166.244.1.138 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 166.244.1.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14995
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;166.244.1.138.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021701 1800 900 604800 86400

;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 02:08:38 CST 2025
;; MSG SIZE  rcvd: 106

Host info

138.1.244.166.in-addr.arpa domain name pointer 138.sub-166-244-1.myvzw.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
138.1.244.166.in-addr.arpa	name = 138.sub-166-244-1.myvzw.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.176.27.38	attackspambots	Mar 8 08:28:10 debian-2gb-nbg1-2 kernel: \[5911647.555097\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.38 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=1837 PROTO=TCP SPT=58555 DPT=12943 WINDOW=1024 RES=0x00 SYN URGP=0	2020-03-08 15:30:55
190.117.62.241	attack	$f2bV_matches	2020-03-08 15:40:47
202.105.179.64	attackspambots	k+ssh-bruteforce	2020-03-08 15:05:13
69.195.235.241	attackspam	Mar 7 19:01:50 wbs sshd\[3073\]: Invalid user g from 69.195.235.241 Mar 7 19:01:50 wbs sshd\[3073\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.195.235.241 Mar 7 19:01:52 wbs sshd\[3073\]: Failed password for invalid user g from 69.195.235.241 port 50368 ssh2 Mar 7 19:08:35 wbs sshd\[3659\]: Invalid user qwerty from 69.195.235.241 Mar 7 19:08:35 wbs sshd\[3659\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.195.235.241	2020-03-08 15:31:22
143.208.145.6	attackspam	03/07/2020-23:55:49.546174 143.208.145.6 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2020-03-08 15:43:43
177.155.36.199	attackspam	DATE:2020-03-08 06:17:32, IP:177.155.36.199, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-03-08 15:29:32
212.129.48.145	attackbotsspam	[2020-03-08 03:16:41] NOTICE[1148] chan_sip.c: Registration from '"1529"' failed for '212.129.48.145:63278' - Wrong password [2020-03-08 03:16:41] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-03-08T03:16:41.244-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1529",SessionID="0x7fd82c530768",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.129.48.145/63278",Challenge="78d707bc",ReceivedChallenge="78d707bc",ReceivedHash="f5e89626e95395b7c79161154d314a3c" [2020-03-08 03:16:42] NOTICE[1148] chan_sip.c: Registration from '"1590"' failed for '212.129.48.145:63311' - Wrong password [2020-03-08 03:16:42] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-03-08T03:16:42.432-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1590",SessionID="0x7fd82c3f03d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UD ...	2020-03-08 15:27:19
47.137.195.38	attackspambots	Honeypot attack, port: 81, PTR: PTR record not found	2020-03-08 15:36:03
115.159.66.109	attackbots	Mar 8 06:12:29 vps647732 sshd[4815]: Failed password for root from 115.159.66.109 port 59600 ssh2 Mar 8 06:20:31 vps647732 sshd[5015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.66.109 ...	2020-03-08 15:05:37
59.27.101.41	attack	[portscan] Port scan	2020-03-08 15:10:30
176.31.193.56	attackspambots	Mar 8 08:13:18 vserver sshd\[28148\]: Invalid user samp from 176.31.193.56Mar 8 08:13:20 vserver sshd\[28148\]: Failed password for invalid user samp from 176.31.193.56 port 38554 ssh2Mar 8 08:19:42 vserver sshd\[28180\]: Invalid user oradev from 176.31.193.56Mar 8 08:19:44 vserver sshd\[28180\]: Failed password for invalid user oradev from 176.31.193.56 port 42200 ssh2 ...	2020-03-08 15:22:51
171.99.205.231	attackspam	Telnet Server BruteForce Attack	2020-03-08 15:14:09
185.176.27.126	attackbotsspam	Mar 8 08:17:20 debian-2gb-nbg1-2 kernel: \[5910997.324757\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.126 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=22132 PROTO=TCP SPT=58557 DPT=6749 WINDOW=1024 RES=0x00 SYN URGP=0	2020-03-08 15:34:29
78.128.113.93	attack	Mar 8 07:41:44 ns3042688 postfix/smtpd\[27262\]: warning: unknown\[78.128.113.93\]: SASL CRAM-MD5 authentication failed: authentication failure Mar 8 07:41:49 ns3042688 postfix/smtpd\[27262\]: warning: unknown\[78.128.113.93\]: SASL CRAM-MD5 authentication failed: authentication failure Mar 8 07:50:56 ns3042688 postfix/smtpd\[27744\]: warning: unknown\[78.128.113.93\]: SASL CRAM-MD5 authentication failed: authentication failure ...	2020-03-08 14:59:35
140.143.33.99	attackspam	$f2bV_matches	2020-03-08 15:20:13

Recently Reported IPs

193.147.230.251	151.174.8.173	186.228.184.62	62.61.147.93
29.222.249.121	248.177.249.183	178.157.34.233	125.108.255.61
33.119.165.246	66.12.47.23	186.63.53.76	177.143.139.217
254.86.49.160	4.146.164.92	74.126.12.109	114.227.0.125
232.206.194.212	196.9.146.54	154.195.13.47	91.186.219.37