103.99.189.12 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: India

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
103.99.189.17	attackbots	Oct 1 13:12:43 mail.srvfarm.net postfix/smtps/smtpd[3882226]: warning: unknown[103.99.189.17]: SASL PLAIN authentication failed: Oct 1 13:12:44 mail.srvfarm.net postfix/smtps/smtpd[3882226]: lost connection after AUTH from unknown[103.99.189.17] Oct 1 13:18:19 mail.srvfarm.net postfix/smtps/smtpd[3882224]: warning: unknown[103.99.189.17]: SASL PLAIN authentication failed: Oct 1 13:18:19 mail.srvfarm.net postfix/smtps/smtpd[3882224]: lost connection after AUTH from unknown[103.99.189.17] Oct 1 13:21:41 mail.srvfarm.net postfix/smtps/smtpd[3882225]: warning: unknown[103.99.189.17]: SASL PLAIN authentication failed:	2020-10-02 06:45:30
103.99.189.17	attack	Oct 1 13:12:43 mail.srvfarm.net postfix/smtps/smtpd[3882226]: warning: unknown[103.99.189.17]: SASL PLAIN authentication failed: Oct 1 13:12:44 mail.srvfarm.net postfix/smtps/smtpd[3882226]: lost connection after AUTH from unknown[103.99.189.17] Oct 1 13:18:19 mail.srvfarm.net postfix/smtps/smtpd[3882224]: warning: unknown[103.99.189.17]: SASL PLAIN authentication failed: Oct 1 13:18:19 mail.srvfarm.net postfix/smtps/smtpd[3882224]: lost connection after AUTH from unknown[103.99.189.17] Oct 1 13:21:41 mail.srvfarm.net postfix/smtps/smtpd[3882225]: warning: unknown[103.99.189.17]: SASL PLAIN authentication failed:	2020-10-01 23:16:17
103.99.189.27	attackspam	Sep 13 18:12:47 mail.srvfarm.net postfix/smtps/smtpd[1216382]: warning: unknown[103.99.189.27]: SASL PLAIN authentication failed: Sep 13 18:12:48 mail.srvfarm.net postfix/smtps/smtpd[1216382]: lost connection after AUTH from unknown[103.99.189.27] Sep 13 18:15:35 mail.srvfarm.net postfix/smtps/smtpd[1214572]: warning: unknown[103.99.189.27]: SASL PLAIN authentication failed: Sep 13 18:15:36 mail.srvfarm.net postfix/smtps/smtpd[1214572]: lost connection after AUTH from unknown[103.99.189.27] Sep 13 18:16:34 mail.srvfarm.net postfix/smtpd[1215613]: warning: unknown[103.99.189.27]: SASL PLAIN authentication failed:	2020-09-15 03:50:59
103.99.189.27	attackbotsspam	Sep 13 18:12:47 mail.srvfarm.net postfix/smtps/smtpd[1216382]: warning: unknown[103.99.189.27]: SASL PLAIN authentication failed: Sep 13 18:12:48 mail.srvfarm.net postfix/smtps/smtpd[1216382]: lost connection after AUTH from unknown[103.99.189.27] Sep 13 18:15:35 mail.srvfarm.net postfix/smtps/smtpd[1214572]: warning: unknown[103.99.189.27]: SASL PLAIN authentication failed: Sep 13 18:15:36 mail.srvfarm.net postfix/smtps/smtpd[1214572]: lost connection after AUTH from unknown[103.99.189.27] Sep 13 18:16:34 mail.srvfarm.net postfix/smtpd[1215613]: warning: unknown[103.99.189.27]: SASL PLAIN authentication failed:	2020-09-14 19:48:49
103.99.189.230	attackbotsspam	Aug 27 19:49:02 www sshd[24477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.99.189.230 user=r.r Aug 27 19:49:04 www sshd[24477]: Failed password for r.r from 103.99.189.230 port 44850 ssh2 Aug 27 19:49:04 www sshd[24477]: Received disconnect from 103.99.189.230: 11: Bye Bye [preauth] Aug 27 20:01:09 www sshd[25356]: Invalid user diana from 103.99.189.230 Aug 27 20:01:09 www sshd[25356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.99.189.230 Aug 27 20:01:12 www sshd[25356]: Failed password for invalid user diana from 103.99.189.230 port 45474 ssh2 Aug 27 20:01:12 www sshd[25356]: Received disconnect from 103.99.189.230: 11: Bye Bye [preauth] Aug 27 20:05:57 www sshd[25653]: Invalid user admin from 103.99.189.230 Aug 27 20:05:57 www sshd[25653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.99.189.230 Aug 27 20:05:59 www sshd[25........ -------------------------------	2020-08-28 22:51:24
