Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: RM Informatica Ltda

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attack
Automatic report - Port Scan Attack
2019-08-07 14:08:56
Comments on same subnet:
IP Type Details Datetime
138.122.20.255 attackbots
Automatic report - Port Scan Attack
2020-05-21 22:24:10
138.122.20.93 attackbotsspam
DATE:2020-05-13 14:34:32, IP:138.122.20.93, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)
2020-05-14 01:44:14
138.122.202.200 attack
fail2ban
2020-04-12 22:29:28
138.122.202.200 attackspambots
(sshd) Failed SSH login from 138.122.202.200 (CO/Colombia/Departamento del Valle del Cauca/Buenaventura/dsl-emcali-138.122.202.200.emcali.net.co/[AS10299 EMPRESAS MUNICIPALES DE CALI E.I.C.E. E.S.P.]): 1 in the last 3600 secs
2020-04-09 06:43:42
138.122.202.200 attackspam
Mar  1 14:16:45 MK-Soft-VM7 sshd[4915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200 
Mar  1 14:16:47 MK-Soft-VM7 sshd[4915]: Failed password for invalid user andoria from 138.122.202.200 port 48186 ssh2
...
2020-03-02 05:09:52
138.122.20.74 attack
unauthorized connection attempt
2020-02-07 17:58:12
138.122.20.81 attack
Unauthorized connection attempt detected from IP address 138.122.20.81 to port 80 [J]
2020-01-25 16:04:02
138.122.202.200 attack
$f2bV_matches
2020-01-10 06:28:23
138.122.202.200 attack
Unauthorized connection attempt detected from IP address 138.122.202.200 to port 2220 [J]
2020-01-07 18:22:46
138.122.202.200 attackspam
Unauthorized connection attempt detected from IP address 138.122.202.200 to port 2220 [J]
2020-01-04 22:52:13
138.122.20.79 attackspam
Automatic report - Port Scan Attack
2019-12-21 07:18:16
138.122.20.5 attackspambots
Honeypot attack, port: 445, PTR: 138-122-20-5.rminet.com.br.
2019-11-27 20:44:54
138.122.20.5 attackbots
1433/tcp 1433/tcp 445/tcp
[2019-10-09/11-15]3pkt
2019-11-16 08:30:49
138.122.20.95 attack
19/11/12@09:40:45: FAIL: IoT-Telnet address from=138.122.20.95
...
2019-11-12 23:52:23
138.122.202.200 attackbots
2019-11-06T08:52:08.991770abusebot-5.cloudsearch.cf sshd\[5455\]: Invalid user hirano from 138.122.202.200 port 36430
2019-11-06 20:47:39
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.122.20.85
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47730
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.122.20.85.			IN	A

