85.114.13.13 - IPInfo

Basic Info

City: St Petersburg

Region: St.-Petersburg

Country: Russia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
85.114.138.138	attackbots	85.114.138.138 - - [21/Sep/2020:15:45:20 +0000] "POST /wp-login.php HTTP/1.1" 200 2088 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 85.114.138.138 - - [21/Sep/2020:15:45:21 +0000] "POST /wp-login.php HTTP/1.1" 200 2065 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 85.114.138.138 - - [21/Sep/2020:15:45:23 +0000] "POST /wp-login.php HTTP/1.1" 200 2062 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 85.114.138.138 - - [21/Sep/2020:15:45:25 +0000] "POST /wp-login.php HTTP/1.1" 200 2062 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 85.114.138.138 - - [21/Sep/2020:15:45:26 +0000] "POST /xmlrpc.php HTTP/1.1" 200 236 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-"	2020-09-22 02:46:06
85.114.138.138	attackbotsspam	85.114.138.138 - - \[21/Sep/2020:11:44:29 +0200\] "POST /wp-login.php HTTP/1.0" 200 4128 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 85.114.138.138 - - \[21/Sep/2020:11:44:30 +0200\] "POST /wp-login.php HTTP/1.0" 200 3955 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 85.114.138.138 - - \[21/Sep/2020:11:44:30 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-09-21 18:30:44
85.114.138.138	attackbots	Trolling for resource vulnerabilities	2020-09-03 00:18:26
85.114.138.138	attack	Trolling for resource vulnerabilities	2020-09-02 15:48:49
85.114.138.138	attack	Trolling for resource vulnerabilities	2020-09-02 08:53:14
85.114.138.138	attackspambots	85.114.138.138 - - [24/Aug/2020:05:27:28 +0100] "POST /wp-login.php HTTP/1.1" 200 1874 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 85.114.138.138 - - [24/Aug/2020:05:27:29 +0100] "POST /wp-login.php HTTP/1.1" 200 1877 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 85.114.138.138 - - [24/Aug/2020:05:27:29 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-24 12:36:06
85.114.137.162	attack	Feb 14 12:55:04 firewall sshd[2685]: Invalid user lou from 85.114.137.162 Feb 14 12:55:06 firewall sshd[2685]: Failed password for invalid user lou from 85.114.137.162 port 43127 ssh2 Feb 14 12:58:15 firewall sshd[2814]: Invalid user shadow from 85.114.137.162 ...	2020-02-15 02:32:20
85.114.13.219	attackspam	Honeypot attack, port: 445, PTR: mail.stdp.ru.	2020-02-10 08:55:07
85.114.137.162	attackspambots	invalid user	2020-02-07 00:09:42
85.114.137.162	attack	Feb 4 15:05:04 legacy sshd[13910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.114.137.162 Feb 4 15:05:06 legacy sshd[13910]: Failed password for invalid user jenkins from 85.114.137.162 port 40268 ssh2 Feb 4 15:08:15 legacy sshd[14155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.114.137.162 ...	2020-02-04 22:25:26
85.114.137.162	attack	2020-01-29T22:11:15.697024shield sshd\[14126\]: Invalid user mahitha from 85.114.137.162 port 43677 2020-01-29T22:11:15.701423shield sshd\[14126\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=i162.indigo.fastwebserver.de 2020-01-29T22:11:17.491450shield sshd\[14126\]: Failed password for invalid user mahitha from 85.114.137.162 port 43677 ssh2 2020-01-29T22:13:56.503173shield sshd\[14695\]: Invalid user gourav from 85.114.137.162 port 57663 2020-01-29T22:13:56.508974shield sshd\[14695\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=i162.indigo.fastwebserver.de	2020-01-30 06:14:35
85.114.137.162	attackbots	Unauthorized connection attempt detected from IP address 85.114.137.162 to port 2220 [J]	2020-01-19 08:54:12
85.114.134.200	attack	SIPVicious Scanner Detection, PTR: srv62037.dus2.servdiscount-customer.com.	2019-11-16 20:29:38
85.114.134.200	attackspambots	\[2019-11-08 14:13:00\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-08T14:13:00.738-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441519470713",SessionID="0x7fdf2cae1298",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/85.114.134.200/62612",ACLName="no_extension_match" \[2019-11-08 14:13:34\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-08T14:13:34.911-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011441519470713",SessionID="0x7fdf2cae1298",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/85.114.134.200/60952",ACLName="no_extension_match" \[2019-11-08 14:14:11\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-08T14:14:11.488-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="00441519470713",SessionID="0x7fdf2c8a8ab8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/85.114.134.200/57381",ACLName="no_	2019-11-09 03:33:07
85.114.134.200	attackbotsspam	" "	2019-11-01 20:03:48

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.114.13.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53084
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;85.114.13.13.			IN	A

;; AUTHORITY SECTION:
.			477	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019123001 1800 900 604800 86400

;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 31 05:07:16 CST 2019
;; MSG SIZE  rcvd: 116