103.99.189.230	attackbots	Aug 27 19:49:02 www sshd[24477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.99.189.230 user=r.r Aug 27 19:49:04 www sshd[24477]: Failed password for r.r from 103.99.189.230 port 44850 ssh2 Aug 27 19:49:04 www sshd[24477]: Received disconnect from 103.99.189.230: 11: Bye Bye [preauth] Aug 27 20:01:09 www sshd[25356]: Invalid user diana from 103.99.189.230 Aug 27 20:01:09 www sshd[25356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.99.189.230 Aug 27 20:01:12 www sshd[25356]: Failed password for invalid user diana from 103.99.189.230 port 45474 ssh2 Aug 27 20:01:12 www sshd[25356]: Received disconnect from 103.99.189.230: 11: Bye Bye [preauth] Aug 27 20:05:57 www sshd[25653]: Invalid user admin from 103.99.189.230 Aug 27 20:05:57 www sshd[25653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.99.189.230 Aug 27 20:05:59 www sshd[25........ -------------------------------	2020-08-28 12:59:11
103.99.189.29	attackbots	Aug 15 00:38:59 mail.srvfarm.net postfix/smtpd[909357]: warning: unknown[103.99.189.29]: SASL PLAIN authentication failed: Aug 15 00:39:00 mail.srvfarm.net postfix/smtpd[909357]: lost connection after AUTH from unknown[103.99.189.29] Aug 15 00:40:51 mail.srvfarm.net postfix/smtpd[910647]: warning: unknown[103.99.189.29]: SASL PLAIN authentication failed: Aug 15 00:40:52 mail.srvfarm.net postfix/smtpd[910647]: lost connection after AUTH from unknown[103.99.189.29] Aug 15 00:43:15 mail.srvfarm.net postfix/smtpd[908818]: warning: unknown[103.99.189.29]: SASL PLAIN authentication failed:	2020-08-15 16:14:08
103.99.189.32	attackspambots	Aug 10 05:16:51 mail.srvfarm.net postfix/smtpd[1310341]: warning: unknown[103.99.189.32]: SASL PLAIN authentication failed: Aug 10 05:16:52 mail.srvfarm.net postfix/smtpd[1310341]: lost connection after AUTH from unknown[103.99.189.32] Aug 10 05:21:40 mail.srvfarm.net postfix/smtpd[1310348]: warning: unknown[103.99.189.32]: SASL PLAIN authentication failed: Aug 10 05:21:41 mail.srvfarm.net postfix/smtpd[1310348]: lost connection after AUTH from unknown[103.99.189.32] Aug 10 05:25:05 mail.srvfarm.net postfix/smtpd[1310399]: warning: unknown[103.99.189.32]: SASL PLAIN authentication failed:	2020-08-10 15:50:04
103.99.189.48	attack	Jul 26 05:28:11 mail.srvfarm.net postfix/smtps/smtpd[1027770]: warning: unknown[103.99.189.48]: SASL PLAIN authentication failed: Jul 26 05:28:11 mail.srvfarm.net postfix/smtps/smtpd[1027770]: lost connection after AUTH from unknown[103.99.189.48] Jul 26 05:33:36 mail.srvfarm.net postfix/smtpd[1029338]: warning: unknown[103.99.189.48]: SASL PLAIN authentication failed: Jul 26 05:33:36 mail.srvfarm.net postfix/smtpd[1029338]: lost connection after AUTH from unknown[103.99.189.48] Jul 26 05:34:31 mail.srvfarm.net postfix/smtps/smtpd[1027919]: warning: unknown[103.99.189.48]: SASL PLAIN authentication failed:	2020-07-26 18:13:04
103.99.189.48	attack	SASL PLAIN auth failed: ruser=...	2020-07-16 09:14:48
103.99.189.48	attackbotsspam	2020-07-0921:48:04dovecot_plainauthenticatorfailedfor$[195.226.207.220]$[195.226.207.220]:41394:535Incorrectauthenticationdata$set_id=info$2020-07-0922:12:12dovecot_plainauthenticatorfailedfor$[177.23.62.198]$[177.23.62.198]:60468:535Incorrectauthenticationdata$set_id=info$2020-07-0922:04:32dovecot_plainauthenticatorfailedfor$[91.82.63.195]$[91.82.63.195]:4507:535Incorrectauthenticationdata$set_id=info$2020-07-0922:16:27dovecot_plainauthenticatorfailedfor$[189.8.11.14]$[189.8.11.14]:38530:535Incorrectauthenticationdata$set_id=info$2020-07-0922:15:21dovecot_plainauthenticatorfailedfor$[191.53.238.104]$[191.53.238.104]:41891:535Incorrectauthenticationdata$set_id=info$2020-07-0922:18:56dovecot_plainauthenticatorfailedfor$[186.216.67.176]$[186.216.67.176]:52012:535Incorrectauthenticationdata$set_id=info$2020-07-0921:46:58dovecot_plainauthenticatorfailedfor$[177.71.14.207]$[177.71.14.207]:2923:535Incorrectauthenticationdata$set_id=info$2020-07-0921:57:06dovecot_plainauthenticatorfailedf	2020-07-10 07:12:22
103.99.189.48	attackbots	$f2bV_matches	2020-07-09 14:18:36
103.99.189.215	attackbots	Automatic report - Port Scan Attack	2020-01-23 08:13:49

