Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Toronto

Region: Ontario

Country: Canada

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Sep  4 13:08:14 sigma sshd\[10630\]: Failed password for root from 138.197.130.138 port 42912 ssh2Sep  4 13:16:52 sigma sshd\[11175\]: Invalid user cactiuser from 138.197.130.138
...
2020-09-04 23:16:07
attackspambots
2020-09-04T08:17:48+0200 Failed SSH Authentication/Brute Force Attack. (Server 9)
2020-09-04 14:47:52
attackspambots
Sep  4 00:58:50 inter-technics sshd[15068]: Invalid user openlava from 138.197.130.138 port 40176
Sep  4 00:58:50 inter-technics sshd[15068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138
Sep  4 00:58:50 inter-technics sshd[15068]: Invalid user openlava from 138.197.130.138 port 40176
Sep  4 00:58:52 inter-technics sshd[15068]: Failed password for invalid user openlava from 138.197.130.138 port 40176 ssh2
Sep  4 01:01:59 inter-technics sshd[15248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138  user=root
Sep  4 01:02:01 inter-technics sshd[15248]: Failed password for root from 138.197.130.138 port 52128 ssh2
...
2020-09-04 07:11:47
attackspam
Aug 29 15:01:07 vps647732 sshd[32382]: Failed password for root from 138.197.130.138 port 46624 ssh2
...
2020-08-29 22:57:42
attackspambots
2020-08-20T04:52:58.084834linuxbox-skyline sshd[15626]: Invalid user teamspeak from 138.197.130.138 port 47936
...
2020-08-20 18:54:49
attackspam
Aug  4 11:17:58 abendstille sshd\[5651\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138  user=root
Aug  4 11:18:01 abendstille sshd\[5651\]: Failed password for root from 138.197.130.138 port 57802 ssh2
Aug  4 11:22:35 abendstille sshd\[9924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138  user=root
Aug  4 11:22:37 abendstille sshd\[9924\]: Failed password for root from 138.197.130.138 port 41574 ssh2
Aug  4 11:27:18 abendstille sshd\[14848\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138  user=root
...
2020-08-04 18:41:57
attack
Total attacks: 2
2020-07-19 19:24:16
attackbotsspam
Invalid user shu from 138.197.130.138 port 51326
2020-07-19 01:07:55
attack
Invalid user direccion from 138.197.130.138 port 51756
2020-07-14 19:17:53
attack
Brute-force attempt banned
2020-07-08 09:51:15
attack
Jul  3 21:19:50 scw-6657dc sshd[18044]: Failed password for root from 138.197.130.138 port 46520 ssh2
Jul  3 21:19:50 scw-6657dc sshd[18044]: Failed password for root from 138.197.130.138 port 46520 ssh2
Jul  3 21:21:18 scw-6657dc sshd[18104]: Invalid user takahashi from 138.197.130.138 port 37902
...
2020-07-04 05:55:11
attack
2020-06-25T12:20:59+0000 Failed SSH Authentication/Brute Force Attack. (Server 6)
2020-06-26 04:02:33
attackspambots
