Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: LRF Conections Servicos Ltda ME

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackbots
Brute forcing email accounts
2020-01-26 14:48:03
attackbots
Aug 27 11:02:10 ubuntu-2gb-nbg1-dc3-1 sshd[13985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.7.121
Aug 27 11:02:11 ubuntu-2gb-nbg1-dc3-1 sshd[13985]: Failed password for invalid user admin from 138.0.7.121 port 39727 ssh2
...
2019-08-28 02:52:11
Comments on same subnet:
IP Type Details Datetime
138.0.7.143 attack
Unauthorized IMAP connection attempt
2020-05-17 03:06:35
138.0.7.194 attackspam
Invalid user admin from 138.0.7.194 port 54451
2020-04-21 01:42:46
138.0.7.218 attackspambots
Invalid user admin from 138.0.7.218 port 38529
2020-04-19 02:04:09
138.0.7.150 attackspam
Apr 14 05:45:22 *host* sshd\[19124\]: Invalid user admin from 138.0.7.150 port 49020
2020-04-14 19:52:06
138.0.7.90 attack
$f2bV_matches
2020-02-17 13:05:14
138.0.7.214 attack
Invalid user admin from 138.0.7.214 port 53649
2020-01-21 23:18:52
138.0.7.129 attackbots
Invalid user admin from 138.0.7.129 port 40582
2020-01-19 03:18:08
138.0.7.228 attack
Unauthorized connection attempt detected from IP address 138.0.7.228 to port 22 [J]
2020-01-18 16:49:05
138.0.7.129 attackspam
Invalid user admin from 138.0.7.129 port 40582
2020-01-18 05:11:30
138.0.7.109 attack
Dec 24 15:35:03 localhost sshd\[1728\]: Invalid user admin from 138.0.7.109 port 38992
Dec 24 15:35:03 localhost sshd\[1728\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.7.109
Dec 24 15:35:05 localhost sshd\[1728\]: Failed password for invalid user admin from 138.0.7.109 port 38992 ssh2
...
2019-12-25 00:50:23
138.0.7.226 attackspam
Oct 27 05:54:12 sauna sshd[16909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.7.226
Oct 27 05:54:14 sauna sshd[16909]: Failed password for invalid user admin from 138.0.7.226 port 50611 ssh2
...
2019-10-27 14:43:21
138.0.7.133 attack
Invalid user admin from 138.0.7.133 port 38858
2019-10-11 21:13:11
138.0.7.205 attackspam
Invalid user admin from 138.0.7.205 port 50005
2019-10-11 21:12:56
138.0.7.229 attack
Oct  1 23:26:58 f201 sshd[13257]: Connection closed by 138.0.7.229 [preauth]
Oct  2 02:26:18 f201 sshd[11336]: Connection closed by 138.0.7.229 [preauth]
Oct  2 05:04:31 f201 sshd[18843]: Connection closed by 138.0.7.229 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=138.0.7.229
2019-10-02 15:57:24
138.0.73.253 attackbots
09/25/2019-08:19:47.519567 138.0.73.253 Protocol: 1 GPL ICMP_INFO PING *NIX
2019-09-26 00:18:09
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.0.7.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1507
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.0.7.121.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082701 1800 900 604800 86400

