Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
138.201.135.92 attackspambots
Email spam message
2020-10-04 07:09:02
138.201.135.92 attackspambots
Email spam message
2020-10-03 23:22:35
138.201.135.92 attack
Email spam message
2020-10-03 15:06:53
138.201.123.170 attack
WordPress admin/config access attempt: "GET /wp-admin/"
2020-07-14 16:19:11
138.201.128.9 attack
Triggered: repeated knocking on closed ports.
2020-06-26 01:04:29
138.201.132.29 attackspam
DE - - [19/Jun/2020:19:00:03 +0300] GET /wordpress/wp-login.php HTTP/1.1 200 1275 - Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:62.0 Gecko/20100101 Firefox/62.0
2020-06-21 00:18:58
138.201.16.157 attackspambots
Jun 11 17:59:11 melroy-server sshd[3992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.16.157 
Jun 11 17:59:13 melroy-server sshd[3992]: Failed password for invalid user admin from 138.201.16.157 port 40524 ssh2
...
2020-06-12 02:20:00
138.201.119.223 attackspam
chaangnoifulda.de 138.201.119.223 [07/Jun/2020:15:42:25 +0200] "POST /wp-login.php HTTP/1.1" 200 6006 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
chaangnoifulda.de 138.201.119.223 [07/Jun/2020:15:42:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4065 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-06-07 23:50:24
138.201.189.47 attackspambots
Mar 22 21:19:17 silence02 sshd[31893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.189.47
Mar 22 21:19:20 silence02 sshd[31893]: Failed password for invalid user pz from 138.201.189.47 port 50850 ssh2
Mar 22 21:24:57 silence02 sshd[32158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.189.47
2020-03-23 04:50:30
138.201.199.113 attackspambots
Jan 29 16:11:46 mercury smtpd[1170]: edb6daf5c4fbdf12 smtp event=failed-command address=138.201.199.113 host=ts02.dc-haus.com command="RCPT to:" result="550 Invalid recipient"
...
2020-03-04 01:38:50
138.201.191.95 attackbotsspam
Wordpress login scanning
2020-02-25 18:37:14
138.201.14.212 attack
02/04/2020-14:50:53.606186 138.201.14.212 Protocol: 6 SURICATA TLS invalid record/traffic
2020-02-05 00:52:58
138.201.143.4 attackbots
Feb  2 18:30:31 plusreed sshd[13080]: Invalid user aruse from 138.201.143.4
...
2020-02-03 07:46:35
138.201.14.212 attackspam
01/29/2020-14:30:51.707402 138.201.14.212 Protocol: 6 SURICATA TLS invalid record/traffic
2020-01-30 05:11:30
138.201.129.164 attackbots
Forbidden directory scan :: 2020/01/24 12:36:14 [error] 1008#1008: *738018 access forbidden by rule, client: 138.201.129.164, server: [censored_1], request: "GET /knowledge-base/tech-tips-tricks/... HTTP/1.1", host: "www.[censored_1]"
2020-01-24 23:56:17
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.201.1.73
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18031
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.201.1.73.			IN	A

