85.114.138.106

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
85.114.138.138	attackbots	85.114.138.138 - - [21/Sep/2020:15:45:20 +0000] "POST /wp-login.php HTTP/1.1" 200 2088 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 85.114.138.138 - - [21/Sep/2020:15:45:21 +0000] "POST /wp-login.php HTTP/1.1" 200 2065 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 85.114.138.138 - - [21/Sep/2020:15:45:23 +0000] "POST /wp-login.php HTTP/1.1" 200 2062 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 85.114.138.138 - - [21/Sep/2020:15:45:25 +0000] "POST /wp-login.php HTTP/1.1" 200 2062 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 85.114.138.138 - - [21/Sep/2020:15:45:26 +0000] "POST /xmlrpc.php HTTP/1.1" 200 236 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-"	2020-09-22 02:46:06
85.114.138.138	attackbotsspam	85.114.138.138 - - \[21/Sep/2020:11:44:29 +0200\] "POST /wp-login.php HTTP/1.0" 200 4128 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 85.114.138.138 - - \[21/Sep/2020:11:44:30 +0200\] "POST /wp-login.php HTTP/1.0" 200 3955 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 85.114.138.138 - - \[21/Sep/2020:11:44:30 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2020-09-21 18:30:44
85.114.138.138	attackbots	Trolling for resource vulnerabilities	2020-09-03 00:18:26
85.114.138.138	attack	Trolling for resource vulnerabilities	2020-09-02 15:48:49
85.114.138.138	attack	Trolling for resource vulnerabilities	2020-09-02 08:53:14
85.114.138.138	attackspambots	85.114.138.138 - - [24/Aug/2020:05:27:28 +0100] "POST /wp-login.php HTTP/1.1" 200 1874 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 85.114.138.138 - - [24/Aug/2020:05:27:29 +0100] "POST /wp-login.php HTTP/1.1" 200 1877 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 85.114.138.138 - - [24/Aug/2020:05:27:29 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-24 12:36:06

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.114.138.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1654
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;85.114.138.106.			IN	A

;; AUTHORITY SECTION:
.			61	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020701 1800 900 604800 86400

;; Query time: 118 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 03:04:01 CST 2022
;; MSG SIZE  rcvd: 107

