138.99.216.11 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Belize

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.99.216.147	attackbots	138.99.216.147 - - [07/Aug/2020:06:50:18 -0400] "GET /403.shtml HTTP/1.1"	2020-08-07 22:54:31
138.99.216.104	attack	SmallBizIT.US 7 packets to tcp(4444,4455,33333,33890,40000,43389,63389)	2020-08-01 14:07:36
138.99.216.171	attack	Multihost portscan.	2020-07-29 19:35:15
138.99.216.147	attackbotsspam	Unauthorized SSH login attempts	2020-07-26 02:39:10
138.99.216.92	attackspambots	SmallBizIT.US 4 packets to tcp(3380,3384,3386,3390)	2020-07-20 06:26:17
138.99.216.147	attackbotsspam	Hacking	2020-07-04 07:16:06
138.99.216.112	attack	Jun 16 01:36:26 mail postfix/postscreen[14633]: DNSBL rank 3 for [138.99.216.112]:61000 ...	2020-06-29 04:47:49
138.99.216.147	attackspam	Jun 20 02:05:08 mail postfix/postscreen[22396]: DNSBL rank 3 for [138.99.216.147]:61000 ...	2020-06-29 04:46:26
138.99.216.171	attackbots	Jun 17 01:03:35 mail postfix/postscreen[3929]: DNSBL rank 3 for [138.99.216.171]:61000 ...	2020-06-29 04:45:58
138.99.216.112	attackbots	Automatic report - Banned IP Access	2020-06-27 20:39:48
138.99.216.171	attack	bad	2020-06-17 18:35:22
138.99.216.92	attack	SmallBizIT.US 7 packets to tcp(3332,3335,3372,3420,3421,5901,11027)	2020-06-16 07:39:19
138.99.216.92	attack	SmallBizIT.US 3 packets to tcp(3372,3503,55389)	2020-06-06 18:19:38
138.99.216.92	attackbotsspam	port	2020-05-29 16:29:26
138.99.216.147	attackspambots	May 27 06:03:38 mail kernel: [926510.604365] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=138.99.216.147 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=7979 PROTO=TCP SPT=61000 DPT=2525 WINDOW=1024 RES=0x00 SYN URGP=0 May 27 06:03:47 mail kernel: [926519.228627] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=138.99.216.147 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=52750 PROTO=TCP SPT=61000 DPT=23 WINDOW=1024 RES=0x00 SYN URGP=0 May 27 06:04:32 mail kernel: [926564.272009] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=138.99.216.147 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=17012 PROTO=TCP SPT=61000 DPT=8095 WINDOW=1024 RES=0x00 SYN URGP=0 May 27 06:04:40 mail kernel: [926572.880879] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=138.99.216.147 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=34444 PROTO=TCP SPT=61000 DPT=20000 WINDOW=1024 RES=0x00 SYN URGP=0	2020-05-27 12:32:25

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.99.216.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50189
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.99.216.11.			IN	A

