Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Colombia

Internet Service Provider: Empresas Municipales de Cali E.I.C.E. E.S.P.

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attack
fail2ban
2020-04-12 22:29:28
attackspambots
(sshd) Failed SSH login from 138.122.202.200 (CO/Colombia/Departamento del Valle del Cauca/Buenaventura/dsl-emcali-138.122.202.200.emcali.net.co/[AS10299 EMPRESAS MUNICIPALES DE CALI E.I.C.E. E.S.P.]): 1 in the last 3600 secs
2020-04-09 06:43:42
attackspam
Mar  1 14:16:45 MK-Soft-VM7 sshd[4915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200 
Mar  1 14:16:47 MK-Soft-VM7 sshd[4915]: Failed password for invalid user andoria from 138.122.202.200 port 48186 ssh2
...
2020-03-02 05:09:52
attack
$f2bV_matches
2020-01-10 06:28:23
attack
Unauthorized connection attempt detected from IP address 138.122.202.200 to port 2220 [J]
2020-01-07 18:22:46
attackspam
Unauthorized connection attempt detected from IP address 138.122.202.200 to port 2220 [J]
2020-01-04 22:52:13
attackbots
2019-11-06T08:52:08.991770abusebot-5.cloudsearch.cf sshd\[5455\]: Invalid user hirano from 138.122.202.200 port 36430
2019-11-06 20:47:39
attack
Nov  6 00:48:00 dedicated sshd[6247]: Invalid user puser from 138.122.202.200 port 37552
2019-11-06 07:49:45
attackspambots
Nov  2 13:39:48 herz-der-gamer sshd[21625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200  user=dovecot
Nov  2 13:39:50 herz-der-gamer sshd[21625]: Failed password for dovecot from 138.122.202.200 port 39928 ssh2
Nov  2 13:46:35 herz-der-gamer sshd[21679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200  user=root
Nov  2 13:46:37 herz-der-gamer sshd[21679]: Failed password for root from 138.122.202.200 port 36038 ssh2
...
2019-11-02 21:07:27
attack
Nov  1 13:40:57 eddieflores sshd\[16445\]: Invalid user support from 138.122.202.200
Nov  1 13:40:57 eddieflores sshd\[16445\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200
Nov  1 13:40:59 eddieflores sshd\[16445\]: Failed password for invalid user support from 138.122.202.200 port 55758 ssh2
Nov  1 13:45:26 eddieflores sshd\[17321\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200  user=root
Nov  1 13:45:29 eddieflores sshd\[17321\]: Failed password for root from 138.122.202.200 port 38718 ssh2
2019-11-02 07:56:23
attackspambots
Oct 31 08:21:41 localhost sshd\[25424\]: Invalid user h from 138.122.202.200 port 43504
Oct 31 08:21:41 localhost sshd\[25424\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200
Oct 31 08:21:43 localhost sshd\[25424\]: Failed password for invalid user h from 138.122.202.200 port 43504 ssh2
2019-10-31 15:30:31
attackbots
2019-10-15T13:20:19.899632ns525875 sshd\[13565\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200  user=root
2019-10-15T13:20:21.797831ns525875 sshd\[13565\]: Failed password for root from 138.122.202.200 port 58052 ssh2
2019-10-15T13:24:39.839885ns525875 sshd\[18812\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200  user=root
2019-10-15T13:24:41.766506ns525875 sshd\[18812\]: Failed password for root from 138.122.202.200 port 41750 ssh2
2019-10-15T13:29:04.269596ns525875 sshd\[24222\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200  user=root
2019-10-15T13:29:06.909611ns525875 sshd\[24222\]: Failed password for root from 138.122.202.200 port 53680 ssh2
