Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: LRF Conections Servicos Ltda ME

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attack
Dec 24 15:35:03 localhost sshd\[1728\]: Invalid user admin from 138.0.7.109 port 38992
Dec 24 15:35:03 localhost sshd\[1728\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.7.109
Dec 24 15:35:05 localhost sshd\[1728\]: Failed password for invalid user admin from 138.0.7.109 port 38992 ssh2
...
2019-12-25 00:50:23
Comments on same subnet:
IP Type Details Datetime
138.0.7.143 attack
Unauthorized IMAP connection attempt
2020-05-17 03:06:35
138.0.7.194 attackspam
Invalid user admin from 138.0.7.194 port 54451
2020-04-21 01:42:46
138.0.7.218 attackspambots
Invalid user admin from 138.0.7.218 port 38529
2020-04-19 02:04:09
138.0.7.150 attackspam
Apr 14 05:45:22 *host* sshd\[19124\]: Invalid user admin from 138.0.7.150 port 49020
2020-04-14 19:52:06
138.0.7.90 attack
$f2bV_matches
2020-02-17 13:05:14
138.0.7.121 attackbots
Brute forcing email accounts
2020-01-26 14:48:03
138.0.7.214 attack
Invalid user admin from 138.0.7.214 port 53649
2020-01-21 23:18:52
138.0.7.129 attackbots
Invalid user admin from 138.0.7.129 port 40582
2020-01-19 03:18:08
138.0.7.228 attack
Unauthorized connection attempt detected from IP address 138.0.7.228 to port 22 [J]
2020-01-18 16:49:05
138.0.7.129 attackspam
Invalid user admin from 138.0.7.129 port 40582
2020-01-18 05:11:30
138.0.7.226 attackspam
Oct 27 05:54:12 sauna sshd[16909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.7.226
Oct 27 05:54:14 sauna sshd[16909]: Failed password for invalid user admin from 138.0.7.226 port 50611 ssh2
...
2019-10-27 14:43:21
138.0.7.133 attack
Invalid user admin from 138.0.7.133 port 38858
2019-10-11 21:13:11
138.0.7.205 attackspam
Invalid user admin from 138.0.7.205 port 50005
2019-10-11 21:12:56
138.0.7.229 attack
Oct  1 23:26:58 f201 sshd[13257]: Connection closed by 138.0.7.229 [preauth]
Oct  2 02:26:18 f201 sshd[11336]: Connection closed by 138.0.7.229 [preauth]
Oct  2 05:04:31 f201 sshd[18843]: Connection closed by 138.0.7.229 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=138.0.7.229
2019-10-02 15:57:24
138.0.73.253 attackbots
09/25/2019-08:19:47.519567 138.0.73.253 Protocol: 1 GPL ICMP_INFO PING *NIX
2019-09-26 00:18:09
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.0.7.109
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44554
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.0.7.109.			IN	A

