Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: Vodafone BW GmbH

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attack
(sshd) Failed SSH login from 85.216.6.12 (DE/Germany/HSI-KBW-085-216-006-012.hsi.kabelbw.de): 5 in the last 3600 secs
2020-09-18 22:24:01
attack
Sep 18 06:09:07 ns382633 sshd\[20556\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.216.6.12  user=root
Sep 18 06:09:09 ns382633 sshd\[20556\]: Failed password for root from 85.216.6.12 port 51594 ssh2
Sep 18 06:21:27 ns382633 sshd\[22998\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.216.6.12  user=root
Sep 18 06:21:29 ns382633 sshd\[22998\]: Failed password for root from 85.216.6.12 port 40994 ssh2
Sep 18 06:39:24 ns382633 sshd\[27036\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.216.6.12  user=root
2020-09-18 14:39:24
attackspambots
Sep 17 22:34:52 vmd17057 sshd[24285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.216.6.12 
Sep 17 22:34:54 vmd17057 sshd[24285]: Failed password for invalid user edgarin from 85.216.6.12 port 39806 ssh2
...
2020-09-18 04:55:20
attackspam
Lines containing failures of 85.216.6.12 (max 1000)
Jul 27 16:03:46 srv sshd[95798]: Invalid user jpnshi from 85.216.6.12 port 45204
Jul 27 16:03:46 srv sshd[95798]: Received disconnect from 85.216.6.12 port 45204:11: Bye Bye [preauth]
Jul 27 16:03:46 srv sshd[95798]: Disconnected from invalid user jpnshi 85.216.6.12 port 45204 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=85.216.6.12
2020-08-02 06:13:50
Comments on same subnet:
IP Type Details Datetime
85.216.69.49 attackspambots
Invalid user admin from 85.216.69.49 port 58238
2020-05-24 02:31:45
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.216.6.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37870
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;85.216.6.12.			IN	A

;; AUTHORITY SECTION:
.			564	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020080101 1800 900 604800 86400

;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Aug 02 06:13:47 CST 2020
;; MSG SIZE  rcvd: 115
Host info
12.6.216.85.in-addr.arpa domain name pointer HSI-KBW-085-216-006-012.hsi.kabelbw.de.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
12.6.216.85.in-addr.arpa	name = HSI-KBW-085-216-006-012.hsi.kabelbw.de.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
109.228.233.36 attack
Honeypot attack, port: 445, PTR: 109-228-233-36.milleni.com.tr.
2020-01-23 12:49:49
217.170.205.107 attackspambots
01/22/2020-18:16:30.702413 217.170.205.107 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 56
2020-01-23 12:28:24
89.165.242.170 attack
Honeypot attack, port: 5555, PTR: 89-165-242-170.next-gen.ro.
2020-01-23 12:29:47
78.38.91.105 attackbotsspam
Honeypot attack, port: 81, PTR: PTR record not found
2020-01-23 12:37:59
89.24.36.175 attackbots
Honeypot attack, port: 445, PTR: 89-24-36-175.nat.epc.tmcz.cz.
2020-01-23 12:41:25
213.109.235.169 attackspam
Honeypot attack, port: 81, PTR: PTR record not found
2020-01-23 12:14:24
101.91.238.160 attackspambots
$f2bV_matches
2020-01-23 12:32:07
202.143.111.228 attackbots
01/22/2020-12:16:25.186861 202.143.111.228 Protocol: 6 ET SCAN Suspicious inbound to mySQL port 3306
2020-01-23 12:15:54
218.102.205.235 attackspam
Honeypot attack, port: 5555, PTR: pcd673235.netvigator.com.
2020-01-23 12:46:40
195.88.115.140 attackbots
Unauthorized connection attempt detected from IP address 195.88.115.140 to port 81 [J]
2020-01-23 12:35:29
95.45.48.73 attackbotsspam
Honeypot attack, port: 5555, PTR: 95-45-48-73-dynamic.agg2.rcm.rsl-rtd.eircom.net.
2020-01-23 12:35:58
103.144.15.178 attackspambots
Honeypot attack, port: 445, PTR: PTR record not found
2020-01-23 12:24:53
222.186.175.155 attack
Jan 22 23:33:20 plusreed sshd[9114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.155  user=root
Jan 22 23:33:23 plusreed sshd[9114]: Failed password for root from 222.186.175.155 port 5456 ssh2
...
2020-01-23 12:35:02
222.186.190.2 attackspambots
Jan 23 05:44:06 vps647732 sshd[6869]: Failed password for root from 222.186.190.2 port 57526 ssh2
Jan 23 05:44:19 vps647732 sshd[6869]: error: maximum authentication attempts exceeded for root from 222.186.190.2 port 57526 ssh2 [preauth]
...
2020-01-23 12:46:20
1.172.78.94 attackspam
Honeypot attack, port: 445, PTR: 1-172-78-94.dynamic-ip.hinet.net.
2020-01-23 12:50:55

Recently Reported IPs

68.63.152.47 128.40.29.253 70.207.99.81 163.208.11.143
58.56.40.210 138.115.10.56 101.193.166.61 8.193.104.204
173.174.135.164 139.59.73.221 110.87.25.124 67.33.35.181
94.59.113.124 107.178.203.182 104.154.92.15 72.245.85.150
220.132.215.165 101.95.136.253 220.196.183.241 94.59.113.97