Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: Smart Solucoes em Telecomunicacoes

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackbots
Failed password for invalid user prometheus from 138.121.120.254 port 59081 ssh2
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=abr.smartinternet.com.br  user=root
Failed password for root from 138.121.120.254 port 33270 ssh2
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=abr.smartinternet.com.br  user=root
Failed password for root from 138.121.120.254 port 35701 ssh2
2020-05-28 20:26:40
Comments on same subnet:
IP Type Details Datetime
138.121.120.91 attackbotsspam
Jul  8 16:36:56 santamaria sshd\[29215\]: Invalid user arun from 138.121.120.91
Jul  8 16:36:56 santamaria sshd\[29215\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.121.120.91
Jul  8 16:36:58 santamaria sshd\[29215\]: Failed password for invalid user arun from 138.121.120.91 port 41752 ssh2
...
2020-07-08 23:56:02
138.121.120.91 attack
Jul  7 14:13:32 piServer sshd[2206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.121.120.91 
Jul  7 14:13:35 piServer sshd[2206]: Failed password for invalid user sahil from 138.121.120.91 port 36802 ssh2
Jul  7 14:17:17 piServer sshd[2513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.121.120.91 
...
2020-07-07 21:49:35
138.121.120.91 attack
Jul  4 17:55:04 jane sshd[29483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.121.120.91 
Jul  4 17:55:05 jane sshd[29483]: Failed password for invalid user jur from 138.121.120.91 port 39017 ssh2
...
2020-07-05 02:49:50
138.121.120.91 attackspam
2020-07-04T10:50:20.704895lavrinenko.info sshd[24105]: Failed password for root from 138.121.120.91 port 47796 ssh2
2020-07-04T10:53:46.574352lavrinenko.info sshd[24251]: Invalid user poney from 138.121.120.91 port 42045
2020-07-04T10:53:46.583473lavrinenko.info sshd[24251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.121.120.91
2020-07-04T10:53:46.574352lavrinenko.info sshd[24251]: Invalid user poney from 138.121.120.91 port 42045
2020-07-04T10:53:49.432832lavrinenko.info sshd[24251]: Failed password for invalid user poney from 138.121.120.91 port 42045 ssh2
...
2020-07-04 16:50:09
138.121.120.91 attackspam
SSH Invalid Login
2020-07-04 06:20:32
138.121.120.91 attack
2020-06-28T08:11:10.253370na-vps210223 sshd[13338]: Invalid user test from 138.121.120.91 port 54426
2020-06-28T08:11:10.256596na-vps210223 sshd[13338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.121.120.91
2020-06-28T08:11:10.253370na-vps210223 sshd[13338]: Invalid user test from 138.121.120.91 port 54426
2020-06-28T08:11:12.340489na-vps210223 sshd[13338]: Failed password for invalid user test from 138.121.120.91 port 54426 ssh2
2020-06-28T08:13:16.376645na-vps210223 sshd[19310]: Invalid user admin from 138.121.120.91 port 41129
...
2020-06-28 22:31:55
138.121.120.91 attack
(sshd) Failed SSH login from 138.121.120.91 (BR/Brazil/dynamic-client91.smartinternet.com.br): 12 in the last 3600 secs
2020-06-25 07:20:30
138.121.120.91 attackbots
Jun 23 10:53:50 itv-usvr-01 sshd[31531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.121.120.91  user=mail
Jun 23 10:53:53 itv-usvr-01 sshd[31531]: Failed password for mail from 138.121.120.91 port 38487 ssh2
Jun 23 10:57:20 itv-usvr-01 sshd[31689]: Invalid user carmen from 138.121.120.91
Jun 23 10:57:20 itv-usvr-01 sshd[31689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.121.120.91
Jun 23 10:57:20 itv-usvr-01 sshd[31689]: Invalid user carmen from 138.121.120.91
Jun 23 10:57:22 itv-usvr-01 sshd[31689]: Failed password for invalid user carmen from 138.121.120.91 port 38836 ssh2
2020-06-23 12:50:46
138.121.120.91 attackbotsspam
Bruteforce detected by fail2ban
2020-06-11 20:04:42
138.121.120.91 attack
bruteforce detected
2020-06-07 06:34:47
138.121.120.91 attackbots
$f2bV_matches
2020-06-03 21:45:24
138.121.120.91 attack
Jun  2 22:24:46 vpn01 sshd[13646]: Failed password for root from 138.121.120.91 port 52442 ssh2
...
2020-06-03 04:46:20
138.121.120.91 attackspam
...
2020-05-27 04:45:18
138.121.120.91 attackbots
Failed password for invalid user guest from 138.121.120.91 port 37474 ssh2
2020-05-26 14:45:56
138.121.120.91 attack
May  4 23:26:41 [host] sshd[23858]: Invalid user r
May  4 23:26:41 [host] sshd[23858]: pam_unix(sshd:
May  4 23:26:43 [host] sshd[23858]: Failed passwor
2020-05-05 05:59:32
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.121.120.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24382
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.121.120.254.		IN	A

