Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
138.185.166.218 attack
spam
2020-04-15 16:02:51
138.185.166.133 attackspam
email spam
2020-03-01 19:46:06
138.185.166.254 attack
Sending SPAM email
2020-02-06 23:44:58
138.185.166.173 attackbotsspam
spam
2020-01-22 16:23:34
138.185.166.136 attackbots
Absender hat Spam-Falle ausgel?st
2019-12-19 16:15:01
138.185.166.194 attackspam
Brute force attempt
2019-08-15 05:13:26
138.185.166.166 attackspambots
Lines containing failures of 138.185.166.166
Jul 27 03:25:46 omfg postfix/smtpd[27121]: connect from unknown[138.185.166.166]
Jul x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=138.185.166.166
2019-07-29 08:50:12
138.185.166.149 attackspam
Jul 17 15:34:24 h2421860 postfix/postscreen[29334]: CONNECT from [138.185.166.149]:57743 to [85.214.119.52]:25
Jul 17 15:34:24 h2421860 postfix/dnsblog[29337]: addr 138.185.166.149 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Jul 17 15:34:24 h2421860 postfix/dnsblog[29338]: addr 138.185.166.149 listed by domain bl.spamcop.net as 127.0.0.2
Jul 17 15:34:24 h2421860 postfix/dnsblog[29338]: addr 138.185.166.149 listed by domain zen.spamhaus.org as 127.0.0.4
Jul 17 15:34:24 h2421860 postfix/dnsblog[29338]: addr 138.185.166.149 listed by domain zen.spamhaus.org as 127.0.0.3
Jul 17 15:34:24 h2421860 postfix/dnsblog[29342]: addr 138.185.166.149 listed by domain Unknown.trblspam.com as 185.53.179.7
Jul 17 15:34:24 h2421860 postfix/dnsblog[29339]: addr 138.185.166.149 listed by domain b.barracudacentral.org as 127.0.0.2
Jul 17 15:34:24 h2421860 postfix/dnsblog[29338]: addr 138.185.166.149 listed by domain dnsbl.sorbs.net as 127.0.0.6
Jul 17 15:34:24 h2421860 postfix/postscre........
-------------------------------
2019-07-18 18:23:59
138.185.166.194 attack
Jul 10 20:09:44 mxgate1 postfix/postscreen[26117]: CONNECT from [138.185.166.194]:49880 to [176.31.12.44]:25
Jul 10 20:09:44 mxgate1 postfix/dnsblog[26118]: addr 138.185.166.194 listed by domain zen.spamhaus.org as 127.0.0.4
Jul 10 20:09:44 mxgate1 postfix/dnsblog[26118]: addr 138.185.166.194 listed by domain zen.spamhaus.org as 127.0.0.3
Jul 10 20:09:44 mxgate1 postfix/dnsblog[26122]: addr 138.185.166.194 listed by domain cbl.abuseat.org as 127.0.0.2
Jul 10 20:09:44 mxgate1 postfix/dnsblog[26119]: addr 138.185.166.194 listed by domain bl.spamcop.net as 127.0.0.2
Jul 10 20:09:44 mxgate1 postfix/dnsblog[26121]: addr 138.185.166.194 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Jul 10 20:09:45 mxgate1 postfix/dnsblog[26166]: addr 138.185.166.194 listed by domain b.barracudacentral.org as 127.0.0.2
Jul 10 20:09:45 mxgate1 postfix/postscreen[26117]: PREGREET 38 after 0.53 from [138.185.166.194]:49880: EHLO ip138-185-166-194.netjat.com.br

Jul 10 20:09:45 mxgate1 postfix........
-------------------------------
2019-07-11 18:27:41
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.185.166.212
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31406
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.185.166.212.		IN	A

