Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Canada

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Jun 23 09:13:11 [host] sshd[2538]: Invalid user bo
Jun 23 09:13:11 [host] sshd[2538]: pam_unix(sshd:a
Jun 23 09:13:13 [host] sshd[2538]: Failed password
2020-06-23 16:31:43
attackbots
2020-06-17T08:22:01.882591shield sshd\[5467\]: Invalid user ty from 138.197.142.81 port 54782
2020-06-17T08:22:01.886360shield sshd\[5467\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.81
2020-06-17T08:22:03.435877shield sshd\[5467\]: Failed password for invalid user ty from 138.197.142.81 port 54782 ssh2
2020-06-17T08:25:18.426479shield sshd\[5770\]: Invalid user 3 from 138.197.142.81 port 54958
2020-06-17T08:25:18.430407shield sshd\[5770\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.81
2020-06-17 19:27:14
attack
May  5 18:58:27 pi sshd[15316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.81 
May  5 18:58:29 pi sshd[15316]: Failed password for invalid user lh from 138.197.142.81 port 59308 ssh2
2020-06-07 03:38:44
attack
(sshd) Failed SSH login from 138.197.142.81 (CA/Canada/-): 5 in the last 3600 secs
2020-05-25 03:32:58
attack
May 21 23:43:34 eventyay sshd[27112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.81
May 21 23:43:37 eventyay sshd[27112]: Failed password for invalid user ziyang from 138.197.142.81 port 35812 ssh2
May 21 23:46:13 eventyay sshd[27253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.81
...
2020-05-22 06:00:48
attackbots
Invalid user iff from 138.197.142.81 port 46016
2020-05-20 04:14:36
attack
May 15 09:04:15 sso sshd[20968]: Failed password for root from 138.197.142.81 port 51588 ssh2
...
2020-05-15 16:23:54
attack
May  9 04:43:27 piServer sshd[7387]: Failed password for root from 138.197.142.81 port 52814 ssh2
May  9 04:46:58 piServer sshd[7638]: Failed password for root from 138.197.142.81 port 33662 ssh2
...
2020-05-09 17:17:27
attack
Apr 26 23:17:00 electroncash sshd[25532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.81 
Apr 26 23:17:00 electroncash sshd[25532]: Invalid user mjs from 138.197.142.81 port 44842
Apr 26 23:17:01 electroncash sshd[25532]: Failed password for invalid user mjs from 138.197.142.81 port 44842 ssh2
Apr 26 23:20:38 electroncash sshd[26569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.81  user=root
Apr 26 23:20:41 electroncash sshd[26569]: Failed password for root from 138.197.142.81 port 55164 ssh2
...
2020-04-27 05:27:02
attackspambots
Apr 24 04:20:54 firewall sshd[5233]: Failed password for invalid user deploy from 138.197.142.81 port 57692 ssh2
Apr 24 04:25:00 firewall sshd[5331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.81  user=root
Apr 24 04:25:02 firewall sshd[5331]: Failed password for root from 138.197.142.81 port 43674 ssh2
...
2020-04-24 16:56:47
Comments on same subnet:
IP Type Details Datetime
138.197.142.181 attackspam
Aug 20 03:40:58 plusreed sshd[14711]: Invalid user legal3 from 138.197.142.181
...
2019-08-20 15:51:38
138.197.142.181 attackspambots
Aug 19 00:40:03 OPSO sshd\[1571\]: Invalid user fei from 138.197.142.181 port 58378
Aug 19 00:40:03 OPSO sshd\[1571\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.181
Aug 19 00:40:05 OPSO sshd\[1571\]: Failed password for invalid user fei from 138.197.142.181 port 58378 ssh2
Aug 19 00:44:10 OPSO sshd\[1883\]: Invalid user mother from 138.197.142.181 port 47926
Aug 19 00:44:10 OPSO sshd\[1883\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.181
2019-08-19 06:45:59
138.197.142.181 attackspam
Aug  9 18:54:24 *** sshd[16177]: User root from 138.197.142.181 not allowed because not listed in AllowUsers
2019-08-10 03:43:22
138.197.142.181 attack
Automatic report - Banned IP Access
2019-08-07 21:49:38
138.197.142.181 attack
Aug  3 09:41:23 MK-Soft-Root2 sshd\[8876\]: Invalid user master1 from 138.197.142.181 port 46274
Aug  3 09:41:23 MK-Soft-Root2 sshd\[8876\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.181
Aug  3 09:41:25 MK-Soft-Root2 sshd\[8876\]: Failed password for invalid user master1 from 138.197.142.181 port 46274 ssh2
...
2019-08-03 18:57:21
138.197.142.181 attack
Jul 24 09:44:14 eventyay sshd[27589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.181
Jul 24 09:44:16 eventyay sshd[27589]: Failed password for invalid user jenkins from 138.197.142.181 port 50084 ssh2
Jul 24 09:52:38 eventyay sshd[29604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.181
...
2019-07-25 00:37:38
138.197.142.181 attack
Jul  5 17:45:57 localhost sshd[12145]: Invalid user emily from 138.197.142.181 port 58208
Jul  5 17:45:57 localhost sshd[12145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.181
Jul  5 17:45:57 localhost sshd[12145]: Invalid user emily from 138.197.142.181 port 58208
Jul  5 17:46:00 localhost sshd[12145]: Failed password for invalid user emily from 138.197.142.181 port 58208 ssh2
...
2019-07-05 20:25:29
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.197.142.81
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57654
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.197.142.81.			IN	A

;; AUTHORITY SECTION:
.			128	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020042400 1800 900 604800 86400