2020-06-15T22:31:29.824125amanda2.illicoweb.com sshd\[5141\]: Invalid user git from 138.197.130.138 port 43666
2020-06-15T22:31:29.826967amanda2.illicoweb.com sshd\[5141\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138
2020-06-15T22:31:31.864776amanda2.illicoweb.com sshd\[5141\]: Failed password for invalid user git from 138.197.130.138 port 43666 ssh2
2020-06-15T22:41:03.012389amanda2.illicoweb.com sshd\[5690\]: Invalid user lcy from 138.197.130.138 port 46086
2020-06-15T22:41:03.015131amanda2.illicoweb.com sshd\[5690\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138
...
2020-06-16 08:18:27
attackbotsspam
2020-06-05T20:39:29.283845sd-86998 sshd[5036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138  user=root
2020-06-05T20:39:31.297466sd-86998 sshd[5036]: Failed password for root from 138.197.130.138 port 51974 ssh2
2020-06-05T20:43:48.307136sd-86998 sshd[6107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138  user=root
2020-06-05T20:43:50.210712sd-86998 sshd[6107]: Failed password for root from 138.197.130.138 port 47106 ssh2
2020-06-05T20:45:26.958146sd-86998 sshd[6513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138  user=root
2020-06-05T20:45:28.981173sd-86998 sshd[6513]: Failed password for root from 138.197.130.138 port 37648 ssh2
...
2020-06-06 02:55:45
attackspam
May 24 14:09:09 plex sshd[14849]: Invalid user urd from 138.197.130.138 port 48378
May 24 14:09:09 plex sshd[14849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138
May 24 14:09:09 plex sshd[14849]: Invalid user urd from 138.197.130.138 port 48378
May 24 14:09:11 plex sshd[14849]: Failed password for invalid user urd from 138.197.130.138 port 48378 ssh2
May 24 14:13:26 plex sshd[14923]: Invalid user lvv from 138.197.130.138 port 54808
2020-05-24 22:59:53
attackspam
May 11 07:50:06 server1 sshd\[28504\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138  user=ubuntu
May 11 07:50:08 server1 sshd\[28504\]: Failed password for ubuntu from 138.197.130.138 port 60216 ssh2
May 11 07:54:11 server1 sshd\[29808\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138  user=root
May 11 07:54:13 server1 sshd\[29808\]: Failed password for root from 138.197.130.138 port 42014 ssh2
May 11 07:58:23 server1 sshd\[31229\]: Invalid user alex from 138.197.130.138
...
2020-05-11 22:25:56
attackspam
$f2bV_matches
2020-05-08 20:01:13
attack
Unauthorized access or intrusion attempt detected from Thor banned IP
2020-05-06 06:00:05
Comments on same subnet:
IP Type Details Datetime
138.197.130.225 attack
xmlrpc attack
2019-12-26 04:17:35
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.197.130.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42362
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.197.130.138.		IN	A

