Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
138.185.166.218 attack
spam
2020-04-15 16:02:51
138.185.166.133 attackspam
email spam
2020-03-01 19:46:06
138.185.166.254 attack
Sending SPAM email
2020-02-06 23:44:58
138.185.166.173 attackbotsspam
spam
2020-01-22 16:23:34
138.185.166.136 attackbots
Absender hat Spam-Falle ausgel?st
2019-12-19 16:15:01
138.185.166.194 attackspam
Brute force attempt
2019-08-15 05:13:26
138.185.166.166 attackspambots
Lines containing failures of 138.185.166.166
Jul 27 03:25:46 omfg postfix/smtpd[27121]: connect from unknown[138.185.166.166]
Jul x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=138.185.166.166
2019-07-29 08:50:12
138.185.166.149 attackspam
Jul 17 15:34:24 h2421860 postfix/postscreen[29334]: CONNECT from [138.185.166.149]:57743 to [85.214.119.52]:25
Jul 17 15:34:24 h2421860 postfix/dnsblog[29337]: addr 138.185.166.149 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Jul 17 15:34:24 h2421860 postfix/dnsblog[29338]: addr 138.185.166.149 listed by domain bl.spamcop.net as 127.0.0.2
Jul 17 15:34:24 h2421860 postfix/dnsblog[29338]: addr 138.185.166.149 listed by domain zen.spamhaus.org as 127.0.0.4
Jul 17 15:34:24 h2421860 postfix/dnsblog[29338]: addr 138.185.166.149 listed by domain zen.spamhaus.org as 127.0.0.3
Jul 17 15:34:24 h2421860 postfix/dnsblog[29342]: addr 138.185.166.149 listed by domain Unknown.trblspam.com as 185.53.179.7
Jul 17 15:34:24 h2421860 postfix/dnsblog[29339]: addr 138.185.166.149 listed by domain b.barracudacentral.org as 127.0.0.2
Jul 17 15:34:24 h2421860 postfix/dnsblog[29338]: addr 138.185.166.149 listed by domain dnsbl.sorbs.net as 127.0.0.6
Jul 17 15:34:24 h2421860 postfix/postscre........
-------------------------------
2019-07-18 18:23:59
138.185.166.194 attack
Jul 10 20:09:44 mxgate1 postfix/postscreen[26117]: CONNECT from [138.185.166.194]:49880 to [176.31.12.44]:25
Jul 10 20:09:44 mxgate1 postfix/dnsblog[26118]: addr 138.185.166.194 listed by domain zen.spamhaus.org as 127.0.0.4
Jul 10 20:09:44 mxgate1 postfix/dnsblog[26118]: addr 138.185.166.194 listed by domain zen.spamhaus.org as 127.0.0.3
Jul 10 20:09:44 mxgate1 postfix/dnsblog[26122]: addr 138.185.166.194 listed by domain cbl.abuseat.org as 127.0.0.2
Jul 10 20:09:44 mxgate1 postfix/dnsblog[26119]: addr 138.185.166.194 listed by domain bl.spamcop.net as 127.0.0.2
Jul 10 20:09:44 mxgate1 postfix/dnsblog[26121]: addr 138.185.166.194 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Jul 10 20:09:45 mxgate1 postfix/dnsblog[26166]: addr 138.185.166.194 listed by domain b.barracudacentral.org as 127.0.0.2
Jul 10 20:09:45 mxgate1 postfix/postscreen[26117]: PREGREET 38 after 0.53 from [138.185.166.194]:49880: EHLO ip138-185-166-194.netjat.com.br

