103.82.211.142

Basic Info

City: unknown

Region: unknown

Country: India

Internet Service Provider: AirFiber Networks Pvt Ltd

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Attempt to attack host OS, exploiting network vulnerabilities, on 08-10-2019 12:55:22.	2019-10-08 21:39:36

Comments on same subnet:

IP	Type	Details	Datetime
103.82.211.83	attackspambots	20/8/4@23:52:10: FAIL: Alarm-Intrusion address from=103.82.211.83 ...	2020-08-05 16:14:47
103.82.211.50	attack	1588478222 - 05/03/2020 05:57:02 Host: 103.82.211.50/103.82.211.50 Port: 445 TCP Blocked	2020-05-03 12:18:01
103.82.211.135	attackbotsspam	Unauthorized connection attempt from IP address 103.82.211.135 on Port 445(SMB)	2020-03-17 11:51:02
103.82.211.225	attack	1433/tcp [2020-03-05]1pkt	2020-03-06 00:20:39
103.82.211.64	attack	unauthorized connection attempt	2020-01-09 14:18:50
103.82.211.159	attackspambots	Unauthorized connection attempt from IP address 103.82.211.159 on Port 445(SMB)	2019-11-26 08:09:00

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.82.211.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24258
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.82.211.142.			IN	A

;; AUTHORITY SECTION:
.			115	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100800 1800 900 604800 86400

;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 08 21:39:33 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 142.211.82.103.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 142.211.82.103.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
116.196.83.179	attack	Aug 23 20:27:43 ubuntu-2gb-nbg1-dc3-1 sshd[21422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.83.179 Aug 23 20:27:46 ubuntu-2gb-nbg1-dc3-1 sshd[21422]: Failed password for invalid user yseo from 116.196.83.179 port 56960 ssh2 ...	2019-08-24 02:47:06
213.91.181.165	attackbotsspam	445/tcp 445/tcp 445/tcp... [2019-06-29/08-23]5pkt,1pt.(tcp)	2019-08-24 02:37:59
148.70.223.115	attack	Aug 23 18:45:01 marvibiene sshd[45892]: Invalid user test from 148.70.223.115 port 33250 Aug 23 18:45:01 marvibiene sshd[45892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.223.115 Aug 23 18:45:01 marvibiene sshd[45892]: Invalid user test from 148.70.223.115 port 33250 Aug 23 18:45:03 marvibiene sshd[45892]: Failed password for invalid user test from 148.70.223.115 port 33250 ssh2 ...	2019-08-24 02:51:57
202.120.38.28	attackbots	Aug 23 17:26:01 ns315508 sshd[20547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.120.38.28 user=root Aug 23 17:26:03 ns315508 sshd[20547]: Failed password for root from 202.120.38.28 port 24929 ssh2 Aug 23 17:30:48 ns315508 sshd[20601]: Invalid user claudiaclaudia. from 202.120.38.28 port 4289 Aug 23 17:30:48 ns315508 sshd[20601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.120.38.28 Aug 23 17:30:48 ns315508 sshd[20601]: Invalid user claudiaclaudia. from 202.120.38.28 port 4289 Aug 23 17:30:50 ns315508 sshd[20601]: Failed password for invalid user claudiaclaudia. from 202.120.38.28 port 4289 ssh2 ...	2019-08-24 02:14:42
137.116.193.70	attackspambots	SSH Brute Force, server-1 sshd[1094]: Failed password for root from 137.116.193.70 port 45248 ssh2	2019-08-24 02:23:25
106.39.78.4	attackspambots	Unauthorized SSH login attempts	2019-08-24 02:42:30
195.178.209.23	attackspambots	SSH Brute Force, server-1 sshd[1349]: Failed password for invalid user uftp from 195.178.209.23 port 50089 ssh2	2019-08-24 02:16:44
193.32.163.182	attackbotsspam	Aug 23 17:57:32 XXX sshd[6371]: Invalid user admin from 193.32.163.182 port 48207	2019-08-24 02:17:56
150.107.210.195	attackbotsspam	23/tcp 23/tcp 23/tcp [2019-06-27/08-23]3pkt	2019-08-24 02:50:05
157.230.178.211	attackbotsspam	Aug 23 20:06:03 legacy sshd[7949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.178.211 Aug 23 20:06:05 legacy sshd[7949]: Failed password for invalid user 1 from 157.230.178.211 port 59096 ssh2 Aug 23 20:10:00 legacy sshd[8035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.178.211 ...	2019-08-24 02:25:43
95.58.28.25	attackbots	Aug 23 11:20:40 mailman postfix/smtpd[22846]: NOQUEUE: reject: RCPT from unknown[95.58.28.25]: 554 5.7.1 Service unavailable; Client host [95.58.28.25] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<[95.58.28.25]> Aug 23 11:20:54 mailman postfix/smtpd[22846]: NOQUEUE: reject: RCPT from unknown[95.58.28.25]: 554 5.7.1 Service unavailable; Client host [95.58.28.25] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<[95.58.28.25]>	2019-08-24 02:48:07
173.212.245.177	attackspambots	Aug 23 18:47:28 hcbbdb sshd\[31893\]: Invalid user mg from 173.212.245.177 Aug 23 18:47:28 hcbbdb sshd\[31893\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.212.245.177 Aug 23 18:47:30 hcbbdb sshd\[31893\]: Failed password for invalid user mg from 173.212.245.177 port 40276 ssh2 Aug 23 18:51:49 hcbbdb sshd\[32390\]: Invalid user kernel from 173.212.245.177 Aug 23 18:51:49 hcbbdb sshd\[32390\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.212.245.177	2019-08-24 02:53:52
88.99.247.219	attackbotsspam	SSH Brute Force, server-1 sshd[1097]: Failed password for root from 88.99.247.219 port 53548 ssh2	2019-08-24 02:21:31
172.245.211.186	attackspambots	\[2019-08-23 14:25:18\] NOTICE\[1829\] chan_sip.c: Registration from '"5126" \' failed for '172.245.211.186:5498' - Wrong password \[2019-08-23 14:25:18\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-23T14:25:18.470-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5126",SessionID="0x7f7b301c17c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/172.245.211.186/5498",Challenge="06c064cc",ReceivedChallenge="06c064cc",ReceivedHash="6bfd4396a5e891f37fab46f33988f324" \[2019-08-23 14:25:18\] NOTICE\[1829\] chan_sip.c: Registration from '"5126" \' failed for '172.245.211.186:5498' - Wrong password \[2019-08-23 14:25:18\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-23T14:25:18.545-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5126",SessionID="0x7f7b302cefa8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="I	2019-08-24 02:44:13
95.180.235.205	attack	60001/tcp 23/tcp... [2019-08-07/23]6pkt,2pt.(tcp)	2019-08-24 02:31:21

Recently Reported IPs

177.106.36.49	187.72.118.191	123.21.3.102	113.172.0.33
151.205.100.71	125.46.218.27	43.251.105.205	182.61.109.103
41.235.235.168	123.24.139.92	222.209.55.63	109.94.174.128
212.73.77.68	220.184.97.0	82.23.86.195	35.137.198.190
109.202.109.19	159.65.153.102	92.116.120.125	220.184.7.116