138.0.145.192 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: Internet o Sul Comercio e Servicos Ltda

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Brute force attempt	2019-07-25 05:23:54

Comments on same subnet:

IP	Type	Details	Datetime
138.0.145.90	attack	/wp-login.php	2020-06-22 04:31:50

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.0.145.192
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26246
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.0.145.192.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072401 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 25 05:23:48 CST 2019
;; MSG SIZE  rcvd: 117

Host info

192.145.0.138.in-addr.arpa domain name pointer 138.0.145.192.internetosul.com.br.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
192.145.0.138.in-addr.arpa	name = 138.0.145.192.internetosul.com.br.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
5.183.94.94	attackspam	[2020-09-27 09:48:43] NOTICE[1159] chan_sip.c: Registration from '' failed for '5.183.94.94:50799' - Wrong password [2020-09-27 09:48:43] SECURITY[1198] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-27T09:48:43.478-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="107",SessionID="0x7fcaa02d7a38",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.183.94.94/50799",Challenge="5d67580a",ReceivedChallenge="5d67580a",ReceivedHash="25b6f5ca9e4e08a1201dac066ffe8814" [2020-09-27 09:54:36] NOTICE[1159] chan_sip.c: Registration from '' failed for '5.183.94.94:56640' - Wrong password [2020-09-27 09:54:36] SECURITY[1198] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-27T09:54:36.676-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="963258",SessionID="0x7fcaa0022038",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.183.94.94/56640 ...	2020-09-27 21:55:49
45.143.223.118	attack	[2020-09-27 09:07:56] NOTICE[1159][C-000025df] chan_sip.c: Call from '' (45.143.223.118:55272) to extension '0046462607543' rejected because extension not found in context 'public'. [2020-09-27 09:07:56] SECURITY[1198] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-27T09:07:56.441-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="0046462607543",SessionID="0x7fcaa00dd368",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.223.118/55272",ACLName="no_extension_match" [2020-09-27 09:08:34] NOTICE[1159][C-000025e0] chan_sip.c: Call from '' (45.143.223.118:58549) to extension '01146462607543' rejected because extension not found in context 'public'. [2020-09-27 09:08:34] SECURITY[1198] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-27T09:08:34.285-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01146462607543",SessionID="0x7fcaa0022038",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45. ...	2020-09-27 21:25:43
212.64.35.193	attackbots	" "	2020-09-27 21:36:40
77.39.191.203	attackbots	445/tcp [2020-09-26]1pkt	2020-09-27 21:59:14
59.126.55.232	attackbotsspam	23/tcp 23/tcp [2020-09-24/26]2pkt	2020-09-27 21:30:18
64.225.106.12	attackspambots	scans once in preceeding hours on the ports (in chronological order) 22988 resulting in total of 2 scans from 64.225.0.0/17 block.	2020-09-27 21:36:02
89.72.253.167	attackbotsspam	Microsoft-Windows-Security-Auditing	2020-09-27 21:48:01
36.76.103.155	attackbots	445/tcp 445/tcp [2020-09-26]2pkt	2020-09-27 22:01:26
129.211.62.131	attack	Brute-force attempt banned	2020-09-27 21:32:55
129.226.112.181	attackbotsspam	TCP port : 22769	2020-09-27 22:01:14
201.131.180.215	attack	Brute force attempt	2020-09-27 21:47:19
61.99.208.42	attack	2020-09-27T12:57:05.295615abusebot-4.cloudsearch.cf sshd[2652]: Invalid user pi from 61.99.208.42 port 12164 2020-09-27T12:57:05.680279abusebot-4.cloudsearch.cf sshd[2653]: Invalid user pi from 61.99.208.42 port 59864 2020-09-27T12:57:05.532971abusebot-4.cloudsearch.cf sshd[2652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.99.208.42 2020-09-27T12:57:05.295615abusebot-4.cloudsearch.cf sshd[2652]: Invalid user pi from 61.99.208.42 port 12164 2020-09-27T12:57:07.080274abusebot-4.cloudsearch.cf sshd[2652]: Failed password for invalid user pi from 61.99.208.42 port 12164 ssh2 2020-09-27T12:57:05.982409abusebot-4.cloudsearch.cf sshd[2653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.99.208.42 2020-09-27T12:57:05.680279abusebot-4.cloudsearch.cf sshd[2653]: Invalid user pi from 61.99.208.42 port 59864 2020-09-27T12:57:07.529621abusebot-4.cloudsearch.cf sshd[2653]: Failed password for invalid user pi ...	2020-09-27 21:48:28
112.85.42.174	attack	Failed password for root from 112.85.42.174 port 13114 ssh2 Failed password for root from 112.85.42.174 port 13114 ssh2 Failed password for root from 112.85.42.174 port 13114 ssh2 Failed password for root from 112.85.42.174 port 13114 ssh2	2020-09-27 21:39:10
106.12.171.253	attackbotsspam	Sep 27 13:35:57 markkoudstaal sshd[6228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.171.253 Sep 27 13:36:00 markkoudstaal sshd[6228]: Failed password for invalid user s from 106.12.171.253 port 36354 ssh2 Sep 27 13:53:52 markkoudstaal sshd[11146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.171.253 ...	2020-09-27 21:53:13
192.241.220.248	attackspambots	TCP ports : 139 / 4200	2020-09-27 21:25:06

Recently Reported IPs

34.78.36.240	180.151.58.123	119.183.62.242	115.55.158.135
151.119.29.82	171.231.132.137	58.70.16.147	115.73.246.252
222.190.151.98	77.43.177.227	139.105.223.91	117.177.234.106
10.158.154.214	182.8.147.222	123.24.77.197	226.73.99.150
103.53.127.78	250.172.9.191	161.224.6.159	162.244.80.125