;; AUTHORITY SECTION:
.			307	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 12:32:17 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 11.216.99.138.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 11.216.99.138.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
93.174.93.195	attack	May 24 21:32:47 debian-2gb-nbg1-2 kernel: \[12607574.563098\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=93.174.93.195 DST=195.201.40.59 LEN=57 TOS=0x00 PREC=0x00 TTL=247 ID=54321 PROTO=UDP SPT=33452 DPT=40969 LEN=37	2020-05-25 04:11:38
210.212.237.67	attackspambots	2020-05-24T13:16:19.923536linuxbox-skyline sshd[42746]: Invalid user zabbix from 210.212.237.67 port 41726 ...	2020-05-25 04:03:35
222.239.28.178	attackspambots	May 24 17:27:20 vps46666688 sshd[1931]: Failed password for root from 222.239.28.178 port 42634 ssh2 ...	2020-05-25 04:31:12
119.27.190.236	attack	May 24 17:28:22 vps46666688 sshd[1968]: Failed password for root from 119.27.190.236 port 52308 ssh2 May 24 17:32:11 vps46666688 sshd[2140]: Failed password for root from 119.27.190.236 port 33308 ssh2 ...	2020-05-25 04:41:02
134.17.94.158	attack	$f2bV_matches	2020-05-25 04:08:29
68.99.85.62	attackbots	May 23 12:54:14 django sshd[42582]: Invalid user e from 68.99.85.62 May 23 12:54:14 django sshd[42582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip68-99-85-62.ph.ph.cox.net May 23 12:54:16 django sshd[42582]: Failed password for invalid user e from 68.99.85.62 port 42478 ssh2 May 23 12:54:16 django sshd[42583]: Received disconnect from 68.99.85.62: 11: Bye Bye May 23 13:24:00 django sshd[46717]: Invalid user bd from 68.99.85.62 May 23 13:24:00 django sshd[46717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip68-99-85-62.ph.ph.cox.net May 23 13:24:01 django sshd[46717]: Failed password for invalid user bd from 68.99.85.62 port 53154 ssh2 May 23 13:24:01 django sshd[46718]: Received disconnect from 68.99.85.62: 11: Bye Bye May 23 13:27:30 django sshd[47147]: Invalid user vdt from 68.99.85.62 May 23 13:27:30 django sshd[47147]: pam_unix(sshd:auth): authentication failure; logname= ........ -------------------------------	2020-05-25 04:16:05
185.143.75.157	attackbots	2020-05-24 23:08:11 dovecot_login authenticator failed for $User$ \[185.143.75.157\]: 535 Incorrect authentication data $set_id=a1@org.ua$2020-05-24 23:08:49 dovecot_login authenticator failed for $User$ \[185.143.75.157\]: 535 Incorrect authentication data $set_id=influxdb@org.ua$2020-05-24 23:09:26 dovecot_login authenticator failed for $User$ \[185.143.75.157\]: 535 Incorrect authentication data $set_id=mcasino@org.ua$ ...	2020-05-25 04:09:35
103.7.37.150	attackspambots	Honeypot hit.	2020-05-25 04:16:56
188.191.235.237	attackspambots	Dovecot Invalid User Login Attempt.	2020-05-25 04:23:39
148.70.125.42	attackbots	May 24 22:06:28 abendstille sshd\[17378\]: Invalid user downloads from 148.70.125.42 May 24 22:06:28 abendstille sshd\[17378\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.125.42 May 24 22:06:30 abendstille sshd\[17378\]: Failed password for invalid user downloads from 148.70.125.42 port 41198 ssh2 May 24 22:10:04 abendstille sshd\[21030\]: Invalid user admin from 148.70.125.42 May 24 22:10:04 abendstille sshd\[21030\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.125.42 ...	2020-05-25 04:18:17
206.189.26.171	attackbots	bruteforce detected	2020-05-25 04:32:53
200.165.167.10	attackspam	May 24 18:39:35 ws26vmsma01 sshd[69156]: Failed password for root from 200.165.167.10 port 59385 ssh2 ...	2020-05-25 04:33:43
51.68.181.121	attackspam	[2020-05-24 16:04:51] NOTICE[1157] chan_sip.c: Registration from '"4401" ' failed for '51.68.181.121:5907' - Wrong password [2020-05-24 16:04:51] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-24T16:04:51.253-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4401",SessionID="0x7f5f1092cfb8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.68.181.121/5907",Challenge="6c5d0adb",ReceivedChallenge="6c5d0adb",ReceivedHash="17c5b7c1adc1cc0e2c5caf0579430139" [2020-05-24 16:04:51] NOTICE[1157] chan_sip.c: Registration from '"4401" ' failed for '51.68.181.121:5907' - Wrong password [2020-05-24 16:04:51] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-24T16:04:51.398-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4401",SessionID="0x7f5f102e5628",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51 ...	2020-05-25 04:14:55
167.172.36.114	attackspambots	167.172.36.114 - - [24/May/2020:21:57:57 +0200] "\x16\x03\x01\x00u\x01\x00\x00q\x03\x03\xA0L\x94\xD2\x1Aw\x08\x0Cc\x06\xD7\x8DQ\x94m\x90 x\xA7\xC8\x22\xC64[L3yv\x1A\x8D\xCFD\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 166 "-" "-"	2020-05-25 04:38:52
178.128.26.233	attackbotsspam	May 24 16:28:41 ny01 sshd[12897]: Failed password for root from 178.128.26.233 port 59934 ssh2 May 24 16:32:18 ny01 sshd[13389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.26.233 May 24 16:32:20 ny01 sshd[13389]: Failed password for invalid user nfs from 178.128.26.233 port 37642 ssh2	2020-05-25 04:35:55

Recently Reported IPs

139.0.153.129	138.99.59.92	139.0.33.38	138.99.68.131
139.0.144.182	138.99.249.131	138.99.220.253	139.0.144.213
138.99.248.176	139.0.48.181	139.0.55.46	138.99.7.27
139.0.6.34	139.0.6.84	139.104.192.37	139.0.84.45
139.104.36.53	139.112.168.16	139.0.85.24	139.0.72.48