138.204.69.148

Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: Wantel Tecnologia Ltda. Epp

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Tried our host z.	2020-06-28 16:57:51

Comments on same subnet:

IP	Type	Details	Datetime
138.204.69.117	attackbotsspam	IP 138.204.69.117 attacked honeypot on port: 1433 at 8/23/2020 8:52:21 PM	2020-08-24 16:05:16
138.204.69.83	attackbotsspam	Unauthorized connection attempt detected from IP address 138.204.69.83 to port 8000	2020-06-22 07:29:27
138.204.69.83	attackspam	IP 138.204.69.83 attacked honeypot on port: 88 at 6/16/2020 1:47:55 PM	2020-06-17 05:33:07

Type

Details

Datetime

138.204.69.117

attackbotsspam

IP 138.204.69.117 attacked honeypot on port: 1433 at 8/23/2020 8:52:21 PM

2020-08-24 16:05:16

138.204.69.83

attackbotsspam

Unauthorized connection attempt detected from IP address 138.204.69.83 to port 8000

2020-06-22 07:29:27

138.204.69.83

attackspam

IP 138.204.69.83 attacked honeypot on port: 88 at 6/16/2020 1:47:55 PM

2020-06-17 05:33:07

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.204.69.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63451
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.204.69.148.			IN	A

;; AUTHORITY SECTION:
.			498	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020062800 1800 900 604800 86400

;; Query time: 124 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 28 16:57:47 CST 2020
;; MSG SIZE  rcvd: 118

