Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Sao Goncalo

Region: Rio de Janeiro

Country: Brazil

Internet Service Provider: LRF Conections Servicos Ltda ME

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackbots
Invalid user admin from 138.0.7.129 port 40582
2020-01-19 03:18:08
attackspam
Invalid user admin from 138.0.7.129 port 40582
2020-01-18 05:11:30
Comments on same subnet:
IP Type Details Datetime
138.0.7.143 attack
Unauthorized IMAP connection attempt
2020-05-17 03:06:35
138.0.7.194 attackspam
Invalid user admin from 138.0.7.194 port 54451
2020-04-21 01:42:46
138.0.7.218 attackspambots
Invalid user admin from 138.0.7.218 port 38529
2020-04-19 02:04:09
138.0.7.150 attackspam
Apr 14 05:45:22 *host* sshd\[19124\]: Invalid user admin from 138.0.7.150 port 49020
2020-04-14 19:52:06
138.0.7.90 attack
$f2bV_matches
2020-02-17 13:05:14
138.0.7.121 attackbots
Brute forcing email accounts
2020-01-26 14:48:03
138.0.7.214 attack
Invalid user admin from 138.0.7.214 port 53649
2020-01-21 23:18:52
138.0.7.228 attack
Unauthorized connection attempt detected from IP address 138.0.7.228 to port 22 [J]
2020-01-18 16:49:05
138.0.7.109 attack
Dec 24 15:35:03 localhost sshd\[1728\]: Invalid user admin from 138.0.7.109 port 38992
Dec 24 15:35:03 localhost sshd\[1728\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.7.109
Dec 24 15:35:05 localhost sshd\[1728\]: Failed password for invalid user admin from 138.0.7.109 port 38992 ssh2
...
2019-12-25 00:50:23
138.0.7.226 attackspam
Oct 27 05:54:12 sauna sshd[16909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.7.226
Oct 27 05:54:14 sauna sshd[16909]: Failed password for invalid user admin from 138.0.7.226 port 50611 ssh2
...
2019-10-27 14:43:21
138.0.7.133 attack
Invalid user admin from 138.0.7.133 port 38858
2019-10-11 21:13:11
138.0.7.205 attackspam
Invalid user admin from 138.0.7.205 port 50005
2019-10-11 21:12:56
138.0.7.229 attack
Oct  1 23:26:58 f201 sshd[13257]: Connection closed by 138.0.7.229 [preauth]
Oct  2 02:26:18 f201 sshd[11336]: Connection closed by 138.0.7.229 [preauth]
Oct  2 05:04:31 f201 sshd[18843]: Connection closed by 138.0.7.229 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=138.0.7.229
2019-10-02 15:57:24
138.0.73.253 attackbots
09/25/2019-08:19:47.519567 138.0.73.253 Protocol: 1 GPL ICMP_INFO PING *NIX
2019-09-26 00:18:09
138.0.7.26 attackbots
2019-09-19T11:53:30.742682+01:00 suse sshd[19545]: Invalid user admin from 138.0.7.26 port 50588
2019-09-19T11:53:34.408108+01:00 suse sshd[19545]: error: PAM: User not known to the underlying authentication module for illegal user admin from 138.0.7.26
2019-09-19T11:53:30.742682+01:00 suse sshd[19545]: Invalid user admin from 138.0.7.26 port 50588
2019-09-19T11:53:34.408108+01:00 suse sshd[19545]: error: PAM: User not known to the underlying authentication module for illegal user admin from 138.0.7.26
2019-09-19T11:53:30.742682+01:00 suse sshd[19545]: Invalid user admin from 138.0.7.26 port 50588
2019-09-19T11:53:34.408108+01:00 suse sshd[19545]: error: PAM: User not known to the underlying authentication module for illegal user admin from 138.0.7.26
2019-09-19T11:53:34.409515+01:00 suse sshd[19545]: Failed keyboard-interactive/pam for invalid user admin from 138.0.7.26 port 50588 ssh2
...
2019-09-19 22:15:44
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.0.7.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45442
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.0.7.129.			IN	A

;; AUTHORITY SECTION:
.			524	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011701 1800 900 604800 86400

;; Query time: 115 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 18 05:11:26 CST 2020
;; MSG SIZE  rcvd: 115
Host info
129.7.0.138.in-addr.arpa domain name pointer 138-0-7-129.static.lrfconections.com.br.
Nslookup info:
Server:		100.100.2.136
Address:	100.100.2.136#53

Non-authoritative answer:
129.7.0.138.in-addr.arpa	name = 138-0-7-129.static.lrfconections.com.br.

Authoritative answers can be found from:

