Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Cyprus

Internet Service Provider: Semrush Cy Ltd

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attackbotsspam
15.11.2019 23:58:25 - Bad Robot 
Ignore Robots.txt
2019-11-16 09:02:11
Comments on same subnet:
IP Type Details Datetime
85.208.96.68 attackspam
15 attempts against mh-modsecurity-ban on air
2020-10-13 02:02:17
85.208.96.68 attackspambots
Automatic report - Banned IP Access
2020-10-12 17:27:01
85.208.96.65 attackspambots
Automatic report - Banned IP Access
2020-10-12 00:41:32
85.208.96.65 attackspambots
Automatic report - Banned IP Access
2020-10-11 16:37:46
85.208.96.65 attack
Automatic report - Banned IP Access
2020-10-11 09:56:48
85.208.96.67 attackspam
Automatic report - Banned IP Access
2020-08-15 21:04:56
85.208.96.7 attackbotsspam
Automatic report - Banned IP Access
2020-08-03 18:58:54
85.208.96.66 attack
Automatic report - Banned IP Access
2020-07-24 05:37:08
85.208.96.69 attackbots
Automatic report - Banned IP Access
2020-07-12 19:58:01
85.208.96.1 attack
85.208.96.1 - - [27/Nov/2019:21:49:30 +0100] "GET /article/air-funding HTTP/1.1" 200 15090
...
2020-05-15 05:07:57
85.208.96.14 attackspam
85.208.96.14 - - [13/May/2020:22:03:13 +0200] "GET /robots.txt HTTP/1.1" 301 609
...
2020-05-15 05:07:28
85.208.96.67 attackspambots
Automatic report - Banned IP Access
2020-05-07 03:44:14
85.208.96.69 attack
Automatic report - Banned IP Access
2020-04-28 14:19:40
85.208.96.18 attack
Automatic report - Banned IP Access
2020-04-13 21:26:16
85.208.96.71 attackbotsspam
Automatic report - Banned IP Access
2020-04-08 05:20:16
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.208.96.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39090
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;85.208.96.4.			IN	A

;; AUTHORITY SECTION:
.			579	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092201 1800 900 604800 86400

