Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
138.185.166.218 attack
spam
2020-04-15 16:02:51
138.185.166.133 attackspam
email spam
2020-03-01 19:46:06
138.185.166.254 attack
Sending SPAM email
2020-02-06 23:44:58
138.185.166.173 attackbotsspam
spam
2020-01-22 16:23:34
138.185.166.136 attackbots
Absender hat Spam-Falle ausgel?st
2019-12-19 16:15:01
138.185.166.194 attackspam
Brute force attempt
2019-08-15 05:13:26
138.185.166.166 attackspambots
Lines containing failures of 138.185.166.166
Jul 27 03:25:46 omfg postfix/smtpd[27121]: connect from unknown[138.185.166.166]
Jul x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=138.185.166.166
2019-07-29 08:50:12
138.185.166.149 attackspam
Jul 17 15:34:24 h2421860 postfix/postscreen[29334]: CONNECT from [138.185.166.149]:57743 to [85.214.119.52]:25
Jul 17 15:34:24 h2421860 postfix/dnsblog[29337]: addr 138.185.166.149 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Jul 17 15:34:24 h2421860 postfix/dnsblog[29338]: addr 138.185.166.149 listed by domain bl.spamcop.net as 127.0.0.2
Jul 17 15:34:24 h2421860 postfix/dnsblog[29338]: addr 138.185.166.149 listed by domain zen.spamhaus.org as 127.0.0.4
Jul 17 15:34:24 h2421860 postfix/dnsblog[29338]: addr 138.185.166.149 listed by domain zen.spamhaus.org as 127.0.0.3
Jul 17 15:34:24 h2421860 postfix/dnsblog[29342]: addr 138.185.166.149 listed by domain Unknown.trblspam.com as 185.53.179.7
Jul 17 15:34:24 h2421860 postfix/dnsblog[29339]: addr 138.185.166.149 listed by domain b.barracudacentral.org as 127.0.0.2
Jul 17 15:34:24 h2421860 postfix/dnsblog[29338]: addr 138.185.166.149 listed by domain dnsbl.sorbs.net as 127.0.0.6
Jul 17 15:34:24 h2421860 postfix/postscre........
-------------------------------
2019-07-18 18:23:59
138.185.166.194 attack
Jul 10 20:09:44 mxgate1 postfix/postscreen[26117]: CONNECT from [138.185.166.194]:49880 to [176.31.12.44]:25
Jul 10 20:09:44 mxgate1 postfix/dnsblog[26118]: addr 138.185.166.194 listed by domain zen.spamhaus.org as 127.0.0.4
Jul 10 20:09:44 mxgate1 postfix/dnsblog[26118]: addr 138.185.166.194 listed by domain zen.spamhaus.org as 127.0.0.3
Jul 10 20:09:44 mxgate1 postfix/dnsblog[26122]: addr 138.185.166.194 listed by domain cbl.abuseat.org as 127.0.0.2
Jul 10 20:09:44 mxgate1 postfix/dnsblog[26119]: addr 138.185.166.194 listed by domain bl.spamcop.net as 127.0.0.2
Jul 10 20:09:44 mxgate1 postfix/dnsblog[26121]: addr 138.185.166.194 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Jul 10 20:09:45 mxgate1 postfix/dnsblog[26166]: addr 138.185.166.194 listed by domain b.barracudacentral.org as 127.0.0.2
Jul 10 20:09:45 mxgate1 postfix/postscreen[26117]: PREGREET 38 after 0.53 from [138.185.166.194]:49880: EHLO ip138-185-166-194.netjat.com.br

