2.138.6.72 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Spain

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
2.138.62.79	attack	2.138.62.79 (ES/Spain/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 9 16:48:54 server2 sshd[11285]: Failed password for root from 103.39.217.170 port 35488 ssh2 Oct 9 16:48:52 server2 sshd[11285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.39.217.170 user=root Oct 9 16:49:06 server2 sshd[11559]: Failed password for root from 2.138.62.79 port 57910 ssh2 Oct 9 16:49:45 server2 sshd[11726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.199.195 user=root Oct 9 16:48:23 server2 sshd[11151]: Failed password for root from 54.160.120.29 port 41034 ssh2 IP Addresses Blocked: 103.39.217.170 (CN/China/-)	2020-10-10 21:36:10
2.138.62.79	attackspam	Aug 20 18:46:29 plex-server sshd[455792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.138.62.79 Aug 20 18:46:29 plex-server sshd[455792]: Invalid user panther from 2.138.62.79 port 58626 Aug 20 18:46:31 plex-server sshd[455792]: Failed password for invalid user panther from 2.138.62.79 port 58626 ssh2 Aug 20 18:50:00 plex-server sshd[457254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.138.62.79 user=root Aug 20 18:50:02 plex-server sshd[457254]: Failed password for root from 2.138.62.79 port 40035 ssh2 ...	2020-08-21 02:53:04
2.138.62.79	attack	Jul 31 13:51:44 marvibiene sshd[13240]: Failed password for root from 2.138.62.79 port 50782 ssh2 Jul 31 13:57:03 marvibiene sshd[13453]: Failed password for root from 2.138.62.79 port 59279 ssh2	2020-08-01 02:43:21

Type

Details

Datetime

2.138.62.79

attack

2.138.62.79 (ES/Spain/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct  9 16:48:54 server2 sshd[11285]: Failed password for root from 103.39.217.170 port 35488 ssh2
Oct  9 16:48:52 server2 sshd[11285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.39.217.170  user=root
Oct  9 16:49:06 server2 sshd[11559]: Failed password for root from 2.138.62.79 port 57910 ssh2
Oct  9 16:49:45 server2 sshd[11726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.199.195  user=root
Oct  9 16:48:23 server2 sshd[11151]: Failed password for root from 54.160.120.29 port 41034 ssh2

IP Addresses Blocked:

103.39.217.170 (CN/China/-)

2020-10-10 21:36:10

2.138.62.79

attackspam

Aug 20 18:46:29 plex-server sshd[455792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.138.62.79 
Aug 20 18:46:29 plex-server sshd[455792]: Invalid user panther from 2.138.62.79 port 58626
Aug 20 18:46:31 plex-server sshd[455792]: Failed password for invalid user panther from 2.138.62.79 port 58626 ssh2
Aug 20 18:50:00 plex-server sshd[457254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.138.62.79  user=root
Aug 20 18:50:02 plex-server sshd[457254]: Failed password for root from 2.138.62.79 port 40035 ssh2
...

2020-08-21 02:53:04

2.138.62.79

attack

Jul 31 13:51:44 marvibiene sshd[13240]: Failed password for root from 2.138.62.79 port 50782 ssh2
Jul 31 13:57:03 marvibiene sshd[13453]: Failed password for root from 2.138.62.79 port 59279 ssh2

2020-08-01 02:43:21

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.138.6.72
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9242
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;2.138.6.72.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021701 1800 900 604800 86400

;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 06:05:58 CST 2025
;; MSG SIZE  rcvd: 103

Host info

72.6.138.2.in-addr.arpa domain name pointer 72.red-2-138-6.dynamicip.rima-tde.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
72.6.138.2.in-addr.arpa	name = 72.red-2-138-6.dynamicip.rima-tde.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
23.129.64.215	attack	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-02T02:11:46Z and 2020-09-02T02:11:49Z	2020-09-02 17:50:14
50.100.113.207	attack	Sep 2 05:39:26 marvibiene sshd[19636]: Failed password for root from 50.100.113.207 port 38462 ssh2	2020-09-02 17:18:54
139.198.122.19	attackspam	Sep 2 02:01:25 dignus sshd[21748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.122.19 user=root Sep 2 02:01:27 dignus sshd[21748]: Failed password for root from 139.198.122.19 port 34956 ssh2 Sep 2 02:05:15 dignus sshd[22241]: Invalid user andres from 139.198.122.19 port 53000 Sep 2 02:05:15 dignus sshd[22241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.122.19 Sep 2 02:05:17 dignus sshd[22241]: Failed password for invalid user andres from 139.198.122.19 port 53000 ssh2 ...	2020-09-02 17:28:05
112.78.183.21	attack	2020-09-02T11:51:53.011714mail.standpoint.com.ua sshd[29208]: Invalid user dg from 112.78.183.21 port 34596 2020-09-02T11:51:53.014894mail.standpoint.com.ua sshd[29208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.78.183.21 2020-09-02T11:51:53.011714mail.standpoint.com.ua sshd[29208]: Invalid user dg from 112.78.183.21 port 34596 2020-09-02T11:51:55.144345mail.standpoint.com.ua sshd[29208]: Failed password for invalid user dg from 112.78.183.21 port 34596 ssh2 2020-09-02T11:53:04.339097mail.standpoint.com.ua sshd[29352]: Invalid user ubnt from 112.78.183.21 port 41351 ...	2020-09-02 17:21:12
40.127.64.87	attackspam	Fail2Ban Ban Triggered	2020-09-02 17:45:29
192.241.235.116	attackspambots	Port probing on unauthorized port 26	2020-09-02 17:38:42
105.112.123.233	attack	1598978564 - 09/01/2020 18:42:44 Host: 105.112.123.233/105.112.123.233 Port: 445 TCP Blocked	2020-09-02 17:39:13
123.207.78.75	attackspam	Invalid user code from 123.207.78.75 port 46404	2020-09-02 17:23:20
178.63.87.197	attackspam	20 attempts against mh-misbehave-ban on float	2020-09-02 17:26:54
114.35.3.49	attack	Telnet Server BruteForce Attack	2020-09-02 17:43:50
187.160.8.47	attackbotsspam	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-09-02 17:24:22
89.122.24.170	attackbotsspam	TCP (SYN) 89.122.24.170:29443 -> port 23, len 44	2020-09-02 17:47:17
103.19.59.110	attackbots	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-09-02 17:36:24
118.25.74.199	attackspambots	(sshd) Failed SSH login from 118.25.74.199 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 2 05:00:04 server sshd[21144]: Invalid user lw from 118.25.74.199 port 46066 Sep 2 05:00:06 server sshd[21144]: Failed password for invalid user lw from 118.25.74.199 port 46066 ssh2 Sep 2 05:03:25 server sshd[21897]: Invalid user restore from 118.25.74.199 port 48252 Sep 2 05:03:27 server sshd[21897]: Failed password for invalid user restore from 118.25.74.199 port 48252 ssh2 Sep 2 05:04:56 server sshd[22191]: Invalid user user from 118.25.74.199 port 34474	2020-09-02 18:02:34
220.98.191.236	attackspambots	Automatic report - Port Scan Attack	2020-09-02 17:33:04

Recently Reported IPs

181.207.64.104	121.13.8.183	5.80.114.15	79.188.115.238
30.103.185.29	185.34.121.156	172.140.7.35	52.136.203.132
234.28.62.114	48.168.135.181	109.117.88.14	155.121.147.60
41.199.237.135	250.123.45.141	92.34.13.244	70.95.26.74
255.35.242.125	206.45.68.7	134.95.251.210	219.88.139.31