	attackspambots	Invalid user test from 180.76.139.54 port 35366	2020-10-09 21:10:16
186.0.185.135	attack	TCP (SYN) 186.0.185.135:31211 -> port 23, len 44	2020-10-09 21:13:00
31.40.211.189	attackbotsspam	SS5,Magento Bruteforce Login Attack POST /index.php/admin/	2020-10-09 20:38:37
61.177.172.104	attack	[MK-VM6] SSH login failed	2020-10-09 20:51:48
180.76.246.38	attackspambots	Oct 9 14:26:45 ns382633 sshd\[30403\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.246.38 user=root Oct 9 14:26:48 ns382633 sshd\[30403\]: Failed password for root from 180.76.246.38 port 40898 ssh2 Oct 9 14:33:23 ns382633 sshd\[31345\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.246.38 user=root Oct 9 14:33:25 ns382633 sshd\[31345\]: Failed password for root from 180.76.246.38 port 42858 ssh2 Oct 9 14:35:34 ns382633 sshd\[31741\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.246.38 user=root	2020-10-09 21:01:56
165.22.251.76	attackbotsspam	165.22.251.76 (SG/Singapore/-), 12 distributed sshd attacks on account [root] in the last 3600 secs	2020-10-09 21:01:13
106.12.25.96	attack	Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-10-09 21:00:55
66.85.30.117	attack	xmlrpc attack	2020-10-09 20:48:27
51.161.45.174	attack	Oct 9 12:48:15 ns381471 sshd[13024]: Failed password for root from 51.161.45.174 port 44810 ssh2	2020-10-09 21:08:05
134.122.77.162	attackspambots	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: digified.io.	2020-10-09 20:53:02
208.109.11.34	attackspambots	Oct 9 13:46:06 h2865660 sshd[26552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.109.11.34 user=root Oct 9 13:46:08 h2865660 sshd[26552]: Failed password for root from 208.109.11.34 port 51858 ssh2 Oct 9 13:49:29 h2865660 sshd[26665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.109.11.34 user=root Oct 9 13:49:31 h2865660 sshd[26665]: Failed password for root from 208.109.11.34 port 33724 ssh2 Oct 9 13:52:36 h2865660 sshd[26766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.109.11.34 user=root Oct 9 13:52:37 h2865660 sshd[26766]: Failed password for root from 208.109.11.34 port 40530 ssh2 ...	2020-10-09 21:04:37
37.47.33.5	attack	Brute Force attack - banned by Fail2Ban	2020-10-09 20:54:31
79.8.196.108	attack	$f2bV_matches	2020-10-09 21:11:09
181.48.28.13	attack	Oct 9 08:33:17 server sshd[3151]: Failed password for root from 181.48.28.13 port 43434 ssh2 Oct 9 08:34:22 server sshd[3795]: User www-data from 181.48.28.13 not allowed because not listed in AllowUsers Oct 9 08:34:25 server sshd[3795]: Failed password for invalid user www-data from 181.48.28.13 port 56678 ssh2	2020-10-09 20:56:28

Recently Reported IPs

51.158.79.157	201.111.133.76	128.199.124.63	117.80.237.141
103.41.106.89	87.181.51.143	62.114.151.182	46.161.254.19
212.182.124.130	192.158.226.205	165.232.46.205	165.232.41.177
153.200.103.72	107.174.140.184	59.47.67.146	52.231.143.77
49.234.138.125	109.100.109.94	104.16.128.7	107.158.84.58