;; AUTHORITY SECTION:
.			2398	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080700 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Aug 07 14:08:31 CST 2019
;; MSG SIZE  rcvd: 117
Host info
85.20.122.138.in-addr.arpa domain name pointer 138-122-20-85.rminet.com.br.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
85.20.122.138.in-addr.arpa	name = 138-122-20-85.rminet.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
222.186.180.41 attack
2020-09-05T16:00:05.212515vps773228.ovh.net sshd[21612]: Failed password for root from 222.186.180.41 port 7324 ssh2
2020-09-05T16:00:07.992912vps773228.ovh.net sshd[21612]: Failed password for root from 222.186.180.41 port 7324 ssh2
2020-09-05T16:00:10.984686vps773228.ovh.net sshd[21612]: Failed password for root from 222.186.180.41 port 7324 ssh2
2020-09-05T16:00:10.987737vps773228.ovh.net sshd[21612]: error: maximum authentication attempts exceeded for root from 222.186.180.41 port 7324 ssh2 [preauth]
2020-09-05T16:00:10.987799vps773228.ovh.net sshd[21612]: Disconnecting: Too many authentication failures [preauth]
...
2020-09-05 22:02:56
222.186.173.142 attackbotsspam
Sep  5 16:05:15 jane sshd[5112]: Failed password for root from 222.186.173.142 port 31878 ssh2
Sep  5 16:05:18 jane sshd[5112]: Failed password for root from 222.186.173.142 port 31878 ssh2
...
2020-09-05 22:15:33
222.186.42.213 attack
Sep  5 15:50:49 eventyay sshd[15563]: Failed password for root from 222.186.42.213 port 24641 ssh2
Sep  5 15:51:08 eventyay sshd[15566]: Failed password for root from 222.186.42.213 port 43205 ssh2
...
2020-09-05 21:53:49
113.89.12.21 attack
$f2bV_matches
2020-09-05 22:14:38
86.45.254.132 attackspambots
Sep  4 18:51:03 mellenthin postfix/smtpd[32584]: NOQUEUE: reject: RCPT from 86-45-254-132-dynamic.agg1.cab.bdt-fng.eircom.net[86.45.254.132]: 554 5.7.1 Service unavailable; Client host [86.45.254.132] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/86.45.254.132; from= to= proto=ESMTP helo=<86-45-254-132-dynamic.agg1.cab.bdt-fng.eircom.net>
2020-09-05 22:35:25
208.83.85.55 attack
20/9/4@12:51:22: FAIL: IoT-Telnet address from=208.83.85.55
...
2020-09-05 22:16:19
200.116.171.189 attackspam
SmallBizIT.US 1 packets to tcp(23)
2020-09-05 22:18:01
190.134.23.31 attack
Sep  4 18:51:09 mellenthin postfix/smtpd[32153]: NOQUEUE: reject: RCPT from r190-134-23-31.dialup.adsl.anteldata.net.uy[190.134.23.31]: 554 5.7.1 Service unavailable; Client host [190.134.23.31] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/190.134.23.31; from= to= proto=ESMTP helo=
2020-09-05 22:30:15
210.9.47.154 attack
2020-09-05T07:41:42+0200 Failed SSH Authentication/Brute Force Attack.(Server 2)
2020-09-05 22:03:14
177.152.124.19 attack
*Port Scan* detected from 177.152.124.19 (BR/Brazil/Minas Gerais/Timóteo/-). 4 hits in the last 50 seconds
2020-09-05 22:07:26
222.186.180.8 attack
2020-09-05T16:50:01.763362afi-git.jinr.ru sshd[30176]: Failed password for root from 222.186.180.8 port 64930 ssh2
2020-09-05T16:50:05.120355afi-git.jinr.ru sshd[30176]: Failed password for root from 222.186.180.8 port 64930 ssh2
2020-09-05T16:50:08.557984afi-git.jinr.ru sshd[30176]: Failed password for root from 222.186.180.8 port 64930 ssh2
2020-09-05T16:50:08.558147afi-git.jinr.ru sshd[30176]: error: maximum authentication attempts exceeded for root from 222.186.180.8 port 64930 ssh2 [preauth]
2020-09-05T16:50:08.558172afi-git.jinr.ru sshd[30176]: Disconnecting: Too many authentication failures [preauth]
...
2020-09-05 21:55:34
173.212.230.20 attackspam
TCP port : 8291
2020-09-05 22:30:44
149.129.52.21 attackbots
149.129.52.21 - - [05/Sep/2020:15:43:35 +0200] "GET /wp-login.php HTTP/1.1" 200 8712 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
149.129.52.21 - - [05/Sep/2020:15:43:38 +0200] "POST /wp-login.php HTTP/1.1" 200 8942 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
149.129.52.21 - - [05/Sep/2020:15:43:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-05 22:34:56
27.254.34.155 attackbots
1599238276 - 09/04/2020 18:51:16 Host: 27.254.34.155/27.254.34.155 Port: 445 TCP Blocked
2020-09-05 22:23:00
178.86.210.81 attackspambots
Sep  4 18:51:49 mellenthin postfix/smtpd[32280]: NOQUEUE: reject: RCPT from unknown[178.86.210.81]: 554 5.7.1 Service unavailable; Client host [178.86.210.81] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/178.86.210.81; from= to= proto=ESMTP helo=<[178.86.210.81]>
2020-09-05 21:58:01

Recently Reported IPs

176.109.34.58 157.230.255.16 87.79.71.214 168.232.128.176
189.91.5.29 117.93.211.13 185.69.153.247 184.151.230.227
91.248.47.183 89.204.154.246 191.240.25.174 88.15.245.185
2a01:4f8:160:2492::2 185.234.217.5 186.53.212.120 191.35.209.144
40.218.79.124 205.196.93.160 68.68.67.83 118.97.112.37