Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: LRF Conections Servicos Ltda ME

Hostname: unknown

Organization: LRF CONECTIONS SERVICOS LTDA ME

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attack
Brute force SMTP login attempted.
...
2019-08-10 04:14:35
Comments on same subnet:
IP Type Details Datetime
138.0.7.143 attack
Unauthorized IMAP connection attempt
2020-05-17 03:06:35
138.0.7.194 attackspam
Invalid user admin from 138.0.7.194 port 54451
2020-04-21 01:42:46
138.0.7.218 attackspambots
Invalid user admin from 138.0.7.218 port 38529
2020-04-19 02:04:09
138.0.7.150 attackspam
Apr 14 05:45:22 *host* sshd\[19124\]: Invalid user admin from 138.0.7.150 port 49020
2020-04-14 19:52:06
138.0.7.90 attack
$f2bV_matches
2020-02-17 13:05:14
138.0.7.121 attackbots
Brute forcing email accounts
2020-01-26 14:48:03
138.0.7.214 attack
Invalid user admin from 138.0.7.214 port 53649
2020-01-21 23:18:52
138.0.7.129 attackbots
Invalid user admin from 138.0.7.129 port 40582
2020-01-19 03:18:08
138.0.7.228 attack
Unauthorized connection attempt detected from IP address 138.0.7.228 to port 22 [J]
2020-01-18 16:49:05
138.0.7.129 attackspam
Invalid user admin from 138.0.7.129 port 40582
2020-01-18 05:11:30
138.0.7.109 attack
Dec 24 15:35:03 localhost sshd\[1728\]: Invalid user admin from 138.0.7.109 port 38992
Dec 24 15:35:03 localhost sshd\[1728\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.7.109
Dec 24 15:35:05 localhost sshd\[1728\]: Failed password for invalid user admin from 138.0.7.109 port 38992 ssh2
...
2019-12-25 00:50:23
138.0.7.226 attackspam
Oct 27 05:54:12 sauna sshd[16909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.7.226
Oct 27 05:54:14 sauna sshd[16909]: Failed password for invalid user admin from 138.0.7.226 port 50611 ssh2
...
2019-10-27 14:43:21
138.0.7.133 attack
Invalid user admin from 138.0.7.133 port 38858
2019-10-11 21:13:11
138.0.7.205 attackspam
Invalid user admin from 138.0.7.205 port 50005
2019-10-11 21:12:56
138.0.7.229 attack
Oct  1 23:26:58 f201 sshd[13257]: Connection closed by 138.0.7.229 [preauth]
Oct  2 02:26:18 f201 sshd[11336]: Connection closed by 138.0.7.229 [preauth]
Oct  2 05:04:31 f201 sshd[18843]: Connection closed by 138.0.7.229 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=138.0.7.229
2019-10-02 15:57:24
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.0.7.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50751
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.0.7.142.			IN	A