2019-10-15T13:33:12.624524ns525875 sshd\[29314\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200  us
...
2019-10-28 16:29:35
attackbotsspam
Oct 25 20:12:58 kapalua sshd\[30012\]: Invalid user meryl from 138.122.202.200
Oct 25 20:12:58 kapalua sshd\[30012\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200
Oct 25 20:13:00 kapalua sshd\[30012\]: Failed password for invalid user meryl from 138.122.202.200 port 50458 ssh2
Oct 25 20:17:31 kapalua sshd\[30428\]: Invalid user administrator from 138.122.202.200
Oct 25 20:17:31 kapalua sshd\[30428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200
2019-10-26 19:01:24
attackspambots
Oct 25 03:57:21 venus sshd\[32401\]: Invalid user ed from 138.122.202.200 port 44438
Oct 25 03:57:21 venus sshd\[32401\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200
Oct 25 03:57:23 venus sshd\[32401\]: Failed password for invalid user ed from 138.122.202.200 port 44438 ssh2
...
2019-10-25 12:10:23
attackspambots
Sep 25 16:32:40 ny01 sshd[5513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200
Sep 25 16:32:42 ny01 sshd[5513]: Failed password for invalid user gg from 138.122.202.200 port 59392 ssh2
Sep 25 16:37:03 ny01 sshd[6193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200
2019-09-26 04:47:26
attackspam
Sep 24 07:50:21 lnxmysql61 sshd[9576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200
Sep 24 07:50:21 lnxmysql61 sshd[9576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200
Sep 24 07:50:24 lnxmysql61 sshd[9576]: Failed password for invalid user alain from 138.122.202.200 port 49032 ssh2
2019-09-24 13:53:53
attackspam
Jan 29 11:32:11 vtv3 sshd\[4972\]: Invalid user kafka from 138.122.202.200 port 50614
Jan 29 11:32:11 vtv3 sshd\[4972\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200
Jan 29 11:32:13 vtv3 sshd\[4972\]: Failed password for invalid user kafka from 138.122.202.200 port 50614 ssh2
Jan 29 11:36:52 vtv3 sshd\[6312\]: Invalid user mapr from 138.122.202.200 port 54572
Jan 29 11:36:52 vtv3 sshd\[6312\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200
Jan 31 21:14:36 vtv3 sshd\[2998\]: Invalid user minecraft from 138.122.202.200 port 44460
Jan 31 21:14:36 vtv3 sshd\[2998\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200
Jan 31 21:14:37 vtv3 sshd\[2998\]: Failed password for invalid user minecraft from 138.122.202.200 port 44460 ssh2
Jan 31 21:19:20 vtv3 sshd\[4295\]: Invalid user deploy from 138.122.202.200 port 48390
Jan 31 21:19:20 vtv3 ssh
2019-09-14 07:14:29
attackbots
2019-09-08T05:06:39.163542abusebot-4.cloudsearch.cf sshd\[29844\]: Invalid user 201 from 138.122.202.200 port 50824
2019-09-08 15:16:51
attackbots
Sep  5 00:19:00 kapalua sshd\[15552\]: Invalid user qmfltmqjs!@\#\$ from 138.122.202.200
Sep  5 00:19:00 kapalua sshd\[15552\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200
Sep  5 00:19:02 kapalua sshd\[15552\]: Failed password for invalid user qmfltmqjs!@\#\$ from 138.122.202.200 port 36098 ssh2
Sep  5 00:23:50 kapalua sshd\[16018\]: Invalid user admin123 from 138.122.202.200
Sep  5 00:23:50 kapalua sshd\[16018\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200
2019-09-05 23:18:20
attackbotsspam
Aug 18 17:52:40 kapalua sshd\[10533\]: Invalid user tomcat from 138.122.202.200
Aug 18 17:52:40 kapalua sshd\[10533\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200
