Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Amsterdam

Region: North Holland

Country: Netherlands

Internet Service Provider: Microsoft Corporation

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Oct 13 23:45:42 vps647732 sshd[6846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.94.136.66
Oct 13 23:45:43 vps647732 sshd[6846]: Failed password for invalid user suva from 13.94.136.66 port 53884 ssh2
...
2020-10-14 06:04:09
Comments on same subnet:
IP Type Details Datetime
13.94.136.234 attackbotsspam
Invalid user ts from 13.94.136.234 port 35052
2020-03-21 03:04:00
13.94.136.234 attack
2020-03-04T14:19:37.741984vps773228.ovh.net sshd[29182]: Invalid user fredportela from 13.94.136.234 port 50028
2020-03-04T14:19:37.752246vps773228.ovh.net sshd[29182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.94.136.234
2020-03-04T14:19:37.741984vps773228.ovh.net sshd[29182]: Invalid user fredportela from 13.94.136.234 port 50028
2020-03-04T14:19:39.358603vps773228.ovh.net sshd[29182]: Failed password for invalid user fredportela from 13.94.136.234 port 50028 ssh2
2020-03-04T14:28:22.829072vps773228.ovh.net sshd[29307]: Invalid user xhchen from 13.94.136.234 port 54032
2020-03-04T14:28:22.840787vps773228.ovh.net sshd[29307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.94.136.234
2020-03-04T14:28:22.829072vps773228.ovh.net sshd[29307]: Invalid user xhchen from 13.94.136.234 port 54032
2020-03-04T14:28:24.853654vps773228.ovh.net sshd[29307]: Failed password for invalid user xhchen from 13.94
...
2020-03-04 22:25:08
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.94.136.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26601
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;13.94.136.66.			IN	A

;; AUTHORITY SECTION:
.			527	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020101301 1800 900 604800 86400