Host info

148.69.204.138.in-addr.arpa domain name pointer 138-204-69-148.wantel.net.br.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
148.69.204.138.in-addr.arpa	name = 138-204-69-148.wantel.net.br.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
80.82.77.18	attackbotsspam	Sep 3 01:23:28 andromeda postfix/smtpd\[23438\]: warning: unknown\[80.82.77.18\]: SASL LOGIN authentication failed: authentication failure Sep 3 01:23:37 andromeda postfix/smtpd\[23438\]: warning: unknown\[80.82.77.18\]: SASL LOGIN authentication failed: authentication failure Sep 3 01:23:56 andromeda postfix/smtpd\[24488\]: warning: unknown\[80.82.77.18\]: SASL LOGIN authentication failed: authentication failure Sep 3 01:24:04 andromeda postfix/smtpd\[24917\]: warning: unknown\[80.82.77.18\]: SASL LOGIN authentication failed: authentication failure Sep 3 01:24:15 andromeda postfix/smtpd\[29974\]: warning: unknown\[80.82.77.18\]: SASL LOGIN authentication failed: authentication failure	2019-09-03 07:25:58
54.36.149.23	attackspam	Automatic report - Banned IP Access	2019-09-03 07:29:54
180.76.97.86	attack	Sep 3 01:15:07 mail sshd\[12837\]: Invalid user raspberrypi from 180.76.97.86 port 60154 Sep 3 01:15:07 mail sshd\[12837\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.97.86 Sep 3 01:15:09 mail sshd\[12837\]: Failed password for invalid user raspberrypi from 180.76.97.86 port 60154 ssh2 Sep 3 01:19:37 mail sshd\[13604\]: Invalid user Outpost2 from 180.76.97.86 port 47620 Sep 3 01:19:37 mail sshd\[13604\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.97.86	2019-09-03 07:21:21
68.183.234.12	attackbotsspam	Sep 3 01:34:19 rpi sshd[18925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.234.12 Sep 3 01:34:21 rpi sshd[18925]: Failed password for invalid user bbs from 68.183.234.12 port 50190 ssh2	2019-09-03 07:34:54
220.244.98.26	attack	Sep 2 16:11:07 home sshd[31889]: Invalid user norine from 220.244.98.26 port 51672 Sep 2 16:11:07 home sshd[31889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.244.98.26 Sep 2 16:11:07 home sshd[31889]: Invalid user norine from 220.244.98.26 port 51672 Sep 2 16:11:08 home sshd[31889]: Failed password for invalid user norine from 220.244.98.26 port 51672 ssh2 Sep 2 16:35:59 home sshd[31969]: Invalid user qhsupport from 220.244.98.26 port 44508 Sep 2 16:36:00 home sshd[31969]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.244.98.26 Sep 2 16:35:59 home sshd[31969]: Invalid user qhsupport from 220.244.98.26 port 44508 Sep 2 16:36:02 home sshd[31969]: Failed password for invalid user qhsupport from 220.244.98.26 port 44508 ssh2 Sep 2 16:47:03 home sshd[31997]: Invalid user teamspeak from 220.244.98.26 port 59782 Sep 2 16:47:03 home sshd[31997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 t	2019-09-03 07:51:18
185.93.2.120	attackspam	\[2019-09-02 19:30:53\] NOTICE\[1829\] chan_sip.c: Registration from '\' failed for '185.93.2.120:3001' - Wrong password \[2019-09-02 19:30:53\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-02T19:30:53.099-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4621",SessionID="0x7f7b30db7498",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.93.2.120/59516",Challenge="4f908abc",ReceivedChallenge="4f908abc",ReceivedHash="21c975d3d2029079bddc033db70ed959" \[2019-09-02 19:31:26\] NOTICE\[1829\] chan_sip.c: Registration from '\' failed for '185.93.2.120:3126' - Wrong password \[2019-09-02 19:31:26\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-02T19:31:26.015-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9209",SessionID="0x7f7b30133f58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.93.2.120/5	2019-09-03 07:35:30
218.29.42.219	attackbotsspam	Sep 3 00:09:25 mail sshd\[22542\]: Failed password for invalid user web2 from 218.29.42.219 port 48295 ssh2 Sep 3 00:27:57 mail sshd\[22864\]: Invalid user bj from 218.29.42.219 port 51730 Sep 3 00:27:57 mail sshd\[22864\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.29.42.219 ...	2019-09-03 07:41:32
191.53.194.157	attackbots	$f2bV_matches	2019-09-03 07:34:08
223.171.32.55	attack	Sep 3 01:09:38 MK-Soft-Root1 sshd\[23064\]: Invalid user pink from 223.171.32.55 port 38679 Sep 3 01:09:38 MK-Soft-Root1 sshd\[23064\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.171.32.55 Sep 3 01:09:40 MK-Soft-Root1 sshd\[23064\]: Failed password for invalid user pink from 223.171.32.55 port 38679 ssh2 ...	2019-09-03 07:31:14
123.9.35.51	attack	Unauthorised access (Sep 3) SRC=123.9.35.51 LEN=40 TTL=114 ID=32962 TCP DPT=8080 WINDOW=48382 SYN Unauthorised access (Sep 2) SRC=123.9.35.51 LEN=40 TTL=114 ID=58224 TCP DPT=8080 WINDOW=47870 SYN	2019-09-03 07:55:11
147.135.199.1	attackbots	Sep 2 13:08:32 tdfoods sshd\[11279\]: Invalid user anathan from 147.135.199.1 Sep 2 13:08:32 tdfoods sshd\[11279\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip1.ip-147-135-199.eu Sep 2 13:08:33 tdfoods sshd\[11279\]: Failed password for invalid user anathan from 147.135.199.1 port 36470 ssh2 Sep 2 13:12:53 tdfoods sshd\[11736\]: Invalid user sylvestre from 147.135.199.1 Sep 2 13:12:53 tdfoods sshd\[11736\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip1.ip-147-135-199.eu	2019-09-03 07:28:36
181.123.176.188	attackspam	Sep 3 01:04:01 tux-35-217 sshd\[30900\]: Invalid user gareth from 181.123.176.188 port 57370 Sep 3 01:04:01 tux-35-217 sshd\[30900\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.123.176.188 Sep 3 01:04:03 tux-35-217 sshd\[30900\]: Failed password for invalid user gareth from 181.123.176.188 port 57370 ssh2 Sep 3 01:09:36 tux-35-217 sshd\[30948\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.123.176.188 user=root ...	2019-09-03 07:32:46
121.7.127.92	attackspambots	Sep 3 01:23:41 meumeu sshd[20706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.7.127.92 Sep 3 01:23:43 meumeu sshd[20706]: Failed password for invalid user user1 from 121.7.127.92 port 38250 ssh2 Sep 3 01:28:31 meumeu sshd[21457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.7.127.92 ...	2019-09-03 07:46:42
103.209.64.19	attack	Postfix Brute-Force reported by Fail2Ban	2019-09-03 07:28:59
191.53.194.44	attackbots	$f2bV_matches	2019-09-03 07:41:57

Recently Reported IPs

95.22.253.161	78.39.214.59	222.249.66.130	135.80.245.199
5.149.18.231	161.55.100.164	65.13.250.97	57.163.218.78
182.84.124.168	128.72.235.228	57.162.180.29	6.185.117.52
83.190.60.215	68.168.3.37	15.5.4.190	75.138.225.145
2.193.65.120	97.135.44.3	246.27.158.233	179.128.191.248