Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.196.138.77
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26694
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;131.196.138.77.			IN	A

;; AUTHORITY SECTION:
.			443	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030802 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 05:31:22 CST 2022
;; MSG SIZE  rcvd: 107
Host info
77.138.196.131.in-addr.arpa domain name pointer 131-196-138-77.customer.invistanet.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
77.138.196.131.in-addr.arpa	name = 131-196-138-77.customer.invistanet.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
223.25.101.76 attack
2019-10-10T18:20:12.205754abusebot-4.cloudsearch.cf sshd\[4521\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.25.101.76  user=root
2019-10-11 02:38:05
94.29.124.106 attackbots
Unauthorised access (Oct 10) SRC=94.29.124.106 LEN=52 TTL=113 ID=18762 DF TCP DPT=445 WINDOW=8192 SYN
2019-10-11 02:53:13
192.227.252.23 attack
2019-10-10T18:14:45.557855abusebot-7.cloudsearch.cf sshd\[32128\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.23  user=root
2019-10-11 02:35:18
80.211.159.118 attackbots
Oct  6 00:12:10 srv01 sshd[1896]: reveeclipse mapping checking getaddrinfo for host118-159-211-80.serverdedicati.aruba.hostname [80.211.159.118] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct  6 00:12:10 srv01 sshd[1896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.159.118  user=r.r
Oct  6 00:12:12 srv01 sshd[1896]: Failed password for r.r from 80.211.159.118 port 51868 ssh2
Oct  6 00:12:12 srv01 sshd[1896]: Received disconnect from 80.211.159.118: 11: Bye Bye [preauth]
Oct  6 00:29:09 srv01 sshd[2623]: reveeclipse mapping checking getaddrinfo for host118-159-211-80.serverdedicati.aruba.hostname [80.211.159.118] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct  6 00:29:09 srv01 sshd[2623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.159.118  user=r.r
Oct  6 00:29:11 srv
.... truncated .... 

