138.36.2.142 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.36.200.45	attack	Autoban 138.36.200.45 AUTH/CONNECT	2020-10-05 05:32:06
138.36.200.45	attackbotsspam	Oct 3 22:05:01 mail.srvfarm.net postfix/smtpd[660370]: warning: unknown[138.36.200.45]: SASL PLAIN authentication failed: Oct 3 22:05:02 mail.srvfarm.net postfix/smtpd[660370]: lost connection after AUTH from unknown[138.36.200.45] Oct 3 22:07:26 mail.srvfarm.net postfix/smtpd[656138]: warning: unknown[138.36.200.45]: SASL PLAIN authentication failed: Oct 3 22:07:27 mail.srvfarm.net postfix/smtpd[656138]: lost connection after AUTH from unknown[138.36.200.45] Oct 3 22:09:38 mail.srvfarm.net postfix/smtps/smtpd[658711]: warning: unknown[138.36.200.45]: SASL PLAIN authentication failed:	2020-10-04 21:27:01
138.36.200.45	attack	Oct 3 22:05:01 mail.srvfarm.net postfix/smtpd[660370]: warning: unknown[138.36.200.45]: SASL PLAIN authentication failed: Oct 3 22:05:02 mail.srvfarm.net postfix/smtpd[660370]: lost connection after AUTH from unknown[138.36.200.45] Oct 3 22:07:26 mail.srvfarm.net postfix/smtpd[656138]: warning: unknown[138.36.200.45]: SASL PLAIN authentication failed: Oct 3 22:07:27 mail.srvfarm.net postfix/smtpd[656138]: lost connection after AUTH from unknown[138.36.200.45] Oct 3 22:09:38 mail.srvfarm.net postfix/smtps/smtpd[658711]: warning: unknown[138.36.200.45]: SASL PLAIN authentication failed:	2020-10-04 13:14:32
138.36.200.238	attackbotsspam	failed_logins	2020-09-18 01:35:06
138.36.200.238	attackspambots	Sep 17 08:20:41 mail.srvfarm.net postfix/smtpd[4093360]: warning: unknown[138.36.200.238]: SASL PLAIN authentication failed: Sep 17 08:20:42 mail.srvfarm.net postfix/smtpd[4093360]: lost connection after AUTH from unknown[138.36.200.238] Sep 17 08:22:20 mail.srvfarm.net postfix/smtpd[4094097]: warning: unknown[138.36.200.238]: SASL PLAIN authentication failed: Sep 17 08:22:21 mail.srvfarm.net postfix/smtpd[4094097]: lost connection after AUTH from unknown[138.36.200.238] Sep 17 08:24:10 mail.srvfarm.net postfix/smtps/smtpd[4095850]: warning: unknown[138.36.200.238]: SASL PLAIN authentication failed:	2020-09-17 17:36:26
138.36.200.238	attackbots	Brute force attempt	2020-09-17 08:43:18
138.36.200.238	attack	Sep 16 18:40:00 mail.srvfarm.net postfix/smtpd[3602401]: warning: unknown[138.36.200.238]: SASL PLAIN authentication failed: Sep 16 18:40:01 mail.srvfarm.net postfix/smtpd[3602401]: lost connection after AUTH from unknown[138.36.200.238] Sep 16 18:40:36 mail.srvfarm.net postfix/smtpd[3603883]: warning: unknown[138.36.200.238]: SASL PLAIN authentication failed: Sep 16 18:40:37 mail.srvfarm.net postfix/smtpd[3603883]: lost connection after AUTH from unknown[138.36.200.238] Sep 16 18:49:48 mail.srvfarm.net postfix/smtpd[3603881]: warning: unknown[138.36.200.238]: SASL PLAIN authentication failed:	2020-09-17 02:37:55
138.36.200.238	attack	Sep 16 10:19:58 mail.srvfarm.net postfix/smtps/smtpd[3374488]: warning: unknown[138.36.200.238]: SASL PLAIN authentication failed: Sep 16 10:19:59 mail.srvfarm.net postfix/smtps/smtpd[3374488]: lost connection after AUTH from unknown[138.36.200.238] Sep 16 10:25:05 mail.srvfarm.net postfix/smtps/smtpd[3357368]: warning: unknown[138.36.200.238]: SASL PLAIN authentication failed: Sep 16 10:25:06 mail.srvfarm.net postfix/smtps/smtpd[3357368]: lost connection after AUTH from unknown[138.36.200.238] Sep 16 10:26:41 mail.srvfarm.net postfix/smtpd[3373391]: warning: unknown[138.36.200.238]: SASL PLAIN authentication failed:	2020-09-16 18:57:07
