85.113.39.134 - IPInfo

Basic Info

City: Samara

Region: Samara Oblast

Country: Russia

Internet Service Provider: JSC ER-Telecom Holding

Hostname: unknown

Organization: JSC ER-Telecom Holding

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	F2B jail: sshd. Time: 2019-11-04 18:24:59, Reported by: VKReport	2019-11-05 05:18:55

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.113.39.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33931
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;85.113.39.134.			IN	A

;; AUTHORITY SECTION:
.			723	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019032800 1800 900 604800 86400

;; Query time: 147 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 29 01:00:25 CST 2019
;; MSG SIZE  rcvd: 117

Host info

134.39.113.85.in-addr.arpa domain name pointer 85x113x39x134.static-customer.samara.ertelecom.ru.
134.39.113.85.in-addr.arpa domain name pointer greeng.gq.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
134.39.113.85.in-addr.arpa	name = greeng.gq.
134.39.113.85.in-addr.arpa	name = 85x113x39x134.static-customer.samara.ertelecom.ru.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
14.252.102.155	attack	Automatic report - Port Scan Attack	2020-03-18 14:52:21
91.204.188.50	attackbots	Mar 18 05:04:14 ns3042688 sshd\[23010\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.204.188.50 user=root Mar 18 05:04:15 ns3042688 sshd\[23010\]: Failed password for root from 91.204.188.50 port 47822 ssh2 Mar 18 05:08:07 ns3042688 sshd\[23917\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.204.188.50 user=root Mar 18 05:08:10 ns3042688 sshd\[23917\]: Failed password for root from 91.204.188.50 port 57168 ssh2 Mar 18 05:11:56 ns3042688 sshd\[24801\]: Invalid user hh from 91.204.188.50 Mar 18 05:11:56 ns3042688 sshd\[24801\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.204.188.50 ...	2020-03-18 14:35:50
178.171.69.84	attackspambots	Chat Spam	2020-03-18 14:55:13
178.128.123.111	attackspam	web-1 [ssh] SSH Attack	2020-03-18 15:17:35
213.55.90.49	attackbotsspam	Unauthorized connection attempt detected from IP address 213.55.90.49 to port 445	2020-03-18 14:45:37
178.128.221.237	attack	Mar 18 04:52:15 hosting180 sshd[4717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.221.237 user=root Mar 18 04:52:16 hosting180 sshd[4717]: Failed password for root from 178.128.221.237 port 45774 ssh2 ...	2020-03-18 14:55:47
109.167.200.10	attack	$f2bV_matches	2020-03-18 14:41:04
217.61.109.80	attackspam	Mar 18 03:52:49 *** sshd[30711]: User root from 217.61.109.80 not allowed because not listed in AllowUsers	2020-03-18 14:34:08
119.29.149.214	attack	Mar 18 01:39:13 firewall sshd[12843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.149.214 Mar 18 01:39:13 firewall sshd[12843]: Invalid user pruebas from 119.29.149.214 Mar 18 01:39:15 firewall sshd[12843]: Failed password for invalid user pruebas from 119.29.149.214 port 42860 ssh2 ...	2020-03-18 14:51:30
103.129.221.62	attack	Mar 18 05:30:05 work-partkepr sshd\[30424\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.129.221.62 user=root Mar 18 05:30:08 work-partkepr sshd\[30424\]: Failed password for root from 103.129.221.62 port 42066 ssh2 ...	2020-03-18 15:19:38
118.143.232.4	attackbotsspam	$f2bV_matches	2020-03-18 14:38:47
122.51.191.69	attack	Mar 18 07:22:00 mout sshd[10623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.191.69 user=root Mar 18 07:22:02 mout sshd[10623]: Failed password for root from 122.51.191.69 port 38278 ssh2	2020-03-18 14:51:53
185.22.142.132	attackspambots	Mar 18 07:56:46 relay dovecot: imap-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=185.22.142.132, lip=176.9.177.164, session=\ Mar 18 07:56:48 relay dovecot: imap-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=185.22.142.132, lip=176.9.177.164, session=\ Mar 18 07:57:11 relay dovecot: imap-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=185.22.142.132, lip=176.9.177.164, session=\ Mar 18 08:02:22 relay dovecot: imap-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=185.22.142.132, lip=176.9.177.164, session=\ Mar 18 08:02:24 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 ...	2020-03-18 15:16:57
1.9.46.177	attackspam	SSH auth scanning - multiple failed logins	2020-03-18 15:15:02
103.42.57.65	attackspambots	$f2bV_matches	2020-03-18 14:33:04

Recently Reported IPs

198.108.67.32	80.90.169.242	157.230.103.200	117.102.107.196
119.17.249.86	14.41.77.225	129.204.46.42	185.217.68.102
178.168.220.60	177.118.133.170	202.120.47.213	178.128.37.180
110.52.5.110	178.176.177.90	54.38.188.34	201.18.151.14
118.24.122.36	188.52.202.83	128.199.197.159	185.176.27.78