85.138.1.214 - IPInfo

Basic Info

City: Évora

Region: Evora

Country: Portugal

Internet Service Provider: NOS

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
85.138.105.54	attack	Unauthorized connection attempt from IP address 85.138.105.54 on Port 445(SMB)	2020-08-14 19:44:52
85.138.168.43	attackbotsspam	57359/udp [2020-07-20]1pkt	2020-07-21 02:38:08
85.138.198.57	attackbotsspam	2019-11-24 H=a85-138-198-57.cpe.netcabo.pt \[85.138.198.57\] F=\ rejected RCPT \: Unrouteable address 2019-11-24 H=a85-138-198-57.cpe.netcabo.pt \[85.138.198.57\] F=\ rejected RCPT \: Unrouteable address 2019-11-24 H=a85-138-198-57.cpe.netcabo.pt \[85.138.198.57\] F=\ rejected RCPT \: Unrouteable address	2019-11-24 17:22:00

Type

Details

Datetime

85.138.105.54

attack

Unauthorized connection attempt from IP address 85.138.105.54 on Port 445(SMB)

2020-08-14 19:44:52

85.138.168.43

attackbotsspam

57359/udp
[2020-07-20]1pkt

2020-07-21 02:38:08

85.138.198.57

attackbotsspam

2019-11-24 H=a85-138-198-57.cpe.netcabo.pt \[85.138.198.57\] F=\ rejected RCPT \: Unrouteable address
2019-11-24 H=a85-138-198-57.cpe.netcabo.pt \[85.138.198.57\] F=\ rejected RCPT \: Unrouteable address
2019-11-24 H=a85-138-198-57.cpe.netcabo.pt \[85.138.198.57\] F=\ rejected RCPT \: Unrouteable address

2019-11-24 17:22:00

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.138.1.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40365
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;85.138.1.214.			IN	A

;; AUTHORITY SECTION:
.			268	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023010200 1800 900 604800 86400

;; Query time: 131 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 02 15:30:05 CST 2023
;; MSG SIZE  rcvd: 105

