Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: LRF Conections Servicos Ltda ME

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackspam
Invalid user admin from 138.0.7.205 port 50005
2019-10-11 21:12:56
Comments on same subnet:
IP Type Details Datetime
138.0.7.143 attack
Unauthorized IMAP connection attempt
2020-05-17 03:06:35
138.0.7.194 attackspam
Invalid user admin from 138.0.7.194 port 54451
2020-04-21 01:42:46
138.0.7.218 attackspambots
Invalid user admin from 138.0.7.218 port 38529
2020-04-19 02:04:09
138.0.7.150 attackspam
Apr 14 05:45:22 *host* sshd\[19124\]: Invalid user admin from 138.0.7.150 port 49020
2020-04-14 19:52:06
138.0.7.90 attack
$f2bV_matches
2020-02-17 13:05:14
138.0.7.121 attackbots
Brute forcing email accounts
2020-01-26 14:48:03
138.0.7.214 attack
Invalid user admin from 138.0.7.214 port 53649
2020-01-21 23:18:52
138.0.7.129 attackbots
Invalid user admin from 138.0.7.129 port 40582
2020-01-19 03:18:08
138.0.7.228 attack
Unauthorized connection attempt detected from IP address 138.0.7.228 to port 22 [J]
2020-01-18 16:49:05
138.0.7.129 attackspam
Invalid user admin from 138.0.7.129 port 40582
2020-01-18 05:11:30
138.0.7.109 attack
Dec 24 15:35:03 localhost sshd\[1728\]: Invalid user admin from 138.0.7.109 port 38992
Dec 24 15:35:03 localhost sshd\[1728\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.7.109
Dec 24 15:35:05 localhost sshd\[1728\]: Failed password for invalid user admin from 138.0.7.109 port 38992 ssh2
...
2019-12-25 00:50:23
138.0.7.226 attackspam
Oct 27 05:54:12 sauna sshd[16909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.7.226
Oct 27 05:54:14 sauna sshd[16909]: Failed password for invalid user admin from 138.0.7.226 port 50611 ssh2
...
2019-10-27 14:43:21
138.0.7.133 attack
Invalid user admin from 138.0.7.133 port 38858
2019-10-11 21:13:11
138.0.7.229 attack
Oct  1 23:26:58 f201 sshd[13257]: Connection closed by 138.0.7.229 [preauth]
Oct  2 02:26:18 f201 sshd[11336]: Connection closed by 138.0.7.229 [preauth]
Oct  2 05:04:31 f201 sshd[18843]: Connection closed by 138.0.7.229 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=138.0.7.229
2019-10-02 15:57:24
138.0.73.253 attackbots
09/25/2019-08:19:47.519567 138.0.73.253 Protocol: 1 GPL ICMP_INFO PING *NIX
2019-09-26 00:18:09
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.0.7.205
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14387
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.0.7.205.			IN	A

;; AUTHORITY SECTION:
.			396	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101001 1800 900 604800 86400

