Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: Netjat Provedor de Acesso a Internet

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackbots
Absender hat Spam-Falle ausgel?st
2019-12-19 16:15:01
Comments on same subnet:
IP Type Details Datetime
138.185.166.218 attack
spam
2020-04-15 16:02:51
138.185.166.133 attackspam
email spam
2020-03-01 19:46:06
138.185.166.254 attack
Sending SPAM email
2020-02-06 23:44:58
138.185.166.173 attackbotsspam
spam
2020-01-22 16:23:34
138.185.166.194 attackspam
Brute force attempt
2019-08-15 05:13:26
138.185.166.166 attackspambots
Lines containing failures of 138.185.166.166
Jul 27 03:25:46 omfg postfix/smtpd[27121]: connect from unknown[138.185.166.166]
Jul x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=138.185.166.166
2019-07-29 08:50:12
138.185.166.149 attackspam
Jul 17 15:34:24 h2421860 postfix/postscreen[29334]: CONNECT from [138.185.166.149]:57743 to [85.214.119.52]:25
Jul 17 15:34:24 h2421860 postfix/dnsblog[29337]: addr 138.185.166.149 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Jul 17 15:34:24 h2421860 postfix/dnsblog[29338]: addr 138.185.166.149 listed by domain bl.spamcop.net as 127.0.0.2
Jul 17 15:34:24 h2421860 postfix/dnsblog[29338]: addr 138.185.166.149 listed by domain zen.spamhaus.org as 127.0.0.4
Jul 17 15:34:24 h2421860 postfix/dnsblog[29338]: addr 138.185.166.149 listed by domain zen.spamhaus.org as 127.0.0.3
Jul 17 15:34:24 h2421860 postfix/dnsblog[29342]: addr 138.185.166.149 listed by domain Unknown.trblspam.com as 185.53.179.7
Jul 17 15:34:24 h2421860 postfix/dnsblog[29339]: addr 138.185.166.149 listed by domain b.barracudacentral.org as 127.0.0.2
Jul 17 15:34:24 h2421860 postfix/dnsblog[29338]: addr 138.185.166.149 listed by domain dnsbl.sorbs.net as 127.0.0.6
Jul 17 15:34:24 h2421860 postfix/postscre........
-------------------------------
2019-07-18 18:23:59
138.185.166.194 attack
Jul 10 20:09:44 mxgate1 postfix/postscreen[26117]: CONNECT from [138.185.166.194]:49880 to [176.31.12.44]:25
Jul 10 20:09:44 mxgate1 postfix/dnsblog[26118]: addr 138.185.166.194 listed by domain zen.spamhaus.org as 127.0.0.4
Jul 10 20:09:44 mxgate1 postfix/dnsblog[26118]: addr 138.185.166.194 listed by domain zen.spamhaus.org as 127.0.0.3
Jul 10 20:09:44 mxgate1 postfix/dnsblog[26122]: addr 138.185.166.194 listed by domain cbl.abuseat.org as 127.0.0.2
Jul 10 20:09:44 mxgate1 postfix/dnsblog[26119]: addr 138.185.166.194 listed by domain bl.spamcop.net as 127.0.0.2
Jul 10 20:09:44 mxgate1 postfix/dnsblog[26121]: addr 138.185.166.194 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Jul 10 20:09:45 mxgate1 postfix/dnsblog[26166]: addr 138.185.166.194 listed by domain b.barracudacentral.org as 127.0.0.2
Jul 10 20:09:45 mxgate1 postfix/postscreen[26117]: PREGREET 38 after 0.53 from [138.185.166.194]:49880: EHLO ip138-185-166-194.netjat.com.br

Jul 10 20:09:45 mxgate1 postfix........
-------------------------------
2019-07-11 18:27:41
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.185.166.136
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47038
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.185.166.136.		IN	A

;; AUTHORITY SECTION:
.			457	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121900 1800 900 604800 86400

