Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Shanghai

Region: Shanghai

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
113.138.218.66 attack
firewall-block, port(s): 23/tcp
2019-07-13 04:50:53
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.138.2.158
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6942
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;113.138.2.158.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024092601 1800 900 604800 86400

;; Query time: 42 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 27 03:47:28 CST 2024
;; MSG SIZE  rcvd: 106
Host info
Host 158.2.138.113.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 158.2.138.113.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
47.75.6.239 attackspam
Automatic report - XMLRPC Attack
2020-08-26 05:19:35
216.10.31.173 attack
WordPress XMLRPC scan :: 216.10.31.173 0.088 - [25/Aug/2020:20:00:51  0000] www.[censored_1] "GET /xmlrpc.php?rsd HTTP/1.1" 200 322 "https://www.[censored_1]/knowledge-base/facebook-articles/how-to-delete-all-facebook-profile-wall-posts/" "Mozilla/5.0 (Windows NT 5.1; WOW64; rv:47.0) Gecko/20100101 Firefox/47.0" "HTTP/1.1"
2020-08-26 05:39:18
218.16.123.96 attackspam
Unauthorized connection attempt from IP address 218.16.123.96 on Port 445(SMB)
2020-08-26 05:27:32
45.191.62.201 attackspambots
Unauthorized connection attempt from IP address 45.191.62.201 on Port 445(SMB)
2020-08-26 05:43:09
62.103.87.101 attackspambots
2020-08-25T16:44:35.7527161495-001 sshd[21483]: Invalid user user from 62.103.87.101 port 54297
2020-08-25T16:44:37.9805711495-001 sshd[21483]: Failed password for invalid user user from 62.103.87.101 port 54297 ssh2
2020-08-25T16:48:01.8410841495-001 sshd[21669]: Invalid user luiz from 62.103.87.101 port 54254
2020-08-25T16:48:01.8441611495-001 sshd[21669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=host5.chania-cci.ondsl.gr
2020-08-25T16:48:01.8410841495-001 sshd[21669]: Invalid user luiz from 62.103.87.101 port 54254
2020-08-25T16:48:03.3462261495-001 sshd[21669]: Failed password for invalid user luiz from 62.103.87.101 port 54254 ssh2
...
2020-08-26 05:31:01
58.27.95.2 attackspam
Aug 26 02:12:53 gw1 sshd[4694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.27.95.2
Aug 26 02:12:54 gw1 sshd[4694]: Failed password for invalid user test2 from 58.27.95.2 port 59640 ssh2
...
2020-08-26 05:33:51
200.52.80.34 attackspambots
Aug 25 23:01:42 nuernberg-4g-01 sshd[31487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34 
Aug 25 23:01:44 nuernberg-4g-01 sshd[31487]: Failed password for invalid user zf from 200.52.80.34 port 47804 ssh2
Aug 25 23:05:43 nuernberg-4g-01 sshd[32762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34
2020-08-26 05:19:52
5.39.82.14 attack
5.39.82.14 - - [25/Aug/2020:21:00:44 +0100] "POST /wp-login.php HTTP/1.1" 200 2080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
5.39.82.14 - - [25/Aug/2020:21:00:45 +0100] "POST /wp-login.php HTTP/1.1" 200 2080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
5.39.82.14 - - [25/Aug/2020:21:00:46 +0100] "POST /wp-login.php HTTP/1.1" 200 2083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-26 05:50:00
35.188.166.245 attackspam
Aug 25 21:02:58 jumpserver sshd[41149]: Invalid user cvn from 35.188.166.245 port 47182
Aug 25 21:03:01 jumpserver sshd[41149]: Failed password for invalid user cvn from 35.188.166.245 port 47182 ssh2
Aug 25 21:04:30 jumpserver sshd[41162]: Invalid user chef from 35.188.166.245 port 53048
...
2020-08-26 05:32:57
222.186.42.155 attackspam
SSHD unauthorised connection attempt (b)
2020-08-26 05:25:24
120.203.29.78 attackbotsspam
Aug 25 22:24:32 cho sshd[1621067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.203.29.78 
Aug 25 22:24:32 cho sshd[1621067]: Invalid user beatriz from 120.203.29.78 port 12009
Aug 25 22:24:35 cho sshd[1621067]: Failed password for invalid user beatriz from 120.203.29.78 port 12009 ssh2
Aug 25 22:27:54 cho sshd[1621338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.203.29.78  user=root
Aug 25 22:27:56 cho sshd[1621338]: Failed password for root from 120.203.29.78 port 34372 ssh2
...
2020-08-26 05:51:16
103.25.36.194 attackspambots
Time:     Tue Aug 25 19:59:05 2020 +0000
IP:       103.25.36.194 (CN/China/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Aug 25 19:54:11 vps1 sshd[23595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.25.36.194  user=root
Aug 25 19:54:13 vps1 sshd[23595]: Failed password for root from 103.25.36.194 port 44095 ssh2
Aug 25 19:57:49 vps1 sshd[23688]: Invalid user arjun from 103.25.36.194 port 51448
Aug 25 19:57:51 vps1 sshd[23688]: Failed password for invalid user arjun from 103.25.36.194 port 51448 ssh2
Aug 25 19:58:57 vps1 sshd[23713]: Invalid user toa from 103.25.36.194 port 48764
2020-08-26 05:23:12
91.204.107.107 attack
Unauthorized connection attempt from IP address 91.204.107.107 on Port 445(SMB)
2020-08-26 05:27:06
91.215.205.241 attackbots
Unauthorized connection attempt from IP address 91.215.205.241 on Port 445(SMB)
2020-08-26 05:34:16
158.69.192.35 attackspambots
detected by Fail2Ban
2020-08-26 05:47:33

Recently Reported IPs

113.138.182.200 113.138.13.89 113.139.26.86 113.138.136.89
113.139.238.154 113.140.250.224 113.140.30.59 113.140.46.61
113.140.35.231 113.140.40.133 113.141.11.166 113.140.76.60
113.141.121.138 113.141.157.2 113.141.171.136 113.141.103.32
113.141.151.40 113.141.169.169 113.140.8.5 113.141.246.29