138.219.49.27 Threat Intelligence and Host Information

Oct 09, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 138.219.49.27 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Host and Network Information

View other sources: Spamhaus VirusTotal

Country: Brazil
Network:
Noticed: times
Protocols Attacked: telnet

Malware Detected on Host

Count:

Open Ports Detected

50080

Map

Whois Information

NetRange: 138.219.0.0 - 138.219.255.255
CIDR: 138.219.0.0/16
NetName: LACNIC-ERX-138-219-0-0
NetHandle: NET-138-219-0-0-1
Parent: NET138 (NET-138-0-0-0-0)
NetType: Transferred to LACNIC
OriginAS:
Organization: Latin American and Caribbean IP address Regional Registry (LACNIC)
RegDate: 2010-11-19
Updated: 2010-11-19
Comment: This IP address range is under LACNIC responsibility
Comment: for further allocations to users in LACNIC region.
Comment: Please see http://www.lacnic.net/ for further details,
Ref: https://rdap.arin.net/registry/ip/138.219.0.0
OrgName: Latin American and Caribbean IP address Regional Registry
OrgId: LACNIC
Address: Rambla Republica de Mexico 6125
City: Montevideo
StateProv:
PostalCode: 11400
Country: UY
RegDate: 2002-07-27
Updated: 2018-03-15
Ref: https://rdap.arin.net/registry/entity/LACNIC
OrgTechHandle: LACNIC-ARIN
OrgTechName: LACNIC Whois Info
OrgTechPhone: +598-2604-2222
OrgTechRef: https://rdap.arin.net/registry/entity/LACNIC-ARIN
OrgAbuseHandle: LWI100-ARIN
OrgAbuseName: LACNIC Whois Info
OrgAbusePhone: +598-2604-2222
OrgAbuseEmail: abuse@lacnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/LWI100-ARIN
inetnum: 138.219.48.0/22
aut-num: AS273309
abuse-c: ANOSI312
owner: UNI TELECOM LTDA
ownerid: 49.271.108/0001-08
responsible: Marlon Samuel Gon�alves
country: BR
owner-c: MASGO10
tech-c: ISTLT67
inetrev: 138.219.48.0/22
nserver: ns1.souuni.com.br
nsstat: 20251007 AA
nslastaa: 20251007
nserver: ns2.souuni.com.br
nsstat: 20251007 AA
nslastaa: 20251007
dsinetrev: 138.219.48.0/24
dsrecord: 34844 RSA-SHA-256 7F47A6F3268228E1C32BF797DA77FE4131C20110DC0F0286CE7E7CB1E2C7B359
dsstatus: 20251007 OK
dslastok: 20251007
dsinetrev: 138.219.49.0/24
dsrecord: 6347 RSA-SHA-256 82F25F351917CEED6B3B19AB89DBDE7C42D1A315FA473FDCF5396B518D8AD573
dsstatus: 20251007 OK
dslastok: 20251007
dsinetrev: 138.219.50.0/24
dsrecord: 52874 RSA-SHA-256 D3AF0A541F5B6646B02E5CCB655AAB2EC0076D145F5E850137612C74B112E85F
dsstatus: 20251007 OK
dslastok: 20251007
dsinetrev: 138.219.51.0/24
dsrecord: 54227 RSA-SHA-256 92743CB8092A032349AC6C803218B26B534D6C694C90E39108628EAFC9648D50
dsstatus: 20251007 OK
dslastok: 20251007
created: 20150817
changed: 20240311
nic-hdl-br: MASGO10
person: Marlon Samuel Gon�alves
e-mail: marlon@souuni.com
country: BR
created: 20061013
changed: 20240411
nic-hdl-br: ANOSI312
person: Andr� de Oliveira Silva
e-mail: abuse@souuni.com
country: BR
created: 20240201
changed: 20240311
nic-hdl-br: ISTLT67
person: ISPRO TELECOM LTDA
e-mail: noc@souuni.com
country: BR
created: 20230926
changed: 20240322

Links to attack logs

****** dolondon-telnet-bruteforce-ip-list-2022-09-18 ****** ******

Share on: