82.200.80.118 - IPInfo

Basic Info

City: Mezhdurechensk

Region: Kemerovo Oblast

Country: Russia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
82.200.80.46	attack	1598269816 - 08/24/2020 13:50:16 Host: 82.200.80.46/82.200.80.46 Port: 445 TCP Blocked	2020-08-24 23:03:14
82.200.80.46	attackspam	Unauthorized connection attempt from IP address 82.200.80.46 on Port 445(SMB)	2020-06-23 03:35:51
82.200.80.46	attackbotsspam	Unauthorized connection attempt detected from IP address 82.200.80.46 to port 445	2020-04-20 14:13:20
82.200.80.46	attack	Honeypot attack, port: 445, PTR: gw-td-kiprino.ll-bar.zsttk.ru.	2020-03-25 23:16:36
82.200.80.46	attackbotsspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-12 03:41:55,038 INFO [amun_request_handler] PortScan Detected on Port: 445 (82.200.80.46)	2019-09-12 15:11:09
82.200.80.46	attack	Port Scan: TCP/445	2019-09-03 03:07:33

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 82.200.80.118
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6327
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;82.200.80.118.			IN	A

;; AUTHORITY SECTION:
.			310	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022061901 1800 900 604800 86400

;; Query time: 51 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jun 20 15:51:50 CST 2022
;; MSG SIZE  rcvd: 106

Host info

118.80.200.82.in-addr.arpa domain name pointer gw-ajj-ti-servis.ll-bar.zsttk.ru.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
118.80.200.82.in-addr.arpa	name = gw-ajj-ti-servis.ll-bar.zsttk.ru.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
43.249.113.243	attackspam	failed attempts to access the website, searching for vulnerabilities, also using following IPs: 27.37.246.129 , 94.231.218.223 , 116.90.237.125 , 190.235.214.78 , 190.98.53.86 , 45.170.129.135 , 170.239.242.222 , 43.249.113.243 , 103.140.4.87 , 171.103.190.158 , 72.210.252.135	2020-09-06 15:53:49
106.8.166.34	attackbotsspam	2020-08-31 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=106.8.166.34	2020-09-06 15:53:24
213.49.57.234	attack	Port Scan detected! ...	2020-09-06 15:48:25
103.111.196.18	attackspam	20/9/5@12:47:31: FAIL: Alarm-Network address from=103.111.196.18 ...	2020-09-06 15:56:50
95.173.161.167	attack	95.173.161.167 - - [06/Sep/2020:08:04:35 +0100] "POST /wp-login.php HTTP/1.1" 200 1948 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 95.173.161.167 - - [06/Sep/2020:08:04:38 +0100] "POST /wp-login.php HTTP/1.1" 200 1890 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 95.173.161.167 - - [06/Sep/2020:08:04:40 +0100] "POST /wp-login.php HTTP/1.1" 200 1887 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-06 15:26:10
178.32.163.202	attack	Sep 6 09:25:49 sso sshd[17385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.32.163.202 Sep 6 09:25:51 sso sshd[17385]: Failed password for invalid user andres from 178.32.163.202 port 51816 ssh2 ...	2020-09-06 15:40:18
104.244.75.157	attackspambots	SSH Login Bruteforce	2020-09-06 15:30:59
218.92.0.192	attackbots	Sep 6 06:32:57 srv-ubuntu-dev3 sshd[94006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.192 user=root Sep 6 06:32:59 srv-ubuntu-dev3 sshd[94006]: Failed password for root from 218.92.0.192 port 55676 ssh2 Sep 6 06:33:02 srv-ubuntu-dev3 sshd[94006]: Failed password for root from 218.92.0.192 port 55676 ssh2 Sep 6 06:32:57 srv-ubuntu-dev3 sshd[94006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.192 user=root Sep 6 06:32:59 srv-ubuntu-dev3 sshd[94006]: Failed password for root from 218.92.0.192 port 55676 ssh2 Sep 6 06:33:02 srv-ubuntu-dev3 sshd[94006]: Failed password for root from 218.92.0.192 port 55676 ssh2 Sep 6 06:32:57 srv-ubuntu-dev3 sshd[94006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.192 user=root Sep 6 06:32:59 srv-ubuntu-dev3 sshd[94006]: Failed password for root from 218.92.0.192 port 55676 ssh2 Sep 6 06 ...	2020-09-06 15:36:52
150.147.166.181	attack	TCP (SYN) 150.147.166.181:25191 -> port 23, len 44	2020-09-06 15:55:24
138.36.202.237	attackbotsspam	Brute force attempt	2020-09-06 15:57:52
192.241.227.114	attackspam	firewall-block, port(s): 5223/tcp	2020-09-06 15:37:13
2a01:4f8:c17:8ad7::1	attackbots	xmlrpc attack	2020-09-06 15:50:37
189.126.95.27	attack	DATE:2020-09-05 18:48:26, IP:189.126.95.27, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)	2020-09-06 15:23:10
185.34.183.16	attack	1599324449 - 09/05/2020 18:47:29 Host: 185.34.183.16/185.34.183.16 Port: 445 TCP Blocked	2020-09-06 15:58:40
123.14.93.226	attack	Aug 31 14:59:14 our-server-hostname postfix/smtpd[30984]: connect from unknown[123.14.93.226] Aug 31 14:59:16 our-server-hostname postfix/smtpd[30984]: NOQUEUE: reject: RCPT from unknown[123.14.93.226]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo= Aug 31 14:59:16 our-server-hostname postfix/smtpd[30984]: disconnect from unknown[123.14.93.226] Aug 31 14:59:16 our-server-hostname postfix/smtpd[31359]: connect from unknown[123.14.93.226] Aug 31 14:59:18 our-server-hostname postfix/smtpd[31359]: NOQUEUE: reject: RCPT from unknown[123.14.93.226]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo= Aug 31 14:59:18 our-server-hostname postfix/smtpd[31359]: disconnect from unknown[123.14.93.226] Aug 31 15:00:21 our-server-hostname postfix/smtpd[755]: connect from unknown[123.14.93.226] Aug 31 15:00:22 our-server-hostname postfix/smtpd[755]: NOQUEUE: reject: RCPT from unknown[123.14......... -------------------------------	2020-09-06 15:41:17

Recently Reported IPs

223.206.66.210	137.226.1.76	178.34.180.120	43.225.54.207
137.226.3.11	137.226.3.24	185.191.34.200	47.99.133.26
83.137.158.7	5.167.65.95	5.167.64.189	181.204.44.235
137.226.3.16	124.122.1.54	114.107.248.203	137.226.1.187
137.226.0.186	171.5.132.153	5.167.64.203	137.226.1.6