This IP address has been reported a total of
21
times from
21 distinct
sources.
95.85.113.252 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 7
reports;
Germany
with 4
reports;
Czechia
with 2
reports.
The most common categories in these recent reports were:
SSH
20
times;
Brute-Force
18
times;
Port Scan
1
time;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Oct 25 10:17:00 Veslys sshd[1556444]: Failed password for root from 95.85.113.252 port 51720 ssh2
Oc ...
show moreOct 25 10:17:00 Veslys sshd[1556444]: Failed password for root from 95.85.113.252 port 51720 ssh2
Oct 25 10:18:02 Veslys sshd[1593816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.113.252 user=root
Oct 25 10:18:04 Veslys sshd[1593816]: Failed password for root from 95.85.113.252 port 55354 ssh2
...
show less
{"event":{"DateTime":"2026-10-25T10:01:41Z","RemoteAddr":"95.85.113.252:41160","Protocol":"SSH","Com ...
show more{"event":{"DateTime":"2026-10-25T10:01:41Z","RemoteAddr":"95.85.113.252:41160","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"8eaf9a94-b373-4c0b-9a99-6c002feb8622","Environ":"","User":"linuxadmin","Password":"linuxadmin","Client":"SSH-2.0-libssh_0.9.6","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"95.85.113.252","SourcePort":"41160","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"}
{"event":{"DateTime":"2026-10-25T10:04:11Z","RemoteAddr":"95.85.113.252:58276","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"1b73de91-6f79-4409-9606-25c47edf0185","Environ":"","User":"testuser2","Password":"123456","Client":"SSH-2.0-libssh_0.9.6","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestU
show less
2026-10-25T04:52:42.966555-05:00 nocix-dedi-bf2421-mci sshd-session[3142720]: Invalid user linuxadmi ...
show more2026-10-25T04:52:42.966555-05:00 nocix-dedi-bf2421-mci sshd-session[3142720]: Invalid user linuxadmin from 95.85.113.252 port 40666
2026-10-25T05:02:55.911319-05:00 nocix-dedi-bf2421-mci sshd-session[3143506]: Invalid user testuser2 from 95.85.113.252 port 56068
2026-10-25T05:04:35.589243-05:00 nocix-dedi-bf2421-mci sshd-session[3143638]: Invalid user hello from 95.85.113.252 port 38170
...
show less
2026-10-25T09:07:45.903750+00:00 aurora sshd[2850638]: Failed password for root from 95.85.113.252 p ...
show more2026-10-25T09:07:45.903750+00:00 aurora sshd[2850638]: Failed password for root from 95.85.113.252 port 44442 ssh2
2026-10-25T09:09:32.304426+00:00 aurora sshd[2893425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.113.252 user=root
2026-10-25T09:09:34.057149+00:00 aurora sshd[2893425]: Failed password for root from 95.85.113.252 port 59198 ssh2
...
show less
Automated report: 3 SSH authentication failure events observed during the last 15 minutes against TC ...
show moreAutomated report: 3 SSH authentication failure events observed during the last 15 minutes against TCP port 22.
show less
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 us ...
show moreAutomated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
show less
2026-10-25T10:39:08.475353+02:00 v2202606371265473117 sshd-session[705157]: Invalid user menu from 9 ...
show more2026-10-25T10:39:08.475353+02:00 v2202606371265473117 sshd-session[705157]: Invalid user menu from 95.85.113.252 port 47714
2026-10-25T10:39:08.583652+02:00 v2202606371265473117 sshd-session[705157]: Disconnected from invalid user menu 95.85.113.252 port 47714 [preauth]
2026-10-25T10:48:44.449546+02:00 v2202606371265473117 sshd-session[705208]: Invalid user minecraft from 95.85.113.252 port 54744
2026-10-25T10:48:44.561856+02:00 v2202606371265473117 sshd-session[705208]: Disconnected from invalid user minecraft 95.85.113.252 port 54744 [preauth]
2026-10-25T10:50:20.143065+02:00 v2202606371265473117 sshd-session[705225]: Invalid user ftpuser from 95.85.113.252 port 45546
...
show less
Brute-Force
SSH
Anonymous
(sshd) Failed SSH login from 95.85.113.252 (TM/Turkmenistan/-): 5 in the last 3600 secs; Ports: *; D ...
show more(sshd) Failed SSH login from 95.85.113.252 (TM/Turkmenistan/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 25 04:45:44 server5 sshd[32666]: Invalid user menu from 95.85.113.252
Oct 25 04:45:44 server5 sshd[32666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.113.252
Oct 25 04:45:47 server5 sshd[32666]: Failed password for invalid user menu from 95.85.113.252 port 46536 ssh2
Oct 25 04:49:38 server5 sshd[606]: Invalid user minecraft from 95.85.113.252
Oct 25 04:49:38 server5 sshd[606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.113.252
show less
2026-10-25T08:43:20.271987+00:00 arrow-fi2.play2go.cloud sshd-session[140896]: pam_unix(sshd:auth): ...
show more2026-10-25T08:43:20.271987+00:00 arrow-fi2.play2go.cloud sshd-session[140896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.113.252
2026-10-25T08:43:22.541009+00:00 arrow-fi2.play2go.cloud sshd-session[140896]: Failed password for invalid user menu from 95.85.113.252 port 53568 ssh2
2026-10-25T08:49:18.427185+00:00 arrow-fi2.play2go.cloud sshd-session[140935]: Invalid user minecraft from 95.85.113.252 port 34086
...
show less