;; AUTHORITY SECTION:
.			255	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122401 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 25 00:50:18 CST 2019
;; MSG SIZE  rcvd: 115
Host info
109.7.0.138.in-addr.arpa domain name pointer 138-0-7-109.static.lrfconections.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
109.7.0.138.in-addr.arpa	name = 138-0-7-109.static.lrfconections.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
117.5.152.161 attackbotsspam
Oct  1 20:33:40 XXX sshd[13822]: Did not receive identification string from 117.5.152.161
Oct  1 20:33:40 XXX sshd[13824]: Did not receive identification string from 117.5.152.161
Oct  1 20:33:40 XXX sshd[13823]: Did not receive identification string from 117.5.152.161
Oct  1 20:33:40 XXX sshd[13825]: Did not receive identification string from 117.5.152.161
Oct  1 20:33:40 XXX sshd[13826]: Did not receive identification string from 117.5.152.161
Oct  1 20:33:40 XXX sshd[13827]: Did not receive identification string from 117.5.152.161
Oct  1 20:33:44 XXX sshd[13845]: Address 117.5.152.161 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Oct  1 20:33:44 XXX sshd[13845]: Invalid user nagesh from 117.5.152.161
Oct  1 20:33:44 XXX sshd[13844]: Address 117.5.152.161 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Oct  1 20:33:44 XXX sshd[13844]: Invalid user nagesh from 117.5.152.161
Oct  1 20:........
-------------------------------
2020-10-02 20:12:08
185.136.52.158 attackbots
Invalid user cvs1 from 185.136.52.158 port 39436
2020-10-02 20:20:04
35.239.60.149 attackbots
Brute-force attempt banned
2020-10-02 20:13:49
180.76.54.123 attackbotsspam
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-10-02 20:09:26
222.186.30.76 attack
Oct  2 07:57:13 NPSTNNYC01T sshd[32424]: Failed password for root from 222.186.30.76 port 24703 ssh2
Oct  2 07:57:25 NPSTNNYC01T sshd[32437]: Failed password for root from 222.186.30.76 port 64729 ssh2
...
2020-10-02 20:07:25
193.106.175.55 attackspambots
2020-10-02 04:05:57.692272-0500  localhost smtpd[17887]: NOQUEUE: reject: RCPT from unknown[193.106.175.55]: 554 5.7.1 Service unavailable; Client host [193.106.175.55] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBL495727; from= to= proto=ESMTP helo=
2020-10-02 20:02:59
58.33.84.251 attackspambots
Invalid user samba1 from 58.33.84.251 port 61653
2020-10-02 20:18:31
114.69.249.194 attackspambots
Oct  2 14:27:22 lavrea sshd[126856]: Invalid user jenkins from 114.69.249.194 port 43719
...
2020-10-02 20:27:46
91.229.112.17 attack
firewall-block, port(s): 33390/tcp, 33894/tcp, 33897/tcp, 43390/tcp, 63390/tcp
2020-10-02 20:36:20
178.128.233.69 attackspambots
Invalid user netdump from 178.128.233.69 port 39882
2020-10-02 20:09:56
161.35.122.197 attackbots
Oct  2 14:18:42 ift sshd\[14495\]: Invalid user tomcat from 161.35.122.197Oct  2 14:18:44 ift sshd\[14495\]: Failed password for invalid user tomcat from 161.35.122.197 port 33576 ssh2Oct  2 14:22:42 ift sshd\[15007\]: Failed password for root from 161.35.122.197 port 43108 ssh2Oct  2 14:26:19 ift sshd\[15654\]: Invalid user db from 161.35.122.197Oct  2 14:26:21 ift sshd\[15654\]: Failed password for invalid user db from 161.35.122.197 port 52634 ssh2
...
2020-10-02 20:11:09
89.163.148.157 attackspam
 TCP (SYN) 89.163.148.157:20310 -> port 23, len 44
2020-10-02 20:05:08
104.131.60.112 attackbots
Invalid user admin from 104.131.60.112 port 37012
2020-10-02 20:34:44
31.166.147.100 attackspambots
Oct  1 22:41:06 ourumov-web sshd\[30551\]: Invalid user user from 31.166.147.100 port 60712
Oct  1 22:41:07 ourumov-web sshd\[30551\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.166.147.100
Oct  1 22:41:09 ourumov-web sshd\[30551\]: Failed password for invalid user user from 31.166.147.100 port 60712 ssh2
...
2020-10-02 20:06:20
125.119.43.254 attack
Oct  1 20:33:58 CT3029 sshd[7727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.119.43.254  user=r.r
Oct  1 20:34:00 CT3029 sshd[7727]: Failed password for r.r from 125.119.43.254 port 60634 ssh2
Oct  1 20:34:01 CT3029 sshd[7727]: Received disconnect from 125.119.43.254 port 60634:11: Bye Bye [preauth]
Oct  1 20:34:01 CT3029 sshd[7727]: Disconnected from 125.119.43.254 port 60634 [preauth]
Oct  1 20:34:26 CT3029 sshd[7729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.119.43.254  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=125.119.43.254
2020-10-02 20:04:02

Recently Reported IPs

85.57.172.252 195.211.238.62 70.113.242.156 79.51.114.40
189.148.174.180 220.132.86.193 14.172.16.255 187.54.67.130
171.224.179.141 50.60.175.99 220.233.161.234 190.177.164.78
110.153.69.87 198.235.202.71 93.149.120.249 120.234.158.54
49.143.172.157 14.207.171.199 195.14.109.45 119.235.53.130