;; Query time: 187 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 24 16:56:40 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 81.142.197.138.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 81.142.197.138.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
180.168.141.246 attackbots
Sep 23 12:43:36 php1 sshd\[5093\]: Invalid user nishiyama from 180.168.141.246
Sep 23 12:43:36 php1 sshd\[5093\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.141.246
Sep 23 12:43:39 php1 sshd\[5093\]: Failed password for invalid user nishiyama from 180.168.141.246 port 36246 ssh2
Sep 23 12:47:47 php1 sshd\[5492\]: Invalid user teamspeak from 180.168.141.246
Sep 23 12:47:47 php1 sshd\[5492\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.141.246
2019-09-24 06:52:58
109.194.54.126 attack
Sep 23 12:47:25 sachi sshd\[27277\]: Invalid user kubernetes from 109.194.54.126
Sep 23 12:47:25 sachi sshd\[27277\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.194.54.126
Sep 23 12:47:27 sachi sshd\[27277\]: Failed password for invalid user kubernetes from 109.194.54.126 port 40010 ssh2
Sep 23 12:51:47 sachi sshd\[27633\]: Invalid user target from 109.194.54.126
Sep 23 12:51:47 sachi sshd\[27633\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.194.54.126
2019-09-24 06:58:04
188.254.11.254 attack
[portscan] Port scan
2019-09-24 07:08:58
92.188.124.228 attack
2019-09-23T22:17:55.801338hub.schaetter.us sshd\[25903\]: Invalid user PS from 92.188.124.228
2019-09-23T22:17:55.850711hub.schaetter.us sshd\[25903\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.188.124.228
2019-09-23T22:17:58.000046hub.schaetter.us sshd\[25903\]: Failed password for invalid user PS from 92.188.124.228 port 48706 ssh2
2019-09-23T22:22:24.072320hub.schaetter.us sshd\[25932\]: Invalid user yt from 92.188.124.228
2019-09-23T22:22:24.109371hub.schaetter.us sshd\[25932\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.188.124.228
...
2019-09-24 06:57:21
61.250.144.195 attackbotsspam
Reported by AbuseIPDB proxy server.
2019-09-24 07:13:22
124.26.36.129 attackbotsspam
Unauthorised access (Sep 24) SRC=124.26.36.129 LEN=40 TTL=54 ID=8451 TCP DPT=8080 WINDOW=8466 SYN 
Unauthorised access (Sep 23) SRC=124.26.36.129 LEN=40 TTL=54 ID=14495 TCP DPT=8080 WINDOW=8466 SYN
2019-09-24 07:12:55
35.195.0.27 attack
993/tcp
[2019-09-23]1pkt
2019-09-24 07:03:31
118.122.196.104 attackbotsspam
Sep 23 11:07:47 hanapaa sshd\[20203\]: Invalid user scaner from 118.122.196.104
Sep 23 11:07:47 hanapaa sshd\[20203\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.122.196.104
Sep 23 11:07:49 hanapaa sshd\[20203\]: Failed password for invalid user scaner from 118.122.196.104 port 2368 ssh2
Sep 23 11:09:25 hanapaa sshd\[20461\]: Invalid user ubnt from 118.122.196.104
Sep 23 11:09:25 hanapaa sshd\[20461\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.122.196.104
2019-09-24 07:11:38
42.239.250.187 attackspambots
Unauthorised access (Sep 24) SRC=42.239.250.187 LEN=40 TTL=49 ID=38821 TCP DPT=8080 WINDOW=47658 SYN
2019-09-24 07:05:29
222.186.173.119 attackbots
Sep 24 01:11:11 MK-Soft-VM7 sshd[30552]: Failed password for root from 222.186.173.119 port 49188 ssh2
Sep 24 01:11:14 MK-Soft-VM7 sshd[30552]: Failed password for root from 222.186.173.119 port 49188 ssh2
...
2019-09-24 07:14:50
103.38.215.20 attackspambots
Sep 23 13:07:47 lcprod sshd\[29134\]: Invalid user quyan from 103.38.215.20
Sep 23 13:07:47 lcprod sshd\[29134\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.38.215.20
Sep 23 13:07:49 lcprod sshd\[29134\]: Failed password for invalid user quyan from 103.38.215.20 port 57204 ssh2
Sep 23 13:13:45 lcprod sshd\[29730\]: Invalid user deploy from 103.38.215.20
Sep 23 13:13:45 lcprod sshd\[29730\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.38.215.20
2019-09-24 07:22:49
140.224.103.77 attackbots
v+ssh-bruteforce
2019-09-24 07:24:33
156.216.117.13 attackspambots
23/tcp
[2019-09-23]1pkt
2019-09-24 07:24:19
93.147.244.204 attack
Sep 23 23:09:43 mars sshd\[61817\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.147.244.204  user=root
Sep 23 23:09:44 mars sshd\[61819\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.147.244.204  user=root
Sep 23 23:09:44 mars sshd\[61817\]: Failed password for root from 93.147.244.204 port 53472 ssh2
...
2019-09-24 06:57:38
14.233.47.182 attackbots
9527/tcp 9527/tcp 9527/tcp
[2019-09-23]3pkt
2019-09-24 07:23:08

Recently Reported IPs

79.195.241.22 85.164.27.174 193.118.53.212 95.165.142.201
92.222.88.254 190.193.250.221 14.116.215.185 172.222.192.86
165.22.58.237 83.202.140.192 151.225.119.95 178.137.95.244
159.89.38.164 101.51.3.30 245.245.58.141 172.50.93.203
155.4.59.223 134.122.55.9 27.69.219.155 71.6.233.239