Host info

13.13.114.85.in-addr.arpa domain name pointer vi-xx-3161.tallin6.8.181.spb.obit.ru.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
13.13.114.85.in-addr.arpa	name = vi-xx-3161.tallin6.8.181.spb.obit.ru.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
107.180.111.7	attackspam	LGS,WP GET /beta/wp-includes/wlwmanifest.xml	2020-07-28 23:04:24
137.74.233.91	attackspambots	Jul 28 14:05:55 db sshd[21984]: Invalid user zilu from 137.74.233.91 port 37064 ...	2020-07-28 22:54:09
78.128.113.115	attackspambots	Jul 28 16:30:55 relay postfix/smtpd\[32654\]: warning: unknown\[78.128.113.115\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 28 16:32:17 relay postfix/smtpd\[32653\]: warning: unknown\[78.128.113.115\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 28 16:32:36 relay postfix/smtpd\[3652\]: warning: unknown\[78.128.113.115\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 28 16:35:07 relay postfix/smtpd\[10905\]: warning: unknown\[78.128.113.115\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 28 16:35:24 relay postfix/smtpd\[3652\]: warning: unknown\[78.128.113.115\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-07-28 22:52:45
218.92.0.138	attackbotsspam	Jul 28 16:47:31 sso sshd[10004]: Failed password for root from 218.92.0.138 port 6609 ssh2 Jul 28 16:47:35 sso sshd[10004]: Failed password for root from 218.92.0.138 port 6609 ssh2 ...	2020-07-28 23:01:51
139.59.215.241	attackbots	139.59.215.241 - - \[28/Jul/2020:15:27:43 +0200\] "POST /wp-login.php HTTP/1.0" 200 6827 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 139.59.215.241 - - \[28/Jul/2020:15:27:43 +0200\] "POST /wp-login.php HTTP/1.0" 200 6642 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 139.59.215.241 - - \[28/Jul/2020:15:27:43 +0200\] "POST /wp-login.php HTTP/1.0" 200 6639 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-07-28 22:17:21
129.204.205.125	attackspambots	Jul 28 15:58:34 santamaria sshd\[12367\]: Invalid user sonarUser from 129.204.205.125 Jul 28 15:58:34 santamaria sshd\[12367\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.205.125 Jul 28 15:58:36 santamaria sshd\[12367\]: Failed password for invalid user sonarUser from 129.204.205.125 port 49250 ssh2 ...	2020-07-28 22:35:33
60.251.42.155	attackspam	Port Scan detected from 60.251.42.155 (TW/Taiwan/Taiwan/Taipei/60-251-42-155.HINET-IP.hinet.net). 4 hits in the last 190 seconds	2020-07-28 22:19:56
185.175.93.27	attackbotsspam	07/28/2020-10:23:17.874184 185.175.93.27 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-07-28 22:26:29
185.36.81.37	attack	[2020-07-28 10:28:41] NOTICE[1248] chan_sip.c: Registration from '"19988" ' failed for '185.36.81.37:50984' - Wrong password [2020-07-28 10:28:41] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-28T10:28:41.816-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="19988",SessionID="0x7f27200b56f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.36.81.37/50984",Challenge="69c99aea",ReceivedChallenge="69c99aea",ReceivedHash="c79482dd9e473957fdbf71d27efba173" [2020-07-28 10:29:04] NOTICE[1248] chan_sip.c: Registration from '"17957" ' failed for '185.36.81.37:50977' - Wrong password [2020-07-28 10:29:04] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-28T10:29:04.970-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="17957",SessionID="0x7f27200d18d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/ ...	2020-07-28 22:37:01
49.233.204.30	attack	(sshd) Failed SSH login from 49.233.204.30 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 28 14:02:17 amsweb01 sshd[18876]: Invalid user telecom from 49.233.204.30 port 39364 Jul 28 14:02:19 amsweb01 sshd[18876]: Failed password for invalid user telecom from 49.233.204.30 port 39364 ssh2 Jul 28 14:07:03 amsweb01 sshd[19620]: Invalid user honglizeng from 49.233.204.30 port 43750 Jul 28 14:07:05 amsweb01 sshd[19620]: Failed password for invalid user honglizeng from 49.233.204.30 port 43750 ssh2 Jul 28 14:11:48 amsweb01 sshd[20290]: Invalid user erobertparker from 49.233.204.30 port 48136	2020-07-28 22:56:02
54.37.226.123	attackbotsspam	Jul 28 13:28:46 game-panel sshd[29330]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.226.123 Jul 28 13:28:48 game-panel sshd[29330]: Failed password for invalid user k3 from 54.37.226.123 port 60084 ssh2 Jul 28 13:33:14 game-panel sshd[29575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.226.123	2020-07-28 22:33:10
211.107.25.69	attackbots	Helo	2020-07-28 22:52:10
218.92.0.165	attackspambots	Jul 28 15:13:41 ajax sshd[4717]: Failed password for root from 218.92.0.165 port 61062 ssh2 Jul 28 15:13:45 ajax sshd[4717]: Failed password for root from 218.92.0.165 port 61062 ssh2	2020-07-28 22:24:13
176.187.131.93	attackbots	Jul 28 13:06:10 cdc sshd[26188]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.187.131.93 user=pi Jul 28 13:06:12 cdc sshd[26188]: Failed password for invalid user pi from 176.187.131.93 port 42776 ssh2	2020-07-28 22:31:35
94.177.214.9	attack	94.177.214.9 - - [28/Jul/2020:13:59:34 +0200] "POST /xmlrpc.php HTTP/1.1" 403 15316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 94.177.214.9 - - [28/Jul/2020:14:06:02 +0200] "POST /xmlrpc.php HTTP/1.1" 403 461 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-28 22:43:50

Recently Reported IPs

60.251.182.58	191.223.52.34	150.227.16.52	36.74.227.29
175.171.6.152	170.0.125.64	96.0.227.33	172.77.93.156
185.95.39.183	124.234.180.118	47.194.234.243	81.216.214.193
63.2.170.44	200.219.87.246	213.46.34.19	37.143.227.210
116.109.201.232	124.187.173.83	220.26.157.254	176.31.211.52