;; AUTHORITY SECTION:
.			537	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 91 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:30:06 CST 2022
;; MSG SIZE  rcvd: 108
Host info
212.166.185.138.in-addr.arpa domain name pointer ip138-185-166-212.netjat.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
212.166.185.138.in-addr.arpa	name = ip138-185-166-212.netjat.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
34.212.63.114 attackbotsspam
10/26/2019-11:21:02.400590 34.212.63.114 Protocol: 6 SURICATA TLS invalid record/traffic
2019-10-26 17:21:15
156.236.70.62 attackspam
3306/tcp
[2019-10-26]1pkt
2019-10-26 17:07:42
49.69.171.73 attackspam
2222/tcp 2222/tcp 2222/tcp
[2019-10-26]3pkt
2019-10-26 17:14:34
81.30.181.117 attackbots
2019-10-26T11:04:22.528425hz01.yumiweb.com sshd\[25052\]: Invalid user nexus from 81.30.181.117 port 47702
2019-10-26T11:05:39.076489hz01.yumiweb.com sshd\[25070\]: Invalid user nginx from 81.30.181.117 port 51424
2019-10-26T11:06:18.267891hz01.yumiweb.com sshd\[25078\]: Invalid user demo from 81.30.181.117 port 53282
...
2019-10-26 17:13:44
115.238.236.74 attackspambots
Oct 26 11:32:36 meumeu sshd[13822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74 
Oct 26 11:32:37 meumeu sshd[13822]: Failed password for invalid user sdtdserver from 115.238.236.74 port 35112 ssh2
Oct 26 11:38:03 meumeu sshd[14352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74 
...
2019-10-26 17:43:11
112.175.124.76 attack
slow and persistent scanner
2019-10-26 17:12:11
27.100.26.165 attackbots
Oct 26 10:54:15 MK-Soft-VM4 sshd[11821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.100.26.165 
Oct 26 10:54:18 MK-Soft-VM4 sshd[11821]: Failed password for invalid user applmgr from 27.100.26.165 port 52998 ssh2
...
2019-10-26 17:29:52
51.83.19.253 attackbots
$f2bV_matches
2019-10-26 17:22:37
173.239.37.163 attackspambots
Oct 26 06:27:48 MK-Soft-VM5 sshd[25393]: Failed password for root from 173.239.37.163 port 38366 ssh2
...
2019-10-26 17:03:03
123.31.26.113 attackbotsspam
Oct 26 05:46:36 h2812830 postfix/smtpd[11650]: warning: unknown[123.31.26.113]: SASL LOGIN authentication failed: authentication failure
Oct 26 05:46:40 h2812830 postfix/smtpd[11650]: warning: unknown[123.31.26.113]: SASL LOGIN authentication failed: authentication failure
Oct 26 05:46:45 h2812830 postfix/smtpd[11650]: warning: unknown[123.31.26.113]: SASL LOGIN authentication failed: authentication failure
...
2019-10-26 17:32:44
115.112.176.198 attackbotsspam
$f2bV_matches
2019-10-26 17:24:08
95.27.205.101 attack
23/tcp
[2019-10-26]1pkt
2019-10-26 17:04:49
2.224.171.34 attack
Fail2Ban Ban Triggered
2019-10-26 17:30:22
1.9.46.177 attack
Oct 26 07:03:41 www sshd\[56563\]: Invalid user jayapradha from 1.9.46.177Oct 26 07:03:43 www sshd\[56563\]: Failed password for invalid user jayapradha from 1.9.46.177 port 47429 ssh2Oct 26 07:07:55 www sshd\[56753\]: Invalid user ifanw from 1.9.46.177
...
2019-10-26 17:07:16
178.128.76.6 attackspambots
$f2bV_matches
2019-10-26 17:09:45

Recently Reported IPs

138.185.166.217 138.185.166.210 138.185.166.21 138.185.166.219
138.185.166.215 118.175.169.243 138.185.166.226 138.185.166.220
138.185.166.222 138.185.166.228 138.185.166.240 138.185.166.230
138.185.166.232 138.185.166.236 138.185.166.238 138.185.166.242
138.185.166.244 138.185.166.234 118.175.169.245 214.235.224.199