138.204.11.155

Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.204.112.131	attackbotsspam	1596532826 - 08/04/2020 11:20:26 Host: 138.204.112.131/138.204.112.131 Port: 23 TCP Blocked ...	2020-08-05 00:46:35
138.204.111.146	attackspambots	TCP src-port=60850 dst-port=25 Listed on abuseat-org barracuda spamcop (Project Honey Pot rated Suspicious) (141)	2020-06-29 21:47:28
138.204.111.77	attackbotsspam	TCP src-port=42894 dst-port=25 Listed on dnsbl-sorbs abuseat-org barracuda (Project Honey Pot rated Suspicious) (143)	2020-06-29 21:35:30
138.204.111.77	attack	TCP src-port=43074 dst-port=25 Listed on abuseat-org barracuda spamcop (Project Honey Pot rated Suspicious) (214)	2020-05-05 00:10:10
138.204.112.133	attackbots	unauthorized connection attempt	2020-01-17 14:20:50
138.204.112.132	attackspam	Unauthorized connection attempt detected from IP address 138.204.112.132 to port 23	2019-12-29 16:37:56

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.204.11.155
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45140
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.204.11.155.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021500 1800 900 604800 86400

;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 18:40:51 CST 2025
;; MSG SIZE  rcvd: 107

Host info

155.11.204.138.in-addr.arpa domain name pointer 138.204.11.155.megaprovedores.net.br.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
155.11.204.138.in-addr.arpa	name = 138.204.11.155.megaprovedores.net.br.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
178.32.47.218	attack	Attempts to probe for or exploit a Drupal site on url: /user/register. Reported by the module https://www.drupal.org/project/abuseipdb.	2020-05-30 19:51:54
218.78.81.207	attack	May 30 10:18:45 ip-172-31-61-156 sshd[2593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.81.207 user=root May 30 10:18:47 ip-172-31-61-156 sshd[2593]: Failed password for root from 218.78.81.207 port 43974 ssh2 May 30 10:18:45 ip-172-31-61-156 sshd[2593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.81.207 user=root May 30 10:18:47 ip-172-31-61-156 sshd[2593]: Failed password for root from 218.78.81.207 port 43974 ssh2 May 30 10:20:52 ip-172-31-61-156 sshd[2687]: Invalid user postgres from 218.78.81.207 ...	2020-05-30 20:15:28
61.16.138.118	attack	2020-05-30T10:39:23.481934abusebot-3.cloudsearch.cf sshd[31447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.16.138.118 user=root 2020-05-30T10:39:24.976068abusebot-3.cloudsearch.cf sshd[31447]: Failed password for root from 61.16.138.118 port 58772 ssh2 2020-05-30T10:42:02.817643abusebot-3.cloudsearch.cf sshd[31681]: Invalid user guest from 61.16.138.118 port 53808 2020-05-30T10:42:02.825511abusebot-3.cloudsearch.cf sshd[31681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.16.138.118 2020-05-30T10:42:02.817643abusebot-3.cloudsearch.cf sshd[31681]: Invalid user guest from 61.16.138.118 port 53808 2020-05-30T10:42:04.480188abusebot-3.cloudsearch.cf sshd[31681]: Failed password for invalid user guest from 61.16.138.118 port 53808 ssh2 2020-05-30T10:43:36.946434abusebot-3.cloudsearch.cf sshd[31762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.16.138. ...	2020-05-30 20:03:55
107.150.33.194	attackspambots	SMB Server BruteForce Attack	2020-05-30 20:10:07
49.233.128.229	attackbotsspam	May 30 11:39:09 host sshd[16853]: Invalid user dan from 49.233.128.229 port 58344 ...	2020-05-30 20:03:43
134.209.236.191	attack	frenzy	2020-05-30 20:03:22
81.14.182.98	attackspam	May 30 12:20:11 mail postfix/smtpd\[23897\]: warning: unknown\[81.14.182.98\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ May 30 12:53:58 mail postfix/smtpd\[24732\]: warning: unknown\[81.14.182.98\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ May 30 12:58:12 mail postfix/smtpd\[25262\]: warning: unknown\[81.14.182.98\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ May 30 13:02:24 mail postfix/smtpd\[25262\]: warning: unknown\[81.14.182.98\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\	2020-05-30 19:54:15
23.100.105.121	attack	Unauthorized connection attempt detected from IP address 23.100.105.121 to port 23 [T]	2020-05-30 19:37:19
185.147.215.14	attackspam	[2020-05-30 06:50:44] NOTICE[1157] chan_sip.c: Registration from '' failed for '185.147.215.14:52756' - Wrong password [2020-05-30 06:50:44] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-30T06:50:44.552-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="34",SessionID="0x7f5f10787a08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.14/52756",Challenge="61364072",ReceivedChallenge="61364072",ReceivedHash="5bb95bc4fc12299dc774d77be995e463" [2020-05-30 06:51:11] NOTICE[1157] chan_sip.c: Registration from '' failed for '185.147.215.14:61179' - Wrong password [2020-05-30 06:51:11] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-30T06:51:11.004-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="35",SessionID="0x7f5f1039ca78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.14/611 ...	2020-05-30 19:58:22
188.173.97.144	attackbots	May 30 13:34:30 minden010 sshd[31461]: Failed password for root from 188.173.97.144 port 46208 ssh2 May 30 13:38:27 minden010 sshd[1008]: Failed password for root from 188.173.97.144 port 51648 ssh2 ...	2020-05-30 19:53:56
36.155.113.199	attack	May 30 08:45:00 firewall sshd[29010]: Failed password for invalid user adfexc from 36.155.113.199 port 46118 ssh2 May 30 08:48:30 firewall sshd[29123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.155.113.199 user=root May 30 08:48:33 firewall sshd[29123]: Failed password for root from 36.155.113.199 port 35187 ssh2 ...	2020-05-30 19:53:10
86.150.234.135	attackbots	Attempted to connect 2 times to port 80 TCP	2020-05-30 19:39:36
201.69.252.54	attackbots	Invalid user www from 201.69.252.54 port 53022	2020-05-30 20:00:37
185.175.93.3	attackbotsspam	ET DROP Dshield Block Listed Source group 1 - port: 46635 proto: TCP cat: Misc Attack	2020-05-30 20:14:54
45.141.84.44	attackspambots	May 30 13:23:39 debian-2gb-nbg1-2 kernel: \[13096599.939660\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.141.84.44 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=2221 PROTO=TCP SPT=51478 DPT=7948 WINDOW=1024 RES=0x00 SYN URGP=0	2020-05-30 19:42:44

Recently Reported IPs

25.230.136.15	25.246.103.224	76.157.89.6	151.46.228.241
152.111.239.195	35.217.90.148	163.217.74.41	149.214.235.204
63.7.212.45	54.49.243.0	73.90.6.169	34.48.237.42
74.24.234.130	219.106.77.121	166.140.128.240	244.74.132.162
3.238.211.172	249.225.26.207	210.250.28.229	79.191.209.70