138.97.53.48 - IPInfo

Basic Info

City: Icara

Region: Santa Catarina

Country: Brazil

Internet Service Provider: unknown

Hostname: unknown

Organization: Clonix Informática LTDA

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.97.53.187	attack	2020-03-1922:49:031jF32E-0003hD-Ow\<=info@whatsup2013.chH=\(localhost\)[197.62.175.204]:43981P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3639id=919422717AAE8033EFEAA31BDF2F7B01@whatsup2013.chT="iamChristina"fordani-06@hotmail.comdavidball427@gmail.com2020-03-1922:48:341jF31l-0003fV-Jo\<=info@whatsup2013.chH=\(localhost\)[14.186.221.236]:49139P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3729id=696CDA89825678CB17125BE32752E3E6@whatsup2013.chT="iamChristina"forhurricaneperez20@gmail.comaaronhendricks@gmail.com2020-03-1922:51:591jF354-0003th-8j\<=info@whatsup2013.chH=\(localhost\)[138.97.53.187]:42657P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3639id=BABF095A5185AB18C4C18830F4376447@whatsup2013.chT="iamChristina"forbizamamiguel5@gmail.comknightwings1978@gmail.com2020-03-1922:47:571jF31B-0003Zt-6p\<=info@whatsup2013.chH=\(localhost\)[27.34.52.223]:47636P=esmtpsaX=TLS1.2:	2020-03-20 07:56:35

Type

Details

Datetime

138.97.53.187

attack

2020-03-1922:49:031jF32E-0003hD-Ow\<=info@whatsup2013.chH=\(localhost\)[197.62.175.204]:43981P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3639id=919422717AAE8033EFEAA31BDF2F7B01@whatsup2013.chT="iamChristina"fordani-06@hotmail.comdavidball427@gmail.com2020-03-1922:48:341jF31l-0003fV-Jo\<=info@whatsup2013.chH=\(localhost\)[14.186.221.236]:49139P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3729id=696CDA89825678CB17125BE32752E3E6@whatsup2013.chT="iamChristina"forhurricaneperez20@gmail.comaaronhendricks@gmail.com2020-03-1922:51:591jF354-0003th-8j\<=info@whatsup2013.chH=\(localhost\)[138.97.53.187]:42657P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3639id=BABF095A5185AB18C4C18830F4376447@whatsup2013.chT="iamChristina"forbizamamiguel5@gmail.comknightwings1978@gmail.com2020-03-1922:47:571jF31B-0003Zt-6p\<=info@whatsup2013.chH=\(localhost\)[27.34.52.223]:47636P=esmtpsaX=TLS1.2:

2020-03-20 07:56:35

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.97.53.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6682
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.97.53.48.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019060200 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jun 02 21:04:47 CST 2019
;; MSG SIZE  rcvd: 116

Host info

48.53.97.138.in-addr.arpa domain name pointer 138-97-53-48.fusionet.srv.br.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
48.53.97.138.in-addr.arpa	name = 138-97-53-48.fusionet.srv.br.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
212.70.149.36	attackbotsspam	2020-09-20 08:16:02 auth_plain authenticator failed for (User) [212.70.149.36]: 535 Incorrect authentication data (set_id=coyote@lavrinenko.info) 2020-09-20 08:16:19 auth_plain authenticator failed for (User) [212.70.149.36]: 535 Incorrect authentication data (set_id=robo@lavrinenko.info) ...	2020-09-20 13:21:15
95.248.84.50	attackspambots	Automatic report - Port Scan Attack	2020-09-20 13:19:54
13.71.71.97	attack	TCP (SYN) 13.71.71.97:61888 -> port 22, len 40	2020-09-20 12:55:51
2405:201:5c05:6057:507:e79d:dc2f:1c0a	attackspam	Auto reported by IDS	2020-09-20 13:23:48
49.116.190.65	attackspambots	Port scan on 1 port(s): 52869	2020-09-20 13:26:45
121.69.89.78	attack	Ssh brute force	2020-09-20 13:14:04
24.68.127.82	attackbots	Sep 19 19:02:39 vps639187 sshd\[27158\]: Invalid user nagios from 24.68.127.82 port 40422 Sep 19 19:02:39 vps639187 sshd\[27158\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.68.127.82 Sep 19 19:02:40 vps639187 sshd\[27167\]: Invalid user netman from 24.68.127.82 port 40494 Sep 19 19:02:40 vps639187 sshd\[27167\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.68.127.82 ...	2020-09-20 13:10:17
191.177.219.85	attackspam	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-20 13:07:41
154.209.8.10	attackspam	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-20 13:02:16
89.163.223.246	attackbots	Sep 20 06:54:05 h2829583 sshd[1449]: Failed password for root from 89.163.223.246 port 54678 ssh2	2020-09-20 13:06:58
61.64.177.60	attack	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-20 12:55:28
58.153.245.6	attackspambots	Sep 20 00:02:19 ssh2 sshd[41514]: Invalid user admin from 58.153.245.6 port 37649 Sep 20 00:02:19 ssh2 sshd[41514]: Failed password for invalid user admin from 58.153.245.6 port 37649 ssh2 Sep 20 00:02:19 ssh2 sshd[41514]: Connection closed by invalid user admin 58.153.245.6 port 37649 [preauth] ...	2020-09-20 12:58:41
128.201.137.252	attackspambots	Sep1918:59:03server2pure-ftpd:\(\?@128.201.137.252\)[WARNING]Authenticationfailedforuser[anonymous]Sep1918:59:50server2pure-ftpd:\(\?@128.201.137.252\)[WARNING]Authenticationfailedforuser[ilgiornaledelticino]Sep1919:02:19server2pure-ftpd:\(\?@128.201.137.252\)[WARNING]Authenticationfailedforuser[ilgiornaledelticino]Sep1919:02:29server2pure-ftpd:\(\?@128.201.137.252\)[WARNING]Authenticationfailedforuser[ilgiornaledelticino]Sep1919:02:40server2pure-ftpd:\(\?@128.201.137.252\)[WARNING]Authenticationfailedforuser[ilgiornaledelticino]	2020-09-20 13:06:09
155.4.59.223	attackspambots	Sep 19 19:02:47 vps639187 sshd\[27190\]: Invalid user ubnt from 155.4.59.223 port 60582 Sep 19 19:02:47 vps639187 sshd\[27190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=155.4.59.223 Sep 19 19:02:49 vps639187 sshd\[27190\]: Failed password for invalid user ubnt from 155.4.59.223 port 60582 ssh2 ...	2020-09-20 12:53:54
176.115.196.74	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-20 13:00:44

Recently Reported IPs

12.124.210.228	2.93.172.205	189.69.129.212	170.10.248.103
180.5.20.168	220.97.82.185	123.21.115.223	168.196.183.126
201.23.236.211	71.219.53.206	88.250.48.230	12.40.30.150
150.38.152.166	103.248.31.50	138.6.197.155	184.187.192.25
147.33.135.154	179.152.208.184	191.219.57.75	210.241.111.180