Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: Click.com Telecomunicacoes Ltda-Me

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackbotsspam
1578401817 - 01/07/2020 13:56:57 Host: 138.185.161.49/138.185.161.49 Port: 445 TCP Blocked
2020-01-08 03:13:36
attackspambots
Unauthorized connection attempt from IP address 138.185.161.49 on Port 445(SMB)
2019-11-01 04:50:22
attackspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-11 17:00:51,614 INFO [amun_request_handler] PortScan Detected on Port: 445 (138.185.161.49)
2019-09-12 11:39:42
Comments on same subnet:
IP Type Details Datetime
138.185.161.51 attackspambots
Portscan or hack attempt detected by psad/fwsnort
2019-12-01 00:44:34
138.185.161.51 attackbotsspam
Port 1433 Scan
2019-10-18 22:09:27
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.185.161.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7153
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.185.161.49.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091102 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Sep 12 11:39:36 CST 2019
;; MSG SIZE  rcvd: 118
Host info
49.161.185.138.in-addr.arpa domain name pointer ip-138.185.161.49.provedorclick.com.br.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
49.161.185.138.in-addr.arpa	name = ip-138.185.161.49.provedorclick.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
160.153.245.184 attack
/wp-login.php
2019-12-29 07:13:29
49.88.65.123 attackbots
Dec 28 23:37:05 grey postfix/smtpd\[11663\]: NOQUEUE: reject: RCPT from unknown\[49.88.65.123\]: 554 5.7.1 Service unavailable\; Client host \[49.88.65.123\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[49.88.65.123\]\; from=\ to=\ proto=ESMTP helo=\
...
2019-12-29 07:34:15
222.186.175.167 attack
Dec 28 13:32:13 php1 sshd\[26871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.167  user=root
Dec 28 13:32:15 php1 sshd\[26871\]: Failed password for root from 222.186.175.167 port 40486 ssh2
Dec 28 13:32:31 php1 sshd\[26877\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.167  user=root
Dec 28 13:32:33 php1 sshd\[26877\]: Failed password for root from 222.186.175.167 port 60946 ssh2
Dec 28 13:32:52 php1 sshd\[26893\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.167  user=root
2019-12-29 07:33:42
79.170.44.116 attackbotsspam
Automatic report - XMLRPC Attack
2019-12-29 07:20:12
117.48.209.85 attackbots
2019-12-28T22:27:51.072538abusebot-2.cloudsearch.cf sshd[17870]: Invalid user admin from 117.48.209.85 port 56864
2019-12-28T22:27:51.078082abusebot-2.cloudsearch.cf sshd[17870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.48.209.85
2019-12-28T22:27:51.072538abusebot-2.cloudsearch.cf sshd[17870]: Invalid user admin from 117.48.209.85 port 56864
2019-12-28T22:27:52.707091abusebot-2.cloudsearch.cf sshd[17870]: Failed password for invalid user admin from 117.48.209.85 port 56864 ssh2
2019-12-28T22:37:31.531002abusebot-2.cloudsearch.cf sshd[18114]: Invalid user binkley from 117.48.209.85 port 52142
2019-12-28T22:37:31.539391abusebot-2.cloudsearch.cf sshd[18114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.48.209.85
2019-12-28T22:37:31.531002abusebot-2.cloudsearch.cf sshd[18114]: Invalid user binkley from 117.48.209.85 port 52142
2019-12-28T22:37:33.459319abusebot-2.cloudsearch.cf sshd[18114]: Fa
...
2019-12-29 07:18:07
1.34.107.92 attackspam
Dec 29 00:05:20 dedicated sshd[15276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.34.107.92  user=root
Dec 29 00:05:22 dedicated sshd[15276]: Failed password for root from 1.34.107.92 port 55154 ssh2
2019-12-29 07:33:04
222.186.169.192 attack
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.192  user=root
Failed password for root from 222.186.169.192 port 64272 ssh2
Failed password for root from 222.186.169.192 port 64272 ssh2
Failed password for root from 222.186.169.192 port 64272 ssh2
Failed password for root from 222.186.169.192 port 64272 ssh2
2019-12-29 07:22:11
176.185.218.124 attack
Lines containing failures of 176.185.218.124
Dec 23 12:39:03 shared01 sshd[19767]: Invalid user pi from 176.185.218.124 port 57200
Dec 23 12:39:03 shared01 sshd[19766]: Invalid user pi from 176.185.218.124 port 57194
Dec 23 12:39:03 shared01 sshd[19767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.185.218.124
Dec 23 12:39:03 shared01 sshd[19766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.185.218.124


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=176.185.218.124
2019-12-29 07:12:59
34.73.222.193 attackbotsspam
Automated report (2019-12-28T22:37:43+00:00). Misbehaving bot detected at this address.
2019-12-29 07:11:17
8.14.149.127 attackspambots
Dec 29 00:12:10 mout sshd[30179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=8.14.149.127  user=root
Dec 29 00:12:12 mout sshd[30179]: Failed password for root from 8.14.149.127 port 42223 ssh2
2019-12-29 07:21:44
58.247.84.198 attack
Invalid user forge from 58.247.84.198 port 42240
2019-12-29 07:12:22
198.71.239.7 attackbotsspam
Automatic report - XMLRPC Attack
2019-12-29 07:07:29
195.154.112.212 attackbots
$f2bV_matches
2019-12-29 07:30:27
106.13.239.128 attack
Dec 28 22:32:19 game-panel sshd[1478]: Failed password for root from 106.13.239.128 port 34964 ssh2
Dec 28 22:34:38 game-panel sshd[1610]: Failed password for root from 106.13.239.128 port 55736 ssh2
Dec 28 22:36:56 game-panel sshd[1721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.239.128
2019-12-29 07:37:07
95.213.177.124 attack
Port scan on 1 port(s): 3128
2019-12-29 07:09:10

Recently Reported IPs

223.205.240.64 223.245.213.58 45.248.167.211 81.167.15.60
223.100.164.77 118.24.234.234 31.83.9.123 103.63.215.39
41.211.219.126 139.217.102.155 211.247.172.83 177.18.233.31
116.239.32.19 255.246.75.139 65.201.8.239 44.205.177.7
167.252.20.184 214.13.193.186 113.222.231.151 113.222.225.248