138.201.2.124 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.201.2.53	attackspam	Invalid user yoneda from 138.201.2.53 port 57962	2020-10-14 01:17:36
138.201.2.53	attack	SSH login attempts.	2020-10-13 16:27:59
138.201.2.53	attackspam	2020-10-12T21:38:57.751645shield sshd\[5350\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.53.2.201.138.clients.your-server.de user=root 2020-10-12T21:39:00.137380shield sshd\[5350\]: Failed password for root from 138.201.2.53 port 55694 ssh2 2020-10-12T21:43:54.589124shield sshd\[6195\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.53.2.201.138.clients.your-server.de user=root 2020-10-12T21:43:56.068061shield sshd\[6195\]: Failed password for root from 138.201.2.53 port 57360 ssh2 2020-10-12T21:48:40.551136shield sshd\[7144\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.53.2.201.138.clients.your-server.de user=root	2020-10-13 09:00:14
138.201.245.106	attackbotsspam	2020-10-08T04:27:49.006296hostname sshd[59806]: Failed password for root from 138.201.245.106 port 35910 ssh2 ...	2020-10-09 03:33:42
138.201.245.106	attack	Oct 7 20:13:13 pl3server sshd[9540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.245.106 user=r.r Oct 7 20:13:15 pl3server sshd[9540]: Failed password for r.r from 138.201.245.106 port 53814 ssh2 Oct 7 20:13:15 pl3server sshd[9540]: Received disconnect from 138.201.245.106 port 53814:11: Bye Bye [preauth] Oct 7 20:13:15 pl3server sshd[9540]: Disconnected from 138.201.245.106 port 53814 [preauth] Oct 7 20:29:03 pl3server sshd[15871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.245.106 user=r.r Oct 7 20:29:05 pl3server sshd[15871]: Failed password for r.r from 138.201.245.106 port 50608 ssh2 Oct 7 20:29:06 pl3server sshd[15871]: Received disconnect from 138.201.245.106 port 50608:11: Bye Bye [preauth] Oct 7 20:29:06 pl3server sshd[15871]: Disconnected from 138.201.245.106 port 50608 [preauth] Oct 7 20:32:27 pl3server sshd[17292]: pam_unix(sshd:auth): authenti........ -------------------------------	2020-10-08 19:39:10
138.201.2.53	attack	2020-10-07T19:56:37.449534dmca.cloudsearch.cf sshd[3326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.53.2.201.138.clients.your-server.de user=root 2020-10-07T19:56:39.160941dmca.cloudsearch.cf sshd[3326]: Failed password for root from 138.201.2.53 port 37510 ssh2 2020-10-07T19:59:53.481579dmca.cloudsearch.cf sshd[3343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.53.2.201.138.clients.your-server.de user=root 2020-10-07T19:59:55.434143dmca.cloudsearch.cf sshd[3343]: Failed password for root from 138.201.2.53 port 44564 ssh2 2020-10-07T20:03:03.260950dmca.cloudsearch.cf sshd[3394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.53.2.201.138.clients.your-server.de user=root 2020-10-07T20:03:05.297706dmca.cloudsearch.cf sshd[3394]: Failed password for root from 138.201.2.53 port 51626 ssh2 2020-10-07T20:06:01.951612dmca.cloudsearch.cf ssh ...	2020-10-08 05:17:00
138.201.2.53	attack	138.201.2.53 (DE/Germany/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 7 09:34:08 server4 sshd[8055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.167.240.210 user=root Oct 7 09:34:34 server4 sshd[8475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.53.227.180 user=root Oct 7 09:34:36 server4 sshd[8475]: Failed password for root from 120.53.227.180 port 57810 ssh2 Oct 7 09:36:16 server4 sshd[9357]: Failed password for root from 51.254.114.105 port 52765 ssh2 Oct 7 09:31:55 server4 sshd[6694]: Failed password for root from 138.201.2.53 port 59436 ssh2 Oct 7 09:34:09 server4 sshd[8055]: Failed password for root from 180.167.240.210 port 51826 ssh2 IP Addresses Blocked: 180.167.240.210 (CN/China/-) 120.53.227.180 (CN/China/-) 51.254.114.105 (FR/France/-)	2020-10-07 21:40:50
138.201.2.53	attackspambots	Lines containing failures of 138.201.2.53 Oct 6 01:09:38 shared07 sshd[12937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.2.53 user=r.r Oct 6 01:09:40 shared07 sshd[12937]: Failed password for r.r from 138.201.2.53 port 37592 ssh2 Oct 6 01:09:40 shared07 sshd[12937]: Received disconnect from 138.201.2.53 port 37592:11: Bye Bye [preauth] Oct 6 01:09:40 shared07 sshd[12937]: Disconnected from authenticating user r.r 138.201.2.53 port 37592 [preauth] Oct 6 01:24:52 shared07 sshd[18990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.2.53 user=r.r Oct 6 01:24:54 shared07 sshd[18990]: Failed password for r.r from 138.201.2.53 port 49958 ssh2 Oct 6 01:24:54 shared07 sshd[18990]: Received disconnect from 138.201.2.53 port 49958:11: Bye Bye [preauth] Oct 6 01:24:54 shared07 sshd[18990]: Disconnected from authenticating user r.r 138.201.2.53 port 49958 [preauth] Oct 6 ........ ------------------------------	2020-10-07 13:27:20
138.201.200.50	attackspam	15.09.2020 18:58:25 - Bad Robot Ignore Robots.txt	2020-09-17 00:12:59
138.201.200.50	attackbotsspam	15.09.2020 18:58:25 - Bad Robot Ignore Robots.txt	2020-09-16 16:29:55
138.201.223.200	attackspambots	Detected by ModSecurity. Request URI: /wp-login.php	2020-08-21 05:48:42
138.201.207.106	attackspambots	Automatic report - Port Scan Attack	2020-03-12 03:31:36
138.201.21.124	attackbotsspam	suspicious action Tue, 10 Mar 2020 15:10:37 -0300	2020-03-11 08:23:31
138.201.251.170	attackbots	3x Failed Password	2020-01-27 13:11:12
138.201.254.88	spambotsattackproxynormal	Log	2019-12-19 22:29:42