Aug 18 17:52:42 kapalua sshd\[10533\]: Failed password for invalid user tomcat from 138.122.202.200 port 47782 ssh2
Aug 18 17:57:19 kapalua sshd\[10934\]: Invalid user deployer from 138.122.202.200
Aug 18 17:57:19 kapalua sshd\[10934\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200
2019-08-19 12:03:20
attackspam
Aug 16 07:40:39 SilenceServices sshd[31574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200
Aug 16 07:40:40 SilenceServices sshd[31574]: Failed password for invalid user netapp from 138.122.202.200 port 48588 ssh2
Aug 16 07:45:36 SilenceServices sshd[2769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200
2019-08-16 13:53:36
Comments on same subnet:
IP Type Details Datetime
138.122.202.217 attackbotsspam
Aug 31 12:20:49 localhost sshd\[79971\]: Invalid user tino from 138.122.202.217 port 37514
Aug 31 12:20:49 localhost sshd\[79971\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.217
Aug 31 12:20:51 localhost sshd\[79971\]: Failed password for invalid user tino from 138.122.202.217 port 37514 ssh2
Aug 31 12:25:19 localhost sshd\[80106\]: Invalid user tom from 138.122.202.217 port 54968
Aug 31 12:25:19 localhost sshd\[80106\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.217
...
2019-08-31 22:08:33
138.122.202.217 attackspam
Aug 28 12:28:56 work-partkepr sshd\[23376\]: Invalid user pentaho from 138.122.202.217 port 58694
Aug 28 12:28:56 work-partkepr sshd\[23376\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.217
...
2019-08-28 21:23:14
138.122.202.217 attackbotsspam
Invalid user april from 138.122.202.217 port 42512
2019-08-23 15:54:32
138.122.202.217 attack
Aug 20 15:50:25 lcdev sshd\[21820\]: Invalid user sites from 138.122.202.217
Aug 20 15:50:25 lcdev sshd\[21820\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.217
Aug 20 15:50:28 lcdev sshd\[21820\]: Failed password for invalid user sites from 138.122.202.217 port 40654 ssh2
Aug 20 15:55:09 lcdev sshd\[22255\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.217  user=root
Aug 20 15:55:11 lcdev sshd\[22255\]: Failed password for root from 138.122.202.217 port 59540 ssh2
2019-08-21 10:00:29
138.122.202.217 attackbotsspam
blacklist username maisa
Invalid user maisa from 138.122.202.217 port 46378
2019-08-17 11:22:05
138.122.202.217 attack
2019-08-16T07:20:53.572162centos sshd\[20625\]: Invalid user louisk from 138.122.202.217 port 36326
2019-08-16T07:20:53.577750centos sshd\[20625\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.217
2019-08-16T07:20:55.960597centos sshd\[20625\]: Failed password for invalid user louisk from 138.122.202.217 port 36326 ssh2
2019-08-16 16:52:35
138.122.202.217 attackspambots
DATE:2019-08-15 01:29:23, IP:138.122.202.217, PORT:ssh SSH brute force auth (thor)
2019-08-15 12:39:07
138.122.202.217 attackbotsspam
Invalid user osmc from 138.122.202.217 port 54346
2019-08-01 01:09:04
138.122.202.217 attack
SSH/22 MH Probe, BF, Hack -
2019-07-29 21:15:25
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.122.202.200
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47440
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.122.202.200.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019032802 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Fri Mar 29 07:14:43 +08 2019
;; MSG SIZE  rcvd: 119