Host info

214.1.138.85.in-addr.arpa domain name pointer a85-138-1-214.cpe.netcabo.pt.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
214.1.138.85.in-addr.arpa	name = a85-138-1-214.cpe.netcabo.pt.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
129.145.3.27	attack	Jul 22 21:28:29 havingfunrightnow sshd[6540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.145.3.27 Jul 22 21:28:31 havingfunrightnow sshd[6540]: Failed password for invalid user 0 from 129.145.3.27 port 35959 ssh2 Jul 22 21:30:16 havingfunrightnow sshd[6628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.145.3.27 ...	2020-07-23 04:24:18
106.13.166.38	attackbots	Jul 22 17:12:39 rocket sshd[7239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.166.38 Jul 22 17:12:41 rocket sshd[7239]: Failed password for invalid user master3 from 106.13.166.38 port 58622 ssh2 ...	2020-07-23 04:33:02
46.101.19.133	attack	Jul 22 14:45:21 server1 sshd\[27379\]: Failed password for invalid user lanny from 46.101.19.133 port 51380 ssh2 Jul 22 14:49:43 server1 sshd\[28660\]: Invalid user oracle from 46.101.19.133 Jul 22 14:49:43 server1 sshd\[28660\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.19.133 Jul 22 14:49:45 server1 sshd\[28660\]: Failed password for invalid user oracle from 46.101.19.133 port 59262 ssh2 Jul 22 14:53:59 server1 sshd\[29826\]: Invalid user aiello from 46.101.19.133 ...	2020-07-23 04:55:41
79.175.145.122	attackbotsspam	Automatic report - XMLRPC Attack	2020-07-23 04:46:48
123.21.36.161	attackspambots	Jun 17 00:06:10 WHD8 dovecot: imap-login: Disconnected $auth failed, 1 attempts in 11 secs$: user=\, method=PLAIN, rip=123.21.36.161, lip=10.64.89.208, TLS, session=\ Jun 20 17:03:40 WHD8 dovecot: imap-login: Disconnected $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=123.21.36.161, lip=10.64.89.208, TLS: Disconnected, session=\<0QZOUIWoNKh7FSSh\> Jun 21 08:44:17 WHD8 dovecot: imap-login: Disconnected $auth failed, 1 attempts in 5 secs$: user=\, method=PLAIN, rip=123.21.36.161, lip=10.64.89.208, session=\ Jun 21 21:06:56 WHD8 dovecot: imap-login: Disconnected $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=123.21.36.161, lip=10.64.89.208, TLS, session=\ Jun 22 00:34:08 WHD8 dovecot: imap-login: Disconnected $auth failed, 1 attempts in 15 secs$: user=\ ...	2020-07-23 04:31:09
189.1.132.75	attackspambots	Jul 22 12:35:48 vps46666688 sshd[14535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.1.132.75 Jul 22 12:35:51 vps46666688 sshd[14535]: Failed password for invalid user hal from 189.1.132.75 port 44732 ssh2 ...	2020-07-23 04:34:08
110.166.82.211	attackspambots	$f2bV_matches	2020-07-23 04:32:38
75.126.104.249	attack	porn spammer	2020-07-23 04:37:17
129.211.55.22	attack	Jul 22 13:28:53 dignus sshd[25452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.22 Jul 22 13:28:55 dignus sshd[25452]: Failed password for invalid user nelson from 129.211.55.22 port 55362 ssh2 Jul 22 13:35:36 dignus sshd[26351]: Invalid user sshvpn from 129.211.55.22 port 43584 Jul 22 13:35:36 dignus sshd[26351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.22 Jul 22 13:35:38 dignus sshd[26351]: Failed password for invalid user sshvpn from 129.211.55.22 port 43584 ssh2 ...	2020-07-23 04:49:58
196.35.41.109	attack	(sshd) Failed SSH login from 196.35.41.109 (ZA/South Africa/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 22 22:44:24 grace sshd[7759]: Invalid user rss from 196.35.41.109 port 59084 Jul 22 22:44:27 grace sshd[7759]: Failed password for invalid user rss from 196.35.41.109 port 59084 ssh2 Jul 22 22:48:50 grace sshd[8391]: Invalid user weblogic from 196.35.41.109 port 60960 Jul 22 22:48:53 grace sshd[8391]: Failed password for invalid user weblogic from 196.35.41.109 port 60960 ssh2 Jul 22 22:52:47 grace sshd[9069]: Invalid user oracle from 196.35.41.109 port 60374	2020-07-23 04:53:09
167.172.243.126	attackbotsspam	2020-07-22T15:28:33.992794server.mjenks.net sshd[3151993]: Invalid user public from 167.172.243.126 port 34888 2020-07-22T15:28:33.999480server.mjenks.net sshd[3151993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.243.126 2020-07-22T15:28:33.992794server.mjenks.net sshd[3151993]: Invalid user public from 167.172.243.126 port 34888 2020-07-22T15:28:36.172381server.mjenks.net sshd[3151993]: Failed password for invalid user public from 167.172.243.126 port 34888 ssh2 2020-07-22T15:32:14.023700server.mjenks.net sshd[3152393]: Invalid user nadege from 167.172.243.126 port 49188 ...	2020-07-23 04:33:52
185.220.102.4	attackbotsspam	Jul 22 20:40:02 124388 sshd[5396]: Failed password for sshd from 185.220.102.4 port 43087 ssh2 Jul 22 20:40:04 124388 sshd[5396]: Failed password for sshd from 185.220.102.4 port 43087 ssh2 Jul 22 20:40:06 124388 sshd[5396]: Failed password for sshd from 185.220.102.4 port 43087 ssh2 Jul 22 20:40:08 124388 sshd[5396]: Failed password for sshd from 185.220.102.4 port 43087 ssh2 Jul 22 20:40:08 124388 sshd[5396]: error: maximum authentication attempts exceeded for sshd from 185.220.102.4 port 43087 ssh2 [preauth]	2020-07-23 04:48:13
31.142.242.97	attackspam	michaelklotzbier.de 31.142.242.97 [22/Jul/2020:16:46:22 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4279 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" michaelklotzbier.de 31.142.242.97 [22/Jul/2020:16:46:24 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4279 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36"	2020-07-23 04:42:52
112.78.10.41	attack	Jul 22 19:54:31 db sshd[9957]: Invalid user admin from 112.78.10.41 port 56880 ...	2020-07-23 04:44:31
222.73.215.81	attackbotsspam	Jul 22 22:34:28 abendstille sshd\[8264\]: Invalid user oracle from 222.73.215.81 Jul 22 22:34:28 abendstille sshd\[8264\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.73.215.81 Jul 22 22:34:30 abendstille sshd\[8264\]: Failed password for invalid user oracle from 222.73.215.81 port 58533 ssh2 Jul 22 22:38:35 abendstille sshd\[12540\]: Invalid user rupesh from 222.73.215.81 Jul 22 22:38:35 abendstille sshd\[12540\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.73.215.81 ...	2020-07-23 04:40:51

Recently Reported IPs

85.60.118.108	85.18.47.37	85.107.127.214	84.227.101.184
83.146.53.166	83.137.59.106	81.52.41.162	82.104.129.242
81.250.228.15	82.236.90.243	81.186.181.195	81.103.189.111
81.140.249.215	81.124.123.22	80.241.91.129	80.137.216.33
8.2.203.6	8.209.100.4	8.103.4.212	79.64.20.250