Oct  6 00:12:10 srv01 sshd[1896]: reveeclipse mapping checking getaddrinfo for host118-159-211-........
-------------------------------
2019-10-11 02:55:48
106.12.77.73 attack
Lines containing failures of 106.12.77.73
Oct  5 12:40:56 vps9 sshd[1016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.77.73  user=r.r
Oct  5 12:40:58 vps9 sshd[1016]: Failed password for r.r from 106.12.77.73 port 36002 ssh2
Oct  5 12:40:59 vps9 sshd[1016]: Received disconnect from 106.12.77.73 port 36002:11: Bye Bye [preauth]
Oct  5 12:40:59 vps9 sshd[1016]: Disconnected from authenticating user r.r 106.12.77.73 port 36002 [preauth]
Oct  5 13:07:38 vps9 sshd[14555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.77.73  user=r.r
Oct  5 13:07:40 vps9 sshd[14555]: Failed password for r.r from 106.12.77.73 port 49958 ssh2
Oct  5 13:07:40 vps9 sshd[14555]: Received disconnect from 106.12.77.73 port 49958:11: Bye Bye [preauth]
Oct  5 13:07:40 vps9 sshd[14555]: Disconnected from authenticating user r.r 106.12.77.73 port 49958 [preauth]
Oct  5 13:12:40 vps9 sshd[16923]: pam_unix(........
------------------------------
2019-10-11 02:21:12
176.31.191.61 attackbotsspam
SSH Brute Force
2019-10-11 02:53:53
81.106.220.20 attack
Oct 10 14:33:45 microserver sshd[18712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.106.220.20  user=root
Oct 10 14:33:47 microserver sshd[18712]: Failed password for root from 81.106.220.20 port 53543 ssh2
Oct 10 14:38:18 microserver sshd[19322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.106.220.20  user=root
Oct 10 14:38:21 microserver sshd[19322]: Failed password for root from 81.106.220.20 port 45022 ssh2
Oct 10 14:42:50 microserver sshd[19954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.106.220.20  user=root
Oct 10 14:55:58 microserver sshd[21791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.106.220.20  user=root
Oct 10 14:56:00 microserver sshd[21791]: Failed password for root from 81.106.220.20 port 38733 ssh2
Oct 10 15:00:26 microserver sshd[22395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid
2019-10-11 02:55:18
180.76.150.29 attack
Oct 10 20:14:39 meumeu sshd[16115]: Failed password for root from 180.76.150.29 port 35164 ssh2
Oct 10 20:18:53 meumeu sshd[16712]: Failed password for root from 180.76.150.29 port 40714 ssh2
...
2019-10-11 02:41:41
114.236.226.81 attackbotsspam
Oct  7 14:11:30 php sshd[18535]: Did not receive identification string from 114.236.226.81 port 60312
Oct  7 14:11:32 php sshd[18536]: Invalid user pi from 114.236.226.81 port 60385
Oct  7 14:11:32 php sshd[18536]: Connection closed by 114.236.226.81 port 60385 [preauth]
Oct  7 14:11:34 php sshd[18538]: Invalid user pi from 114.236.226.81 port 60811
Oct  7 14:11:34 php sshd[18538]: Connection closed by 114.236.226.81 port 60811 [preauth]
Oct  7 14:11:36 php sshd[18581]: Invalid user pi from 114.236.226.81 port 60930
Oct  7 14:11:36 php sshd[18581]: Connection closed by 114.236.226.81 port 60930 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=114.236.226.81
2019-10-11 02:45:44
89.145.74.91 attackbotsspam
WordPress wp-login brute force :: 89.145.74.91 0.124 BYPASS [11/Oct/2019:04:03:52  1100] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-10-11 02:51:41
175.167.232.164 attack
Unauthorised access (Oct 10) SRC=175.167.232.164 LEN=40 TTL=49 ID=29222 TCP DPT=8080 WINDOW=39522 SYN 
Unauthorised access (Oct 10) SRC=175.167.232.164 LEN=40 TTL=49 ID=52627 TCP DPT=8080 WINDOW=29449 SYN
2019-10-11 02:27:09
191.33.222.141 attackspam
Oct 10 11:34:10 riskplan-s sshd[25654]: reveeclipse mapping checking getaddrinfo for 191.33.222.141.dynamic.adsl.gvt.net.br [191.33.222.141] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct 10 11:34:10 riskplan-s sshd[25654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.33.222.141  user=r.r
Oct 10 11:34:12 riskplan-s sshd[25654]: Failed password for r.r from 191.33.222.141 port 54436 ssh2
Oct 10 11:34:13 riskplan-s sshd[25654]: Received disconnect from 191.33.222.141: 11: Bye Bye [preauth]
Oct 10 11:39:05 riskplan-s sshd[25706]: reveeclipse mapping checking getaddrinfo for 191.33.222.141.dynamic.adsl.gvt.net.br [191.33.222.141] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct 10 11:39:05 riskplan-s sshd[25706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.33.222.141  user=r.r
Oct 10 11:39:06 riskplan-s sshd[25706]: Failed password for r.r from 191.33.222.141 port 37250 ssh2
Oct 10 11:39:07 riskp........
-------------------------------
2019-10-11 02:35:34
104.236.124.45 attack
SSH Brute Force, server-1 sshd[31321]: Failed password for root from 104.236.124.45 port 50200 ssh2
2019-10-11 02:44:35
129.213.76.243 attackbots
Invalid user Porn2017 from 129.213.76.243 port 49776
2019-10-11 02:40:31
106.12.91.209 attackbotsspam
Triggered by Fail2Ban at Vostok web server
2019-10-11 02:52:07

Recently Reported IPs

131.196.138.70 118.172.236.47 131.196.138.78 131.196.138.84
131.196.138.75 131.196.138.86 131.196.138.92 131.196.138.98
131.196.138.90 131.196.14.11 131.196.138.97 51.175.201.240
131.196.138.9 118.172.236.80 131.196.14.116 131.196.14.114
131.196.14.159 131.196.14.149 131.196.14.203 131.196.141.1