Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Sao Goncalo

Region: Rio de Janeiro

Country: Brazil

Internet Service Provider: LRF Conections Servicos Ltda ME

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackbots
Invalid user admin from 138.0.7.129 port 40582
2020-01-19 03:18:08
attackspam
Invalid user admin from 138.0.7.129 port 40582
2020-01-18 05:11:30
Comments on same subnet:
IP Type Details Datetime
138.0.7.143 attack
Unauthorized IMAP connection attempt
2020-05-17 03:06:35
138.0.7.194 attackspam
Invalid user admin from 138.0.7.194 port 54451
2020-04-21 01:42:46
138.0.7.218 attackspambots
Invalid user admin from 138.0.7.218 port 38529
2020-04-19 02:04:09
138.0.7.150 attackspam
Apr 14 05:45:22 *host* sshd\[19124\]: Invalid user admin from 138.0.7.150 port 49020
2020-04-14 19:52:06
138.0.7.90 attack
$f2bV_matches
2020-02-17 13:05:14
138.0.7.121 attackbots
Brute forcing email accounts
2020-01-26 14:48:03
138.0.7.214 attack
Invalid user admin from 138.0.7.214 port 53649
2020-01-21 23:18:52
138.0.7.228 attack
Unauthorized connection attempt detected from IP address 138.0.7.228 to port 22 [J]
2020-01-18 16:49:05
138.0.7.109 attack
Dec 24 15:35:03 localhost sshd\[1728\]: Invalid user admin from 138.0.7.109 port 38992
Dec 24 15:35:03 localhost sshd\[1728\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.7.109
Dec 24 15:35:05 localhost sshd\[1728\]: Failed password for invalid user admin from 138.0.7.109 port 38992 ssh2
...
2019-12-25 00:50:23
138.0.7.226 attackspam
Oct 27 05:54:12 sauna sshd[16909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.7.226
Oct 27 05:54:14 sauna sshd[16909]: Failed password for invalid user admin from 138.0.7.226 port 50611 ssh2
...
2019-10-27 14:43:21
138.0.7.133 attack
Invalid user admin from 138.0.7.133 port 38858
2019-10-11 21:13:11
138.0.7.205 attackspam
Invalid user admin from 138.0.7.205 port 50005
2019-10-11 21:12:56
138.0.7.229 attack
Oct  1 23:26:58 f201 sshd[13257]: Connection closed by 138.0.7.229 [preauth]
Oct  2 02:26:18 f201 sshd[11336]: Connection closed by 138.0.7.229 [preauth]
Oct  2 05:04:31 f201 sshd[18843]: Connection closed by 138.0.7.229 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=138.0.7.229
2019-10-02 15:57:24
138.0.73.253 attackbots
09/25/2019-08:19:47.519567 138.0.73.253 Protocol: 1 GPL ICMP_INFO PING *NIX
2019-09-26 00:18:09
138.0.7.26 attackbots
2019-09-19T11:53:30.742682+01:00 suse sshd[19545]: Invalid user admin from 138.0.7.26 port 50588
2019-09-19T11:53:34.408108+01:00 suse sshd[19545]: error: PAM: User not known to the underlying authentication module for illegal user admin from 138.0.7.26
2019-09-19T11:53:30.742682+01:00 suse sshd[19545]: Invalid user admin from 138.0.7.26 port 50588
2019-09-19T11:53:34.408108+01:00 suse sshd[19545]: error: PAM: User not known to the underlying authentication module for illegal user admin from 138.0.7.26
2019-09-19T11:53:30.742682+01:00 suse sshd[19545]: Invalid user admin from 138.0.7.26 port 50588
2019-09-19T11:53:34.408108+01:00 suse sshd[19545]: error: PAM: User not known to the underlying authentication module for illegal user admin from 138.0.7.26
2019-09-19T11:53:34.409515+01:00 suse sshd[19545]: Failed keyboard-interactive/pam for invalid user admin from 138.0.7.26 port 50588 ssh2
...
2019-09-19 22:15:44
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.0.7.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45442
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.0.7.129.			IN	A

;; AUTHORITY SECTION:
.			524	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011701 1800 900 604800 86400

;; Query time: 115 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 18 05:11:26 CST 2020
;; MSG SIZE  rcvd: 115
Host info
129.7.0.138.in-addr.arpa domain name pointer 138-0-7-129.static.lrfconections.com.br.
Nslookup info:
Server:		100.100.2.136
Address:	100.100.2.136#53

Non-authoritative answer:
129.7.0.138.in-addr.arpa	name = 138-0-7-129.static.lrfconections.com.br.

Authoritative answers can be found from:

Related IP info:
Related comments:
IP Type Details Datetime
51.254.201.67 attackbotsspam
Jan  3 00:03:21 plusreed sshd[8174]: Invalid user ky from 51.254.201.67
...
2020-01-03 17:38:46
36.81.5.121 attackspam
1578026857 - 01/03/2020 05:47:37 Host: 36.81.5.121/36.81.5.121 Port: 445 TCP Blocked
2020-01-03 17:32:55
138.197.89.186 attackspam
Jan  3 10:21:05 srv206 sshd[27983]: Invalid user oracledb from 138.197.89.186
...
2020-01-03 17:30:48
196.202.112.156 attackspam
Jan  3 04:47:47 flomail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=196.202.112.156, lip=10.140.194.78, TLS, session=
2020-01-03 17:26:44
175.180.64.89 attack
Unauthorized connection attempt from IP address 175.180.64.89 on Port 445(SMB)
2020-01-03 18:03:34
139.59.3.160 attack
2020-01-03T04:47:26Z - RDP login failed multiple times. (139.59.3.160)
2020-01-03 17:40:03
118.24.28.65 attackspambots
$f2bV_matches
2020-01-03 17:51:25
88.12.27.44 attackspambots
...
2020-01-03 17:42:32
187.162.116.220 attackbots
Automatic report - Port Scan Attack
2020-01-03 17:46:47
125.160.64.117 attackspambots
1578026839 - 01/03/2020 05:47:19 Host: 125.160.64.117/125.160.64.117 Port: 445 TCP Blocked
2020-01-03 17:44:56
104.248.159.69 attackbotsspam
Jan  3 07:29:23 localhost sshd\[25132\]: Invalid user cssserver from 104.248.159.69 port 44948
Jan  3 07:29:23 localhost sshd\[25132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.159.69
Jan  3 07:29:25 localhost sshd\[25132\]: Failed password for invalid user cssserver from 104.248.159.69 port 44948 ssh2
...
2020-01-03 17:28:58
162.243.160.84 attack
DATE:2020-01-03 05:47:12, IP:162.243.160.84, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)
2020-01-03 17:51:12
95.148.18.100 attack
DATE:2020-01-03 05:47:06, IP:95.148.18.100, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)
2020-01-03 17:55:11
182.254.172.159 attackbotsspam
Jan  3 07:53:08 MK-Soft-VM7 sshd[27050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.254.172.159 
Jan  3 07:53:10 MK-Soft-VM7 sshd[27050]: Failed password for invalid user test from 182.254.172.159 port 43208 ssh2
...
2020-01-03 17:27:58
31.8.48.4 attackspam
Brute force VPN server
2020-01-03 17:34:39

Recently Reported IPs

91.182.121.60 2.236.13.169 68.69.241.36 211.223.103.131
189.174.81.220 130.235.46.17 225.40.86.241 93.65.250.99
136.194.220.242 11.170.232.221 177.85.111.177 244.46.19.89
94.224.254.9 87.151.106.110 244.201.50.187 168.152.117.136
91.188.90.29 219.237.31.5 193.35.50.245 176.220.81.232