;; AUTHORITY SECTION:
.			1295	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080902 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 10 04:14:21 CST 2019
;; MSG SIZE  rcvd: 115
Host info
142.7.0.138.in-addr.arpa domain name pointer 138-0-7-142.static.lrfconections.com.br.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
142.7.0.138.in-addr.arpa	name = 138-0-7-142.static.lrfconections.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
110.80.142.84 attackspam
SSH Brute Force, server-1 sshd[7488]: Failed password for invalid user gilad from 110.80.142.84 port 43212 ssh2
2019-07-09 02:17:37
46.185.226.163 attackspam
1562573632 - 07/08/2019 15:13:52 Host: 46.185.x.163.go.com.jo/46.185.226.163 Port: 23 TCP Blocked
...
2019-07-09 02:27:33
101.87.207.135 attackbots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-08 07:32:02,359 INFO [amun_request_handler] PortScan Detected on Port: 445 (101.87.207.135)
2019-07-09 01:55:39
180.183.245.140 attackspambots
Unauthorized access to SSH at 8/Jul/2019:08:14:29 +0000.
Received:  (SSH-2.0-libssh2_1.8.0)
2019-07-09 02:02:13
213.133.86.46 attack
ERROR - 2019-07-07 04:47:13 --> 404 Page Not Found --> phpmyadmin4; FROM IP: 213.133.86.46
ERROR - 2019-07-07 04:47:13 --> 404 Page Not Found --> 2phpmyadmin; FROM IP: 213.133.86.46
ERROR - 2019-07-07 04:47:13 --> 404 Page Not Found --> wp-content; FROM IP: 213.133.86.46
ERROR - 2019-07-07 04:47:14 --> 404 Page Not Found --> phpmy; FROM IP: 213.133.86.46
ERROR - 2019-07-07 04:47:14 --> 404 Page Not Found --> phppma; FROM IP: 213.133.86.46
ERROR - 2019-07-07 04:47:14 --> 404 Page Not Found --> myadmin; FROM IP: 213.133.86.46
ERROR - 2019-07-07 04:47:15 --> 404 Page Not Found --> shopdb; FROM IP: 213.133.86.46
ERROR - 2019-07-07 04:47:15 --> 404 Page Not Found --> MyAdmin; FROM IP: 213.133.86.46
ERROR - 2019-07-07 04:47:15 --> 404 Page Not Found --> program; FROM IP: 213.133.86.46
2019-07-09 02:33:27
188.68.210.110 attack
HTTP/80/443 Probe, BF, WP, Hack -
2019-07-09 02:32:57
188.68.211.73 attack
SMTP/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -
2019-07-09 02:19:08
62.167.15.204 attackspam
Jul815:03:04server4dovecot:imap-login:Abortedlogin\(authfailed\,5attemptsin10secs\):user=\\,method=PLAIN\,rip=195.112.64.212\,lip=148.251.104.72\,TLS\,session=\Jul815:38:43server4dovecot:imap-login:Abortedlogin\(authfailed\,5attemptsin19secs\):user=\\,method=PLAIN\,rip=195.112.64.212\,lip=148.251.104.72\,TLS\,session=\<9zPljiuNU LDcEDU\>Jul815:48:55server4dovecot:imap-login:Abortedlogin\(authfailed\,5attemptsin22secs\):user=\\,method=PLAIN\,rip=62.167.15.204\,lip=148.251.104.72\,TLS\,session=\Jul815:43:45server4dovecot:imap-login:Abortedlogin\(authfailed\,5attemptsin22secs\):user=\\,method=PLAIN\,rip=195.112.64.212\,lip=148.251.104.72\,TLS\,session=\Jul815:37:33server4dovecot:imap-login:Abortedlogin\(authfailed\,5attemptsin24secs\):user=\\,method=PLAIN\,rip=195.112.64.212\,lip=148.251.1
2019-07-09 02:46:31
36.7.128.146 attackspambots
Unauthorized IMAP connection attempt.
2019-07-09 02:24:50
198.108.67.48 attack
HTTP/80/443 Probe, BF, WP, Hack -
2019-07-09 02:03:59
203.154.157.48 attackspambots
3389BruteforceFW22
2019-07-09 02:32:28
185.220.101.20 attackbots
SSH-bruteforce attempts
2019-07-09 02:07:56
185.222.211.237 attack
Jul  8 19:49:14 mail postfix/smtpd\[1393\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.237\]: 554 5.7.1 Service unavailable\; Client host \[185.222.211.237\] blocked using zen.spamhaus.org\; https://www.spamhaus.org/sbl/query/SBL442573 / https://www.spamhaus.org/sbl/query/SBLCSS\; from=\ to=\ proto=ESMTP helo=\<\[185.222.211.2\]\>\
Jul  8 19:49:14 mail postfix/smtpd\[1393\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.237\]: 554 5.7.1 Service unavailable\; Client host \[185.222.211.237\] blocked using zen.spamhaus.org\; https://www.spamhaus.org/sbl/query/SBL442573 / https://www.spamhaus.org/sbl/query/SBLCSS\; from=\ to=\ proto=ESMTP helo=\<\[185.222.211.2\]\>\
Jul  8 19:49:14 mail postfix/smtpd\[1393\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.237\]: 554 5.7.1 Service unavailable\; Client host \[185.222.211.237\] blocked using zen.spamhaus.org\; https://www.spamhaus.org/sbl/qu
2019-07-09 02:19:50
42.110.141.185 attack
[ER hit] Tried to deliver spam. Already well known.
2019-07-09 02:23:23
185.220.100.252 attackbotsspam
v+ssh-bruteforce
2019-07-09 02:40:42

Recently Reported IPs

60.0.186.213 85.216.221.212 138.0.6.144 32.186.162.174
72.26.222.180 67.228.5.156 95.195.216.167 104.173.160.157
6.65.211.175 50.202.138.160 59.51.2.46 99.72.19.239
103.232.237.62 8.114.207.22 23.30.112.36 174.174.236.247
138.41.180.102 4.18.191.124 106.74.196.152 210.112.218.205