Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: FNorden e.V. - Freifunk Hannover

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Apr  5 14:42:59 mail postfix/smtpd[71779]: lost connection after STARTTLS from leintor.e.ffh.zone[81.3.6.94]
2020-04-05 23:54:37
Comments on same subnet:
IP Type Details Datetime
81.3.6.162 attackbots
TCP port : 23
2020-10-05 02:30:47
81.3.6.166 attack
TCP port : 23
2020-10-05 02:03:40
81.3.6.164 attackspam
TCP port : 23
2020-10-05 01:12:11
81.3.6.162 attackspambots
Telnet/23 MH Probe, Scan, BF, Hack -
2020-10-04 18:13:53
81.3.6.166 attack
Telnet/23 MH Probe, Scan, BF, Hack -
2020-10-04 17:46:54
81.3.6.164 attack
 TCP (SYN) 81.3.6.164:29491 -> port 23, len 44
2020-10-04 16:54:12
81.3.6.162 attack
Telnet/23 MH Probe, Scan, BF, Hack -
2020-09-18 19:36:29
81.3.6.164 attackbots
Telnet/23 MH Probe, Scan, BF, Hack -
2020-09-18 19:34:52
81.3.6.164 attackspambots
*Port Scan* detected from 81.3.6.164 (DE/Germany/Lower Saxony/Hanover (Linden-Limmer)/w3.tutanota.de). 4 hits in the last 256 seconds
2020-08-26 12:19:41
81.3.6.170 attack
Scan
2020-08-22 17:02:27
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.3.6.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34624
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;81.3.6.94.			IN	A

;; AUTHORITY SECTION:
.			444	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020040500 1800 900 604800 86400

;; Query time: 98 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 05 23:54:30 CST 2020
;; MSG SIZE  rcvd: 113
Host info
94.6.3.81.in-addr.arpa domain name pointer leintor.e.ffh.zone.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
94.6.3.81.in-addr.arpa	name = leintor.e.ffh.zone.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
191.53.117.24 attackspam
Autoban   191.53.117.24 AUTH/CONNECT
2019-07-22 04:37:18
191.53.223.100 attackspam
Autoban   191.53.223.100 AUTH/CONNECT
2019-07-22 04:09:11
81.205.159.8 attack
Sun, 21 Jul 2019 18:28:34 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-22 04:39:11
104.168.6.40 attackbots
Many RDP login attempts detected by IDS script
2019-07-22 04:10:41
95.47.172.54 attack
Sun, 21 Jul 2019 18:28:47 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-22 03:57:39
191.53.199.59 attack
Autoban   191.53.199.59 AUTH/CONNECT
2019-07-22 04:18:26
191.53.195.161 attack
Autoban   191.53.195.161 AUTH/CONNECT
2019-07-22 04:30:28
191.53.199.179 attackspam
Autoban   191.53.199.179 AUTH/CONNECT
2019-07-22 04:17:58
191.53.223.175 attackspambots
Autoban   191.53.223.175 AUTH/CONNECT
2019-07-22 04:04:55
103.61.37.165 attackspam
Jul 21 12:22:15 newdogma sshd[25398]: Invalid user aj from 103.61.37.165 port 59589
Jul 21 12:22:16 newdogma sshd[25398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.61.37.165
Jul 21 12:22:18 newdogma sshd[25398]: Failed password for invalid user aj from 103.61.37.165 port 59589 ssh2
Jul 21 12:22:18 newdogma sshd[25398]: Received disconnect from 103.61.37.165 port 59589:11: Bye Bye [preauth]
Jul 21 12:22:18 newdogma sshd[25398]: Disconnected from 103.61.37.165 port 59589 [preauth]
Jul 21 12:55:33 newdogma sshd[25640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.61.37.165  user=proxy
Jul 21 12:55:35 newdogma sshd[25640]: Failed password for proxy from 103.61.37.165 port 56245 ssh2
Jul 21 12:55:35 newdogma sshd[25640]: Received disconnect from 103.61.37.165 port 56245:11: Bye Bye [preauth]
Jul 21 12:55:35 newdogma sshd[25640]: Disconnected from 103.61.37.165 port 56245 [preauth........
-------------------------------
2019-07-22 04:42:06
117.193.75.98 attackspam
Sun, 21 Jul 2019 18:28:41 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-22 04:17:05
191.53.195.95 attackspambots
Autoban   191.53.195.95 AUTH/CONNECT
2019-07-22 04:27:37
107.160.241.182 attackbotsspam
2019-07-21T20:28:38.9636971240 sshd\[3237\]: Invalid user oracle from 107.160.241.182 port 51244
2019-07-21T20:28:38.9686611240 sshd\[3237\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.160.241.182
2019-07-21T20:28:41.0843221240 sshd\[3237\]: Failed password for invalid user oracle from 107.160.241.182 port 51244 ssh2
...
2019-07-22 04:12:59
157.230.91.45 attackbotsspam
Jul 21 21:12:19 debian sshd\[18468\]: Invalid user nexus from 157.230.91.45 port 55662
Jul 21 21:12:19 debian sshd\[18468\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.91.45
...
2019-07-22 04:19:02
191.37.35.146 attack
Autoban   191.37.35.146 AUTH/CONNECT
2019-07-22 04:41:32

Recently Reported IPs

118.185.178.11 7.1.167.108 201.97.39.45 109.162.247.184
113.176.213.64 115.159.194.34 178.34.150.178 116.98.252.163
88.248.143.64 104.197.220.149 61.241.22.54 106.51.86.204
179.3.143.151 87.97.110.49 41.249.197.101 81.127.235.233
125.37.85.243 207.132.14.228 151.61.49.40 129.228.144.218