138.232.8.48 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Austria

Internet Service Provider: University of Innsbruck

Hostname: unknown

Organization: unknown

Usage Type: University/College/School

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	From: Digital Federal Credit Union [mailto:onlinemessage@armstong.com] DCU phishing/fraud; illicit use of entity name/credentials/copyright. Unsolicited bulk spam - zid-vpns-8-48.uibk.ac.at, University Of Innsbruck - 138.232.8.48 Spam link www.28niubi1.com = 58.64.157.132 NWT iDC Data Service – BLACKLISTED - phishing redirect: - northernexpressions.com.au = 104.247.75.218 InMotion Hosting, Inc. Appear to redirect/replicate valid DCU web site: - Spam link u6118461.ct.sendgrid.net = repeat IP 167.89.123.16, 167.89.115.54, 167.89.118.35 – SendGrid - Spam link media.whatcounts.com = 99.84.13.60, 99.84.13.158, 99.84.13.67, 99.84.13.207 – Amazon	2019-11-15 00:39:14

Type

Details

Datetime

attackspambots

From: Digital Federal Credit Union [mailto:onlinemessage@armstong.com] 
DCU phishing/fraud; illicit use of entity name/credentials/copyright.

Unsolicited bulk spam - zid-vpns-8-48.uibk.ac.at, University Of Innsbruck - 138.232.8.48

Spam link www.28niubi1.com = 58.64.157.132 NWT iDC Data Service – BLACKLISTED - phishing redirect:
-	northernexpressions.com.au = 104.247.75.218 InMotion Hosting, Inc.

Appear to redirect/replicate valid DCU web site:
-	Spam link u6118461.ct.sendgrid.net = repeat IP 167.89.123.16, 167.89.115.54, 167.89.118.35 – SendGrid
-	Spam link media.whatcounts.com = 99.84.13.60, 99.84.13.158, 99.84.13.67, 99.84.13.207 – Amazon

2019-11-15 00:39:14

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.232.8.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49500
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.232.8.48.			IN	A

;; AUTHORITY SECTION:
.			430	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111400 1800 900 604800 86400

;; Query time: 116 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 15 00:39:08 CST 2019
;; MSG SIZE  rcvd: 116

Host info

48.8.232.138.in-addr.arpa has no PTR record

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
48.8.232.138.in-addr.arpa	name = zid-vpns-8-48.uibk.ac.at.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
202.109.202.60	attackbotsspam	"fail2ban match"	2020-06-28 00:48:05
180.92.174.243	attackspam	Unauthorised access (Jun 27) SRC=180.92.174.243 LEN=52 TTL=113 ID=20956 DF TCP DPT=445 WINDOW=8192 SYN	2020-06-28 01:11:30
49.249.239.198	attackbotsspam	Jun 27 18:28:35 vpn01 sshd[29312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.249.239.198 Jun 27 18:28:37 vpn01 sshd[29312]: Failed password for invalid user print from 49.249.239.198 port 27350 ssh2 ...	2020-06-28 01:01:04
88.230.185.23	attackbots	xmlrpc attack	2020-06-28 00:39:08
31.146.102.123	attackspam	Automatic report - XMLRPC Attack	2020-06-28 00:35:35
77.109.173.12	attackbotsspam	Jun 27 12:59:24 vps46666688 sshd[19681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.109.173.12 Jun 27 12:59:26 vps46666688 sshd[19681]: Failed password for invalid user yvonne from 77.109.173.12 port 43470 ssh2 ...	2020-06-28 00:47:23
111.93.71.219	attackspam	Jun 27 17:04:49 ns382633 sshd\[8155\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.71.219 user=root Jun 27 17:04:51 ns382633 sshd\[8155\]: Failed password for root from 111.93.71.219 port 53617 ssh2 Jun 27 17:10:26 ns382633 sshd\[9645\]: Invalid user jumper from 111.93.71.219 port 57451 Jun 27 17:10:26 ns382633 sshd\[9645\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.71.219 Jun 27 17:10:28 ns382633 sshd\[9645\]: Failed password for invalid user jumper from 111.93.71.219 port 57451 ssh2	2020-06-28 01:12:44
106.75.25.114	attack	Invalid user clare from 106.75.25.114 port 55458	2020-06-28 00:55:41
41.78.172.77	attack	port scan and connect, tcp 23 (telnet)	2020-06-28 00:39:43
220.181.108.142	attackbots	Automatic report - Banned IP Access	2020-06-28 00:50:10
105.101.95.168	attackbots	Automatic report - XMLRPC Attack	2020-06-28 00:44:02
183.82.115.50	attackbotsspam	Unauthorized connection attempt from IP address 183.82.115.50 on Port 445(SMB)	2020-06-28 00:56:42
183.89.211.2	attackbotsspam	(imapd) Failed IMAP login from 183.89.211.2 (TH/Thailand/mx-ll-183.89.211-2.dynamic.3bb.in.th): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jun 27 16:48:23 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 8 secs): user=, method=PLAIN, rip=183.89.211.2, lip=5.63.12.44, TLS, session=	2020-06-28 00:38:27
95.68.118.133	attackbots	port 23	2020-06-28 00:40:41
124.192.215.2	attackspam	Jun 27 17:38:59 server sshd[11266]: Failed password for invalid user test from 124.192.215.2 port 36165 ssh2 Jun 27 17:42:18 server sshd[14536]: Failed password for root from 124.192.215.2 port 54304 ssh2 Jun 27 17:45:43 server sshd[17799]: Failed password for invalid user postgre from 124.192.215.2 port 7791 ssh2	2020-06-28 00:46:10

Recently Reported IPs

93.89.225.115	85.208.96.15	1.10.173.252	236.230.207.67
68.183.187.9	185.112.250.127	14.169.190.250	159.146.115.248
97.74.24.201	14.162.129.6	41.79.65.214	124.129.47.5
94.23.97.22	201.231.170.250	93.21.216.179	11.127.6.2
39.100.78.143	184.185.2.213	85.105.36.123	185.43.209.193