Host info
200.202.122.138.in-addr.arpa domain name pointer dsl-emcali-138.122.202.200.emcali.net.co.
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
200.202.122.138.in-addr.arpa	name = dsl-emcali-138.122.202.200.emcali.net.co.

Authoritative answers can be found from:

Related IP info:
Related comments:
IP Type Details Datetime
114.35.32.167 attackspambots
Port probing on unauthorized port 23
2020-09-04 15:15:32
192.241.221.249 attackspam
Sep  3 09:47:31 propaganda sshd[2944]: Connection from 192.241.221.249 port 34394 on 10.0.0.161 port 22 rdomain ""
Sep  3 09:47:41 propaganda sshd[2944]: error: kex_exchange_identification: Connection closed by remote host
2020-09-04 15:08:08
197.50.232.198 attackspam
20/9/3@12:47:44: FAIL: Alarm-Network address from=197.50.232.198
...
2020-09-04 15:06:10
188.226.167.212 attack
$f2bV_matches
2020-09-04 15:16:35
49.234.221.217 attackbots
Invalid user craig from 49.234.221.217 port 41264
2020-09-04 15:07:53
162.142.125.22 attackspambots
Port scan denied
2020-09-04 14:50:30
45.129.33.154 attackbotsspam
Sep  3 21:25:04   TCP Attack: SRC=45.129.33.154 DST=[Masked] LEN=40 TOS=0x08 PREC=0x20 TTL=246  PROTO=TCP SPT=52314 DPT=5522 WINDOW=1024 RES=0x00 SYN URGP=0
2020-09-04 15:18:57
159.255.130.57 attackbots
Sep  3 18:47:46 mellenthin postfix/smtpd[19006]: NOQUEUE: reject: RCPT from unknown[159.255.130.57]: 554 5.7.1 Service unavailable; Client host [159.255.130.57] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/159.255.130.57; from= to= proto=ESMTP helo=<159-255-130-57.airbeam.it>
2020-09-04 15:04:20
186.22.74.193 attack
Sep  3 18:48:08 mellenthin postfix/smtpd[19006]: NOQUEUE: reject: RCPT from unknown[186.22.74.193]: 554 5.7.1 Service unavailable; Client host [186.22.74.193] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/186.22.74.193; from= to= proto=ESMTP helo=
2020-09-04 14:43:29
61.177.172.128 attack
Sep  4 09:17:43 pve1 sshd[1725]: Failed password for root from 61.177.172.128 port 30008 ssh2
Sep  4 09:17:47 pve1 sshd[1725]: Failed password for root from 61.177.172.128 port 30008 ssh2
...
2020-09-04 15:28:27
222.186.175.163 attack
Sep  4 03:55:07 firewall sshd[2984]: Failed password for root from 222.186.175.163 port 53348 ssh2
Sep  4 03:55:10 firewall sshd[2984]: Failed password for root from 222.186.175.163 port 53348 ssh2
Sep  4 03:55:13 firewall sshd[2984]: Failed password for root from 222.186.175.163 port 53348 ssh2
...
2020-09-04 15:02:52
37.47.176.148 attack
Lines containing failures of 37.47.176.148
Sep  2 10:23:11 omfg postfix/smtpd[30643]: connect from public-gprs395603.centertel.pl[37.47.176.148]
Sep x@x
Sep  2 10:23:11 omfg postfix/smtpd[30643]: lost connection after DATA from public-gprs395603.centertel.pl[37.47.176.148]
Sep  2 10:23:11 omfg postfix/smtpd[30643]: disconnect from public-gprs395603.centertel.pl[37.47.176.148] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=37.47.176.148
2020-09-04 15:03:23
34.93.0.165 attack
Invalid user tom from 34.93.0.165 port 34342
2020-09-04 15:00:26
139.199.10.43 attackspam
 TCP (SYN) 139.199.10.43:56883 -> port 445, len 44
2020-09-04 15:13:58
51.89.14.136 attackbotsspam
2020-09-04 01:16:14.806350-0500  localhost smtpd[80512]: NOQUEUE: reject: RCPT from unknown[51.89.14.136]: 450 4.7.25 Client host rejected: cannot find your hostname, [51.89.14.136]; from= to= proto=ESMTP helo=
2020-09-04 14:51:33

Recently Reported IPs

187.189.63.82 121.123.15.117 202.29.39.1 198.211.118.157
101.2.163.49 192.169.217.183 106.12.212.187 178.62.28.79
51.68.123.198 217.182.252.63 74.63.250.6 66.181.167.115
213.158.29.179 201.17.24.195 196.250.1.154 182.254.227.147
182.61.21.197 168.227.99.10 167.99.202.143 157.230.40.76