Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Portugal

Internet Service Provider: PT Comunicacoes S.A.

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackspam
Aug 16 09:19:11 icinga sshd[3290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.245.58.95 
Aug 16 09:19:12 icinga sshd[3292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.245.58.95 
Aug 16 09:19:14 icinga sshd[3292]: Failed password for invalid user pi from 85.245.58.95 port 62467 ssh2
...
2020-08-16 16:36:34
attackbotsspam
Invalid user pi from 85.245.58.95 port 51940
2020-07-20 18:45:11
attackbotsspam
Port 22 Scan, PTR: None
2020-06-24 21:00:40
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.245.58.95
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12206
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;85.245.58.95.			IN	A

;; AUTHORITY SECTION:
.			482	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020062400 1800 900 604800 86400

;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 24 21:00:36 CST 2020
;; MSG SIZE  rcvd: 116
Host info
95.58.245.85.in-addr.arpa domain name pointer bl12-58-95.dsl.telepac.pt.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
95.58.245.85.in-addr.arpa	name = bl12-58-95.dsl.telepac.pt.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
103.253.3.214 attackspam
(sshd) Failed SSH login from 103.253.3.214 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  6 23:08:15 server5 sshd[20487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.253.3.214  user=mysql
Sep  6 23:08:17 server5 sshd[20487]: Failed password for mysql from 103.253.3.214 port 38360 ssh2
Sep  6 23:21:52 server5 sshd[26996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.253.3.214  user=root
Sep  6 23:21:54 server5 sshd[26996]: Failed password for root from 103.253.3.214 port 35964 ssh2
Sep  6 23:26:53 server5 sshd[29374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.253.3.214  user=root
2020-09-08 01:08:07
49.235.69.9 attack
Sep  7 18:33:00 vps647732 sshd[14963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.69.9
Sep  7 18:33:03 vps647732 sshd[14963]: Failed password for invalid user deploy from 49.235.69.9 port 58428 ssh2
...
2020-09-08 01:52:09
209.141.48.230 attackspambots
 TCP (SYN) 209.141.48.230:39845 -> port 23, len 44
2020-09-08 01:32:52
51.15.125.53 attack
Sep  7 10:12:32 mockhub sshd[657622]: Failed password for root from 51.15.125.53 port 42568 ssh2
Sep  7 10:15:47 mockhub sshd[686894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.125.53  user=root
Sep  7 10:15:49 mockhub sshd[686894]: Failed password for root from 51.15.125.53 port 46726 ssh2
...
2020-09-08 01:21:23
192.241.239.16 attackbotsspam
firewall-block, port(s): 20547/tcp
2020-09-08 01:30:40
49.235.209.206 attackbots
Sep  7 15:21:00 ns3164893 sshd[3199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.209.206
Sep  7 15:21:02 ns3164893 sshd[3199]: Failed password for invalid user upgrade from 49.235.209.206 port 39538 ssh2
...
2020-09-08 01:34:13
103.43.185.142 attack
Sep  7 05:17:45 havingfunrightnow sshd[10104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.43.185.142 
Sep  7 05:17:47 havingfunrightnow sshd[10104]: Failed password for invalid user test from 103.43.185.142 port 34856 ssh2
Sep  7 05:31:37 havingfunrightnow sshd[10440]: Failed password for root from 103.43.185.142 port 37820 ssh2
...
2020-09-08 01:22:27
198.46.233.148 attackbotsspam
Sep  7 11:23:25 host sshd[25671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.46.233.148  user=root
Sep  7 11:23:27 host sshd[25671]: Failed password for root from 198.46.233.148 port 43256 ssh2
...
2020-09-08 01:34:59
179.131.20.217 attackbotsspam
Sep  7 13:58:21 firewall sshd[21369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.131.20.217
Sep  7 13:58:21 firewall sshd[21369]: Invalid user admin from 179.131.20.217
Sep  7 13:58:23 firewall sshd[21369]: Failed password for invalid user admin from 179.131.20.217 port 54020 ssh2
...
2020-09-08 01:21:45
212.102.37.182 attackspambots
Malicious/Probing: /wp/wp-includes/wlwmanifest.xml
2020-09-08 01:38:05
88.214.26.90 attackspambots
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-09-07T16:27:56Z
2020-09-08 01:06:34
46.59.65.88 attack
Time:     Mon Sep  7 12:28:11 2020 -0400
IP:       46.59.65.88 (SE/Sweden/h-65-88.A785.priv.bahnhof.se)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep  7 12:27:58 pv-11-ams1 sshd[968]: Failed password for root from 46.59.65.88 port 50953 ssh2
Sep  7 12:28:00 pv-11-ams1 sshd[968]: Failed password for root from 46.59.65.88 port 50953 ssh2
Sep  7 12:28:02 pv-11-ams1 sshd[968]: Failed password for root from 46.59.65.88 port 50953 ssh2
Sep  7 12:28:04 pv-11-ams1 sshd[968]: Failed password for root from 46.59.65.88 port 50953 ssh2
Sep  7 12:28:06 pv-11-ams1 sshd[968]: Failed password for root from 46.59.65.88 port 50953 ssh2
2020-09-08 01:42:51
61.177.172.128 attackspambots
Sep  7 19:03:48 nextcloud sshd\[25433\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128  user=root
Sep  7 19:03:50 nextcloud sshd\[25433\]: Failed password for root from 61.177.172.128 port 48538 ssh2
Sep  7 19:04:01 nextcloud sshd\[25433\]: Failed password for root from 61.177.172.128 port 48538 ssh2
2020-09-08 01:05:36
122.51.221.184 attackbotsspam
$f2bV_matches
2020-09-08 01:37:50
103.211.20.155 attackspambots
Unauthorised access (Sep  6) SRC=103.211.20.155 LEN=52 TTL=112 ID=3893 DF TCP DPT=445 WINDOW=8192 SYN
2020-09-08 01:52:31

Recently Reported IPs

154.70.38.250 14.231.91.95 192.241.211.14 52.163.48.172
109.117.239.76 69.195.124.68 23.99.196.47 5.252.224.135
117.99.160.185 140.114.91.212 51.89.72.184 200.84.209.173
150.95.116.177 177.220.176.204 60.167.176.247 107.222.114.58
139.59.15.47 192.35.168.197 190.204.178.85 216.58.212.3