;; Query time: 8 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Aug 28 02:52:06 CST 2019
;; MSG SIZE  rcvd: 115
Host info
121.7.0.138.in-addr.arpa domain name pointer 138-0-7-121.static.lrfconections.com.br.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
121.7.0.138.in-addr.arpa	name = 138-0-7-121.static.lrfconections.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
112.105.254.73 attackspambots
Icarus honeypot on github
2020-04-23 16:07:20
177.80.234.51 attackbots
$f2bV_matches
2020-04-23 16:20:33
190.12.66.27 attack
2020-04-23T06:13:44.476305abusebot-6.cloudsearch.cf sshd[15024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.12.66.27  user=root
2020-04-23T06:13:46.860990abusebot-6.cloudsearch.cf sshd[15024]: Failed password for root from 190.12.66.27 port 35556 ssh2
2020-04-23T06:18:32.437876abusebot-6.cloudsearch.cf sshd[15311]: Invalid user mu from 190.12.66.27 port 51744
2020-04-23T06:18:32.444168abusebot-6.cloudsearch.cf sshd[15311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.12.66.27
2020-04-23T06:18:32.437876abusebot-6.cloudsearch.cf sshd[15311]: Invalid user mu from 190.12.66.27 port 51744
2020-04-23T06:18:34.367000abusebot-6.cloudsearch.cf sshd[15311]: Failed password for invalid user mu from 190.12.66.27 port 51744 ssh2
2020-04-23T06:23:19.791626abusebot-6.cloudsearch.cf sshd[15563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.12.66.27  user=root
2
...
2020-04-23 16:26:49
186.149.46.4 attackbotsspam
(sshd) Failed SSH login from 186.149.46.4 (DO/Dominican Republic/-): 5 in the last 3600 secs
2020-04-23 16:25:51
77.68.116.52 attackspam
Automated report (2020-04-23T08:35:36+00:00). Scraper detected at this address.
2020-04-23 16:43:42
183.134.90.250 attackspam
Apr 23 09:33:50 ns382633 sshd\[22964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.134.90.250  user=root
Apr 23 09:33:52 ns382633 sshd\[22964\]: Failed password for root from 183.134.90.250 port 54952 ssh2
Apr 23 09:53:15 ns382633 sshd\[26568\]: Invalid user super from 183.134.90.250 port 54266
Apr 23 09:53:15 ns382633 sshd\[26568\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.134.90.250
Apr 23 09:53:17 ns382633 sshd\[26568\]: Failed password for invalid user super from 183.134.90.250 port 54266 ssh2
2020-04-23 16:09:15
37.53.83.130 attackbotsspam
Telnet/23 MH Probe, Scan, BF, Hack -
2020-04-23 16:44:46
49.88.112.111 attackspambots
April 23 2020, 05:00:48 [sshd] - Banned from the Cipher Host hosting platform by Fail2ban.
2020-04-23 16:05:29
222.186.42.155 attack
Apr 23 10:18:43 vps sshd[365934]: Failed password for root from 222.186.42.155 port 59348 ssh2
Apr 23 10:18:46 vps sshd[365934]: Failed password for root from 222.186.42.155 port 59348 ssh2
Apr 23 10:18:48 vps sshd[366574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.155  user=root
Apr 23 10:18:50 vps sshd[366574]: Failed password for root from 222.186.42.155 port 37706 ssh2
Apr 23 10:18:52 vps sshd[366574]: Failed password for root from 222.186.42.155 port 37706 ssh2
...
2020-04-23 16:22:12
218.151.100.9 attackbotsspam
Telnet/23 MH Probe, Scan, BF, Hack -
2020-04-23 16:37:40
110.77.152.160 attack
" "
2020-04-23 16:17:30
189.199.252.187 attackbotsspam
Invalid user ubuntu from 189.199.252.187 port 56102
2020-04-23 16:14:30
117.199.122.165 attackbots
Automatic report - Port Scan Attack
2020-04-23 16:12:36
54.38.15.126 attack
Apr 22 14:39:20 online-web-1 sshd[15227]: Invalid user admin from 54.38.15.126 port 49556
Apr 22 14:39:20 online-web-1 sshd[15227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.15.126
Apr 22 14:39:23 online-web-1 sshd[15227]: Failed password for invalid user admin from 54.38.15.126 port 49556 ssh2
Apr 22 14:39:23 online-web-1 sshd[15227]: Received disconnect from 54.38.15.126 port 49556:11: Bye Bye [preauth]
Apr 22 14:39:23 online-web-1 sshd[15227]: Disconnected from 54.38.15.126 port 49556 [preauth]
Apr 22 14:49:24 online-web-1 sshd[16606]: Invalid user admin from 54.38.15.126 port 39624
Apr 22 14:49:24 online-web-1 sshd[16606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.15.126
Apr 22 14:49:26 online-web-1 sshd[16606]: Failed password for invalid user admin from 54.38.15.126 port 39624 ssh2
Apr 22 14:49:26 online-web-1 sshd[16606]: Received disconnect from 54.38.15.126 p........
-------------------------------
2020-04-23 16:07:40
103.72.171.34 attackbotsspam
sshd jail - ssh hack attempt
2020-04-23 16:43:56

Recently Reported IPs

24.198.206.123 54.36.189.105 36.228.225.162 116.209.164.2
14.247.172.54 138.121.206.122 123.235.71.135 118.165.228.109
93.185.27.179 1.1.230.122 213.131.47.178 200.35.214.184
213.178.54.226 178.172.224.19 193.138.50.7 144.217.93.130
82.112.34.47 1.198.30.108 103.74.111.32 189.40.184.23