138.122.39.248

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.122.39.240	attackbots	Unauthorized SMTP/IMAP/POP3 connection attempt	2019-08-19 09:15:10
138.122.39.217	attackbotsspam	libpam_shield report: forced login attempt	2019-08-07 08:11:24
138.122.39.121	attackspam	Brute force attempt	2019-07-08 04:40:54
138.122.39.189	attack	Brute force SMTP login attempts.	2019-06-25 19:38:01
138.122.39.122	attackspam	failed_logins	2019-06-25 18:15:21
138.122.39.5	attackbotsspam	Unauthorized SMTP/IMAP/POP3 connection attempt	2019-06-24 01:55:18
138.122.39.172	attackspambots	SMTP-sasl brute force ...	2019-06-22 10:06:11

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.122.39.248
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64306
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.122.39.248.			IN	A

;; AUTHORITY SECTION:
.			172	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022000 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 20 21:28:40 CST 2022
;; MSG SIZE  rcvd: 107

Host info

248.39.122.138.in-addr.arpa domain name pointer 138-122-39-248.provedorm4net.com.br.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
248.39.122.138.in-addr.arpa	name = 138-122-39-248.provedorm4net.com.br.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
80.66.81.36	attack	Feb 14 02:58:36 relay postfix/smtpd\[20409\]: warning: unknown\[80.66.81.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 14 02:59:00 relay postfix/smtpd\[20409\]: warning: unknown\[80.66.81.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 14 03:01:22 relay postfix/smtpd\[22075\]: warning: unknown\[80.66.81.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 14 03:01:40 relay postfix/smtpd\[20409\]: warning: unknown\[80.66.81.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 14 03:06:52 relay postfix/smtpd\[21067\]: warning: unknown\[80.66.81.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-02-14 10:16:12
180.167.137.103	attack	$f2bV_matches	2020-02-14 10:33:18
190.96.233.141	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-14 10:41:37
172.64.138.28	attackspam	RUSSIAN SCAMMERS !	2020-02-14 10:08:20
93.174.93.195	attackspambots	93.174.93.195 was recorded 23 times by 12 hosts attempting to connect to the following ports: 40959,40958,40961. Incident counter (4h, 24h, all-time): 23, 158, 4731	2020-02-14 10:17:48
2.38.186.191	attackspam	Automatic report - Banned IP Access	2020-02-14 10:10:36
36.226.107.120	attack	$f2bV_matches	2020-02-14 10:19:08
92.50.240.150	attackbots	Unauthorised access (Feb 13) SRC=92.50.240.150 LEN=52 PREC=0x20 TTL=107 ID=30211 DF TCP DPT=445 WINDOW=63443 SYN	2020-02-14 10:13:00
51.77.211.94	attackspam	Feb 13 00:54:34 XXX sshd[9366]: Invalid user was from 51.77.211.94 port 45544	2020-02-14 10:37:35
45.143.221.41	attackbots	[2020-02-13 14:06:25] NOTICE[1148] chan_sip.c: Registration from '9000 ' failed for '45.143.221.41:52816' - Wrong password [2020-02-13 14:06:25] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-13T14:06:25.996-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="9000",SessionID="0x7fd82c895338",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.41/52816",Challenge="558e97ee",ReceivedChallenge="558e97ee",ReceivedHash="99ca1a4de7dda7d3a5cbf22fad9ab2bd" [2020-02-13 14:06:26] NOTICE[1148] chan_sip.c: Registration from '9000 ' failed for '45.143.221.41:44184' - Wrong password [2020-02-13 14:06:26] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-13T14:06:26.189-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="9000",SessionID="0x7fd82c5c3318",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45. ...	2020-02-14 10:31:23
200.195.171.74	attackspam	Feb 13 18:31:15 web1 sshd\[1880\]: Invalid user s1 from 200.195.171.74 Feb 13 18:31:15 web1 sshd\[1880\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.195.171.74 Feb 13 18:31:17 web1 sshd\[1880\]: Failed password for invalid user s1 from 200.195.171.74 port 57403 ssh2 Feb 13 18:32:52 web1 sshd\[2015\]: Invalid user rabbitmq from 200.195.171.74 Feb 13 18:32:52 web1 sshd\[2015\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.195.171.74	2020-02-14 13:01:08
129.211.99.128	attackspam	Invalid user home from 129.211.99.128 port 49580	2020-02-14 10:48:13
122.224.34.193	attackbots	20/2/13@14:06:37: FAIL: Alarm-Network address from=122.224.34.193 ...	2020-02-14 10:20:04
144.217.34.148	attackspam	144.217.34.148 was recorded 7 times by 7 hosts attempting to connect to the following ports: 5353. Incident counter (4h, 24h, all-time): 7, 40, 777	2020-02-14 10:10:24
49.114.143.90	attackspambots	$f2bV_matches_ltvn	2020-02-14 10:32:56

Recently Reported IPs

138.128.165.21	138.128.164.226	138.128.170.188	138.128.170.85
138.128.165.158	138.128.244.27	104.22.28.194	138.128.189.50
138.128.181.253	138.128.245.25	138.128.240.187	138.128.187.242
138.128.244.208	138.128.188.66	138.128.59.186	138.185.190.53
138.185.8.194	138.185.181.174	138.185.244.194	138.186.138.223