95.213.214.13 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Russia

Internet Service Provider: OOO Network of Data-Centers Selectel

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Mar 26 14:58:43 host sshd\[28233\]: Invalid user postgres from 95.213.214.13 port 46422	2020-03-26 22:05:57
attackspam	2020-03-25T20:33:40.342352abusebot-8.cloudsearch.cf sshd[24612]: Invalid user postgres from 95.213.214.13 port 34000 2020-03-25T20:33:40.352034abusebot-8.cloudsearch.cf sshd[24612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.213.214.13 2020-03-25T20:33:40.342352abusebot-8.cloudsearch.cf sshd[24612]: Invalid user postgres from 95.213.214.13 port 34000 2020-03-25T20:33:42.730946abusebot-8.cloudsearch.cf sshd[24612]: Failed password for invalid user postgres from 95.213.214.13 port 34000 ssh2 2020-03-25T20:35:28.880959abusebot-8.cloudsearch.cf sshd[24754]: Invalid user test from 95.213.214.13 port 38856 2020-03-25T20:35:28.890076abusebot-8.cloudsearch.cf sshd[24754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.213.214.13 2020-03-25T20:35:28.880959abusebot-8.cloudsearch.cf sshd[24754]: Invalid user test from 95.213.214.13 port 38856 2020-03-25T20:35:31.093851abusebot-8.cloudsearch.cf sshd[24754]: ...	2020-03-26 05:36:40
attackbotsspam	2020-03-25T08:12:53.914960 sshd[23543]: Invalid user postgres from 95.213.214.13 port 49658 2020-03-25T08:12:53.929047 sshd[23543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.213.214.13 2020-03-25T08:12:53.914960 sshd[23543]: Invalid user postgres from 95.213.214.13 port 49658 2020-03-25T08:12:56.289362 sshd[23543]: Failed password for invalid user postgres from 95.213.214.13 port 49658 ssh2 ...	2020-03-25 15:38:18
attackspam	Mar 20 01:42:10 localhost sshd\[18270\]: Invalid user admin from 95.213.214.13 port 51898 Mar 20 01:42:10 localhost sshd\[18270\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.213.214.13 Mar 20 01:42:12 localhost sshd\[18270\]: Failed password for invalid user admin from 95.213.214.13 port 51898 ssh2	2020-03-20 08:47:40
attackspambots	2020-03-19T17:43:47.983239jannga.de sshd[22173]: Invalid user admin from 95.213.214.13 port 51728 2020-03-19T17:43:50.206605jannga.de sshd[22173]: Failed password for invalid user admin from 95.213.214.13 port 51728 ssh2 ...	2020-03-20 01:30:47
attackspambots	Mar 19 10:25:12 work-partkepr sshd\[23627\]: Invalid user admin from 95.213.214.13 port 44008 Mar 19 10:25:12 work-partkepr sshd\[23627\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.213.214.13 ...	2020-03-19 20:13:14
attackbotsspam	Mar 6 16:22:57 NPSTNNYC01T sshd[21752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.213.214.13 Mar 6 16:22:59 NPSTNNYC01T sshd[21752]: Failed password for invalid user oracle from 95.213.214.13 port 48908 ssh2 Mar 6 16:26:29 NPSTNNYC01T sshd[21995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.213.214.13 ...	2020-03-07 05:57:32

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 95.213.214.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55473
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;95.213.214.13.			IN	A

;; AUTHORITY SECTION:
.			533	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030601 1800 900 604800 86400