;; Query time: 318 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 11 21:12:52 CST 2019
;; MSG SIZE  rcvd: 115
Host info
205.7.0.138.in-addr.arpa domain name pointer 138-0-7-205.static.lrfconections.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
205.7.0.138.in-addr.arpa	name = 138-0-7-205.static.lrfconections.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
138.68.99.46 attackbotsspam
Nov  6 07:19:26 XXX sshd[23079]: Invalid user zookeeper from 138.68.99.46 port 58060
2019-11-06 19:44:50
51.89.125.114 attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2019-11-06 19:23:22
34.66.84.11 attackbots
CloudCIX Reconnaissance Scan Detected, PTR: 11.84.66.34.bc.googleusercontent.com.
2019-11-06 19:22:24
222.186.175.155 attackspambots
Nov  6 12:43:54 legacy sshd[28318]: Failed password for root from 222.186.175.155 port 28694 ssh2
Nov  6 12:44:12 legacy sshd[28318]: error: maximum authentication attempts exceeded for root from 222.186.175.155 port 28694 ssh2 [preauth]
Nov  6 12:44:22 legacy sshd[28328]: Failed password for root from 222.186.175.155 port 34234 ssh2
...
2019-11-06 19:46:12
165.22.30.12 attackbotsspam
CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found
2019-11-06 19:40:55
2.56.215.99 attack
Nov  5 05:03:30 shadeyouvpn sshd[7722]: reveeclipse mapping checking getaddrinfo for no-reveeclipse-yet.local [2.56.215.99] failed - POSSIBLE BREAK-IN ATTEMPT!
Nov  5 05:03:30 shadeyouvpn sshd[7722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.56.215.99  user=r.r
Nov  5 05:03:31 shadeyouvpn sshd[7722]: Failed password for r.r from 2.56.215.99 port 43268 ssh2
Nov  5 05:03:31 shadeyouvpn sshd[7722]: Received disconnect from 2.56.215.99: 11: Bye Bye [preauth]
Nov  5 05:42:58 shadeyouvpn sshd[4440]: reveeclipse mapping checking getaddrinfo for no-reveeclipse-yet.local [2.56.215.99] failed - POSSIBLE BREAK-IN ATTEMPT!
Nov  5 05:42:58 shadeyouvpn sshd[4440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.56.215.99  user=r.r
Nov  5 05:43:01 shadeyouvpn sshd[4440]: Failed password for r.r from 2.56.215.99 port 55534 ssh2
Nov  5 05:43:01 shadeyouvpn sshd[4440]: Received disconnect from 2.56.........
-------------------------------
2019-11-06 19:42:53
104.197.98.229 attackbotsspam
CloudCIX Reconnaissance Scan Detected, PTR: 229.98.197.104.bc.googleusercontent.com.
2019-11-06 19:59:40
51.75.52.115 attack
scan r
2019-11-06 19:16:23
154.221.31.118 attackbots
Lines containing failures of 154.221.31.118
Nov  5 18:26:57 cdb sshd[7267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.221.31.118  user=r.r
Nov  5 18:26:59 cdb sshd[7267]: Failed password for r.r from 154.221.31.118 port 38702 ssh2
Nov  5 18:27:00 cdb sshd[7267]: Received disconnect from 154.221.31.118 port 38702:11: Bye Bye [preauth]
Nov  5 18:27:00 cdb sshd[7267]: Disconnected from authenticating user r.r 154.221.31.118 port 38702 [preauth]
Nov  5 18:43:22 cdb sshd[8488]: Invalid user mike from 154.221.31.118 port 56274
Nov  5 18:43:22 cdb sshd[8488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.221.31.118
Nov  5 18:43:24 cdb sshd[8488]: Failed password for invalid user mike from 154.221.31.118 port 56274 ssh2
Nov  5 18:43:24 cdb sshd[8488]: Received disconnect from 154.221.31.118 port 56274:11: Bye Bye [preauth]
Nov  5 18:43:24 cdb sshd[8488]: Disconnected from invalid user........
------------------------------
2019-11-06 19:37:41
45.136.110.47 attackspambots
Nov  6 11:06:10 h2177944 kernel: \[5910405.680827\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.47 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=62213 PROTO=TCP SPT=45328 DPT=7930 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov  6 11:45:26 h2177944 kernel: \[5912761.114343\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.47 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=24372 PROTO=TCP SPT=45328 DPT=6928 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov  6 11:50:09 h2177944 kernel: \[5913044.278273\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.47 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=47697 PROTO=TCP SPT=45328 DPT=7656 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov  6 11:50:50 h2177944 kernel: \[5913085.519718\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.47 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=51123 PROTO=TCP SPT=45328 DPT=7774 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov  6 11:55:29 h2177944 kernel: \[5913364.973806\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.47 DST=85.214.117.9
2019-11-06 19:22:06
80.237.119.229 attackbotsspam
[portscan] Port scan
2019-11-06 19:51:30
88.152.231.197 attackspambots
2019-11-06T07:08:04.556417shield sshd\[14826\]: Invalid user realfriend from 88.152.231.197 port 44346
2019-11-06T07:08:04.560870shield sshd\[14826\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-88-152-231-197.hsi03.unitymediagroup.de
2019-11-06T07:08:07.125665shield sshd\[14826\]: Failed password for invalid user realfriend from 88.152.231.197 port 44346 ssh2
2019-11-06T07:11:52.233954shield sshd\[15216\]: Invalid user Qaz!@\#123654 from 88.152.231.197 port 34756
2019-11-06T07:11:52.239141shield sshd\[15216\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-88-152-231-197.hsi03.unitymediagroup.de
2019-11-06 19:41:33
51.68.44.13 attackspam
Nov  6 07:21:05 hcbbdb sshd\[18824\]: Invalid user xihuidc!@\# from 51.68.44.13
Nov  6 07:21:05 hcbbdb sshd\[18824\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.ip-51-68-44.eu
Nov  6 07:21:08 hcbbdb sshd\[18824\]: Failed password for invalid user xihuidc!@\# from 51.68.44.13 port 60436 ssh2
Nov  6 07:25:00 hcbbdb sshd\[19216\]: Invalid user MimaPass! from 51.68.44.13
Nov  6 07:25:00 hcbbdb sshd\[19216\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.ip-51-68-44.eu
2019-11-06 19:57:00
180.246.74.67 attackspam
Unauthorised access (Nov  6) SRC=180.246.74.67 LEN=52 TTL=247 ID=18172 DF TCP DPT=445 WINDOW=8192 SYN
2019-11-06 19:51:49
46.246.62.176 attackbots
CloudCIX Reconnaissance Scan Detected, PTR: anon-62-176.vpn.ipredator.se.
2019-11-06 19:26:50

Recently Reported IPs

249.37.41.17 45.15.76.94 129.134.88.156 230.253.54.191
91.198.180.2 71.242.182.109 78.73.21.231 58.16.113.132
45.170.129.135 237.115.76.208 45.55.37.100 100.53.128.114
255.122.153.234 240.25.83.245 205.26.107.15 215.155.207.234
164.96.174.154 23.184.215.22 41.40.250.129 165.234.57.207