138.122.96.56 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.122.96.157	attackbots	Autoban 138.122.96.157 AUTH/CONNECT	2020-08-27 12:38:27
138.122.96.199	attackbotsspam	Aug 15 01:04:04 mail.srvfarm.net postfix/smtpd[910649]: warning: unknown[138.122.96.199]: SASL PLAIN authentication failed: Aug 15 01:04:05 mail.srvfarm.net postfix/smtpd[910649]: lost connection after AUTH from unknown[138.122.96.199] Aug 15 01:08:06 mail.srvfarm.net postfix/smtpd[928329]: warning: unknown[138.122.96.199]: SASL PLAIN authentication failed: Aug 15 01:08:06 mail.srvfarm.net postfix/smtpd[928329]: lost connection after AUTH from unknown[138.122.96.199] Aug 15 01:09:16 mail.srvfarm.net postfix/smtpd[928504]: warning: unknown[138.122.96.199]: SASL PLAIN authentication failed:	2020-08-15 15:58:56
138.122.96.251	attack	Aug 15 01:41:07 mail.srvfarm.net postfix/smtpd[929464]: warning: unknown[138.122.96.251]: SASL PLAIN authentication failed: Aug 15 01:41:07 mail.srvfarm.net postfix/smtpd[929464]: lost connection after AUTH from unknown[138.122.96.251] Aug 15 01:43:00 mail.srvfarm.net postfix/smtpd[929427]: warning: unknown[138.122.96.251]: SASL PLAIN authentication failed: Aug 15 01:43:00 mail.srvfarm.net postfix/smtpd[929427]: lost connection after AUTH from unknown[138.122.96.251] Aug 15 01:49:36 mail.srvfarm.net postfix/smtpd[947515]: warning: unknown[138.122.96.251]: SASL PLAIN authentication failed:	2020-08-15 13:50:27
138.122.96.140	attackspambots	Aug 15 02:28:12 mail.srvfarm.net postfix/smtpd[966773]: warning: unknown[138.122.96.140]: SASL PLAIN authentication failed: Aug 15 02:28:12 mail.srvfarm.net postfix/smtpd[966773]: lost connection after AUTH from unknown[138.122.96.140] Aug 15 02:28:47 mail.srvfarm.net postfix/smtps/smtpd[950235]: warning: unknown[138.122.96.140]: SASL PLAIN authentication failed: Aug 15 02:28:48 mail.srvfarm.net postfix/smtps/smtpd[950235]: lost connection after AUTH from unknown[138.122.96.140] Aug 15 02:35:23 mail.srvfarm.net postfix/smtpd[965952]: warning: unknown[138.122.96.140]: SASL PLAIN authentication failed:	2020-08-15 12:42:11
138.122.96.174	attackbotsspam	Unauthorized Brute Force Email Login Fail	2020-08-12 19:10:05
138.122.96.153	attackspambots	Jul 24 09:15:25 mail.srvfarm.net postfix/smtps/smtpd[2140090]: warning: unknown[138.122.96.153]: SASL PLAIN authentication failed: Jul 24 09:15:25 mail.srvfarm.net postfix/smtps/smtpd[2140090]: lost connection after AUTH from unknown[138.122.96.153] Jul 24 09:21:49 mail.srvfarm.net postfix/smtps/smtpd[2158141]: warning: unknown[138.122.96.153]: SASL PLAIN authentication failed: Jul 24 09:21:49 mail.srvfarm.net postfix/smtps/smtpd[2158141]: lost connection after AUTH from unknown[138.122.96.153] Jul 24 09:25:01 mail.srvfarm.net postfix/smtps/smtpd[2158496]: warning: unknown[138.122.96.153]: SASL PLAIN authentication failed:	2020-07-25 03:49:45
138.122.96.154	attackspam	SASL PLAIN auth failed: ruser=...	2020-07-17 07:12:18
138.122.96.153	attackspambots	SSH invalid-user multiple login try	2020-07-11 03:58:09
138.122.96.214	attackbots	Jun 16 05:35:23 mail.srvfarm.net postfix/smtpd[936015]: warning: unknown[138.122.96.214]: SASL PLAIN authentication failed: Jun 16 05:35:23 mail.srvfarm.net postfix/smtpd[936015]: lost connection after AUTH from unknown[138.122.96.214] Jun 16 05:35:59 mail.srvfarm.net postfix/smtps/smtpd[956592]: lost connection after CONNECT from unknown[138.122.96.214] Jun 16 05:44:10 mail.srvfarm.net postfix/smtps/smtpd[936251]: warning: unknown[138.122.96.214]: SASL PLAIN authentication failed: Jun 16 05:44:10 mail.srvfarm.net postfix/smtps/smtpd[936251]: lost connection after AUTH from unknown[138.122.96.214]	2020-06-16 15:34:48
138.122.96.197	attackspambots	Jun 5 18:41:13 mail.srvfarm.net postfix/smtps/smtpd[3177594]: warning: unknown[138.122.96.197]: SASL PLAIN authentication failed: Jun 5 18:41:13 mail.srvfarm.net postfix/smtps/smtpd[3177594]: lost connection after AUTH from unknown[138.122.96.197] Jun 5 18:42:30 mail.srvfarm.net postfix/smtps/smtpd[3177596]: warning: unknown[138.122.96.197]: SASL PLAIN authentication failed: Jun 5 18:42:30 mail.srvfarm.net postfix/smtps/smtpd[3177596]: lost connection after AUTH from unknown[138.122.96.197] Jun 5 18:47:38 mail.srvfarm.net postfix/smtps/smtpd[3177596]: warning: unknown[138.122.96.197]: SASL PLAIN authentication failed:	2020-06-07 23:36:50
138.122.96.80	attackbotsspam	2019-03-11 20:34:29 H=$\[138.122.96.80\]$ \[138.122.96.80\]:13237 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-03-11 20:34:35 H=$\[138.122.96.80\]$ \[138.122.96.80\]:13332 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-03-11 20:34:41 H=$\[138.122.96.80\]$ \[138.122.96.80\]:13398 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-02-05 01:21:49
138.122.96.125	attackspambots	Unauthorized connection attempt from IP address 138.122.96.125 on Port 445(SMB)	2019-11-15 23:25:13

