138.36.99.144 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Argentina

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.36.99.176	attack	Exploited Host.	2020-07-26 02:51:39
138.36.99.176	attackspam	$f2bV_matches	2020-07-04 04:19:33
138.36.99.176	attackbotsspam	(sshd) Failed SSH login from 138.36.99.176 (AR/Argentina/138-36-99-176.reduno.com.ar): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 9 23:53:27 ubnt-55d23 sshd[24423]: Invalid user ubuntu from 138.36.99.176 port 56504 Apr 9 23:53:29 ubnt-55d23 sshd[24423]: Failed password for invalid user ubuntu from 138.36.99.176 port 56504 ssh2	2020-04-10 09:33:42
138.36.99.176	attackspambots	(sshd) Failed SSH login from 138.36.99.176 (AR/Argentina/138-36-99-176.reduno.com.ar): 5 in the last 3600 secs	2020-03-31 01:21:40
138.36.99.176	attackspambots	SSH Brute-Force reported by Fail2Ban	2020-03-29 21:29:00

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.36.99.144
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2929
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.36.99.144.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012300 1800 900 604800 86400

;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 23:48:20 CST 2025
;; MSG SIZE  rcvd: 106

Host info

144.99.36.138.in-addr.arpa domain name pointer 138-36-99-144.reduno.com.ar.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
144.99.36.138.in-addr.arpa	name = 138-36-99-144.reduno.com.ar.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.31.166	attack	Mar 9 05:02:30 localhost sshd[20103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.166 user=root Mar 9 05:02:32 localhost sshd[20103]: Failed password for root from 222.186.31.166 port 63814 ssh2 Mar 9 05:02:35 localhost sshd[20103]: Failed password for root from 222.186.31.166 port 63814 ssh2 Mar 9 05:02:30 localhost sshd[20103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.166 user=root Mar 9 05:02:32 localhost sshd[20103]: Failed password for root from 222.186.31.166 port 63814 ssh2 Mar 9 05:02:35 localhost sshd[20103]: Failed password for root from 222.186.31.166 port 63814 ssh2 Mar 9 05:02:30 localhost sshd[20103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.166 user=root Mar 9 05:02:32 localhost sshd[20103]: Failed password for root from 222.186.31.166 port 63814 ssh2 Mar 9 05:02:35 localhost sshd[20103]: Fa ...	2020-03-09 13:06:10
212.111.41.205	attack	" "	2020-03-09 13:25:40
178.33.37.15	attackspam	SSH Authentication Attempts Exceeded	2020-03-09 13:08:44
118.244.206.217	attackbotsspam	Mar 9 10:55:00 areeb-Workstation sshd[32341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.244.206.217 Mar 9 10:55:02 areeb-Workstation sshd[32341]: Failed password for invalid user scanner from 118.244.206.217 port 46560 ssh2 ...	2020-03-09 13:28:38
222.186.180.41	attack	Mar 9 05:36:35 sd-53420 sshd\[18459\]: User root from 222.186.180.41 not allowed because none of user's groups are listed in AllowGroups Mar 9 05:36:35 sd-53420 sshd\[18459\]: Failed none for invalid user root from 222.186.180.41 port 23548 ssh2 Mar 9 05:36:36 sd-53420 sshd\[18459\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.41 user=root Mar 9 05:36:38 sd-53420 sshd\[18459\]: Failed password for invalid user root from 222.186.180.41 port 23548 ssh2 Mar 9 05:36:59 sd-53420 sshd\[18502\]: User root from 222.186.180.41 not allowed because none of user's groups are listed in AllowGroups ...	2020-03-09 12:47:10
