106.212.139.53

Basic Info

City: Noida

Region: Uttar Pradesh

Country: India

Internet Service Provider: AirTel

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

b'
; <<>> DiG 9.11.3-1ubuntu1.15-Ubuntu <<>> 106.212.139.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12461
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;106.212.139.53.			IN	A

;; Query time: 1 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Sat Jun 26 17:50:10 CST 2021
;; MSG SIZE  rcvd: 43

'

Host info

53.139.212.106.in-addr.arpa domain name pointer abts-north-dynamic-53.139.212.106.airtelbroadband.in.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
53.139.212.106.in-addr.arpa	name = abts-north-dynamic-53.139.212.106.airtelbroadband.in.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.244.25.132	attack	ZTE Router Exploit Scanner	2019-06-29 01:50:36
49.206.224.31	attackspambots	SSH Brute-Force reported by Fail2Ban	2019-06-29 01:38:30
187.102.50.86	attack	[Thu Jun 27 18:19:31.396578 2019] [:error] [pid 6565:tid 140348542129920] [client 187.102.50.86:53092] [client 187.102.50.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.1.1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "792"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197:80"] [severity "WARNING"] [ver "OWASP_CRS/3.1.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XRSmQwTAE6Fl0cyL6JqPqgAAAAk"] ...	2019-06-29 01:22:36
68.183.29.124	attackspam	Jun 28 16:07:43 dedicated sshd[28485]: Invalid user user3 from 68.183.29.124 port 56536 Jun 28 16:07:45 dedicated sshd[28485]: Failed password for invalid user user3 from 68.183.29.124 port 56536 ssh2 Jun 28 16:07:43 dedicated sshd[28485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.29.124 Jun 28 16:07:43 dedicated sshd[28485]: Invalid user user3 from 68.183.29.124 port 56536 Jun 28 16:07:45 dedicated sshd[28485]: Failed password for invalid user user3 from 68.183.29.124 port 56536 ssh2	2019-06-29 01:58:48
51.38.51.113	attackbots	SSH invalid-user multiple login attempts	2019-06-29 01:44:48
177.135.93.227	attack	$f2bV_matches	2019-06-29 02:00:08
112.217.225.59	attackbots	Jun 28 15:19:55 debian sshd\[10724\]: Invalid user mz from 112.217.225.59 port 49738 Jun 28 15:19:55 debian sshd\[10724\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.217.225.59 ...	2019-06-29 01:18:26
130.61.26.235	attackbotsspam	Jun 26 07:25:02 vayu sshd[365488]: Invalid user museocasadidante from 130.61.26.235 Jun 26 07:25:02 vayu sshd[365488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.26.235 Jun 26 07:25:03 vayu sshd[365488]: Failed password for invalid user museocasadidante from 130.61.26.235 port 58896 ssh2 Jun 26 07:25:04 vayu sshd[365488]: Received disconnect from 130.61.26.235: 11: Bye Bye [preauth] Jun 26 07:25:04 vayu sshd[365647]: Invalid user museocasadidante from 130.61.26.235 Jun 26 07:25:04 vayu sshd[365647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.26.235 Jun 26 07:25:06 vayu sshd[365647]: Failed password for invalid user museocasadidante from 130.61.26.235 port 59544 ssh2 Jun 26 07:25:06 vayu sshd[365647]: Received disconnect from 130.61.26.235: 11: Bye Bye [preauth] Jun 26 07:25:06 vayu sshd[365840]: Invalid user museocasadidante from 130.61.26.235 Jun 26 07:25:06 vayu s........ -------------------------------	2019-06-29 01:55:39
202.150.142.38	attack	2019-06-28T17:25:53.833984abusebot-8.cloudsearch.cf sshd\[29457\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host38.subnet142.comnet.net.id user=root	2019-06-29 02:06:11
27.147.56.152	attack	2019-06-28T19:02:47.000499 sshd[16714]: Invalid user flux from 27.147.56.152 port 57052 2019-06-28T19:02:47.015623 sshd[16714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.147.56.152 2019-06-28T19:02:47.000499 sshd[16714]: Invalid user flux from 27.147.56.152 port 57052 2019-06-28T19:02:49.370696 sshd[16714]: Failed password for invalid user flux from 27.147.56.152 port 57052 ssh2 2019-06-28T19:10:36.743675 sshd[16761]: Invalid user reng from 27.147.56.152 port 46080 ...	2019-06-29 01:40:18
109.133.194.0	attack	1561627489 - 06/27/2019 16:24:49 Host: 109.133.194.0/109.133.194.0 Port: 23 TCP Blocked ...	2019-06-29 01:07:56
181.210.74.170	attackbots	[Thu Jun 27 18:33:31.144342 2019] [:error] [pid 6565:tid 140348592486144] [client 181.210.74.170:48331] [client 181.210.74.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.1.1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "792"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197:80"] [severity "WARNING"] [ver "OWASP_CRS/3.1.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XRSpiwTAE6Fl0cyL6JqRAgAAAAM"] ...	2019-06-29 01:24:14
188.138.122.18	attackbots	188.138.122.18 - - [28/Jun/2019:10:30:42 -0400] "HEAD /wallet.dat HTTP/1.0" 404 222 "-" "-"	2019-06-29 01:22:09
211.159.152.252	attackspam	Jun 28 17:07:02 rpi sshd\[30317\]: Invalid user smon from 211.159.152.252 port 58645 Jun 28 17:07:02 rpi sshd\[30317\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.152.252 Jun 28 17:07:04 rpi sshd\[30317\]: Failed password for invalid user smon from 211.159.152.252 port 58645 ssh2	2019-06-29 01:44:19
94.124.75.25	attackbotsspam	Jun2815:19:10server6dovecot:imap-login:Disconnected$authfailed\,1attemptsin5secs$:user=\\,method=PLAIN\,rip=94.124.75.25\,lip=81.17.25.249\,session=\<2xJnH2KMUuxefEsZ\>Jun2815:19:10server6dovecot:imap-login:Disconnected$authfailed\,1attemptsin5secs$:user=\\,method=PLAIN\,rip=94.124.75.25\,lip=81.17.25.249\,session=\Jun2815:19:27server6dovecot:imap-login:Disconnected$authfailed\,1attemptsin16secs$:user=\\,method=PLAIN\,rip=94.124.75.25\,lip=81.17.25.249\,session=\Jun2815:19:27server6dovecot:imap-login:Disconnected$authfailed\,1attemptsin10secs$:user=\\,method=PLAIN\,rip=94.124.75.25\,lip=81.17.25.249\,session=\Jun2815:30:35server6dovecot:imap-login:Disconnected$authfailed\,1attemptsin7secs$:user=\\,method=PLAIN\,rip=94.124.75.25\,lip=81.17.25.249\,session=\<95IlSGKMmOxefEsZ\>Jun2815	2019-06-29 01:54:36

Recently Reported IPs

203.228.22.223	181.114.99.237	177.91.165.55	159.203.118.62
202.75.116.119	190.192.58.170	195.64.143.91	176.127.163.25
159.203.115.182	170.0.87.71	212.241.16.246	187.120.147.18
213.33.179.39	218.104.148.85	219.78.67.12	207.134.28.30
191.163.119.225	183.80.101.214	193.23.58.251	201.236.103.75