Jul 10 20:09:45 mxgate1 postfix........
-------------------------------
2019-07-11 18:27:41
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.185.166.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11578
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.185.166.142.		IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:29:55 CST 2022
;; MSG SIZE  rcvd: 108
Host info
142.166.185.138.in-addr.arpa domain name pointer ip138-185-166-142.netjat.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.166.185.138.in-addr.arpa	name = ip138-185-166-142.netjat.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
45.176.208.50 attack
Aug  7 00:54:19 server sshd[21974]: Failed password for root from 45.176.208.50 port 34285 ssh2
Aug  7 00:56:25 server sshd[24521]: Failed password for root from 45.176.208.50 port 46890 ssh2
Aug  7 00:58:25 server sshd[26988]: Failed password for root from 45.176.208.50 port 59496 ssh2
2020-08-07 08:01:56
203.86.7.110 attack
k+ssh-bruteforce
2020-08-07 08:08:29
45.136.109.219 attackbots
 TCP (SYN) 45.136.109.219:50230 -> port 53, len 44
2020-08-07 08:11:38
27.221.81.210 attackbots
Aug  7 01:29:20 piServer sshd[22535]: Failed password for root from 27.221.81.210 port 49279 ssh2
Aug  7 01:32:14 piServer sshd[22866]: Failed password for root from 27.221.81.210 port 42644 ssh2
...
2020-08-07 07:53:19
111.231.132.94 attackspam
2020-08-06 12:26:01 server sshd[76316]: Failed password for invalid user root from 111.231.132.94 port 35004 ssh2
2020-08-07 07:51:21
176.10.99.200 attackspambots
Aug 7 01:34:08 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=176.10.99.200 DST=79.143.186.54 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=12762 DF PROTO=TCP SPT=37304 DPT=2087 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 7 01:34:09 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=176.10.99.200 DST=79.143.186.54 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=12763 DF PROTO=TCP SPT=37304 DPT=2087 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 7 01:34:11 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=176.10.99.200 DST=79.143.186.54 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=12764 DF PROTO=TCP SPT=37304 DPT=2087 WINDOW=64240 RES=0x00 SYN URGP=0
2020-08-07 07:48:04
188.239.83.241 attack
Port probing on unauthorized port 445
2020-08-07 07:56:31
206.81.12.141 attackspam
Aug  7 00:54:25 minden010 sshd[12661]: Failed password for root from 206.81.12.141 port 57520 ssh2
Aug  7 00:58:08 minden010 sshd[13898]: Failed password for root from 206.81.12.141 port 40440 ssh2
...
2020-08-07 07:56:05
152.136.105.190 attack
2020-08-06T23:44:17.720825amanda2.illicoweb.com sshd\[16382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.105.190  user=root
2020-08-06T23:44:19.598951amanda2.illicoweb.com sshd\[16382\]: Failed password for root from 152.136.105.190 port 47166 ssh2
2020-08-06T23:50:06.593735amanda2.illicoweb.com sshd\[17134\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.105.190  user=root
2020-08-06T23:50:08.717625amanda2.illicoweb.com sshd\[17134\]: Failed password for root from 152.136.105.190 port 46816 ssh2
2020-08-06T23:52:58.847995amanda2.illicoweb.com sshd\[17645\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.105.190  user=root
...
2020-08-07 07:58:10
122.254.35.44 attack
Unauthorised access (Aug  7) SRC=122.254.35.44 LEN=40 TTL=50 ID=1925 TCP DPT=23 WINDOW=16927 SYN
2020-08-07 08:10:22
112.85.42.195 attack
Aug  6 23:52:53 onepixel sshd[3102853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.195  user=root
Aug  6 23:52:55 onepixel sshd[3102853]: Failed password for root from 112.85.42.195 port 26423 ssh2
Aug  6 23:52:53 onepixel sshd[3102853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.195  user=root
Aug  6 23:52:55 onepixel sshd[3102853]: Failed password for root from 112.85.42.195 port 26423 ssh2
Aug  6 23:52:58 onepixel sshd[3102853]: Failed password for root from 112.85.42.195 port 26423 ssh2
2020-08-07 08:09:58
85.209.0.101 attackbots
(sshd) Failed SSH login from 85.209.0.101 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug  7 01:56:12 amsweb01 sshd[6905]: Did not receive identification string from 85.209.0.101 port 18228
Aug  7 01:56:13 amsweb01 sshd[6909]: Did not receive identification string from 85.209.0.101 port 31224
Aug  7 01:56:18 amsweb01 sshd[6907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.209.0.101  user=root
Aug  7 01:56:18 amsweb01 sshd[6908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.209.0.101  user=root
Aug  7 01:56:18 amsweb01 sshd[6914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.209.0.101  user=root
2020-08-07 08:00:52
60.190.243.230 attackspambots
2020-08-06T21:44:06.223416shield sshd\[5571\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.190.243.230  user=root
2020-08-06T21:44:08.613778shield sshd\[5571\]: Failed password for root from 60.190.243.230 port 62828 ssh2
2020-08-06T21:48:20.960957shield sshd\[5881\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.190.243.230  user=root
2020-08-06T21:48:23.200597shield sshd\[5881\]: Failed password for root from 60.190.243.230 port 62813 ssh2
2020-08-06T21:52:33.140194shield sshd\[6188\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.190.243.230  user=root
2020-08-07 08:12:37
154.8.226.52 attack
Too many connections or unauthorized access detected from Arctic banned ip
2020-08-07 07:50:09
198.136.63.29 attack
Attempted to establish connection to non opened port 21125
2020-08-07 08:14:39

Recently Reported IPs

138.185.166.144 138.185.166.146 138.185.166.131 138.185.166.134
138.185.166.140 138.185.166.128 138.185.166.138 138.185.166.150
118.175.169.236 138.185.166.152 138.185.166.154 138.185.166.158
138.185.166.156 138.185.166.162 138.185.166.164 138.185.166.160
138.185.166.167 138.185.166.172 138.185.166.168 138.185.166.170