Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Iwiny

Region: Lower Silesia

Country: Poland

Internet Service Provider: Pawel Kowalski BGCOM

Hostname: unknown

Organization: Pawel Kowalski BGCOM

Usage Type: Commercial

Comments:
Type Details Datetime
attack
Automatic report - Banned IP Access
2019-08-01 04:38:49
attack
Jul 27 18:03:42 ArkNodeAT sshd\[1028\]: Invalid user passwort from 83.142.138.2
Jul 27 18:03:42 ArkNodeAT sshd\[1028\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.142.138.2
Jul 27 18:03:44 ArkNodeAT sshd\[1028\]: Failed password for invalid user passwort from 83.142.138.2 port 60614 ssh2
2019-07-28 01:34:13
attackbotsspam
Jul 27 12:57:36 Proxmox sshd\[12763\]: User root from 83.142.138.2 not allowed because not listed in AllowUsers
Jul 27 12:57:36 Proxmox sshd\[12763\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.142.138.2  user=root
Jul 27 12:57:38 Proxmox sshd\[12763\]: Failed password for invalid user root from 83.142.138.2 port 55428 ssh2
Jul 27 13:02:10 Proxmox sshd\[17063\]: User root from 83.142.138.2 not allowed because not listed in AllowUsers
Jul 27 13:02:10 Proxmox sshd\[17063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.142.138.2  user=root
Jul 27 13:02:12 Proxmox sshd\[17063\]: Failed password for invalid user root from 83.142.138.2 port 50934 ssh2
2019-07-27 19:51:09
attackspam
Jul 26 23:29:36 mail sshd\[28414\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.142.138.2
Jul 26 23:29:39 mail sshd\[28414\]: Failed password for invalid user com from 83.142.138.2 port 38374 ssh2
Jul 26 23:34:04 mail sshd\[28985\]: Invalid user adonay123 from 83.142.138.2 port 34340
Jul 26 23:34:04 mail sshd\[28985\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.142.138.2
Jul 26 23:34:06 mail sshd\[28985\]: Failed password for invalid user adonay123 from 83.142.138.2 port 34340 ssh2
2019-07-27 05:45:42
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 83.142.138.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52587
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;83.142.138.2.			IN	A

;; AUTHORITY SECTION:
.			1084	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072602 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jul 27 05:45:37 CST 2019
;; MSG SIZE  rcvd: 116
Host info
2.138.142.83.in-addr.arpa domain name pointer 83.142.138.2.static.telsat.wroc.pl.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
2.138.142.83.in-addr.arpa	name = 83.142.138.2.static.telsat.wroc.pl.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
180.251.105.205 attackspambots
20/8/29@03:31:41: FAIL: Alarm-Network address from=180.251.105.205
20/8/29@03:31:41: FAIL: Alarm-Network address from=180.251.105.205
...
2020-08-29 18:57:05
113.179.164.184 attackbotsspam
445/tcp
[2020-08-29]1pkt
2020-08-29 18:39:38
184.105.139.118 attack
srv02 Mass scanning activity detected Target: 23(telnet) ..
2020-08-29 18:56:02
51.158.107.168 attackspam
Aug 29 12:12:48 marvibiene sshd[17609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.107.168 
Aug 29 12:12:49 marvibiene sshd[17609]: Failed password for invalid user tx from 51.158.107.168 port 58918 ssh2
2020-08-29 18:52:31
68.183.234.7 attackspam
Port 22 Scan, PTR: None
2020-08-29 19:03:55
49.234.127.168 attackspambots
Failed password for invalid user lxl from 49.234.127.168 port 39026 ssh2
2020-08-29 19:15:33
159.65.86.239 attackspambots
(sshd) Failed SSH login from 159.65.86.239 (GB/United Kingdom/-): 10 in the last 3600 secs
2020-08-29 18:37:15
68.183.12.80 attackbots
Aug 29 05:44:04 ip-172-31-16-56 sshd\[17196\]: Invalid user school from 68.183.12.80\
Aug 29 05:44:06 ip-172-31-16-56 sshd\[17196\]: Failed password for invalid user school from 68.183.12.80 port 35382 ssh2\
Aug 29 05:48:04 ip-172-31-16-56 sshd\[17219\]: Invalid user service from 68.183.12.80\
Aug 29 05:48:05 ip-172-31-16-56 sshd\[17219\]: Failed password for invalid user service from 68.183.12.80 port 43990 ssh2\
Aug 29 05:52:00 ip-172-31-16-56 sshd\[17275\]: Invalid user jr from 68.183.12.80\
2020-08-29 19:14:40
62.149.29.136 attackbots
Icarus honeypot on github
2020-08-29 18:41:25
87.170.34.23 attackbots
$f2bV_matches
2020-08-29 19:03:10
167.71.209.2 attack
Invalid user id from 167.71.209.2 port 40556
2020-08-29 18:47:27
198.12.253.103 attack
SSH Brute-Force reported by Fail2Ban
2020-08-29 19:10:14
114.67.171.58 attackspambots
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-29T08:38:35Z and 2020-08-29T08:43:53Z
2020-08-29 19:13:18
161.35.61.27 attack
TCP port : 27017
2020-08-29 18:36:54
102.36.164.141 attackbotsspam
2020-08-29T05:30:54.155497abusebot.cloudsearch.cf sshd[18062]: Invalid user admin from 102.36.164.141 port 56224
2020-08-29T05:30:54.160504abusebot.cloudsearch.cf sshd[18062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.36.164.141
2020-08-29T05:30:54.155497abusebot.cloudsearch.cf sshd[18062]: Invalid user admin from 102.36.164.141 port 56224
2020-08-29T05:30:56.274094abusebot.cloudsearch.cf sshd[18062]: Failed password for invalid user admin from 102.36.164.141 port 56224 ssh2
2020-08-29T05:32:49.792397abusebot.cloudsearch.cf sshd[18075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.36.164.141  user=root
2020-08-29T05:32:51.695017abusebot.cloudsearch.cf sshd[18075]: Failed password for root from 102.36.164.141 port 54764 ssh2
2020-08-29T05:34:41.915679abusebot.cloudsearch.cf sshd[18079]: Invalid user vlv from 102.36.164.141 port 52466
...
2020-08-29 19:01:04

Recently Reported IPs

211.20.91.53 113.77.249.178 192.3.138.210 78.191.56.110
5.114.6.131 219.208.36.170 138.44.36.240 14.86.157.105
93.42.182.192 169.55.234.152 84.108.56.229 64.49.2.158
36.234.197.11 101.32.144.23 178.207.0.176 59.120.180.76
220.101.27.108 111.52.120.137 23.94.149.146 123.18.12.189