;; Query time: 427 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 23 07:06:07 CST 2019
;; MSG SIZE  rcvd: 115
Host info
4.96.208.85.in-addr.arpa domain name pointer bot.semrush.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
4.96.208.85.in-addr.arpa	name = bot.semrush.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
140.143.245.30 attackbotsspam
Apr  7 06:36:20 silence02 sshd[18448]: Failed password for root from 140.143.245.30 port 56010 ssh2
Apr  7 06:40:12 silence02 sshd[18967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.245.30
Apr  7 06:40:14 silence02 sshd[18967]: Failed password for invalid user deploy from 140.143.245.30 port 54174 ssh2
2020-04-07 14:03:32
68.183.102.246 attackbots
$f2bV_matches
2020-04-07 13:30:57
183.48.34.144 attackspam
Tried sshing with brute force.
2020-04-07 14:01:16
202.94.83.196 attack
20/4/6@23:53:09: FAIL: Alarm-Network address from=202.94.83.196
20/4/6@23:53:09: FAIL: Alarm-Network address from=202.94.83.196
...
2020-04-07 14:07:34
103.78.181.213 attackbots
1586231590 - 04/07/2020 10:53:10 Host: 103.78.181.213/103.78.181.213 Port: 23 TCP Blocked
...
2020-04-07 14:05:37
45.141.87.20 attackspambots
3389BruteforceStormFW21
2020-04-07 13:33:17
63.82.48.244 attack
Apr  7 05:48:13 web01.agentur-b-2.de postfix/smtpd[69922]: NOQUEUE: reject: RCPT from unknown[63.82.48.244]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr  7 05:51:20 web01.agentur-b-2.de postfix/smtpd[69922]: NOQUEUE: reject: RCPT from unknown[63.82.48.244]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr  7 05:51:51 web01.agentur-b-2.de postfix/smtpd[72776]: NOQUEUE: reject: RCPT from unknown[63.82.48.244]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr  7 05:53:53 web01.agentur-b-2.de postfix/smtpd[72776]: NOQUEUE: reject: RCPT from unknown[63.82.
2020-04-07 13:39:45
112.78.1.23 attackbots
Apr  7 07:36:07 vps647732 sshd[1376]: Failed password for root from 112.78.1.23 port 51808 ssh2
Apr  7 07:40:46 vps647732 sshd[1643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.78.1.23
...
2020-04-07 13:50:43
141.98.81.110 attackbotsspam
$f2bV_matches
2020-04-07 13:55:14
217.112.142.221 attack
Apr  7 07:00:03 mail.srvfarm.net postfix/smtpd[933992]: NOQUEUE: reject: RCPT from unknown[217.112.142.221]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr  7 07:00:05 mail.srvfarm.net postfix/smtpd[935473]: lost connection after CONNECT from unknown[217.112.142.221]
Apr  7 07:00:07 mail.srvfarm.net postfix/smtpd[936022]: lost connection after CONNECT from unknown[217.112.142.221]
Apr  7 07:00:08 mail.srvfarm.net postfix/smtpd[929170]: NOQUEUE: reject: RCPT from unknown[217.112.142.221]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr  7 07:00:08 mail.srvfarm.net postfix/smtpd[935476]: NOQUEUE: reject: RCPT from unknown[217.112.142.221]: 450 4.1.8 : Sender address rejected: Domain not found; from=
2020-04-07 13:33:49
162.243.130.107 attackspambots
Port 3979 scan denied
2020-04-07 14:13:16
103.66.96.254 attackbotsspam
2020-04-07T06:01:46.385196struts4.enskede.local sshd\[26548\]: Invalid user yuleima from 103.66.96.254 port 35926
2020-04-07T06:01:46.391374struts4.enskede.local sshd\[26548\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.66.96.254
2020-04-07T06:01:49.297403struts4.enskede.local sshd\[26548\]: Failed password for invalid user yuleima from 103.66.96.254 port 35926 ssh2
2020-04-07T06:03:54.104083struts4.enskede.local sshd\[26573\]: Invalid user ark from 103.66.96.254 port 61426
2020-04-07T06:03:54.110098struts4.enskede.local sshd\[26573\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.66.96.254
...
2020-04-07 13:47:28
157.245.119.144 attack
WordPress login Brute force / Web App Attack on client site.
2020-04-07 13:49:35
87.246.7.14 attackbots
Authentication failed
2020-04-07 13:38:07
66.70.205.186 attackbots
(sshd) Failed SSH login from 66.70.205.186 (CA/Canada/downloads.falepleno.com.br): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr  7 07:20:58 elude sshd[6799]: Invalid user ubuntu from 66.70.205.186 port 48907
Apr  7 07:21:00 elude sshd[6799]: Failed password for invalid user ubuntu from 66.70.205.186 port 48907 ssh2
Apr  7 07:27:46 elude sshd[7777]: Invalid user postgres from 66.70.205.186 port 45751
Apr  7 07:27:48 elude sshd[7777]: Failed password for invalid user postgres from 66.70.205.186 port 45751 ssh2
Apr  7 07:31:19 elude sshd[8310]: Invalid user logger from 66.70.205.186 port 51277
2020-04-07 13:58:44

Recently Reported IPs

181.183.40.180 28.135.47.115 206.154.123.184 25.217.171.58
71.209.97.136 217.216.115.149 92.100.207.103 149.43.63.237
58.188.93.138 227.184.104.95 110.52.158.224 39.63.141.68
183.131.110.50 103.80.36.34 54.36.150.41 51.91.9.76
228.19.11.226 245.153.168.116 146.164.249.58 0.4.50.186