2.82.138.44 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Portugal

Internet Service Provider: PT Comunicacoes S.A.

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-14 07:33:29
attackbots	unauthorized connection attempt	2020-02-07 19:27:22
attackbotsspam	" "	2020-01-17 20:10:16
attack	01/09/2020-23:51:57.087363 2.82.138.44 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 8	2020-01-10 17:15:08
attackbots	Honeypot attack, port: 23, PTR: bl21-138-44.dsl.telepac.pt.	2019-12-11 22:25:49
attackspambots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/2.82.138.44/ PT - 1H : (11) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : PT NAME ASN : ASN3243 IP : 2.82.138.44 CIDR : 2.80.0.0/14 PREFIX COUNT : 14 UNIQUE IP COUNT : 1704960 ATTACKS DETECTED ASN3243 : 1H - 2 3H - 2 6H - 4 12H - 6 24H - 7 DateTime : 2019-11-23 07:27:58 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-23 16:25:19

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.82.138.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18470
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;2.82.138.44.			IN	A

;; AUTHORITY SECTION:
.			492	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112300 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 23 16:25:10 CST 2019
;; MSG SIZE  rcvd: 115

Host info

44.138.82.2.in-addr.arpa domain name pointer bl21-138-44.dsl.telepac.pt.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
44.138.82.2.in-addr.arpa	name = bl21-138-44.dsl.telepac.pt.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
62.210.219.124	attackbotsspam	20 attempts against mh-ssh on cloud	2020-05-14 03:47:35
85.105.203.208	attackbotsspam	Unauthorized connection attempt from IP address 85.105.203.208 on Port 445(SMB)	2020-05-14 04:04:06
52.226.79.76	attack	Invalid user ftptest from 52.226.79.76 port 50440	2020-05-14 04:02:43
106.241.33.158	attack	Invalid user content from 106.241.33.158 port 31941	2020-05-14 04:15:40
142.93.6.79	attackbots	xmlrpc attack	2020-05-14 03:55:47
54.39.50.204	attack	May 13 20:06:23 ns381471 sshd[17572]: Failed password for root from 54.39.50.204 port 17274 ssh2 May 13 20:12:07 ns381471 sshd[17988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.50.204	2020-05-14 04:00:42
109.225.107.159	attack	Invalid user aainftp from 109.225.107.159 port 7832	2020-05-14 04:07:31
121.204.172.132	attackbots	May 13 15:46:10 [host] sshd[13544]: Invalid user p May 13 15:46:10 [host] sshd[13544]: pam_unix(sshd: May 13 15:46:12 [host] sshd[13544]: Failed passwor	2020-05-14 03:56:34
123.26.107.190	attackbots	Port scan on 1 port(s): 8291	2020-05-14 04:02:21
188.170.101.42	attackspam	Unauthorized connection attempt from IP address 188.170.101.42 on Port 445(SMB)	2020-05-14 03:46:56
114.86.186.119	attackspambots	May 13 20:30:16 srv-ubuntu-dev3 sshd[111564]: Invalid user test from 114.86.186.119 May 13 20:30:16 srv-ubuntu-dev3 sshd[111564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.86.186.119 May 13 20:30:16 srv-ubuntu-dev3 sshd[111564]: Invalid user test from 114.86.186.119 May 13 20:30:18 srv-ubuntu-dev3 sshd[111564]: Failed password for invalid user test from 114.86.186.119 port 35952 ssh2 May 13 20:32:52 srv-ubuntu-dev3 sshd[111976]: Invalid user work from 114.86.186.119 May 13 20:32:52 srv-ubuntu-dev3 sshd[111976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.86.186.119 May 13 20:32:52 srv-ubuntu-dev3 sshd[111976]: Invalid user work from 114.86.186.119 May 13 20:32:54 srv-ubuntu-dev3 sshd[111976]: Failed password for invalid user work from 114.86.186.119 port 40576 ssh2 May 13 20:35:31 srv-ubuntu-dev3 sshd[112417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser ...	2020-05-14 04:10:57
116.193.222.130	attackbotsspam	DATE:2020-05-13 14:32:23, IP:116.193.222.130, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-05-14 03:36:33
5.183.131.221	attack	Received: from 3WTlqM3rR.61MwP2Ip61Jl.6fvOWane.B ([51.75.103.101]) 0 Date: Wed, 13 May 2020 08:53:01 -0000 From domain ->effelax.com 5.183.131.221 Subject: 8_Must-Haves During The Coronavirus Pandemic Reply-To: " Smart Living Tips " effelax.com 5.183.131.221	2020-05-14 04:05:56
106.12.196.237	attackbotsspam	" "	2020-05-14 03:42:59
115.159.93.67	attack	May 13 14:29:24 * sshd[19655]: Failed password for root from 115.159.93.67 port 33712 ssh2	2020-05-14 03:58:47

Recently Reported IPs

203.112.223.54	168.197.77.231	49.51.8.24	118.218.101.13
200.253.173.6	110.25.241.28	122.170.177.102	186.251.195.170
170.0.34.45	186.24.34.10	190.53.232.61	138.197.73.215
113.172.161.171	5.145.67.185	27.74.60.142	124.188.225.212
72.10.198.212	43.228.190.202	103.90.156.234	185.49.86.54