;; AUTHORITY SECTION:
.			401	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052800 1800 900 604800 86400

;; Query time: 97 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu May 28 20:26:35 CST 2020
;; MSG SIZE  rcvd: 119
Host info
254.120.121.138.in-addr.arpa domain name pointer abr.smartinternet.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
254.120.121.138.in-addr.arpa	name = abr.smartinternet.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
187.162.11.254 attackbots
MX - 1H : (19)  Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : MX 
 NAME ASN : ASN6503 
 
 IP : 187.162.11.254 
 
 CIDR : 187.162.10.0/23 
 
 PREFIX COUNT : 2074 
 
 UNIQUE IP COUNT : 1522176 
 
 
 WYKRYTE ATAKI Z ASN6503 :  
  1H - 2 
  3H - 3 
  6H - 4 
 12H - 6 
 24H - 8 
 
 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN  - data recovery 
  https://help-dysk.pl
2019-09-15 08:07:40
179.125.25.218 attack
Spamassassin_179.125.25.218
2019-09-15 08:10:18
187.85.169.98 attackbotsspam
Automatic report - Port Scan Attack
2019-09-15 08:08:04
37.59.46.85 attack
Sep 15 02:19:03 mail sshd\[8654\]: Invalid user madison from 37.59.46.85 port 60004
Sep 15 02:19:03 mail sshd\[8654\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.46.85
Sep 15 02:19:05 mail sshd\[8654\]: Failed password for invalid user madison from 37.59.46.85 port 60004 ssh2
Sep 15 02:23:16 mail sshd\[9028\]: Invalid user thrift from 37.59.46.85 port 50560
Sep 15 02:23:16 mail sshd\[9028\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.46.85
2019-09-15 08:25:37
49.234.48.171 attackspam
Automatic report - Banned IP Access
2019-09-15 07:57:18
89.33.8.34 attackbots
14.09.2019 19:51:22 Recursive DNS scan
2019-09-15 07:53:37
81.192.101.87 attack
Sep 14 18:15:12   DDOS Attack: SRC=81.192.101.87 DST=[Masked] LEN=40 TOS=0x08 PREC=0x20 TTL=115  DF PROTO=TCP SPT=27279 DPT=443 WINDOW=0 RES=0x00 ACK RST URGP=0
2019-09-15 07:54:10
180.117.112.130 attackspam
" "
2019-09-15 08:24:10
49.235.76.84 attack
Automatic report - Banned IP Access
2019-09-15 07:56:48
193.187.82.74 attack
SASL Brute Force
2019-09-15 07:59:23
201.159.95.94 attackspambots
proto=tcp  .  spt=42090  .  dpt=25  .     (listed on Blocklist de  Sep 14)     (778)
2019-09-15 08:18:44
39.187.83.82 attackbotsspam
Invalid user admin from 39.187.83.82 port 64647
2019-09-15 07:54:37
146.200.228.103 attack
Sep 14 20:36:51 localhost sshd\[19639\]: Invalid user rv from 146.200.228.103 port 55876
Sep 14 20:36:51 localhost sshd\[19639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.200.228.103
Sep 14 20:36:54 localhost sshd\[19639\]: Failed password for invalid user rv from 146.200.228.103 port 55876 ssh2
2019-09-15 08:16:40
104.248.62.208 attack
Sep 14 13:19:01 tdfoods sshd\[24359\]: Invalid user git from 104.248.62.208
Sep 14 13:19:01 tdfoods sshd\[24359\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.62.208
Sep 14 13:19:03 tdfoods sshd\[24359\]: Failed password for invalid user git from 104.248.62.208 port 35204 ssh2
Sep 14 13:23:22 tdfoods sshd\[24807\]: Invalid user de1 from 104.248.62.208
Sep 14 13:23:22 tdfoods sshd\[24807\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.62.208
2019-09-15 08:09:39
185.153.196.235 attackbotsspam
*Port Scan* detected from 185.153.196.235 (MD/Republic of Moldova/server-185-153-196-235.cloudedic.net). 4 hits in the last 265 seconds
2019-09-15 07:54:55

Recently Reported IPs

117.64.236.14 27.3.73.237 18.110.62.129 175.30.205.136
185.225.39.189 185.225.39.102 159.203.87.46 239.45.216.29
36.48.144.165 191.252.15.87 87.251.74.112 185.106.96.149
161.117.9.99 106.12.29.123 191.162.218.41 180.252.116.205
81.153.94.95 36.89.156.141 189.199.50.6 200.194.43.145