Host info

106.138.114.85.in-addr.arpa domain name pointer vps-85-114-138-106.whosted.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
106.138.114.85.in-addr.arpa	name = vps-85-114-138-106.whosted.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
112.85.42.178	attackbots	Jun 9 12:59:11 server sshd[13400]: Failed none for root from 112.85.42.178 port 56842 ssh2 Jun 9 12:59:13 server sshd[13400]: Failed password for root from 112.85.42.178 port 56842 ssh2 Jun 9 12:59:18 server sshd[13400]: Failed password for root from 112.85.42.178 port 56842 ssh2	2020-06-09 19:01:50
154.8.159.88	attack	Invalid user eg from 154.8.159.88 port 49608	2020-06-09 19:00:01
106.13.198.167	attackspambots	$f2bV_matches	2020-06-09 19:03:15
167.71.210.34	attackbotsspam	frenzy	2020-06-09 18:47:00
112.85.42.194	attack	Jun 9 10:16:10 jumpserver sshd[1095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.194 user=root Jun 9 10:16:12 jumpserver sshd[1095]: Failed password for root from 112.85.42.194 port 30877 ssh2 Jun 9 10:16:15 jumpserver sshd[1095]: Failed password for root from 112.85.42.194 port 30877 ssh2 ...	2020-06-09 18:41:51
196.41.208.69	attackbots	Icarus honeypot on github	2020-06-09 19:04:47
219.133.158.100	attackbots	Jun 9 06:28:06 mail.srvfarm.net postfix/smtpd[1378604]: NOQUEUE: reject: RCPT from unknown[219.133.158.100]: 554 5.7.1 Service unavailable; Client host [219.133.158.100] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/219.133.158.100; from= to= proto=ESMTP helo= Jun 9 06:28:06 mail.srvfarm.net postfix/smtpd[1378600]: NOQUEUE: reject: RCPT from unknown[219.133.158.100]: 554 5.7.1 Service unavailable; Client host [219.133.158.100] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/219.133.158.100; from= to= proto=ESMTP helo= Jun 9 06:28:06 mail.srvfarm.net postfix/smtpd[1377529]: NOQUEUE: reject: RCPT from unknown[219.133.158.100]: 554 5.7.1 Service unavailable; Client host [219.133.158.100] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/219.133.158.100; from= to= proto=ESMTP helo= Jun	2020-06-09 19:06:46
123.1.157.166	attackbotsspam	Jun 9 09:17:20 web8 sshd\[24459\]: Invalid user yuyin from 123.1.157.166 Jun 9 09:17:20 web8 sshd\[24459\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.1.157.166 Jun 9 09:17:22 web8 sshd\[24459\]: Failed password for invalid user yuyin from 123.1.157.166 port 58564 ssh2 Jun 9 09:24:42 web8 sshd\[28158\]: Invalid user oracle from 123.1.157.166 Jun 9 09:24:42 web8 sshd\[28158\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.1.157.166	2020-06-09 18:28:37
185.234.217.177	attack	Automatic report - Banned IP Access	2020-06-09 18:47:43
49.232.41.237	attackspambots	2020-06-09T13:46:44.564433mail.standpoint.com.ua sshd[14746]: Invalid user virusalert from 49.232.41.237 port 37480 2020-06-09T13:46:44.566959mail.standpoint.com.ua sshd[14746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.41.237 2020-06-09T13:46:44.564433mail.standpoint.com.ua sshd[14746]: Invalid user virusalert from 49.232.41.237 port 37480 2020-06-09T13:46:47.088371mail.standpoint.com.ua sshd[14746]: Failed password for invalid user virusalert from 49.232.41.237 port 37480 ssh2 2020-06-09T13:51:23.122443mail.standpoint.com.ua sshd[15431]: Invalid user admin from 49.232.41.237 port 58924 ...	2020-06-09 19:02:21
91.121.164.188	attackbotsspam	(sshd) Failed SSH login from 91.121.164.188 (FR/France/ns360710.ip-91-121-164.eu): 5 in the last 3600 secs	2020-06-09 18:28:20
118.89.16.139	attackspambots	Jun 9 11:52:16 vmd17057 sshd[4726]: Failed password for root from 118.89.16.139 port 38014 ssh2 ...	2020-06-09 18:42:35
61.151.130.20	attackspam	reported through recidive - multiple failed attempts(SSH)	2020-06-09 18:28:53
51.178.138.125	attackspam	Jun 9 11:16:30 vps sshd[30854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.138.125 Jun 9 11:16:32 vps sshd[30854]: Failed password for invalid user suri from 51.178.138.125 port 43426 ssh2 Jun 9 11:22:06 vps sshd[31093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.138.125 ...	2020-06-09 18:53:38
89.250.148.154	attackbotsspam	2020-06-09T05:38:52.422279amanda2.illicoweb.com sshd\[9594\]: Invalid user ga from 89.250.148.154 port 60478 2020-06-09T05:38:52.427921amanda2.illicoweb.com sshd\[9594\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.250.148.154 2020-06-09T05:38:54.296129amanda2.illicoweb.com sshd\[9594\]: Failed password for invalid user ga from 89.250.148.154 port 60478 ssh2 2020-06-09T05:48:33.223165amanda2.illicoweb.com sshd\[10199\]: Invalid user devserver from 89.250.148.154 port 33324 2020-06-09T05:48:33.544564amanda2.illicoweb.com sshd\[10199\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.250.148.154 ...	2020-06-09 19:06:11

Recently Reported IPs

89.216.92.105	31.56.58.146	45.138.103.251	42.228.239.160
90.164.114.200	143.198.53.72	178.72.78.45	34.159.75.111
212.3.169.21	202.29.238.157	187.162.143.161	89.191.229.25
197.210.84.223	197.37.68.161	112.30.1.150	112.39.83.20
185.31.175.196	110.169.146.55	182.59.125.90	193.233.82.30