Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Romania

Internet Service Provider: Politehnica University of Bucharest

Hostname: unknown

Organization: unknown

Usage Type: University/College/School

Comments:
Type Details Datetime
attackbotsspam
Sep  1 09:53:24 auw2 sshd\[24421\]: Invalid user quercia from 141.85.13.6
Sep  1 09:53:24 auw2 sshd\[24421\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.85.13.6
Sep  1 09:53:27 auw2 sshd\[24421\]: Failed password for invalid user quercia from 141.85.13.6 port 39336 ssh2
Sep  1 09:57:56 auw2 sshd\[24818\]: Invalid user go from 141.85.13.6
Sep  1 09:57:56 auw2 sshd\[24818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.85.13.6
2019-09-02 04:17:44
attackspam
Invalid user scan12345 from 141.85.13.6 port 33982
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.85.13.6
Failed password for invalid user scan12345 from 141.85.13.6 port 33982 ssh2
Invalid user 123456 from 141.85.13.6 port 52812
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.85.13.6
2019-08-26 14:57:22
attackbots
Invalid user mqm from 141.85.13.6 port 56402
2019-08-17 07:55:35
attackbotsspam
Automatic report - Banned IP Access
2019-08-09 03:28:44
attackbots
Jul 26 16:55:41 aat-srv002 sshd[4917]: Failed password for root from 141.85.13.6 port 59178 ssh2
Jul 26 17:00:15 aat-srv002 sshd[5055]: Failed password for root from 141.85.13.6 port 53314 ssh2
Jul 26 17:04:55 aat-srv002 sshd[5181]: Failed password for root from 141.85.13.6 port 47458 ssh2
...
2019-07-27 06:06:53
attackspam
2019-07-20T02:45:01.904037abusebot.cloudsearch.cf sshd\[28430\]: Invalid user ggg from 141.85.13.6 port 36478
2019-07-20 10:45:43
attackspambots
2019-07-19T23:55:44.193279abusebot.cloudsearch.cf sshd\[26497\]: Invalid user openstack from 141.85.13.6 port 34068
2019-07-20 08:07:28
attackbots
Jul 10 22:53:53 ns341937 sshd[23381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.85.13.6
Jul 10 22:53:55 ns341937 sshd[23381]: Failed password for invalid user deploy from 141.85.13.6 port 49630 ssh2
Jul 10 22:57:16 ns341937 sshd[24270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.85.13.6
...
2019-07-11 05:24:17
attackbots
Tried sshing with brute force.
2019-07-06 02:42:41
attack
Jun 23 10:57:02 *** sshd[20099]: Failed password for invalid user admin from 141.85.13.6 port 54394 ssh2
2019-06-24 08:18:24
Comments on same subnet:
IP Type Details Datetime
141.85.13.4 attackbots
Jun 27 05:50:01 server sshd\[59601\]: Invalid user alfred from 141.85.13.4
Jun 27 05:50:01 server sshd\[59601\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.85.13.4
Jun 27 05:50:03 server sshd\[59601\]: Failed password for invalid user alfred from 141.85.13.4 port 60148 ssh2
...
2019-07-12 05:29:25
141.85.13.4 attackspam
Jun 26 22:43:10 [snip] sshd[2579]: Invalid user gong from 141.85.13.4 port 58722
Jun 26 22:43:10 [snip] sshd[2579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.85.13.4
Jun 26 22:43:12 [snip] sshd[2579]: Failed password for invalid user gong from 141.85.13.4 port 58722 ssh2[...]
2019-06-27 06:04:38
141.85.13.4 attack
Jun 25 00:02:53 host sshd\[23476\]: Invalid user webadmin from 141.85.13.4 port 38974
Jun 25 00:02:53 host sshd\[23476\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.85.13.4
...
2019-06-25 10:28:12
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 141.85.13.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52520
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;141.85.13.6.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062301 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jun 24 08:18:17 CST 2019
;; MSG SIZE  rcvd: 115
Host info
Host 6.13.85.141.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 6.13.85.141.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
112.85.42.72 attack
Aug 23 23:22:59 srv-4 sshd\[8562\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.72  user=root
Aug 23 23:23:00 srv-4 sshd\[8562\]: Failed password for root from 112.85.42.72 port 23634 ssh2
Aug 23 23:24:02 srv-4 sshd\[8644\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.72  user=root
...
2019-08-24 04:32:50
198.50.175.247 attackbots
Aug 23 22:01:04 SilenceServices sshd[14708]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.50.175.247
Aug 23 22:01:06 SilenceServices sshd[14708]: Failed password for invalid user user2 from 198.50.175.247 port 43774 ssh2
Aug 23 22:05:16 SilenceServices sshd[18243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.50.175.247
2019-08-24 04:26:38
94.177.214.200 attackspam
Aug 23 17:55:49 hb sshd\[339\]: Invalid user linda from 94.177.214.200
Aug 23 17:55:49 hb sshd\[339\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.214.200
