138.59.146.242

Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: Wiid Telecomunicacoes do Brasil

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	From send-julio-1618-alkosa.com.br-8@vendastop10.com.br Sat Aug 08 09:10:24 2020 Received: from mm146-242.vendastop10.com.br ([138.59.146.242]:49889)	2020-08-09 02:48:50

Comments on same subnet:

IP	Type	Details	Datetime
138.59.146.251	attack	From send-edital-1618-oaltouruguai.com.br-8@vendastop10.com.br Mon Sep 07 13:47:53 2020 Received: from mm146-251.vendastop10.com.br ([138.59.146.251]:46139)	2020-09-09 02:59:26
138.59.146.251	attackspam	From send-edital-1618-oaltouruguai.com.br-8@vendastop10.com.br Mon Sep 07 13:47:53 2020 Received: from mm146-251.vendastop10.com.br ([138.59.146.251]:46139)	2020-09-08 18:31:58
138.59.146.201	attackbotsspam	From send-edital-1618-oaltouruguai.com.br-8@prinks.com.br Tue Sep 01 09:31:24 2020 Received: from mm146-201.prinks.com.br ([138.59.146.201]:53373)	2020-09-02 00:27:09
138.59.146.139	attackspambots	From return-anuncie=oaltouruguai.com.br@soja.we.bs Sat Aug 29 09:09:21 2020 Received: from mm202c889d9888-12.soja.we.bs ([138.59.146.139]:55226)	2020-08-29 23:18:21
138.59.146.246	attackbots	From send-assinatura-1618-oaltouruguai.com.br-8@vendastop10.com.br Fri Aug 28 09:06:01 2020 Received: from mm146-246.vendastop10.com.br ([138.59.146.246]:37154)	2020-08-29 00:12:57
138.59.146.198	attack	From send-edital-1618-oaltouruguai.com.br-8@prinks.com.br Fri Aug 28 09:06:47 2020 Received: from mm146-198.prinks.com.br ([138.59.146.198]:41640)	2020-08-28 23:37:04
138.59.146.245	attackbots	From send-edital-1618-oaltouruguai.com.br-8@vendastop10.com.br Thu Aug 20 09:05:43 2020 Received: from mm146-245.vendastop10.com.br ([138.59.146.245]:56787)	2020-08-20 22:47:12
138.59.146.203	attackspam	From send-edital-1618-oaltouruguai.com.br-8@prinks.com.br Thu Aug 20 09:05:44 2020 Received: from mm146-203.prinks.com.br ([138.59.146.203]:48851)	2020-08-20 22:45:29
138.59.146.204	attackbots	From send-edital-1618-oaltouruguai.com.br-8@prinks.com.br Wed Aug 19 09:31:28 2020 Received: from mm146-204.prinks.com.br ([138.59.146.204]:43763)	2020-08-19 21:43:29
138.59.146.160	attack	From send-alceu-1618-alkosa.com.br-8@superway.com.br Fri Aug 14 00:32:47 2020 Received: from mm146-160.superway.com.br ([138.59.146.160]:46114)	2020-08-14 19:23:27
138.59.146.244	attackspam	From send-george-1618-alkosa.com.br-8@vendastop10.com.br Sat Aug 08 00:50:44 2020 Received: from mm146-244.vendastop10.com.br ([138.59.146.244]:38859)	2020-08-08 19:37:45
138.59.146.247	attackspambots	From send-julio-1618-alkosa.com.br-8@vendastop10.com.br Sat Aug 08 00:57:03 2020 Received: from mm146-247.vendastop10.com.br ([138.59.146.247]:56378)	2020-08-08 14:13:07
138.59.146.163	attack	From send-alceu-1618-alkosa.com.br-8@superway.com.br Fri Jul 31 00:46:54 2020 Received: from mm146-163.superway.com.br ([138.59.146.163]:37538)	2020-07-31 19:35:23
138.59.146.160	attackbotsspam	From send-alceu-1618-alkosa.com.br-8@superway.com.br Thu Jul 30 09:03:33 2020 Received: from mm146-160.superway.com.br ([138.59.146.160]:48607)	2020-07-31 03:26:13
138.59.146.167	attackspambots	From send-alceu-1618-alkosa.com.br-8@superway.com.br Fri Jun 19 00:53:48 2020 Received: from mm146-167.superway.com.br ([138.59.146.167]:40236)	2020-06-19 18:15:28

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.59.146.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34303
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.59.146.242.			IN	A

;; AUTHORITY SECTION:
.			450	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020080801 1800 900 604800 86400

;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Aug 09 02:48:45 CST 2020
;; MSG SIZE  rcvd: 118