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.201.2.124
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18132
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.201.2.124.			IN	A

;; AUTHORITY SECTION:
.			233	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:37:51 CST 2022
;; MSG SIZE  rcvd: 106

Host info

124.2.201.138.in-addr.arpa domain name pointer serverp2.kingdomain.de.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
124.2.201.138.in-addr.arpa	name = serverp2.kingdomain.de.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
49.234.87.24	attackbotsspam	Brute%20Force%20SSH	2020-09-28 04:42:53
51.116.182.194	attackbots	Sep 27 11:06:23 main sshd[28480]: Failed password for invalid user 18.130.222.225 from 51.116.182.194 port 37444 ssh2 Sep 27 13:12:49 main sshd[30002]: Failed password for invalid user 125 from 51.116.182.194 port 25217 ssh2	2020-09-28 04:57:52
190.4.16.86	attackbots	TCP (SYN) 190.4.16.86:38363 -> port 8080, len 40	2020-09-28 04:48:53
123.31.27.102	attackspambots	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-27T20:44:53Z and 2020-09-27T20:53:02Z	2020-09-28 05:01:08
192.35.168.72	attack	5984/tcp 5902/tcp 9200/tcp... [2020-07-31/09-26]15pkt,15pt.(tcp)	2020-09-28 05:04:33
5.62.20.22	attack	0,59-02/04 [bc00/m59] PostRequest-Spammer scoring: lisboa	2020-09-28 05:02:38
83.136.114.154	attackbotsspam	20/9/26@17:47:29: FAIL: Alarm-Intrusion address from=83.136.114.154 ...	2020-09-28 04:46:37
192.35.169.24	attackspambots	Found on Alienvault / proto=6 . srcport=19218 . dstport=5984 . (2545)	2020-09-28 04:52:14
192.144.218.101	attackbotsspam	Triggered by Fail2Ban at Ares web server	2020-09-28 05:10:15
77.37.162.17	attackbots	SSH Bruteforce attack	2020-09-28 04:50:32
45.143.223.118	attack	[2020-09-27 16:45:30] NOTICE[1159][C-000027e8] chan_sip.c: Call from '' (45.143.223.118:51541) to extension '0046462607543' rejected because extension not found in context 'public'. [2020-09-27 16:45:30] SECURITY[1198] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-27T16:45:30.003-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="0046462607543",SessionID="0x7fcaa02d7a38",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.223.118/51541",ACLName="no_extension_match" [2020-09-27 16:46:06] NOTICE[1159][C-000027e9] chan_sip.c: Call from '' (45.143.223.118:54795) to extension '01146462607543' rejected because extension not found in context 'public'. [2020-09-27 16:46:06] SECURITY[1198] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-27T16:46:06.926-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01146462607543",SessionID="0x7fcaa02d7a38",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45. ...	2020-09-28 05:07:18
157.245.108.35	attackbots	Sep 27 20:31:16 pve1 sshd[18231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.108.35 Sep 27 20:31:18 pve1 sshd[18231]: Failed password for invalid user tecnico from 157.245.108.35 port 35378 ssh2 ...	2020-09-28 05:00:23
191.5.97.175	attackbotsspam	Sep 26 22:39:19 ns382633 sshd\[32734\]: Invalid user admin from 191.5.97.175 port 58574 Sep 26 22:39:19 ns382633 sshd\[32734\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.5.97.175 Sep 26 22:39:21 ns382633 sshd\[32734\]: Failed password for invalid user admin from 191.5.97.175 port 58574 ssh2 Sep 26 22:39:26 ns382633 sshd\[32738\]: Invalid user admin from 191.5.97.175 port 58590 Sep 26 22:39:27 ns382633 sshd\[32738\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.5.97.175	2020-09-28 04:58:16
194.61.24.102	attackspambots	$f2bV_matches	2020-09-28 04:46:55
61.49.49.22	attack	TCP (SYN) 61.49.49.22:5828 -> port 23, len 44	2020-09-28 04:49:20

Recently Reported IPs

138.201.2.1	138.201.2.122	118.175.206.3	138.201.2.126
118.175.206.32	138.201.2.204	138.201.20.165	138.201.20.151
138.201.20.208	138.201.20.3	138.201.20.22	138.201.20.5
138.201.200.158	138.201.200.61	138.201.201.131	138.201.201.196
118.175.206.46	138.201.201.239	138.201.201.40	138.201.202.206