Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Ukraine

Internet Service Provider: IP Services SP. Z.O.O.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Sep 22 17:02:01 ssh2 sshd[20670]: User root from 94.131.216.48 not allowed because not listed in AllowUsers
Sep 22 17:02:01 ssh2 sshd[20670]: Failed password for invalid user root from 94.131.216.48 port 53690 ssh2
Sep 22 17:02:01 ssh2 sshd[20670]: Connection closed by invalid user root 94.131.216.48 port 53690 [preauth]
...
2020-09-23 22:19:30
attackspambots
Sep 22 17:02:01 ssh2 sshd[20670]: User root from 94.131.216.48 not allowed because not listed in AllowUsers
Sep 22 17:02:01 ssh2 sshd[20670]: Failed password for invalid user root from 94.131.216.48 port 53690 ssh2
Sep 22 17:02:01 ssh2 sshd[20670]: Connection closed by invalid user root 94.131.216.48 port 53690 [preauth]
...
2020-09-23 14:38:20
attackspam
Sep 22 17:02:01 ssh2 sshd[20670]: User root from 94.131.216.48 not allowed because not listed in AllowUsers
Sep 22 17:02:01 ssh2 sshd[20670]: Failed password for invalid user root from 94.131.216.48 port 53690 ssh2
Sep 22 17:02:01 ssh2 sshd[20670]: Connection closed by invalid user root 94.131.216.48 port 53690 [preauth]
...
2020-09-23 06:29:10
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.131.216.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23943
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.131.216.48.			IN	A

;; AUTHORITY SECTION:
.			396	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020092202 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 23 06:29:05 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 48.216.131.94.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 48.216.131.94.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
111.231.225.162 attackbotsspam
Jun  5 12:06:31 webhost01 sshd[2286]: Failed password for root from 111.231.225.162 port 51004 ssh2
...
2020-06-05 14:27:12
139.59.23.69 attackspambots
ssh brute force
2020-06-05 14:35:00
209.17.96.234 attackbotsspam
Automatic report - Banned IP Access
2020-06-05 14:32:10
45.118.35.2 attack
(IN/India/-) SMTP Bruteforcing attempts
2020-06-05 14:40:54
222.186.175.23 attack
Jun  5 08:09:52 piServer sshd[1204]: Failed password for root from 222.186.175.23 port 19844 ssh2
Jun  5 08:09:54 piServer sshd[1204]: Failed password for root from 222.186.175.23 port 19844 ssh2
Jun  5 08:09:58 piServer sshd[1204]: Failed password for root from 222.186.175.23 port 19844 ssh2
...
2020-06-05 14:11:08
162.243.170.252 attack
Jun  5 05:48:13 ip-172-31-61-156 sshd[24735]: Failed password for root from 162.243.170.252 port 53268 ssh2
Jun  5 05:51:28 ip-172-31-61-156 sshd[24848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.170.252  user=root
Jun  5 05:51:30 ip-172-31-61-156 sshd[24848]: Failed password for root from 162.243.170.252 port 57136 ssh2
Jun  5 05:54:45 ip-172-31-61-156 sshd[24949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.170.252  user=root
Jun  5 05:54:47 ip-172-31-61-156 sshd[24949]: Failed password for root from 162.243.170.252 port 32770 ssh2
...
2020-06-05 14:15:25
107.175.33.240 attackbots
Tried sshing with brute force.
2020-06-05 14:07:13
220.170.143.137 attack
Unauthorized connection attempt detected from IP address 220.170.143.137 to port 80
2020-06-05 14:06:24
3.6.125.36 attackbots
Jun  5 01:41:55 ny01 sshd[24611]: Failed password for root from 3.6.125.36 port 49664 ssh2
Jun  5 01:46:19 ny01 sshd[25196]: Failed password for root from 3.6.125.36 port 55514 ssh2
2020-06-05 14:31:50
183.82.121.34 attackbotsspam
Jun  5 06:55:54 piServer sshd[26024]: Failed password for root from 183.82.121.34 port 40708 ssh2
Jun  5 06:59:51 piServer sshd[26325]: Failed password for root from 183.82.121.34 port 41494 ssh2
...
2020-06-05 14:05:49
123.153.1.189 attack
2020-06-05T05:55:13.874742+02:00  sshd[4173]: Failed password for root from 123.153.1.189 port 47218 ssh2
2020-06-05 14:20:42
142.93.34.237 attackspam
Jun  5 10:06:06 gw1 sshd[4477]: Failed password for root from 142.93.34.237 port 39450 ssh2
...
2020-06-05 14:37:15
79.137.76.15 attackbots
Jun  5 05:49:27 sip sshd[17935]: Failed password for root from 79.137.76.15 port 40791 ssh2
Jun  5 05:52:46 sip sshd[19192]: Failed password for root from 79.137.76.15 port 44286 ssh2
2020-06-05 14:30:30
45.162.20.249 attack
(AR/Argentina/-) SMTP Bruteforcing attempts
2020-06-05 14:31:29
104.168.28.195 attackspambots
Jun  5 06:57:28 ajax sshd[5192]: Failed password for root from 104.168.28.195 port 57610 ssh2
2020-06-05 14:39:22

Recently Reported IPs

192.241.235.231 141.138.35.18 188.193.32.62 111.85.90.122
45.55.157.158 113.169.114.119 21.6.6.177 157.245.196.164
3.114.76.91 116.111.85.99 109.9.238.215 47.245.29.255
71.58.231.210 42.119.62.4 174.235.10.247 95.216.203.42
85.138.133.12 93.109.34.189 27.6.159.171 179.33.96.18