;; Query time: 122 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 07 05:57:30 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 13.214.213.95.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 13.214.213.95.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
165.227.45.249	attack	Aug 1 23:48:28 sso sshd[21008]: Failed password for root from 165.227.45.249 port 45332 ssh2 ...	2020-08-02 06:10:59
179.216.176.168	attack	Aug 1 23:55:20 vps1 sshd[10596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.216.176.168 user=root Aug 1 23:55:22 vps1 sshd[10596]: Failed password for invalid user root from 179.216.176.168 port 51381 ssh2 Aug 1 23:57:04 vps1 sshd[10615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.216.176.168 user=root Aug 1 23:57:06 vps1 sshd[10615]: Failed password for invalid user root from 179.216.176.168 port 60515 ssh2 Aug 1 23:58:50 vps1 sshd[10646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.216.176.168 user=root Aug 1 23:58:52 vps1 sshd[10646]: Failed password for invalid user root from 179.216.176.168 port 41414 ssh2 Aug 2 00:00:41 vps1 sshd[10750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.216.176.168 user=root ...	2020-08-02 06:03:26
95.255.14.141	attack	Invalid user shuchong from 95.255.14.141 port 53274	2020-08-02 06:12:34
113.31.108.14	attackspam	Aug 1 22:22:30 ovpn sshd\[4190\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.31.108.14 user=root Aug 1 22:22:32 ovpn sshd\[4190\]: Failed password for root from 113.31.108.14 port 41152 ssh2 Aug 1 22:41:44 ovpn sshd\[8782\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.31.108.14 user=root Aug 1 22:41:46 ovpn sshd\[8782\]: Failed password for root from 113.31.108.14 port 51930 ssh2 Aug 1 22:48:08 ovpn sshd\[10300\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.31.108.14 user=root	2020-08-02 06:05:35
161.35.172.54	attackspam	Aug 1 22:48:33 debian-2gb-nbg1-2 kernel: \[18573392.895388\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=161.35.172.54 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=4977 PROTO=TCP SPT=32767 DPT=18087 WINDOW=1024 RES=0x00 SYN URGP=0	2020-08-02 05:44:40
159.203.34.76	attackspambots	$f2bV_matches	2020-08-02 05:52:41
79.137.39.102	attackbotsspam	2020/08/01 22:46:27 [error] 29205#29205: 3530096 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 79.137.39.102, server: _, request: "GET /wp-login.php HTTP/1.1", host: "freifunk-wermelskirchen.de" 2020/08/01 22:46:27 [error] 29205#29205: 3530097 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 79.137.39.102, server: _, request: "POST /wp-login.php HTTP/1.1", host: "freifunk-wermelskirchen.de"	2020-08-02 05:39:49
218.92.0.250	attack	2020-08-02T00:28:53.456722afi-git.jinr.ru sshd[29279]: Failed password for root from 218.92.0.250 port 10518 ssh2 2020-08-02T00:28:57.149806afi-git.jinr.ru sshd[29279]: Failed password for root from 218.92.0.250 port 10518 ssh2 2020-08-02T00:29:00.726255afi-git.jinr.ru sshd[29279]: Failed password for root from 218.92.0.250 port 10518 ssh2 2020-08-02T00:29:00.726380afi-git.jinr.ru sshd[29279]: error: maximum authentication attempts exceeded for root from 218.92.0.250 port 10518 ssh2 [preauth] 2020-08-02T00:29:00.726393afi-git.jinr.ru sshd[29279]: Disconnecting: Too many authentication failures [preauth] ...	2020-08-02 06:07:00
186.10.125.209	attackbotsspam	Aug 1 23:11:44 lnxded63 sshd[28495]: Failed password for root from 186.10.125.209 port 10307 ssh2 Aug 1 23:11:44 lnxded63 sshd[28495]: Failed password for root from 186.10.125.209 port 10307 ssh2	2020-08-02 05:36:38
62.112.11.86	attackspambots	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-08-01T20:19:23Z and 2020-08-01T20:48:39Z	2020-08-02 05:37:51
193.35.51.13	attack	2020-08-01 23:39:33 dovecot_login authenticator failed for $\[193.35.51.13\]$ \[193.35.51.13\]: 535 Incorrect authentication data $set_id=info@yt.gl$ 2020-08-01 23:39:41 dovecot_login authenticator failed for $\[193.35.51.13\]$ \[193.35.51.13\]: 535 Incorrect authentication data 2020-08-01 23:39:51 dovecot_login authenticator failed for $\[193.35.51.13\]$ \[193.35.51.13\]: 535 Incorrect authentication data 2020-08-01 23:39:56 dovecot_login authenticator failed for $\[193.35.51.13\]$ \[193.35.51.13\]: 535 Incorrect authentication data 2020-08-01 23:40:08 dovecot_login authenticator failed for $\[193.35.51.13\]$ \[193.35.51.13\]: 535 Incorrect authentication data ...	2020-08-02 05:52:55
45.227.255.4	attackspam	Aug 1 23:11:33 marvibiene sshd[11002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.227.255.4 Aug 1 23:11:34 marvibiene sshd[11002]: Failed password for invalid user user from 45.227.255.4 port 37377 ssh2	2020-08-02 05:54:48
114.236.45.203	attackspambots	Honeypot hit.	2020-08-02 06:05:15
37.49.230.118	attackbotsspam	Aug 1 21:31:24 django-0 sshd[8021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.49.230.118 user=root Aug 1 21:31:26 django-0 sshd[8021]: Failed password for root from 37.49.230.118 port 36756 ssh2 ...	2020-08-02 05:55:35
45.136.7.13	attack	2020-08-01 15:41:21.572990-0500 localhost smtpd[87819]: NOQUEUE: reject: RCPT from unknown[45.136.7.13]: 554 5.7.1 Service unavailable; Client host [45.136.7.13] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=	2020-08-02 06:04:51

Recently Reported IPs

194.35.233.89	85.211.228.161	168.216.239.214	5.13.172.27
36.233.163.65	71.218.16.169	154.118.209.199	216.43.161.160
110.162.142.181	171.248.102.16	185.170.57.101	219.196.20.138
106.107.247.196	71.253.61.131	72.166.19.103	99.99.77.184
183.128.234.205	116.129.214.193	41.205.210.38	52.170.199.184