138.185.245.225

Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.185.245.45	attackbots	W 31101,/var/log/nginx/access.log,-,-	2020-06-17 18:16:11
138.185.245.61	attack	Automatic report - Port Scan Attack	2020-06-04 04:22:12
138.185.245.3	attack	Automatic report - Port Scan Attack	2020-05-20 21:12:53
138.185.245.86	attack	Unauthorized connection attempt detected from IP address 138.185.245.86 to port 80 [J]	2020-01-07 07:30:12
138.185.245.237	attackspambots	Automatic report - Port Scan Attack	2019-10-04 04:03:58

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.185.245.225
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28554
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.185.245.225.		IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:30:42 CST 2022
;; MSG SIZE  rcvd: 108

Host info

225.245.185.138.in-addr.arpa domain name pointer 138-185-245-225.pcnettelecom.com.br.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
225.245.185.138.in-addr.arpa	name = 138-185-245-225.pcnettelecom.com.br.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
190.85.145.162	attackspam	2020-06-13T06:08:15.013713sd-86998 sshd[37334]: Invalid user temp123 from 190.85.145.162 port 53494 2020-06-13T06:08:15.019178sd-86998 sshd[37334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.85.145.162 2020-06-13T06:08:15.013713sd-86998 sshd[37334]: Invalid user temp123 from 190.85.145.162 port 53494 2020-06-13T06:08:16.443451sd-86998 sshd[37334]: Failed password for invalid user temp123 from 190.85.145.162 port 53494 ssh2 2020-06-13T06:11:34.899531sd-86998 sshd[37726]: Invalid user xiewenjing from 190.85.145.162 port 39180 ...	2020-06-13 12:30:12
8.129.168.101	attackbots	[2020-06-12 20:55:39] NOTICE[1273] chan_sip.c: Registration from '' failed for '8.129.168.101:57344' - Wrong password [2020-06-12 20:55:39] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-12T20:55:39.424-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="0",SessionID="0x7f31c02f7128",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/8.129.168.101/57344",Challenge="76040892",ReceivedChallenge="76040892",ReceivedHash="23900618f7369264f402781647c45585" [2020-06-12 20:55:39] NOTICE[1273] chan_sip.c: Registration from '' failed for '8.129.168.101:57345' - Wrong password [2020-06-12 20:55:39] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-12T20:55:39.428-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="0",SessionID="0x7f31c03abf68",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/8.129.168.101/57345",Chal ...	2020-06-13 09:06:09
222.186.175.154	attack	Jun 13 06:11:07 minden010 sshd[14478]: Failed password for root from 222.186.175.154 port 50100 ssh2 Jun 13 06:11:11 minden010 sshd[14478]: Failed password for root from 222.186.175.154 port 50100 ssh2 Jun 13 06:11:13 minden010 sshd[14478]: Failed password for root from 222.186.175.154 port 50100 ssh2 Jun 13 06:11:17 minden010 sshd[14478]: Failed password for root from 222.186.175.154 port 50100 ssh2 ...	2020-06-13 12:13:50
103.46.128.61	attackspam	IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.	2020-06-13 12:31:14
95.91.226.190	attack	Fail2Ban Ban Triggered SMTP Abuse Attempt	2020-06-13 12:03:48
139.59.25.106	attackspam	Jun 13 06:11:26 rotator sshd\[2049\]: Failed password for root from 139.59.25.106 port 59080 ssh2Jun 13 06:11:36 rotator sshd\[2054\]: Failed password for root from 139.59.25.106 port 40990 ssh2Jun 13 06:11:44 rotator sshd\[2057\]: Invalid user admin from 139.59.25.106Jun 13 06:11:46 rotator sshd\[2057\]: Failed password for invalid user admin from 139.59.25.106 port 51172 ssh2Jun 13 06:11:52 rotator sshd\[2059\]: Invalid user fake from 139.59.25.106Jun 13 06:11:55 rotator sshd\[2059\]: Failed password for invalid user fake from 139.59.25.106 port 33114 ssh2 ...	2020-06-13 12:15:36
45.153.157.112	attack	Unauthorized access detected from black listed ip!	2020-06-13 12:14:44
222.186.30.76	attackspambots	Jun 13 04:06:44 rush sshd[21047]: Failed password for root from 222.186.30.76 port 30559 ssh2 Jun 13 04:06:55 rush sshd[21049]: Failed password for root from 222.186.30.76 port 57184 ssh2 ...	2020-06-13 12:10:59
165.227.70.23	attackbots	prod8 ...	2020-06-13 12:19:22
91.230.252.167	attack	2020-06-13T06:11:27.683921+02:00 lumpi kernel: [17311167.071512] INPUT:DROP:SPAMHAUS_DROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=91.230.252.167 DST=78.46.199.189 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=19665 DF PROTO=TCP SPT=60587 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ...	2020-06-13 12:38:07
23.231.13.164	attackbotsspam	Unauthorized access detected from black listed ip!	2020-06-13 12:12:31
132.145.242.238	attackbots	Jun 13 11:31:15 webhost01 sshd[24067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238 Jun 13 11:31:17 webhost01 sshd[24067]: Failed password for invalid user rkd from 132.145.242.238 port 33782 ssh2 ...	2020-06-13 12:33:01
114.26.58.251	attack	Fail2Ban Ban Triggered	2020-06-13 09:05:14
129.204.208.34	attackbots	Jun 13 06:03:50 vps333114 sshd[15531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.208.34 Jun 13 06:03:52 vps333114 sshd[15531]: Failed password for invalid user hobbit from 129.204.208.34 port 46868 ssh2 ...	2020-06-13 12:00:19
152.136.137.227	attack	$f2bV_matches	2020-06-13 12:30:25

Recently Reported IPs

138.185.245.227	118.175.170.64	138.185.245.241	138.185.245.246
138.185.245.252	138.185.245.248	138.185.245.38	138.185.245.28
138.185.245.251	138.185.245.31	138.185.245.41	138.185.245.44
118.175.170.66	138.185.245.27	138.185.245.5	138.185.245.63
138.185.245.60	138.185.245.51	138.185.245.57	138.185.245.52