JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

103.242.199.76

Neutral Activity

Abuse Confidence Score

0% Low Risk

329 reports

135 reporters · latest 3 years ago

ISP: Alliance Broadband Services Pvt. Ltd.
Usage Type: Fixed Line ISP
ASN: AS23860
Domain Name: alliancekolkata.com
Country: 🇮🇳 India
City: Kolkata, West Bengal

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

103.242.199.76 has been reported 329 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

329 from 135 distinct reporters

First reported

February 15th 2023

Most recent report

3 years ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 CRSSkynet	2023-08-31 23:54:35 (3 years ago)	Aug 2 19:11:22 DVSwitch-GM0WUR sshd[11554]: Failed password for root from 103.242.199.76 port 42900 ssh2 ...	Brute-Force SSH
🇨🇳 ThreatBook.io	2023-08-03 22:18:53 (3 years ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/103.242.199.76	Brute-Force
🇳🇱 nikoladd	2023-08-03 05:15:33 (3 years ago)	Aug 3 08:05:39 server2 sshd\[16127\]: User root from 103.242.199.76 not allowed because not listed in AllowUsers Aug 3 08:10:12 server2 sshd\[16525\]: User root from 103.242.199.76 not allowed because not listed in AllowUsers Aug 3 08:11:33 server ... show more Aug 3 08:05:39 server2 sshd\[16127\]: User root from 103.242.199.76 not allowed because not listed in AllowUsers Aug 3 08:10:12 server2 sshd\[16525\]: User root from 103.242.199.76 not allowed because not listed in AllowUsers Aug 3 08:11:33 server2 sshd\[16658\]: User root from 103.242.199.76 not allowed because not listed in AllowUsers Aug 3 08:12:53 server2 sshd\[16766\]: User root from 103.242.199.76 not allowed because not listed in AllowUsers Aug 3 08:14:12 server2 sshd\[16910\]: User root from 103.242.199.76 not allowed because not listed in AllowUsers Aug 3 08:15:32 server2 sshd\[17215\]: User root from 103.242.199.76 not allowed because not listed in AllowUsers show less	Brute-Force
🇩🇪 fireiceage	2023-08-03 03:34:33 (3 years ago)	...	Brute-Force SSH
🇺🇸 bigscoots.com	2023-08-03 02:45:45 (3 years ago)	103.242.199.76 (IN/India/node-103-242-199-76.alliancebroadband.in), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Aug 2 21:44:22 10189 sshd[733]: pam_unix(sshd:auth): authen ... show more 103.242.199.76 (IN/India/node-103-242-199-76.alliancebroadband.in), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Aug 2 21:44:22 10189 sshd[733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.174.67.174 user=root Aug 2 21:44:23 10189 sshd[733]: Failed password for root from 103.174.67.174 port 33982 ssh2 Aug 2 21:43:29 10189 sshd[627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.233.224.64 user=root Aug 2 21:43:32 10189 sshd[627]: Failed password for root from 186.233.224.64 port 46532 ssh2 Aug 2 21:45:26 10189 sshd[845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.242.199.76 user=root IP Addresses Blocked: 103.174.67.174 (ID/Indonesia/-) 186.233.224.64 (BR/Brazil/-) show less	Brute-Force SSH
🇳🇱 Savvii	2023-08-03 02:24:05 (3 years ago)	20 attempts against mh-ssh on kubes-dev03	Brute-Force SSH
🇩🇪 ipcop.net	2023-08-03 02:02:54 (3 years ago)	Aug 3 03:52:38 temp-router-sip.merkur.local sshd[3627119]: Disconnected from authenticating user root 103.242.199.76 port 53708 [preauth] Aug 3 03:59:01 temp-router-sip.merkur.local sshd[3627736]: Disconnected from authenticating user root 103.242. ... show more Aug 3 03:52:38 temp-router-sip.merkur.local sshd[3627119]: Disconnected from authenticating user root 103.242.199.76 port 53708 [preauth] Aug 3 03:59:01 temp-router-sip.merkur.local sshd[3627736]: Disconnected from authenticating user root 103.242.199.76 port 53542 [preauth] Aug 3 04:00:17 temp-router-sip.merkur.local sshd[3627990]: Disconnected from authenticating user root 103.242.199.76 port 47816 [preauth] Aug 3 04:01:33 temp-router-sip.merkur.local sshd[3628104]: Disconnected from authenticating user root 103.242.199.76 port 42090 [preauth] Aug 3 04:02:53 temp-router-sip.merkur.local sshd[3628282]: Disconnected from authenticating user root 103.242.199.76 port 36372 [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2023-08-03 02:02:54 (3 years ago)	Aug 3 03:52:38 temp-router-sip.merkur.local sshd[3627119]: Disconnected from authenticating user root 103.242.199.76 port 53708 [preauth] Aug 3 03:59:01 temp-router-sip.merkur.local sshd[3627736]: Disconnected from authenticating user root 103.242. ... show more Aug 3 03:52:38 temp-router-sip.merkur.local sshd[3627119]: Disconnected from authenticating user root 103.242.199.76 port 53708 [preauth] Aug 3 03:59:01 temp-router-sip.merkur.local sshd[3627736]: Disconnected from authenticating user root 103.242.199.76 port 53542 [preauth] Aug 3 04:00:17 temp-router-sip.merkur.local sshd[3627990]: Disconnected from authenticating user root 103.242.199.76 port 47816 [preauth] Aug 3 04:01:33 temp-router-sip.merkur.local sshd[3628104]: Disconnected from authenticating user root 103.242.199.76 port 42090 [preauth] Aug 3 