Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
138.201.135.92 attackspambots
Email spam message
2020-10-04 07:09:02
138.201.135.92 attackspambots
Email spam message
2020-10-03 23:22:35
138.201.135.92 attack
Email spam message
2020-10-03 15:06:53
138.201.123.170 attack
WordPress admin/config access attempt: "GET /wp-admin/"
2020-07-14 16:19:11
138.201.128.9 attack
Triggered: repeated knocking on closed ports.
2020-06-26 01:04:29
138.201.132.29 attackspam
DE - - [19/Jun/2020:19:00:03 +0300] GET /wordpress/wp-login.php HTTP/1.1 200 1275 - Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:62.0 Gecko/20100101 Firefox/62.0
2020-06-21 00:18:58
138.201.16.157 attackspambots
Jun 11 17:59:11 melroy-server sshd[3992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.16.157 
Jun 11 17:59:13 melroy-server sshd[3992]: Failed password for invalid user admin from 138.201.16.157 port 40524 ssh2
...
2020-06-12 02:20:00
138.201.119.223 attackspam
chaangnoifulda.de 138.201.119.223 [07/Jun/2020:15:42:25 +0200] "POST /wp-login.php HTTP/1.1" 200 6006 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
chaangnoifulda.de 138.201.119.223 [07/Jun/2020:15:42:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4065 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-06-07 23:50:24
138.201.189.47 attackspambots
Mar 22 21:19:17 silence02 sshd[31893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.189.47
Mar 22 21:19:20 silence02 sshd[31893]: Failed password for invalid user pz from 138.201.189.47 port 50850 ssh2
Mar 22 21:24:57 silence02 sshd[32158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.189.47
2020-03-23 04:50:30
138.201.199.113 attackspambots
Jan 29 16:11:46 mercury smtpd[1170]: edb6daf5c4fbdf12 smtp event=failed-command address=138.201.199.113 host=ts02.dc-haus.com command="RCPT to:" result="550 Invalid recipient"
...
2020-03-04 01:38:50
138.201.191.95 attackbotsspam
Wordpress login scanning
2020-02-25 18:37:14
138.201.14.212 attack
02/04/2020-14:50:53.606186 138.201.14.212 Protocol: 6 SURICATA TLS invalid record/traffic
2020-02-05 00:52:58
138.201.143.4 attackbots
Feb  2 18:30:31 plusreed sshd[13080]: Invalid user aruse from 138.201.143.4
...
2020-02-03 07:46:35
138.201.14.212 attackspam
01/29/2020-14:30:51.707402 138.201.14.212 Protocol: 6 SURICATA TLS invalid record/traffic
2020-01-30 05:11:30
138.201.129.164 attackbots
Forbidden directory scan :: 2020/01/24 12:36:14 [error] 1008#1008: *738018 access forbidden by rule, client: 138.201.129.164, server: [censored_1], request: "GET /knowledge-base/tech-tips-tricks/... HTTP/1.1", host: "www.[censored_1]"
2020-01-24 23:56:17
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.201.1.51
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11987
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.201.1.51.			IN	A