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.99.189.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 399
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.99.189.12.			IN	A

;; AUTHORITY SECTION:
.			596	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020701 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 04:19:23 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 12.189.99.103.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 12.189.99.103.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
148.253.169.186	attack	Unauthorized connection attempt detected from IP address 148.253.169.186 to port 2220 [J]	2020-02-05 05:43:09
180.76.138.132	attackbotsspam	SSH invalid-user multiple login try	2020-02-05 05:42:54
167.172.194.159	attackspambots	Automatic report - XMLRPC Attack	2020-02-05 06:07:41
122.96.197.109	attackspam	Honeypot attack, port: 5555, PTR: PTR record not found	2020-02-05 05:53:56
139.99.219.208	attackbots	Unauthorized connection attempt detected from IP address 139.99.219.208 to port 2220 [J]	2020-02-05 06:13:48
185.220.101.6	attackspam	02/04/2020-22:33:22.955160 185.220.101.6 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 33	2020-02-05 06:18:30
103.26.120.142	attackbots	$f2bV_matches	2020-02-05 06:14:51
116.196.72.226	attackspam	Feb 4 21:16:11 srv01 sshd[16657]: Invalid user sgyuri from 116.196.72.226 port 45113 Feb 4 21:16:11 srv01 sshd[16657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.72.226 Feb 4 21:16:11 srv01 sshd[16657]: Invalid user sgyuri from 116.196.72.226 port 45113 Feb 4 21:16:13 srv01 sshd[16657]: Failed password for invalid user sgyuri from 116.196.72.226 port 45113 ssh2 Feb 4 21:19:18 srv01 sshd[16853]: Invalid user steven1 from 116.196.72.226 port 55876 ...	2020-02-05 06:19:35
129.28.191.55	attackspambots	Feb 4 23:00:17 legacy sshd[20028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.191.55 Feb 4 23:00:18 legacy sshd[20028]: Failed password for invalid user sagar from 129.28.191.55 port 35886 ssh2 Feb 4 23:03:49 legacy sshd[20395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.191.55 ...	2020-02-05 06:18:05
37.119.174.82	attackspam	Feb 4 21:19:14 grey postfix/smtpd\[25101\]: NOQUEUE: reject: RCPT from net-37-119-174-82.cust.vodafonedsl.it\[37.119.174.82\]: 554 5.7.1 Service unavailable\; Client host \[37.119.174.82\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=37.119.174.82\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-05 06:22:11
104.131.190.193	attackbotsspam	Feb 4 21:09:34 icinga sshd[29666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.190.193 Feb 4 21:09:36 icinga sshd[29666]: Failed password for invalid user docserver from 104.131.190.193 port 46478 ssh2 Feb 4 21:19:59 icinga sshd[40394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.190.193 ...	2020-02-05 05:47:04
68.183.88.186	attackbots	Feb 4 22:19:51 cvbnet sshd[2282]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.88.186 Feb 4 22:19:53 cvbnet sshd[2282]: Failed password for invalid user huo from 68.183.88.186 port 59810 ssh2 ...	2020-02-05 06:16:24
178.62.35.160	attack	detected by Fail2Ban	2020-02-05 05:52:52
81.183.222.181	attackspam	Unauthorized connection attempt detected from IP address 81.183.222.181 to port 2220 [J]	2020-02-05 05:42:24
178.128.247.181	attackbots	Unauthorized connection attempt detected from IP address 178.128.247.181 to port 2220 [J]	2020-02-05 06:08:33

Recently Reported IPs

170.254.73.153	182.122.193.74	58.187.23.118	27.5.35.127
2.187.10.179	182.70.249.165	115.48.133.107	131.196.93.158
201.206.163.21	23.225.158.122	110.138.132.206	185.164.50.16
185.113.247.155	182.126.95.106	61.7.152.131	35.242.231.160
171.234.14.85	123.232.224.16	142.129.125.79	200.37.61.106