;; Query time: 114 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Dec 19 16:14:56 CST 2019
;; MSG SIZE  rcvd: 119
Host info
136.166.185.138.in-addr.arpa domain name pointer ip138-185-166-136.netjat.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
136.166.185.138.in-addr.arpa	name = ip138-185-166-136.netjat.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
129.204.147.84 attackbots
Feb  1 05:54:15 lock-38 sshd[29075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.147.84 
Feb  1 05:54:16 lock-38 sshd[29075]: Failed password for invalid user steamcmd from 129.204.147.84 port 34380 ssh2
...
2020-02-01 16:15:49
222.186.175.216 attack
Feb  1 08:57:37 ks10 sshd[1819543]: Failed password for root from 222.186.175.216 port 26416 ssh2
Feb  1 08:57:41 ks10 sshd[1819543]: Failed password for root from 222.186.175.216 port 26416 ssh2
...
2020-02-01 15:59:55
142.93.204.221 attackspam
$f2bV_matches
2020-02-01 16:10:53
200.188.146.230 attackbots
Feb  1 05:55:05 grey postfix/smtpd\[11461\]: NOQUEUE: reject: RCPT from unknown\[200.188.146.230\]: 554 5.7.1 Service unavailable\; Client host \[200.188.146.230\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?200.188.146.230\; from=\ to=\ proto=ESMTP helo=\
...
2020-02-01 15:39:31
129.211.86.141 attack
Feb  1 06:27:24 srv-ubuntu-dev3 sshd[14198]: Invalid user usuario from 129.211.86.141
Feb  1 06:27:24 srv-ubuntu-dev3 sshd[14198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.86.141
Feb  1 06:27:24 srv-ubuntu-dev3 sshd[14198]: Invalid user usuario from 129.211.86.141
Feb  1 06:27:26 srv-ubuntu-dev3 sshd[14198]: Failed password for invalid user usuario from 129.211.86.141 port 51594 ssh2
Feb  1 06:32:02 srv-ubuntu-dev3 sshd[20481]: Invalid user admin from 129.211.86.141
Feb  1 06:32:02 srv-ubuntu-dev3 sshd[20481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.86.141
Feb  1 06:32:02 srv-ubuntu-dev3 sshd[20481]: Invalid user admin from 129.211.86.141
Feb  1 06:32:04 srv-ubuntu-dev3 sshd[20481]: Failed password for invalid user admin from 129.211.86.141 port 54806 ssh2
Feb  1 06:36:43 srv-ubuntu-dev3 sshd[21668]: Invalid user web from 129.211.86.141
...
2020-02-01 16:13:13
83.15.183.137 attackspam
Unauthorized connection attempt detected from IP address 83.15.183.137 to port 2220 [J]
2020-02-01 15:53:10
14.250.100.98 attackspambots
Attempt to attack host OS, exploiting network vulnerabilities, on 01-02-2020 04:55:09.
2020-02-01 15:35:19
128.199.155.218 attackspambots
Invalid user oracle from 128.199.155.218 port 19295
2020-02-01 15:57:30
163.172.204.185 attack
Unauthorized connection attempt detected from IP address 163.172.204.185 to port 2220 [J]
2020-02-01 15:57:52
122.51.135.40 attack
xmlrpc attack
2020-02-01 15:40:19
140.143.0.254 attackspam
Unauthorized connection attempt detected from IP address 140.143.0.254 to port 2220 [J]
2020-02-01 16:09:30
109.95.177.87 attackbots
Automatic report - SSH Brute-Force Attack
2020-02-01 16:07:56
104.243.41.97 attackbots
*Port Scan* detected from 104.243.41.97 (US/United States/-). 4 hits in the last 151 seconds
2020-02-01 15:46:58
115.236.170.78 attack
Feb  1 07:25:21 dedicated sshd[10371]: Invalid user admin from 115.236.170.78 port 42084
2020-02-01 16:06:26
203.196.24.22 attackspam
Unauthorized connection attempt detected from IP address 203.196.24.22 to port 2220 [J]
2020-02-01 15:36:10

Recently Reported IPs

35.23.96.159 192.200.200.163 187.73.205.84 179.6.34.200
15.43.99.234 154.79.244.6 150.129.57.147 40.87.41.44
103.47.94.34 95.111.128.43 91.193.176.137 78.128.113.170
69.94.131.89 69.94.131.84 63.83.78.183 46.28.109.234
235.229.209.102 45.146.201.217 200.34.109.11 192.200.200.153