Related IP info:
Related comments:
IP Type Details Datetime
192.144.141.142 attack
SSH Brute-Force reported by Fail2Ban
2019-11-11 15:35:39
107.170.76.170 attackbots
Nov 10 23:09:10 mockhub sshd[25829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.76.170
Nov 10 23:09:12 mockhub sshd[25829]: Failed password for invalid user mysql from 107.170.76.170 port 58593 ssh2
...
2019-11-11 15:37:18
87.247.174.250 attackbots
xmlrpc attack
2019-11-11 15:26:43
118.70.72.103 attackbots
SSH invalid-user multiple login try
2019-11-11 15:22:29
70.88.253.123 attackbotsspam
Nov 11 07:29:45 [host] sshd[3637]: Invalid user zack from 70.88.253.123
Nov 11 07:29:45 [host] sshd[3637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.88.253.123
Nov 11 07:29:48 [host] sshd[3637]: Failed password for invalid user zack from 70.88.253.123 port 16090 ssh2
2019-11-11 15:31:16
118.121.201.83 attackbotsspam
Nov 11 12:28:52 areeb-Workstation sshd[17965]: Failed password for root from 118.121.201.83 port 39730 ssh2
Nov 11 12:33:36 areeb-Workstation sshd[19157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.121.201.83
...
2019-11-11 15:14:52
40.73.7.218 attackbots
Nov 11 08:10:30 localhost sshd\[17815\]: Invalid user juden from 40.73.7.218 port 36832
Nov 11 08:10:30 localhost sshd\[17815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.7.218
Nov 11 08:10:32 localhost sshd\[17815\]: Failed password for invalid user juden from 40.73.7.218 port 36832 ssh2
2019-11-11 15:28:49
222.186.169.192 attack
2019-11-11T06:44:54.866563hub.schaetter.us sshd\[29773\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.192  user=root
2019-11-11T06:44:56.343275hub.schaetter.us sshd\[29773\]: Failed password for root from 222.186.169.192 port 56960 ssh2
2019-11-11T06:44:59.112553hub.schaetter.us sshd\[29773\]: Failed password for root from 222.186.169.192 port 56960 ssh2
2019-11-11T06:45:02.299575hub.schaetter.us sshd\[29773\]: Failed password for root from 222.186.169.192 port 56960 ssh2
2019-11-11T06:45:05.560316hub.schaetter.us sshd\[29773\]: Failed password for root from 222.186.169.192 port 56960 ssh2
...
2019-11-11 15:35:27
2.133.118.254 attackbots
Nov 11 00:25:00 mailman postfix/smtpd[15122]: NOQUEUE: reject: RCPT from unknown[2.133.118.254]: 554 5.7.1 Service unavailable; Client host [2.133.118.254] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/2.133.118.254; from= to= proto=ESMTP helo=<[5.250.142.241]>
Nov 11 00:29:37 mailman postfix/smtpd[15122]: NOQUEUE: reject: RCPT from unknown[2.133.118.254]: 554 5.7.1 Service unavailable; Client host [2.133.118.254] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/2.133.118.254; from= to= proto=ESMTP helo=<[5.250.142.241]>
2019-11-11 15:37:40
185.183.107.90 attackbotsspam
WEB SPAM: How to invest in Bitcoin and receive from $ 7497 per day: https://7000-usd-per-day.blogspot.ru?g=89
2019-11-11 15:27:06
49.234.36.126 attack
SSH login attempts, brute-force attack.
Date: Mon Nov 11. 05:22:24 2019 +0200
Source IP: 49.234.36.126 (CN/China/-)

Log entries:
Nov 11 05:18:47 vserv sshd[17283]: Invalid user tsuruda from 49.234.36.126
Nov 11 05:18:47 vserv sshd[17283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.36.126
Nov 11 05:18:49 vserv sshd[17283]: Failed password for invalid user tsuruda from 49.234.36.126 port 10338 ssh2
Nov 11 05:22:23 vserv sshd[17321]: Invalid user yoyo from 49.234.36.126
Nov 11 05:22:23 vserv sshd[17321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.36.126
2019-11-11 15:25:04
222.186.175.167 attack
Nov 11 07:42:39 dcd-gentoo sshd[32247]: User root from 222.186.175.167 not allowed because none of user's groups are listed in AllowGroups
Nov 11 07:42:41 dcd-gentoo sshd[32247]: error: PAM: Authentication failure for illegal user root from 222.186.175.167
Nov 11 07:42:39 dcd-gentoo sshd[32247]: User root from 222.186.175.167 not allowed because none of user's groups are listed in AllowGroups
Nov 11 07:42:41 dcd-gentoo sshd[32247]: error: PAM: Authentication failure for illegal user root from 222.186.175.167
Nov 11 07:42:39 dcd-gentoo sshd[32247]: User root from 222.186.175.167 not allowed because none of user's groups are listed in AllowGroups
Nov 11 07:42:41 dcd-gentoo sshd[32247]: error: PAM: Authentication failure for illegal user root from 222.186.175.167
Nov 11 07:42:41 dcd-gentoo sshd[32247]: Failed keyboard-interactive/pam for invalid user root from 222.186.175.167 port 52994 ssh2
...
2019-11-11 15:06:39
132.232.159.71 attackbotsspam
Nov 11 07:30:11 localhost sshd\[12767\]: Invalid user guest from 132.232.159.71 port 49676
Nov 11 07:30:11 localhost sshd\[12767\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.159.71
Nov 11 07:30:13 localhost sshd\[12767\]: Failed password for invalid user guest from 132.232.159.71 port 49676 ssh2
2019-11-11 15:12:36
82.202.246.89 attack
Nov 11 07:26:01 SilenceServices sshd[18770]: Failed password for root from 82.202.246.89 port 47522 ssh2
Nov 11 07:30:33 SilenceServices sshd[20114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.202.246.89
Nov 11 07:30:36 SilenceServices sshd[20114]: Failed password for invalid user jmote from 82.202.246.89 port 55664 ssh2
2019-11-11 15:04:21
158.69.248.234 attackspam
CA bad_bot
2019-11-11 15:11:07

Recently Reported IPs

91.182.121.60 2.236.13.169 68.69.241.36 211.223.103.131
189.174.81.220 130.235.46.17 225.40.86.241 93.65.250.99
136.194.220.242 11.170.232.221 177.85.111.177 244.46.19.89
94.224.254.9 87.151.106.110 244.201.50.187 168.152.117.136
91.188.90.29 219.237.31.5 193.35.50.245 176.220.81.232