;; AUTHORITY SECTION:
.			294	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 289 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:36:32 CST 2022
;; MSG SIZE  rcvd: 105
Host info
51.1.201.138.in-addr.arpa domain name pointer vhosth.sigura.eu.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
51.1.201.138.in-addr.arpa	name = vhosth.sigura.eu.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
88.132.109.164 attackbotsspam
2020-08-02T12:24:13.785493shield sshd\[30921\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host-88-132-109-164.prtelecom.hu  user=root
2020-08-02T12:24:16.234802shield sshd\[30921\]: Failed password for root from 88.132.109.164 port 52166 ssh2
2020-08-02T12:28:14.283141shield sshd\[31528\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host-88-132-109-164.prtelecom.hu  user=root
2020-08-02T12:28:16.147036shield sshd\[31528\]: Failed password for root from 88.132.109.164 port 57597 ssh2
2020-08-02T12:32:09.553030shield sshd\[32485\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host-88-132-109-164.prtelecom.hu  user=root
2020-08-02 22:14:05
46.99.10.244 attack
Aug  2 14:11:25 debian-2gb-nbg1-2 kernel: \[18628761.405506\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=46.99.10.244 DST=195.201.40.59 LEN=187 TOS=0x00 PREC=0x00 TTL=115 ID=14932 PROTO=UDP SPT=51981 DPT=51455 LEN=167
2020-08-02 22:41:04
106.12.138.72 attackbots
Aug  2 16:20:23 minden010 sshd[11462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.138.72
Aug  2 16:20:25 minden010 sshd[11462]: Failed password for invalid user wonder from 106.12.138.72 port 47934 ssh2
Aug  2 16:23:19 minden010 sshd[12379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.138.72
...
2020-08-02 22:37:45
103.114.208.222 attackspambots
Aug  2 15:05:03 master sshd[28826]: Failed password for root from 103.114.208.222 port 60367 ssh2
2020-08-02 22:09:22
200.27.38.106 attackspambots
Connection to SSH Honeypot - Detected by HoneypotDB
2020-08-02 22:27:50
138.68.106.62 attackbots
Aug  2 05:09:13 mockhub sshd[11935]: Failed password for root from 138.68.106.62 port 49734 ssh2
...
2020-08-02 22:28:54
106.13.175.233 attack
2020-08-02T14:11:59+0200 Failed SSH Authentication/Brute Force Attack. (Server 9)
2020-08-02 22:20:12
49.88.112.69 attackbotsspam
Aug  2 15:48:26 vps sshd[341669]: Failed password for root from 49.88.112.69 port 58318 ssh2
Aug  2 15:48:27 vps sshd[341669]: Failed password for root from 49.88.112.69 port 58318 ssh2
Aug  2 15:50:00 vps sshd[347150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.69  user=root
Aug  2 15:50:02 vps sshd[347150]: Failed password for root from 49.88.112.69 port 42232 ssh2
Aug  2 15:50:04 vps sshd[347150]: Failed password for root from 49.88.112.69 port 42232 ssh2
...
2020-08-02 22:10:45
139.59.3.114 attackspam
2020-08-02T15:14:07.424152vps751288.ovh.net sshd\[25180\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.3.114  user=root
2020-08-02T15:14:09.554445vps751288.ovh.net sshd\[25180\]: Failed password for root from 139.59.3.114 port 33777 ssh2
2020-08-02T15:18:47.799779vps751288.ovh.net sshd\[25202\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.3.114  user=root
2020-08-02T15:18:49.704061vps751288.ovh.net sshd\[25202\]: Failed password for root from 139.59.3.114 port 38989 ssh2
2020-08-02T15:23:21.248097vps751288.ovh.net sshd\[25214\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.3.114  user=root
2020-08-02 22:28:06
103.214.202.143 attackbots
php WP PHPmyadamin ABUSE blocked for 12h
2020-08-02 22:18:07
198.52.125.205 attackspambots
Aug  2 14:23:51 abendstille sshd\[7495\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.52.125.205  user=root
Aug  2 14:23:53 abendstille sshd\[7495\]: Failed password for root from 198.52.125.205 port 37730 ssh2
Aug  2 14:28:01 abendstille sshd\[11373\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.52.125.205  user=root
Aug  2 14:28:03 abendstille sshd\[11373\]: Failed password for root from 198.52.125.205 port 50644 ssh2
Aug  2 14:32:15 abendstille sshd\[15303\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.52.125.205  user=root
...
2020-08-02 22:36:54
191.232.236.62 attackbotsspam
port scan and connect, tcp 8080 (http-proxy)
2020-08-02 22:35:53
158.69.226.175 attackspam
Aug  2 15:40:37 debian-2gb-nbg1-2 kernel: \[18634112.539997\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=158.69.226.175 DST=195.201.40.59 LEN=40 TOS=0x18 PREC=0x00 TTL=239 ID=58485 PROTO=TCP SPT=46968 DPT=22222 WINDOW=1024 RES=0x00 SYN URGP=0
2020-08-02 22:07:38
78.142.20.122 attack
TCP src-port=39552   dst-port=25   Listed on   abuseat-org barracuda spamcop       (Project Honey Pot rated Suspicious)   (28)
2020-08-02 22:36:35
106.12.125.241 attackbots
Aug  2 14:57:27 * sshd[21085]: Failed password for root from 106.12.125.241 port 48850 ssh2
2020-08-02 22:00:47

Recently Reported IPs

138.201.100.214 138.201.100.99 138.201.101.36 138.201.102.238
138.201.101.33 118.175.175.2 138.201.103.13 138.201.102.34
138.201.103.11 138.201.101.58 138.201.103.42 138.201.103.45
138.201.104.129 138.201.103.66 118.175.175.20 138.201.106.216
138.201.106.42 138.201.106.88 138.201.106.66 138.201.106.90