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.122.96.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56547
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.122.96.56.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:24:59 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 56.96.122.138.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 56.96.122.138.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.175.212	attack	$f2bV_matches	2020-01-04 05:51:15
52.231.76.46	attackbotsspam	Triggered by Fail2Ban at Vostok web server	2020-01-04 06:11:25
187.16.39.70	attackspam	Caught in portsentry honeypot	2020-01-04 05:49:06
175.143.175.154	attack	firewall-block, port(s): 4567/tcp	2020-01-04 06:16:34
3.234.2.192	attackbotsspam	SSH bruteforce	2020-01-04 06:15:13
113.172.26.31	attackspam	Trying ports that it shouldn't be.	2020-01-04 06:07:40
13.80.102.105	attackspambots	Lines containing failures of 13.80.102.105 Jan 3 15:53:28 shared07 sshd[2177]: Invalid user nlgworldwide from 13.80.102.105 port 59380 Jan 3 15:53:28 shared07 sshd[2177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.80.102.105 Jan 3 15:53:31 shared07 sshd[2177]: Failed password for invalid user nlgworldwide from 13.80.102.105 port 59380 ssh2 Jan 3 15:53:31 shared07 sshd[2177]: Received disconnect from 13.80.102.105 port 59380:11: Bye Bye [preauth] Jan 3 15:53:31 shared07 sshd[2177]: Disconnected from invalid user nlgworldwide 13.80.102.105 port 59380 [preauth] Jan 3 15:53:31 shared07 sshd[2193]: Invalid user nlgworldwide from 13.80.102.105 port 59834 Jan 3 15:53:31 shared07 sshd[2193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.80.102.105 Jan 3 15:53:32 shared07 sshd[2193]: Failed password for invalid user nlgworldwide from 13.80.102.105 port 59834 ssh2 Jan 3 15:53:32 s........ ------------------------------	2020-01-04 05:58:23
111.42.37.234	attack	port scan and connect, tcp 1433 (ms-sql-s)	2020-01-04 05:52:11
139.155.118.138	attackbots	Jan 3 18:20:41 firewall sshd[31739]: Invalid user testing from 139.155.118.138 Jan 3 18:20:43 firewall sshd[31739]: Failed password for invalid user testing from 139.155.118.138 port 48532 ssh2 Jan 3 18:23:58 firewall sshd[31847]: Invalid user 2309 from 139.155.118.138 ...	2020-01-04 06:06:44
162.158.167.12	attack	Scan for word-press application/login	2020-01-04 06:05:21
222.186.15.166	attackbotsspam	2020-01-03T22:47:49.814848scmdmz1 sshd[22841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.166 user=root 2020-01-03T22:47:51.982680scmdmz1 sshd[22841]: Failed password for root from 222.186.15.166 port 26570 ssh2 2020-01-03T22:47:53.813375scmdmz1 sshd[22841]: Failed password for root from 222.186.15.166 port 26570 ssh2 2020-01-03T22:47:49.814848scmdmz1 sshd[22841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.166 user=root 2020-01-03T22:47:51.982680scmdmz1 sshd[22841]: Failed password for root from 222.186.15.166 port 26570 ssh2 2020-01-03T22:47:53.813375scmdmz1 sshd[22841]: Failed password for root from 222.186.15.166 port 26570 ssh2 2020-01-03T22:47:49.814848scmdmz1 sshd[22841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.166 user=root 2020-01-03T22:47:51.982680scmdmz1 sshd[22841]: Failed password for root from 222.186.15.166 port 26570 ssh2 2	2020-01-04 05:48:17
117.174.122.53	attackbots	...	2020-01-04 06:05:07
106.13.15.122	attackbots	Jan 3 22:21:32 legacy sshd[12081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.15.122 Jan 3 22:21:34 legacy sshd[12081]: Failed password for invalid user mysql from 106.13.15.122 port 56660 ssh2 Jan 3 22:24:25 legacy sshd[12221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.15.122 ...	2020-01-04 05:50:28
148.70.77.22	attack	Jan 3 22:49:04 legacy sshd[13420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.77.22 Jan 3 22:49:05 legacy sshd[13420]: Failed password for invalid user sample from 148.70.77.22 port 49478 ssh2 Jan 3 22:52:34 legacy sshd[13584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.77.22 ...	2020-01-04 06:02:01
163.44.150.139	attackbots	SSH authentication failure x 6 reported by Fail2Ban ...	2020-01-04 05:43:12

Recently Reported IPs

138.122.96.86	138.122.96.58	138.122.96.61	138.122.96.90
138.122.97.14	138.122.96.177	138.122.96.85	138.122.97.189
138.122.96.126	138.122.97.227	118.174.84.73	138.122.98.54
138.122.98.116	138.122.99.102	138.122.99.110	138.122.99.82
138.122.99.133	138.124.156.218	138.122.99.2	138.122.99.85