140.82.4.142 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
140.82.4.140	attackbots	SSH/22 MH Probe, BF, Hack -	2020-06-25 06:35:02
140.82.44.136	attackspambots	MYH,DEF GET /wp-login.php	2019-10-26 02:41:23

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.82.4.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11708
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;140.82.4.142.			IN	A

;; AUTHORITY SECTION:
.			363	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 09:14:26 CST 2022
;; MSG SIZE  rcvd: 105

Host info

142.4.82.140.in-addr.arpa domain name pointer 140.82.4.142.vultr.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.4.82.140.in-addr.arpa	name = 140.82.4.142.vultr.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
64.227.97.122	attack	Oct 8 19:38:45 sip sshd[1866332]: Failed password for root from 64.227.97.122 port 53366 ssh2 Oct 8 19:39:58 sip sshd[1866357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.97.122 user=root Oct 8 19:39:59 sip sshd[1866357]: Failed password for root from 64.227.97.122 port 45766 ssh2 ...	2020-10-09 02:10:28
162.142.125.26	attackspambots	firewall-block, port(s): 33389/tcp	2020-10-09 02:16:10
118.25.114.245	attackbots	Invalid user testuser from 118.25.114.245 port 35008	2020-10-09 02:18:11
119.45.191.168	attackbots	Oct 8 18:16:58 www sshd\[1971\]: Failed password for root from 119.45.191.168 port 54984 ssh2Oct 8 18:20:48 www sshd\[1985\]: Failed password for root from 119.45.191.168 port 42528 ssh2Oct 8 18:24:42 www sshd\[1999\]: Failed password for root from 119.45.191.168 port 58308 ssh2 ...	2020-10-09 02:19:34
189.240.62.227	attackspambots	Oct 8 18:10:25 dev0-dcde-rnet sshd[1248]: Failed password for root from 189.240.62.227 port 57712 ssh2 Oct 8 18:27:34 dev0-dcde-rnet sshd[18565]: Failed password for root from 189.240.62.227 port 55840 ssh2	2020-10-09 01:59:11
41.65.68.70	attack	TCP (SYN) 41.65.68.70:52371 -> port 445, len 44	2020-10-09 01:55:21
54.38.134.219	attackbots	54.38.134.219 - - [08/Oct/2020:15:17:50 +0100] "POST /wp-login.php HTTP/1.1" 200 2551 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 54.38.134.219 - - [08/Oct/2020:15:17:51 +0100] "POST /wp-login.php HTTP/1.1" 200 2529 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 54.38.134.219 - - [08/Oct/2020:15:17:51 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-10-09 02:19:55
1.192.192.4	attackbots	26/tcp 111/tcp 999/tcp... [2020-08-26/10-07]10pkt,10pt.(tcp)	2020-10-09 02:24:07
49.88.112.117	attackbotsspam	Oct 8 20:19:14 pve1 sshd[20871]: Failed password for root from 49.88.112.117 port 12633 ssh2 Oct 8 20:19:18 pve1 sshd[20871]: Failed password for root from 49.88.112.117 port 12633 ssh2 ...	2020-10-09 02:27:31
80.211.56.216	attack	Oct 8 19:13:54 nextcloud sshd\[10553\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.56.216 user=root Oct 8 19:13:57 nextcloud sshd\[10553\]: Failed password for root from 80.211.56.216 port 33604 ssh2 Oct 8 19:33:36 nextcloud sshd\[639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.56.216 user=root	2020-10-09 02:22:51
159.65.64.76	attackbotsspam	Invalid user testuser from 159.65.64.76 port 53576	2020-10-09 01:52:49
218.92.0.175	attackspambots	Oct 8 20:08:05 piServer sshd[18266]: Failed password for root from 218.92.0.175 port 46398 ssh2 Oct 8 20:08:10 piServer sshd[18266]: Failed password for root from 218.92.0.175 port 46398 ssh2 Oct 8 20:08:15 piServer sshd[18266]: Failed password for root from 218.92.0.175 port 46398 ssh2 Oct 8 20:08:22 piServer sshd[18266]: Failed password for root from 218.92.0.175 port 46398 ssh2 Oct 8 20:08:29 piServer sshd[18266]: Failed password for root from 218.92.0.175 port 46398 ssh2 Oct 8 20:08:30 piServer sshd[18266]: error: maximum authentication attempts exceeded for root from 218.92.0.175 port 46398 ssh2 [preauth] Oct 8 20:08:39 piServer sshd[18348]: Failed password for root from 218.92.0.175 port 27787 ssh2 Oct 8 20:08:44 piServer sshd[18348]: Failed password for root from 218.92.0.175 port 27787 ssh2 Oct 8 20:08:49 piServer sshd[18348]: Failed password for root from 218.92.0.175 port 27787 ssh2 Oct 8 20:08:53 piServer sshd[18348]: Failed password for root from 218.92.0.175 port 27787 ssh2 Oct 8 20:08	2020-10-09 02:14:52
176.213.140.45	attackbots	TCP (SYN) 176.213.140.45:18402 -> port 23, len 44	2020-10-09 02:26:42
77.40.3.141	attackspam	(smtpauth) Failed SMTP AUTH login from 77.40.3.141 (RU/Russia/141.3.dialup.mari-el.ru): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-10-08 21:15:08 plain authenticator failed for (localhost) [77.40.3.141]: 535 Incorrect authentication data (set_id=directory@goltexgroup.com)	2020-10-09 01:56:30
74.120.14.21	attackspambots	firewall-block, port(s): 587/tcp	2020-10-09 02:15:19

Recently Reported IPs

118.89.52.187	140.82.4.112	140.82.4.21	140.82.4.151
140.82.4.28	140.82.4.161	140.82.4.229	140.82.40.14
140.82.4.99	140.82.4.49	118.89.52.23	140.82.4.75
140.82.40.164	140.82.40.19	140.82.40.24	140.82.40.17
140.82.40.53	140.82.40.45	140.82.41.111	140.82.41.104