Jul 10 20:09:45 mxgate1 postfix........
-------------------------------
2019-07-11 18:27:41
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.185.166.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11578
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.185.166.142.		IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:29:55 CST 2022
;; MSG SIZE  rcvd: 108
Host info
142.166.185.138.in-addr.arpa domain name pointer ip138-185-166-142.netjat.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.166.185.138.in-addr.arpa	name = ip138-185-166-142.netjat.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
165.227.195.95 attackbotsspam
Oct 13 03:49:56 thevastnessof sshd[2035]: Failed password for root from 165.227.195.95 port 53226 ssh2
...
2019-10-13 16:42:15
82.207.23.43 attackbots
Oct 13 11:57:26 webhost01 sshd[810]: Failed password for root from 82.207.23.43 port 36276 ssh2
...
2019-10-13 16:10:48
193.32.160.142 attackbotsspam
Oct 13 10:13:30 webserver postfix/smtpd\[11453\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.142\]: 454 4.7.1 \: Relay access denied\; from=\<5nlkd5gk3af9qc@kt-sb.ru\> to=\ proto=ESMTP helo=\<\[193.32.160.142\]\>
Oct 13 10:13:30 webserver postfix/smtpd\[11453\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.142\]: 454 4.7.1 \: Relay access denied\; from=\<5nlkd5gk3af9qc@kt-sb.ru\> to=\ proto=ESMTP helo=\<\[193.32.160.142\]\>
Oct 13 10:13:30 webserver postfix/smtpd\[11453\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.142\]: 454 4.7.1 \: Relay access denied\; from=\<5nlkd5gk3af9qc@kt-sb.ru\> to=\ proto=ESMTP helo=\<\[193.32.160.142\]\>
Oct 13 10:13:30 webserver postfix/smtpd\[11453\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.142\]: 454 4.7.1 \: Relay access denied\; from=\<5nlkd5gk3af9qc@kt-sb.ru\> to=\
2019-10-13 16:17:26
78.128.113.117 attack
Oct 13 03:33:27 web1 postfix/smtpd[19126]: warning: unknown[78.128.113.117]: SASL PLAIN authentication failed: authentication failure
...
2019-10-13 16:11:14
157.230.238.19 attack
157.230.238.19 - - [13/Oct/2019:06:45:45 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.230.238.19 - - [13/Oct/2019:06:45:51 +0200] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.230.238.19 - - [13/Oct/2019:06:45:56 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.230.238.19 - - [13/Oct/2019:06:46:03 +0200] "POST /wp-login.php HTTP/1.1" 200 1684 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.230.238.19 - - [13/Oct/2019:06:46:07 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.230.238.19 - - [13/Oct/2019:06:46:17 +0200] "POST /wp-login.php HTTP/1.1" 200 1688 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2019-10-13 16:33:37
222.186.175.147 attack
Oct 13 10:19:53 MainVPS sshd[369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.147  user=root
Oct 13 10:19:55 MainVPS sshd[369]: Failed password for root from 222.186.175.147 port 26104 ssh2
Oct 13 10:20:12 MainVPS sshd[369]: Failed password for root from 222.186.175.147 port 26104 ssh2
Oct 13 10:19:53 MainVPS sshd[369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.147  user=root
Oct 13 10:19:55 MainVPS sshd[369]: Failed password for root from 222.186.175.147 port 26104 ssh2
Oct 13 10:20:12 MainVPS sshd[369]: Failed password for root from 222.186.175.147 port 26104 ssh2
Oct 13 10:19:53 MainVPS sshd[369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.147  user=root
Oct 13 10:19:55 MainVPS sshd[369]: Failed password for root from 222.186.175.147 port 26104 ssh2
Oct 13 10:20:12 MainVPS sshd[369]: Failed password for root from 222.186.175.147 port 261
2019-10-13 16:22:52
124.156.117.111 attackspam
Oct 12 17:41:25 auw2 sshd\[16147\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.117.111  user=root
Oct 12 17:41:26 auw2 sshd\[16147\]: Failed password for root from 124.156.117.111 port 34798 ssh2
Oct 12 17:45:52 auw2 sshd\[16644\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.117.111  user=root
Oct 12 17:45:54 auw2 sshd\[16644\]: Failed password for root from 124.156.117.111 port 46152 ssh2
Oct 12 17:50:34 auw2 sshd\[17216\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.117.111  user=root
2019-10-13 16:19:01
218.94.136.90 attack
2019-10-13T08:37:35.514884abusebot-5.cloudsearch.cf sshd\[3525\]: Invalid user team from 218.94.136.90 port 58248
2019-10-13 16:39:25
51.77.137.211 attackspambots
Oct 13 09:57:31 jane sshd[13537]: Failed password for root from 51.77.137.211 port 40966 ssh2
...
2019-10-13 16:12:40
51.254.205.6 attackspam
Oct 13 04:00:47 plusreed sshd[13407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.205.6  user=backup
Oct 13 04:00:49 plusreed sshd[13407]: Failed password for backup from 51.254.205.6 port 58012 ssh2
...
2019-10-13 16:12:17
112.85.42.94 attackbotsspam
2019-10-13T08:29:04.103542abusebot-8.cloudsearch.cf sshd\[14995\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.94  user=root
2019-10-13 16:38:18
193.32.163.123 attackspam
2019-10-13T15:11:30.537433enmeeting.mahidol.ac.th sshd\[26755\]: Invalid user admin from 193.32.163.123 port 49001
2019-10-13T15:11:30.556526enmeeting.mahidol.ac.th sshd\[26755\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.32.163.123
2019-10-13T15:11:32.781539enmeeting.mahidol.ac.th sshd\[26755\]: Failed password for invalid user admin from 193.32.163.123 port 49001 ssh2
...
2019-10-13 16:23:28
216.246.108.106 attackbots
firewall-block, port(s): 445/tcp
2019-10-13 16:23:08
49.207.180.197 attackspam
Oct 13 10:13:44 ns381471 sshd[7701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.180.197
Oct 13 10:13:46 ns381471 sshd[7701]: Failed password for invalid user Sensation@123 from 49.207.180.197 port 12747 ssh2
Oct 13 10:17:48 ns381471 sshd[7927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.180.197
2019-10-13 16:26:36
197.50.45.74 attackbotsspam
DATE:2019-10-13 05:49:55, IP:197.50.45.74, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)
2019-10-13 16:45:06

Recently Reported IPs

138.185.166.144 138.185.166.146 138.185.166.131 138.185.166.134
138.185.166.140 138.185.166.128 138.185.166.138 138.185.166.150
118.175.169.236 138.185.166.152 138.185.166.154 138.185.166.158
138.185.166.156 138.185.166.162 138.185.166.164 138.185.166.160
138.185.166.167 138.185.166.172 138.185.166.168 138.185.166.170