Aug 23 17:55:51 hb sshd\[339\]: Failed password for invalid user linda from 94.177.214.200 port 52550 ssh2
Aug 23 18:00:00 hb sshd\[701\]: Invalid user roxana from 94.177.214.200
Aug 23 18:00:00 hb sshd\[701\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.214.200
2019-08-24 04:30:43
51.255.174.215 attackspambots
Aug 23 09:44:57 sachi sshd\[16097\]: Invalid user susan from 51.255.174.215
Aug 23 09:44:57 sachi sshd\[16097\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=215.ip-51-255-174.eu
Aug 23 09:44:59 sachi sshd\[16097\]: Failed password for invalid user susan from 51.255.174.215 port 46806 ssh2
Aug 23 09:50:12 sachi sshd\[16583\]: Invalid user mdomin from 51.255.174.215
Aug 23 09:50:12 sachi sshd\[16583\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=215.ip-51-255-174.eu
2019-08-24 03:59:18
177.8.160.17 attackspam
445/tcp 445/tcp 445/tcp...
[2019-07-05/08-23]5pkt,1pt.(tcp)
2019-08-24 04:05:38
138.68.217.101 attackbots
138.68.217.101 - - [23/Aug/2019:21:33:25 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.217.101 - - [23/Aug/2019:21:33:30 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.217.101 - - [23/Aug/2019:21:33:32 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.217.101 - - [23/Aug/2019:21:33:33 +0200] "POST /wp-login.php HTTP/1.1" 200 1489 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.217.101 - - [23/Aug/2019:21:33:39 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.217.101 - - [23/Aug/2019:21:33:42 +0200] "POST /wp-login.php HTTP/1.1" 200 1491 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2019-08-24 04:16:41
200.192.247.166 attackbotsspam
23/tcp 23/tcp 23/tcp...
[2019-07-09/08-23]7pkt,1pt.(tcp)
2019-08-24 04:04:55
61.230.99.69 attackspambots
Caught in portsentry honeypot
2019-08-24 03:53:17
104.248.174.126 attackspam
Aug 23 20:23:34 mail sshd\[11901\]: Failed password for invalid user guy from 104.248.174.126 port 48714 ssh2
Aug 23 20:40:33 mail sshd\[12261\]: Invalid user tiago from 104.248.174.126 port 54612
Aug 23 20:40:33 mail sshd\[12261\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.174.126
...
2019-08-24 03:54:16
154.68.39.6 attack
Automated report - ssh fail2ban:
Aug 23 20:55:44 authentication failure 
Aug 23 20:55:46 wrong password, user=admin, port=50717, ssh2
Aug 23 21:18:06 authentication failure
2019-08-24 04:11:39
109.165.64.79 attackbots
Name: Ronaldkesee
Email: Priegeric@post123.site
Phone: 83583377758
Street: Ennis
City: Ennis
Zip: 113444
Message: Our company offers herb-based supplements. Look at our health contributing site in case you want to strengthen your health. http://n1.medonlinepro.com/pt/dor-nas-pernas-e-dor-lombar-97668.html Our company provides supreme quality pills. Look at our health contributing portal in case you want to look healthier. http://7u.medonlinepro.com/hu/zueleti-izom-fjdalmak-22603.html Our company provides a wide variety of non prescription drugs. Look at our health site in case you want to strengthen your health with a help health products. http://s6.medonlinepro.com/pl/leczenie-blu-krgosupa-ory-38180.html
2019-08-24 03:53:48
51.75.143.32 attackbotsspam
Aug 23 21:59:11 mail sshd\[21556\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.143.32
Aug 23 21:59:12 mail sshd\[21556\]: Failed password for invalid user wd from 51.75.143.32 port 47456 ssh2
Aug 23 22:03:18 mail sshd\[22650\]: Invalid user gregory from 51.75.143.32 port 37266
Aug 23 22:03:18 mail sshd\[22650\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.143.32
Aug 23 22:03:20 mail sshd\[22650\]: Failed password for invalid user gregory from 51.75.143.32 port 37266 ssh2
2019-08-24 04:13:04
103.60.137.111 attack
445/tcp 445/tcp 445/tcp...
[2019-06-29/08-23]13pkt,1pt.(tcp)
2019-08-24 03:52:42
159.89.225.82 attack
Aug 23 21:32:36 v22019058497090703 sshd[15954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.225.82
Aug 23 21:32:38 v22019058497090703 sshd[15954]: Failed password for invalid user brian from 159.89.225.82 port 51944 ssh2
Aug 23 21:36:32 v22019058497090703 sshd[16261]: Failed password for root from 159.89.225.82 port 41504 ssh2
...
2019-08-24 04:34:09
180.178.55.10 attackspam
2019-08-23T17:26:22.564398abusebot-2.cloudsearch.cf sshd\[27224\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.178.55.10  user=root
2019-08-24 04:28:09

Recently Reported IPs

46.182.106.190 181.123.59.29 184.23.194.6 117.254.186.98
121.78.131.182 113.190.193.212 113.141.179.208 85.98.122.96
173.172.0.189 62.210.89.199 199.249.230.100 180.191.159.250
191.115.24.172 129.204.25.212 220.161.79.211 119.55.77.86
129.211.125.141 5.188.86.165 134.209.89.211 59.110.152.52