Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: India

Internet Service Provider: Sify Limited

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackspambots
Dec 15 10:19:02 vpn01 sshd[14269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.6.138.243
...
2019-12-15 21:37:03
attack
detected by Fail2Ban
2019-10-17 20:55:47
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.6.138.243
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29177
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.6.138.243.			IN	A

;; AUTHORITY SECTION:
.			412	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101700 1800 900 604800 86400

;; Query time: 140 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 17 20:55:44 CST 2019
;; MSG SIZE  rcvd: 115
Host info
Host 243.138.6.1.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 243.138.6.1.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
106.13.237.235 attackspam
Sep  4 08:47:58 localhost sshd[1389816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.237.235  user=root
Sep  4 08:48:01 localhost sshd[1389816]: Failed password for root from 106.13.237.235 port 35334 ssh2
...
2020-09-04 12:17:27
139.162.109.43 attackspam
 TCP (SYN) 139.162.109.43:58886 -> port 111, len 44
2020-09-04 12:51:14
61.177.172.61 attackbots
Sep  4 05:25:44 rocket sshd[25389]: Failed password for root from 61.177.172.61 port 21769 ssh2
Sep  4 05:25:48 rocket sshd[25389]: Failed password for root from 61.177.172.61 port 21769 ssh2
Sep  4 05:25:51 rocket sshd[25389]: Failed password for root from 61.177.172.61 port 21769 ssh2
...
2020-09-04 12:26:54
73.6.227.20 attackspambots
Sep  3 20:14:19 buvik sshd[9124]: Invalid user pi from 73.6.227.20
Sep  3 20:14:19 buvik sshd[9123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.6.227.20
Sep  3 20:14:21 buvik sshd[9123]: Failed password for invalid user pi from 73.6.227.20 port 42310 ssh2
...
2020-09-04 12:51:48
192.241.175.115 attackspambots
Auto Fail2Ban report, multiple SSH login attempts.
2020-09-04 12:47:07
222.186.173.142 attack
Sep  4 06:43:25 minden010 sshd[30003]: Failed password for root from 222.186.173.142 port 45746 ssh2
Sep  4 06:43:29 minden010 sshd[30003]: Failed password for root from 222.186.173.142 port 45746 ssh2
Sep  4 06:43:32 minden010 sshd[30003]: Failed password for root from 222.186.173.142 port 45746 ssh2
Sep  4 06:43:38 minden010 sshd[30003]: error: maximum authentication attempts exceeded for root from 222.186.173.142 port 45746 ssh2 [preauth]
...
2020-09-04 12:52:07
128.199.92.187 attack
sshd jail - ssh hack attempt
2020-09-04 12:34:27
54.38.81.231 attackbots
Sep  3 20:53:47 dignus sshd[25416]: Failed password for root from 54.38.81.231 port 43652 ssh2
Sep  3 20:53:49 dignus sshd[25416]: Failed password for root from 54.38.81.231 port 43652 ssh2
Sep  3 20:53:51 dignus sshd[25416]: Failed password for root from 54.38.81.231 port 43652 ssh2
Sep  3 20:53:54 dignus sshd[25416]: Failed password for root from 54.38.81.231 port 43652 ssh2
Sep  3 20:53:56 dignus sshd[25416]: Failed password for root from 54.38.81.231 port 43652 ssh2
...
2020-09-04 12:19:53
87.190.16.229 attack
Time:     Fri Sep  4 04:24:59 2020 +0000
IP:       87.190.16.229 (DE/Germany/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep  4 04:16:29 ca-1-ams1 sshd[12516]: Invalid user user from 87.190.16.229 port 44734
Sep  4 04:16:31 ca-1-ams1 sshd[12516]: Failed password for invalid user user from 87.190.16.229 port 44734 ssh2
Sep  4 04:21:46 ca-1-ams1 sshd[12735]: Invalid user tangyong from 87.190.16.229 port 42024
Sep  4 04:21:48 ca-1-ams1 sshd[12735]: Failed password for invalid user tangyong from 87.190.16.229 port 42024 ssh2
Sep  4 04:24:56 ca-1-ams1 sshd[12921]: Invalid user norma from 87.190.16.229 port 47254
2020-09-04 12:54:27
162.247.74.200 attack
Sep  3 20:31:49 dignus sshd[21636]: Failed password for root from 162.247.74.200 port 41298 ssh2
Sep  3 20:31:51 dignus sshd[21636]: Failed password for root from 162.247.74.200 port 41298 ssh2
Sep  3 20:31:53 dignus sshd[21636]: Failed password for root from 162.247.74.200 port 41298 ssh2
Sep  3 20:31:56 dignus sshd[21636]: Failed password for root from 162.247.74.200 port 41298 ssh2
Sep  3 20:31:58 dignus sshd[21636]: Failed password for root from 162.247.74.200 port 41298 ssh2
...
2020-09-04 12:43:36
54.36.190.245 attackbotsspam
54.36.190.245 (FR/France/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep  4 00:21:26 server4 sshd[29624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.32.74  user=root
Sep  4 00:21:28 server4 sshd[29624]: Failed password for root from 118.24.32.74 port 36208 ssh2
Sep  4 00:20:47 server4 sshd[29169]: Failed password for root from 181.114.156.122 port 36574 ssh2
Sep  4 00:04:04 server4 sshd[20111]: Failed password for root from 54.36.190.245 port 44946 ssh2
Sep  4 00:13:39 server4 sshd[25655]: Failed password for root from 174.84.183.25 port 38560 ssh2

IP Addresses Blocked:

118.24.32.74 (CN/China/-)
181.114.156.122 (AR/Argentina/-)
2020-09-04 12:31:32
222.186.180.130 attackspam
Sep  4 04:25:59 ip-172-31-61-156 sshd[1237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.130  user=root
Sep  4 04:26:02 ip-172-31-61-156 sshd[1237]: Failed password for root from 222.186.180.130 port 35311 ssh2
...
2020-09-04 12:29:21
111.231.93.35 attack
Sep  4 03:18:18 h2427292 sshd\[13094\]: Invalid user logger from 111.231.93.35
Sep  4 03:18:18 h2427292 sshd\[13094\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.93.35 
Sep  4 03:18:20 h2427292 sshd\[13094\]: Failed password for invalid user logger from 111.231.93.35 port 44722 ssh2
...
2020-09-04 12:24:14
54.37.86.192 attackspambots
Sep  4 01:09:24 db sshd[27501]: User root from 54.37.86.192 not allowed because none of user's groups are listed in AllowGroups
...
2020-09-04 12:30:11
112.26.44.112 attackspambots
Invalid user marc from 112.26.44.112 port 52377
2020-09-04 12:39:22

Recently Reported IPs

147.92.54.101 200.58.160.1 89.122.105.49 207.148.65.16
7.252.175.248 203.36.137.123 149.97.247.201 149.202.144.181
53.50.192.109 105.62.87.42 166.20.13.81 33.3.185.190
78.221.62.1 101.45.86.64 122.139.28.239 100.8.16.141
8.89.167.125 177.48.222.169 2.5.104.57 111.169.189.62