138.36.200.12	attack	Sep 13 18:26:11 mail.srvfarm.net postfix/smtpd[1232020]: warning: unknown[138.36.200.12]: SASL PLAIN authentication failed: Sep 13 18:26:12 mail.srvfarm.net postfix/smtpd[1232020]: lost connection after AUTH from unknown[138.36.200.12] Sep 13 18:26:24 mail.srvfarm.net postfix/smtpd[1232282]: warning: unknown[138.36.200.12]: SASL PLAIN authentication failed: Sep 13 18:26:24 mail.srvfarm.net postfix/smtpd[1232282]: lost connection after AUTH from unknown[138.36.200.12] Sep 13 18:35:02 mail.srvfarm.net postfix/smtps/smtpd[1230769]: warning: unknown[138.36.200.12]: SASL PLAIN authentication failed:	2020-09-15 03:39:05
138.36.200.12	attackbots	Sep 13 18:26:11 mail.srvfarm.net postfix/smtpd[1232020]: warning: unknown[138.36.200.12]: SASL PLAIN authentication failed: Sep 13 18:26:12 mail.srvfarm.net postfix/smtpd[1232020]: lost connection after AUTH from unknown[138.36.200.12] Sep 13 18:26:24 mail.srvfarm.net postfix/smtpd[1232282]: warning: unknown[138.36.200.12]: SASL PLAIN authentication failed: Sep 13 18:26:24 mail.srvfarm.net postfix/smtpd[1232282]: lost connection after AUTH from unknown[138.36.200.12] Sep 13 18:35:02 mail.srvfarm.net postfix/smtps/smtpd[1230769]: warning: unknown[138.36.200.12]: SASL PLAIN authentication failed:	2020-09-14 19:36:01
138.36.201.76	attackbotsspam	Sep 7 11:17:45 mail.srvfarm.net postfix/smtpd[1028351]: warning: unknown[138.36.201.76]: SASL PLAIN authentication failed: Sep 7 11:17:46 mail.srvfarm.net postfix/smtpd[1028351]: lost connection after AUTH from unknown[138.36.201.76] Sep 7 11:19:32 mail.srvfarm.net postfix/smtpd[1014319]: warning: unknown[138.36.201.76]: SASL PLAIN authentication failed: Sep 7 11:19:33 mail.srvfarm.net postfix/smtpd[1014319]: lost connection after AUTH from unknown[138.36.201.76] Sep 7 11:27:41 mail.srvfarm.net postfix/smtps/smtpd[1030527]: warning: unknown[138.36.201.76]: SASL PLAIN authentication failed:	2020-09-12 03:02:27
138.36.200.18	attackbots	Sep 7 12:45:07 mail.srvfarm.net postfix/smtps/smtpd[1055413]: warning: unknown[138.36.200.18]: SASL PLAIN authentication failed: Sep 7 12:45:09 mail.srvfarm.net postfix/smtps/smtpd[1055413]: lost connection after AUTH from unknown[138.36.200.18] Sep 7 12:49:35 mail.srvfarm.net postfix/smtpd[1053370]: warning: unknown[138.36.200.18]: SASL PLAIN authentication failed: Sep 7 12:49:39 mail.srvfarm.net postfix/smtpd[1053370]: lost connection after AUTH from unknown[138.36.200.18] Sep 7 12:53:18 mail.srvfarm.net postfix/smtpd[1058607]: lost connection after AUTH from unknown[138.36.200.18]	2020-09-12 02:10:14
138.36.200.18	attackbots	Sep 7 12:45:07 mail.srvfarm.net postfix/smtps/smtpd[1055413]: warning: unknown[138.36.200.18]: SASL PLAIN authentication failed: Sep 7 12:45:09 mail.srvfarm.net postfix/smtps/smtpd[1055413]: lost connection after AUTH from unknown[138.36.200.18] Sep 7 12:49:35 mail.srvfarm.net postfix/smtpd[1053370]: warning: unknown[138.36.200.18]: SASL PLAIN authentication failed: Sep 7 12:49:39 mail.srvfarm.net postfix/smtpd[1053370]: lost connection after AUTH from unknown[138.36.200.18] Sep 7 12:53:18 mail.srvfarm.net postfix/smtpd[1058607]: lost connection after AUTH from unknown[138.36.200.18]	2020-09-11 18:02:26
138.36.202.237	attackspam	Brute force attempt	2020-09-07 00:37:27
138.36.201.246	attackbotsspam	Sep 5 18:48:02 host postfix/smtps/smtpd\[6367\]: warning: unknown\[138.36.201.246\]: SASL PLAIN authentication failed:	2020-09-07 00:20:02

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.36.2.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7489
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.36.2.142.			IN	A

;; AUTHORITY SECTION:
.			595	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:49:03 CST 2022
;; MSG SIZE  rcvd: 105

Host info

142.2.36.138.in-addr.arpa domain name pointer 138-36-2-142.texnet.net.br.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.2.36.138.in-addr.arpa	name = 138-36-2-142.texnet.net.br.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.209.0.75	attack	ET DROP Dshield Block Listed Source group 1 - port: 3389 proto: TCP cat: Misc Attack	2020-06-24 00:14:28
167.71.202.162	attackbotsspam	2020-06-23T13:27:18.650494shield sshd\[13676\]: Invalid user user3 from 167.71.202.162 port 36384 2020-06-23T13:27:18.654521shield sshd\[13676\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.202.162 2020-06-23T13:27:20.435869shield sshd\[13676\]: Failed password for invalid user user3 from 167.71.202.162 port 36384 ssh2 2020-06-23T13:28:22.707801shield sshd\[14053\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.202.162 user=root 2020-06-23T13:28:24.608799shield sshd\[14053\]: Failed password for root from 167.71.202.162 port 51444 ssh2	2020-06-23 23:58:16
192.35.168.32	attack	Unauthorized connection attempt detected from IP address 192.35.168.32 to port 5903	2020-06-24 00:13:35
45.141.84.44	attackspambots	Jun 23 17:35:38 debian-2gb-nbg1-2 kernel: \[15185208.831010\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.141.84.44 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=23117 PROTO=TCP SPT=43134 DPT=7836 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-23 23:41:22
103.228.183.10	attackbots	2020-06-23T17:44:44.905446sd-86998 sshd[11736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.228.183.10 user=root 2020-06-23T17:44:47.051498sd-86998 sshd[11736]: Failed password for root from 103.228.183.10 port 37540 ssh2 2020-06-23T17:47:13.865959sd-86998 sshd[13594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.228.183.10 user=root 2020-06-23T17:47:15.801255sd-86998 sshd[13594]: Failed password for root from 103.228.183.10 port 40506 ssh2 2020-06-23T17:49:34.834118sd-86998 sshd[15269]: Invalid user ftp_user from 103.228.183.10 port 43470 ...	2020-06-23 23:58:44
59.152.62.187	attackspam	Jun 23 14:01:55 prod4 sshd\[1429\]: Invalid user tomcat7 from 59.152.62.187 Jun 23 14:01:57 prod4 sshd\[1429\]: Failed password for invalid user tomcat7 from 59.152.62.187 port 59066 ssh2 Jun 23 14:05:38 prod4 sshd\[3064\]: Invalid user munge from 59.152.62.187 ...	2020-06-23 23:47:02
49.233.92.50	attackbots	Jun 23 16:35:25 sip sshd[742515]: Invalid user bookings from 49.233.92.50 port 36070 Jun 23 16:35:27 sip sshd[742515]: Failed password for invalid user bookings from 49.233.92.50 port 36070 ssh2 Jun 23 16:38:44 sip sshd[742531]: Invalid user fxy from 49.233.92.50 port 58332 ...	2020-06-24 00:03:03