04:02:53 temp-router-sip.merkur.local sshd[3628282]: Disconnected from authenticating user root 103.242.199.76 port 36372 [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2023-08-03 02:02:54 (3 years ago)	Aug 3 03:52:38 temp-router-sip.merkur.local sshd[3627119]: Disconnected from authenticating user root 103.242.199.76 port 53708 [preauth] Aug 3 03:59:01 temp-router-sip.merkur.local sshd[3627736]: Disconnected from authenticating user root 103.242. ... show more Aug 3 03:52:38 temp-router-sip.merkur.local sshd[3627119]: Disconnected from authenticating user root 103.242.199.76 port 53708 [preauth] Aug 3 03:59:01 temp-router-sip.merkur.local sshd[3627736]: Disconnected from authenticating user root 103.242.199.76 port 53542 [preauth] Aug 3 04:00:17 temp-router-sip.merkur.local sshd[3627990]: Disconnected from authenticating user root 103.242.199.76 port 47816 [preauth] Aug 3 04:01:33 temp-router-sip.merkur.local sshd[3628104]: Disconnected from authenticating user root 103.242.199.76 port 42090 [preauth] Aug 3 04:02:53 temp-router-sip.merkur.local sshd[3628282]: Disconnected from authenticating user root 103.242.199.76 port 36372 [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2023-08-03 02:02:54 (3 years ago)	Aug 3 03:52:38 temp-router-sip.merkur.local sshd[3627119]: Disconnected from authenticating user root 103.242.199.76 port 53708 [preauth] Aug 3 03:59:01 temp-router-sip.merkur.local sshd[3627736]: Disconnected from authenticating user root 103.242. ... show more Aug 3 03:52:38 temp-router-sip.merkur.local sshd[3627119]: Disconnected from authenticating user root 103.242.199.76 port 53708 [preauth] Aug 3 03:59:01 temp-router-sip.merkur.local sshd[3627736]: Disconnected from authenticating user root 103.242.199.76 port 53542 [preauth] Aug 3 04:00:17 temp-router-sip.merkur.local sshd[3627990]: Disconnected from authenticating user root 103.242.199.76 port 47816 [preauth] Aug 3 04:01:33 temp-router-sip.merkur.local sshd[3628104]: Disconnected from authenticating user root 103.242.199.76 port 42090 [preauth] Aug 3 04:02:53 temp-router-sip.merkur.local sshd[3628282]: Disconnected from authenticating user root 103.242.199.76 port 36372 [preauth] show less	Brute-Force
🇺🇸 bigscoots.com	2023-08-03 02:00:06 (3 years ago)	103.242.199.76 (IN/India/node-103-242-199-76.alliancebroadband.in), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Aug 2 20:58:20 16303 sshd[5166]: pam_unix(sshd:auth): authe ... show more 103.242.199.76 (IN/India/node-103-242-199-76.alliancebroadband.in), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Aug 2 20:58:20 16303 sshd[5166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.242.199.76 user=root Aug 2 20:58:22 16303 sshd[5166]: Failed password for root from 103.242.199.76 port 50290 ssh2 Aug 2 20:53:48 16303 sshd[4854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.78.177.219 user=root Aug 2 20:53:50 16303 sshd[4854]: Failed password for root from 112.78.177.219 port 52500 ssh2 Aug 2 21:00:01 16303 sshd[5236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.242.199.76 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇧🇬 OHOST.BG	2023-08-03 01:16:52 (3 years ago)	Aug 3 04:13:07 ddosalerts sshd[23504]: Failed password for root from 103.242.199.76 port 53124 ssh2 Aug 3 04:15:41 ddosalerts sshd[23646]: Failed password for root from 103.242.199.76 port 52806 ssh2 ...	Brute-Force SSH
🇩🇪 luftwurzel	2023-08-03 01:08:25 (3 years ago)	Aug 3 03:08:25 mail sshd[1657194]: User root from 103.242.199.76 not allowed because not listed in AllowUsers ...	Brute-Force SSH
🇺🇸 amit177	2023-08-03 00:25:17 (3 years ago)		Brute-Force SSH
🇺🇸 bigscoots.com	2023-08-03 00:24:19 (3 years ago)	103.242.199.76 (IN/India/node-103-242-199-76.alliancebroadband.in), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Aug 2 19:23:46 15570 sshd[21670]: pam_unix(sshd:auth): auth ... show more 103.242.199.76 (IN/India/node-103-242-199-76.alliancebroadband.in), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Aug 2 19:23:46 15570 sshd[21670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.242.199.76 user=root Aug 2 19:23:48 15570 sshd[21670]: Failed password for root from 103.242.199.76 port 57438 ssh2 Aug 2 19:20:18 15570 sshd[21324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.242.199.76 user=root Aug 2 19:20:21 15570 sshd[21324]: Failed password for root from 103.242.199.76 port 48790 ssh2 Aug 2 19:24:15 15570 sshd[21748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.14.104 user=root IP Addresses Blocked: show less	Brute-Force SSH

Showing 1 to 15 of 329 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 194.180.49.38

🇧🇷 187.93.68.178

🇨🇳 180.76.98.88

🇨🇭 179.43.153.2

🇷🇺 178.217.44.80

🇨🇳 162.14.66.219

🇺🇸 138.68.247.166

🇳🇱 109.160.32.136

🇩🇪 93.152.221.164

🇩🇪 91.217.249.4

🇵🇹 37.189.223.36

🇺🇸 34.202.88.37

🇹🇼 123.58.205.100

🇮🇩 103.67.78.178

🇵🇱 83.168.110.67

🇲🇾 47.254.192.213

🇭🇰 43.132.173.44

🇧🇪 35.210.115.86

🇬🇧 31.14.254.91

🇺🇸 3.131.220.121