185.176.27.2	attackbots	03/09/2020-00:18:38.218046 185.176.27.2 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-03-09 12:49:50
222.186.30.35	attack	Mar 9 06:03:35 MK-Soft-Root1 sshd[11154]: Failed password for root from 222.186.30.35 port 14635 ssh2 Mar 9 06:03:39 MK-Soft-Root1 sshd[11154]: Failed password for root from 222.186.30.35 port 14635 ssh2 ...	2020-03-09 13:03:56
203.195.134.205	attackbotsspam	Mar 9 04:53:36 lnxmysql61 sshd[22594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.134.205	2020-03-09 13:21:37
89.46.86.65	attackbots	Mar 9 06:02:56 silence02 sshd[31010]: Failed password for root from 89.46.86.65 port 49262 ssh2 Mar 9 06:09:44 silence02 sshd[31374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.46.86.65 Mar 9 06:09:45 silence02 sshd[31374]: Failed password for invalid user svnuser from 89.46.86.65 port 48556 ssh2	2020-03-09 13:17:33
45.133.99.130	attackspambots	Mar 9 06:16:55 mailserver postfix/smtps/smtpd[89514]: connect from unknown[45.133.99.130] Mar 9 06:17:02 mailserver dovecot: auth-worker(89520): sql([hidden],45.133.99.130): unknown user Mar 9 06:17:04 mailserver postfix/smtps/smtpd[89514]: warning: unknown[45.133.99.130]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 9 06:17:04 mailserver postfix/smtps/smtpd[89514]: lost connection after AUTH from unknown[45.133.99.130] Mar 9 06:17:04 mailserver postfix/smtps/smtpd[89514]: disconnect from unknown[45.133.99.130] Mar 9 06:17:04 mailserver postfix/smtps/smtpd[89514]: connect from unknown[45.133.99.130] Mar 9 06:17:13 mailserver postfix/smtps/smtpd[89521]: connect from unknown[45.133.99.130] Mar 9 06:17:13 mailserver postfix/smtps/smtpd[89514]: lost connection after AUTH from unknown[45.133.99.130] Mar 9 06:17:13 mailserver postfix/smtps/smtpd[89514]: disconnect from unknown[45.133.99.130] Mar 9 06:17:20 mailserver dovecot: auth-worker(89520): sql(palmer.changmai,45.133.99.130): unknown user	2020-03-09 13:24:28
113.190.90.29	attack	20/3/8@23:54:15: FAIL: Alarm-Network address from=113.190.90.29 20/3/8@23:54:15: FAIL: Alarm-Network address from=113.190.90.29 ...	2020-03-09 12:58:18
85.105.92.206	attackspambots	" "	2020-03-09 13:18:10
45.56.137.133	attackbotsspam	[2020-03-09 00:42:56] NOTICE[1148] chan_sip.c: Registration from '' failed for '45.56.137.133:56339' - Wrong password [2020-03-09 00:42:56] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-03-09T00:42:56.768-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7589",SessionID="0x7fd82ca9d388",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.56.137.133/56339",Challenge="57d973dc",ReceivedChallenge="57d973dc",ReceivedHash="cf7d6f84fef86c5a288b1a4a8700d386" [2020-03-09 00:45:28] NOTICE[1148] chan_sip.c: Registration from '' failed for '45.56.137.133:65426' - Wrong password [2020-03-09 00:45:28] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-03-09T00:45:28.603-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="967",SessionID="0x7fd82c3f03d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.56.137.133/6 ...	2020-03-09 13:07:06
8.208.22.5	attack	Mar 9 05:51:09 mout sshd[9676]: Invalid user samba from 8.208.22.5 port 58694	2020-03-09 13:06:44
37.139.103.87	attackbotsspam	" "	2020-03-09 13:07:19

Recently Reported IPs

119.45.177.247	244.46.64.143	54.123.116.71	136.219.25.48
7.231.168.149	66.159.53.12	147.42.152.221	87.32.165.105
194.222.8.19	95.62.153.110	124.178.119.45	53.55.57.215
156.12.116.157	75.35.51.63	189.119.30.174	170.19.243.92
19.73.239.68	165.72.254.149	134.52.191.125	94.222.2.3