;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 14 06:04:05 CST 2020
;; MSG SIZE  rcvd: 116
Host info
Host 66.136.94.13.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 66.136.94.13.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
112.242.181.81 attack
20/9/7@06:34:21: FAIL: Alarm-Telnet address from=112.242.181.81
...
2020-09-07 22:14:35
42.118.145.176 attackbotsspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-09-07 22:35:22
192.241.137.149 attackspambots
192.241.137.149 - - [07/Sep/2020:16:11:29 +0200] "POST /xmlrpc.php HTTP/1.1" 403 15258 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
192.241.137.149 - - [07/Sep/2020:16:21:51 +0200] "POST /xmlrpc.php HTTP/1.1" 403 9754 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-07 22:44:34
122.138.112.124 attackspam
(Sep  6)  LEN=40 TTL=46 ID=8879 TCP DPT=8080 WINDOW=37603 SYN 
 (Sep  6)  LEN=40 TTL=46 ID=50411 TCP DPT=8080 WINDOW=37603 SYN 
 (Sep  6)  LEN=40 TTL=46 ID=65207 TCP DPT=8080 WINDOW=8004 SYN 
 (Sep  5)  LEN=40 TTL=46 ID=48205 TCP DPT=8080 WINDOW=20018 SYN 
 (Sep  5)  LEN=40 TTL=46 ID=50323 TCP DPT=8080 WINDOW=50743 SYN 
 (Sep  5)  LEN=40 TTL=46 ID=48465 TCP DPT=8080 WINDOW=18102 SYN 
 (Sep  5)  LEN=40 TTL=46 ID=34321 TCP DPT=8080 WINDOW=18102 SYN 
 (Sep  4)  LEN=40 TTL=46 ID=58656 TCP DPT=8080 WINDOW=50743 SYN 
 (Sep  4)  LEN=40 TTL=46 ID=50751 TCP DPT=8080 WINDOW=1451 SYN 
 (Sep  4)  LEN=40 TTL=46 ID=36006 TCP DPT=8080 WINDOW=18102 SYN 
 (Sep  3)  LEN=40 TTL=46 ID=25520 TCP DPT=8080 WINDOW=18102 SYN
2020-09-07 22:26:43
142.93.127.173 attackspambots
Banned for a week because repeated abuses, for example SSH, but not only
2020-09-07 22:50:18
141.98.10.210 attackspambots
Sep  7 14:58:03 haigwepa sshd[27832]: Failed password for root from 141.98.10.210 port 36397 ssh2
...
2020-09-07 22:05:05
107.189.10.245 attackspambots
3 failed attempts at connecting to SSH.
2020-09-07 22:52:54
138.68.176.38 attackbots
2020-09-07T09:07:14.044287dmca.cloudsearch.cf sshd[9827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.176.38  user=root
2020-09-07T09:07:16.356897dmca.cloudsearch.cf sshd[9827]: Failed password for root from 138.68.176.38 port 42224 ssh2
2020-09-07T09:11:45.184277dmca.cloudsearch.cf sshd[9948]: Invalid user maileh from 138.68.176.38 port 48324
2020-09-07T09:11:45.190145dmca.cloudsearch.cf sshd[9948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.176.38
2020-09-07T09:11:45.184277dmca.cloudsearch.cf sshd[9948]: Invalid user maileh from 138.68.176.38 port 48324
2020-09-07T09:11:46.704995dmca.cloudsearch.cf sshd[9948]: Failed password for invalid user maileh from 138.68.176.38 port 48324 ssh2
2020-09-07T09:15:56.512876dmca.cloudsearch.cf sshd[10005]: Invalid user open from 138.68.176.38 port 54428
...
2020-09-07 22:49:38
189.124.8.192 attackbotsspam
$f2bV_matches
2020-09-07 22:36:47
5.188.86.168 attackbots
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-09-07T14:22:18Z
2020-09-07 22:37:50
113.230.211.180 attackbotsspam
 TCP (SYN) 113.230.211.180:54438 -> port 23, len 40
2020-09-07 22:07:07
46.148.96.202 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-09-07 22:23:19
222.186.180.17 attackspam
Sep  7 16:41:00 server sshd[9920]: Failed none for root from 222.186.180.17 port 64630 ssh2
Sep  7 16:41:02 server sshd[9920]: Failed password for root from 222.186.180.17 port 64630 ssh2
Sep  7 16:41:06 server sshd[9920]: Failed password for root from 222.186.180.17 port 64630 ssh2
2020-09-07 22:42:03
156.222.106.101 attack
20/9/6@12:53:09: FAIL: Alarm-Telnet address from=156.222.106.101
...
2020-09-07 22:04:34
88.199.25.26 attack
Aug 28 06:07:45 mail.srvfarm.net postfix/smtpd[2110343]: warning: 88-199-25-26.tktelekom.pl[88.199.25.26]: SASL PLAIN authentication failed: 
Aug 28 06:07:45 mail.srvfarm.net postfix/smtpd[2110343]: lost connection after AUTH from 88-199-25-26.tktelekom.pl[88.199.25.26]
Aug 28 06:15:11 mail.srvfarm.net postfix/smtpd[2111767]: warning: 88-199-25-26.tktelekom.pl[88.199.25.26]: SASL PLAIN authentication failed: 
Aug 28 06:15:11 mail.srvfarm.net postfix/smtpd[2111767]: lost connection after AUTH from 88-199-25-26.tktelekom.pl[88.199.25.26]
Aug 28 06:16:59 mail.srvfarm.net postfix/smtpd[2109939]: warning: 88-199-25-26.tktelekom.pl[88.199.25.26]: SASL PLAIN authentication failed:
2020-09-07 22:15:04

Recently Reported IPs

51.158.79.157 201.111.133.76 128.199.124.63 117.80.237.141
103.41.106.89 87.181.51.143 62.114.151.182 46.161.254.19
212.182.124.130 192.158.226.205 165.232.46.205 165.232.41.177
153.200.103.72 107.174.140.184 59.47.67.146 52.231.143.77
49.234.138.125 109.100.109.94 104.16.128.7 107.158.84.58