Host info

242.146.59.138.in-addr.arpa domain name pointer mm146-242.vendastop10.com.br.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
242.146.59.138.in-addr.arpa	name = mm146-242.vendastop10.com.br.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
2.224.168.43	attack	Aug 1 17:06:05 ns382633 sshd\[27675\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.224.168.43 user=root Aug 1 17:06:07 ns382633 sshd\[27675\]: Failed password for root from 2.224.168.43 port 37752 ssh2 Aug 1 17:15:00 ns382633 sshd\[28877\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.224.168.43 user=root Aug 1 17:15:01 ns382633 sshd\[28877\]: Failed password for root from 2.224.168.43 port 50362 ssh2 Aug 1 17:19:01 ns382633 sshd\[29789\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.224.168.43 user=root	2020-08-01 23:44:47
103.143.167.239	attackbotsspam	Email rejected due to spam filtering	2020-08-01 23:38:18
84.17.51.142	attack	(From no-replynen@google.com) Gооd dаy! If you want to get ahead of your competition, have a higher Domain Authority score. Its just simple as that. With our service you get Domain Authority above 50 points in just 30 days. This service is guaranteed For more information, check our service here https://www.monkeydigital.co/Get-Guaranteed-Domain-Authority-50/ thank you Mike Ogden Monkey Digital support@monkeydigital.co	2020-08-02 00:11:49
103.45.150.170	attack	2020-07-26T06:45:25.242475correo.[domain] sshd[38637]: Invalid user pod from 103.45.150.170 port 47864 2020-07-26T06:45:26.735132correo.[domain] sshd[38637]: Failed password for invalid user pod from 103.45.150.170 port 47864 ssh2 2020-07-26T06:53:54.684186correo.[domain] sshd[40068]: Invalid user jira from 103.45.150.170 port 48492 ...	2020-08-01 23:33:31
132.232.120.145	attackspam	Aug 1 14:28:42 sso sshd[18040]: Failed password for root from 132.232.120.145 port 41086 ssh2 ...	2020-08-01 23:42:14
45.83.67.26	attack	Tried to connect (66653x) -	2020-08-01 23:58:01
129.204.44.231	attackbots	SSH Brute Force	2020-08-01 23:46:41
139.99.105.138	attack	Aug 1 16:22:39 marvibiene sshd[32323]: Failed password for root from 139.99.105.138 port 49706 ssh2 Aug 1 16:27:09 marvibiene sshd[304]: Failed password for root from 139.99.105.138 port 59352 ssh2	2020-08-01 23:41:41
110.78.114.236	attackspambots	2020-08-01 10:14:37.534681-0500 localhost sshd[65661]: Failed password for root from 110.78.114.236 port 42510 ssh2	2020-08-01 23:40:01
103.109.14.94	attackbots	Aug 1 15:33:43 server postfix/smtpd[2491]: NOQUEUE: reject: RCPT from unknown[103.109.14.94]: 554 5.7.1 Service unavailable; Client host [103.109.14.94] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/103.109.14.94; from= to= proto=ESMTP helo=<[103.109.14.94]>	2020-08-02 00:14:13
103.59.113.185	attackspam	(sshd) Failed SSH login from 103.59.113.185 (CN/China/-): 5 in the last 3600 secs	2020-08-02 00:14:29
164.132.44.218	attackspam	Aug 1 02:53:36 web9 sshd\[22239\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.44.218 user=root Aug 1 02:53:38 web9 sshd\[22239\]: Failed password for root from 164.132.44.218 port 44023 ssh2 Aug 1 02:57:49 web9 sshd\[23446\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.44.218 user=root Aug 1 02:57:51 web9 sshd\[23446\]: Failed password for root from 164.132.44.218 port 49670 ssh2 Aug 1 03:02:08 web9 sshd\[24046\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.44.218 user=root	2020-08-02 00:12:52
185.37.26.65	attackbotsspam	Email rejected due to spam filtering	2020-08-02 00:28:44
157.245.124.160	attackbots	Aug 1 15:20:51 rancher-0 sshd[707978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.124.160 user=root Aug 1 15:20:53 rancher-0 sshd[707978]: Failed password for root from 157.245.124.160 port 53334 ssh2 ...	2020-08-02 00:07:31
92.20.199.243	attackspam	Email rejected due to spam filtering	2020-08-01 23:43:40

Recently Reported IPs

77.183.89.207	103.5.132.130	64.225.119.164	13.59.252.127
188.218.71.27	46.167.110.191	43.229.90.240	85.209.0.228
39.105.125.122	31.173.200.78	191.252.218.190	9.250.12.111
35.241.152.211	114.236.240.182	40.85.122.27	103.44.96.196
41.60.237.156	40.77.191.13	52.151.81.94	102.23.247.94