;; AUTHORITY SECTION:
.			511	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050502 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 06 06:00:02 CST 2020
;; MSG SIZE  rcvd: 119
Host info
138.130.197.138.in-addr.arpa domain name pointer shitcointopia-grana.com.py-clima.grana.com.py.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
138.130.197.138.in-addr.arpa	name = shitcointopia-grana.com.py-clima.grana.com.py.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
125.227.255.79 attack
$f2bV_matches
2019-10-15 00:39:09
106.12.133.247 attackbots
Oct 14 18:53:43 dedicated sshd[14488]: Failed password for invalid user 123 from 106.12.133.247 port 32932 ssh2
Oct 14 18:53:41 dedicated sshd[14488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.133.247 
Oct 14 18:53:41 dedicated sshd[14488]: Invalid user 123 from 106.12.133.247 port 32932
Oct 14 18:53:43 dedicated sshd[14488]: Failed password for invalid user 123 from 106.12.133.247 port 32932 ssh2
Oct 14 18:58:37 dedicated sshd[15188]: Invalid user adam12 from 106.12.133.247 port 40366
2019-10-15 01:06:13
218.242.55.86 attack
Oct 10 20:02:54 heissa sshd\[14486\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.242.55.86  user=root
Oct 10 20:02:55 heissa sshd\[14486\]: Failed password for root from 218.242.55.86 port 54304 ssh2
Oct 10 20:07:16 heissa sshd\[15176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.242.55.86  user=root
Oct 10 20:07:18 heissa sshd\[15176\]: Failed password for root from 218.242.55.86 port 34308 ssh2
Oct 10 20:11:28 heissa sshd\[15876\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.242.55.86  user=root
2019-10-15 00:42:02
118.24.40.130 attackbotsspam
2019-10-14T16:14:25.238354abusebot-5.cloudsearch.cf sshd\[24309\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.40.130  user=root
2019-10-15 00:44:22
114.242.245.251 attackspam
Automatic report - Banned IP Access
2019-10-15 00:47:48
89.248.168.217 attackspambots
10/14/2019-17:48:49.331475 89.248.168.217 Protocol: 17 ET DROP Dshield Block Listed Source group 1
2019-10-15 00:40:39
139.99.67.111 attack
Oct 14 13:37:22 SilenceServices sshd[28898]: Failed password for root from 139.99.67.111 port 56540 ssh2
Oct 14 13:42:16 SilenceServices sshd[30260]: Failed password for root from 139.99.67.111 port 40232 ssh2
2019-10-15 00:54:06
178.124.163.243 attackbotsspam
Oct 14 13:46:40 mail postfix/submission/smtpd\[4548\]: warning: unknown\[178.124.163.243\]: SASL PLAIN authentication failed: Connection lost to authentication server
Oct 14 13:46:51 mail postfix/submission/smtpd\[4548\]: warning: unknown\[178.124.163.243\]: SASL PLAIN authentication failed: Connection lost to authentication server
Oct 14 13:47:12 mail postfix/submission/smtpd\[4548\]: warning: unknown\[178.124.163.243\]: SASL PLAIN authentication failed: Connection lost to authentication server
2019-10-15 00:49:51
178.128.117.68 attackbotsspam
Automatic report - XMLRPC Attack
2019-10-15 00:26:30
206.189.149.9 attackspambots
Oct 14 08:00:41 TORMINT sshd\[19442\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.149.9  user=root
Oct 14 08:00:44 TORMINT sshd\[19442\]: Failed password for root from 206.189.149.9 port 38500 ssh2
Oct 14 08:05:22 TORMINT sshd\[19624\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.149.9  user=root
...
2019-10-15 01:04:13
114.242.169.37 attackspam
Oct 14 01:59:15 friendsofhawaii sshd\[17708\]: Invalid user Contrasena12 from 114.242.169.37
Oct 14 01:59:15 friendsofhawaii sshd\[17708\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.242.169.37
Oct 14 01:59:17 friendsofhawaii sshd\[17708\]: Failed password for invalid user Contrasena12 from 114.242.169.37 port 47280 ssh2
Oct 14 02:03:53 friendsofhawaii sshd\[18033\]: Invalid user Welcome@2015 from 114.242.169.37
Oct 14 02:03:53 friendsofhawaii sshd\[18033\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.242.169.37
2019-10-15 00:36:10
89.35.57.214 attack
Oct 14 16:35:45 v22018076622670303 sshd\[13796\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.35.57.214  user=root
Oct 14 16:35:47 v22018076622670303 sshd\[13796\]: Failed password for root from 89.35.57.214 port 59872 ssh2
Oct 14 16:43:43 v22018076622670303 sshd\[13927\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.35.57.214  user=root
...
2019-10-15 00:34:18
36.110.118.132 attackbots
Oct 14 18:31:38 hosting sshd[13471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.110.118.132  user=root
Oct 14 18:31:40 hosting sshd[13471]: Failed password for root from 36.110.118.132 port 48945 ssh2
...
2019-10-15 00:32:59
51.38.238.87 attackbots
Oct 14 13:56:40 SilenceServices sshd[1652]: Failed password for root from 51.38.238.87 port 43846 ssh2
Oct 14 14:00:41 SilenceServices sshd[2759]: Failed password for root from 51.38.238.87 port 56234 ssh2
2019-10-15 00:27:52
185.46.121.194 attackspambots
xmlrpc attack
2019-10-15 00:44:35

Recently Reported IPs

10.12.26.49 39.26.104.165 196.52.84.4 76.99.110.131
67.254.144.12 107.122.192.17 94.81.45.44 103.65.183.82
20.157.80.48 175.172.160.150 67.6.21.52 183.51.28.97
70.125.51.31 49.43.42.108 70.193.212.3 159.83.170.68
200.166.110.15 187.176.65.152 152.75.219.70 154.235.125.161