40.73.101.69	attack	Jun 23 13:07:12 game-panel sshd[12278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.101.69 Jun 23 13:07:14 game-panel sshd[12278]: Failed password for invalid user jordi from 40.73.101.69 port 50928 ssh2 Jun 23 13:11:18 game-panel sshd[12581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.101.69	2020-06-23 23:52:32
49.234.96.210	attackbotsspam	Brute force attempt	2020-06-24 00:08:07
200.199.142.162	attack	Unauthorized connection attempt detected from IP address 200.199.142.162 to port 445	2020-06-24 00:10:48
213.32.92.57	attackbotsspam	2020-06-23T15:07:03.758037abusebot-3.cloudsearch.cf sshd[16999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip57.ip-213-32-92.eu user=root 2020-06-23T15:07:05.846778abusebot-3.cloudsearch.cf sshd[16999]: Failed password for root from 213.32.92.57 port 36052 ssh2 2020-06-23T15:09:44.915310abusebot-3.cloudsearch.cf sshd[17103]: Invalid user fwa from 213.32.92.57 port 51848 2020-06-23T15:09:44.921207abusebot-3.cloudsearch.cf sshd[17103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip57.ip-213-32-92.eu 2020-06-23T15:09:44.915310abusebot-3.cloudsearch.cf sshd[17103]: Invalid user fwa from 213.32.92.57 port 51848 2020-06-23T15:09:47.109809abusebot-3.cloudsearch.cf sshd[17103]: Failed password for invalid user fwa from 213.32.92.57 port 51848 ssh2 2020-06-23T15:11:57.573806abusebot-3.cloudsearch.cf sshd[17211]: Invalid user fava from 213.32.92.57 port 35124 ...	2020-06-23 23:36:53
51.15.113.57	attackbots	Jun 23 07:05:36 mailman postfix/smtpd[26837]: NOQUEUE: reject: RCPT from unknown[51.15.113.57]: 554 5.7.1 Service unavailable; Client host [51.15.113.57] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= Jun 23 07:05:36 mailman postfix/smtpd[26837]: NOQUEUE: reject: RCPT from unknown[51.15.113.57]: 554 5.7.1 Service unavailable; Client host [51.15.113.57] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=	2020-06-23 23:48:23
182.185.185.30	attackbots	Automatic report - Port Scan Attack	2020-06-23 23:57:08
14.98.181.202	attackbots	1592913927 - 06/23/2020 14:05:27 Host: 14.98.181.202/14.98.181.202 Port: 445 TCP Blocked	2020-06-23 23:55:50
46.38.148.2	attack	2020-06-21 08:28:09 dovecot_login authenticator failed for \(User\) \[46.38.148.2\]: 535 Incorrect authentication data \(set_id=voip@no-server.de\) 2020-06-21 08:28:10 dovecot_login authenticator failed for \(User\) \[46.38.148.2\]: 535 Incorrect authentication data \(set_id=voip@no-server.de\) 2020-06-21 08:28:25 dovecot_login authenticator failed for \(User\) \[46.38.148.2\]: 535 Incorrect authentication data \(set_id=img4@no-server.de\) 2020-06-21 08:28:26 dovecot_login authenticator failed for \(User\) \[46.38.148.2\]: 535 Incorrect authentication data \(set_id=img4@no-server.de\) 2020-06-21 08:28:44 dovecot_login authenticator failed for \(User\) \[46.38.148.2\]: 535 Incorrect authentication data \(set_id=solr@no-server.de\) 2020-06-21 08:28:46 dovecot_login authenticator failed for \(User\) \[46.38.148.2\]: 535 Incorrect authentication data \(set_id=solr@no-server.de\) 2020-06-21 08:28:48 dovecot_login authenticator failed for \(User\) \[46.38.148.2\]: 535 Incorrect authenticatio ...	2020-06-23 23:56:18

Recently Reported IPs

138.36.2.12	138.36.2.179	138.36.199.150	138.36.2.137
138.36.2.251	118.179.214.162	138.36.2.186	138.36.2.185
138.36.2.35	138.36.2.194	138.36.2.36	138.36.2.43
138.36.2.47	138.36.2.52	138.36.2.60	138.36.2.51
138.36.2.6	138.36.2.8	138.36.20.194	138.36.20.190