;; AUTHORITY SECTION:
.			196	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 12:27:23 CST 2022
;; MSG SIZE  rcvd: 105
Host info
73.1.201.138.in-addr.arpa domain name pointer srv208.computerknecht.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
73.1.201.138.in-addr.arpa	name = srv208.computerknecht.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
42.51.13.102 attack
Oct 10 10:50:01 myhostname sshd[20963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.13.102  user=r.r
Oct 10 10:50:03 myhostname sshd[20963]: Failed password for r.r from 42.51.13.102 port 57284 ssh2
Oct 10 10:50:03 myhostname sshd[20963]: Received disconnect from 42.51.13.102 port 57284:11: Bye Bye [preauth]
Oct 10 10:50:03 myhostname sshd[20963]: Disconnected from 42.51.13.102 port 57284 [preauth]
Oct 10 11:14:57 myhostname sshd[21029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.51.13.102  user=r.r
Oct 10 11:14:59 myhostname sshd[21029]: Failed password for r.r from 42.51.13.102 port 43249 ssh2
Oct 10 11:14:59 myhostname sshd[21029]: Received disconnect from 42.51.13.102 port 43249:11: Bye Bye [preauth]
Oct 10 11:14:59 myhostname sshd[21029]: Disconnected from 42.51.13.102 port 43249 [preauth]
Oct 10 11:19:42 myhostname sshd[21038]: pam_unix(sshd:auth): authentication fail........
-------------------------------
2019-10-13 16:57:43
92.119.160.143 attack
10/13/2019-02:25:06.463476 92.119.160.143 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-10-13 16:34:15
167.114.0.23 attackbots
2019-10-13T15:15:47.123276enmeeting.mahidol.ac.th sshd\[26804\]: User root from ns506087.ip-167-114-0.net not allowed because not listed in AllowUsers
2019-10-13T15:15:47.250419enmeeting.mahidol.ac.th sshd\[26804\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns506087.ip-167-114-0.net  user=root
2019-10-13T15:15:49.355814enmeeting.mahidol.ac.th sshd\[26804\]: Failed password for invalid user root from 167.114.0.23 port 50998 ssh2
...
2019-10-13 16:37:45
106.13.115.174 attack
Automatic report - Port Scan
2019-10-13 17:02:01
157.230.238.19 attack
157.230.238.19 - - [13/Oct/2019:06:45:45 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.230.238.19 - - [13/Oct/2019:06:45:51 +0200] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.230.238.19 - - [13/Oct/2019:06:45:56 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.230.238.19 - - [13/Oct/2019:06:46:03 +0200] "POST /wp-login.php HTTP/1.1" 200 1684 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.230.238.19 - - [13/Oct/2019:06:46:07 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
157.230.238.19 - - [13/Oct/2019:06:46:17 +0200] "POST /wp-login.php HTTP/1.1" 200 1688 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2019-10-13 16:33:37
220.92.16.78 attackbotsspam
Automatic report - Banned IP Access
2019-10-13 16:37:26
178.17.170.196 attackbotsspam
fail2ban honeypot
2019-10-13 16:31:50
118.98.96.184 attackspam
Oct 13 11:06:48 * sshd[17759]: Failed password for root from 118.98.96.184 port 51430 ssh2
2019-10-13 17:12:45
188.166.87.238 attackbots
Oct 13 08:22:52 *** sshd[614]: User root from 188.166.87.238 not allowed because not listed in AllowUsers
2019-10-13 17:03:30
106.52.121.64 attackspambots
Oct 10 20:15:53 server sshd[1776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.121.64  user=r.r
Oct 10 20:15:55 server sshd[1776]: Failed password for r.r from 106.52.121.64 port 43412 ssh2
Oct 10 20:15:55 server sshd[1776]: Received disconnect from 106.52.121.64: 11: Bye Bye [preauth]
Oct 10 20:25:55 server sshd[1900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.121.64  user=r.r
Oct 10 20:25:56 server sshd[1900]: Failed password for r.r from 106.52.121.64 port 48808 ssh2
Oct 10 20:25:57 server sshd[1900]: Received disconnect from 106.52.121.64: 11: Bye Bye [preauth]
Oct 10 20:31:20 server sshd[1998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.121.64  user=r.r
Oct 10 20:31:21 server sshd[1998]: Failed password for r.r from 106.52.121.64 port 56230 ssh2
Oct 10 20:31:22 server sshd[1998]: Received disconnect from 106.52.........
-------------------------------
2019-10-13 17:01:32
136.34.218.11 attackbotsspam
Brute force SMTP login attempted.
...
2019-10-13 17:10:08
118.25.84.184 attackbots
Oct 13 03:08:41 vtv3 sshd\[23316\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.84.184  user=root
Oct 13 03:08:43 vtv3 sshd\[23316\]: Failed password for root from 118.25.84.184 port 40482 ssh2
Oct 13 03:13:18 vtv3 sshd\[25502\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.84.184  user=root
Oct 13 03:13:20 vtv3 sshd\[25502\]: Failed password for root from 118.25.84.184 port 51394 ssh2
Oct 13 03:17:53 vtv3 sshd\[27734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.84.184  user=root
Oct 13 03:31:45 vtv3 sshd\[2305\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.84.184  user=root
Oct 13 03:31:47 vtv3 sshd\[2305\]: Failed password for root from 118.25.84.184 port 38540 ssh2
Oct 13 03:36:30 vtv3 sshd\[4769\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.
2019-10-13 17:10:43
139.59.9.68 attackbots

...
2019-10-13 16:39:53
129.204.89.209 attackspam
php WP PHPmyadamin ABUSE blocked for 12h
2019-10-13 17:08:15
37.17.65.154 attack
2019-10-13T08:39:51.321854shield sshd\[4186\]: Invalid user Aero123 from 37.17.65.154 port 35690
2019-10-13T08:39:51.327753shield sshd\[4186\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.17.65.154
2019-10-13T08:39:53.737480shield sshd\[4186\]: Failed password for invalid user Aero123 from 37.17.65.154 port 35690 ssh2
2019-10-13T08:43:00.464271shield sshd\[5485\]: Invalid user p455w0rd2018 from 37.17.65.154 port 43436
2019-10-13T08:43:00.468857shield sshd\[5485\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.17.65.154
2019-10-13 16:49:08

Recently Reported IPs

138.201.11.216 138.201.116.47 138.201.119.17 138.201.113.132
138.201.120.149 138.201.119.233 138.201.121.121 138.201.120.110
138.201.120.224 138.201.121.47 138.201.122.115 138.201.122.5
138.201.122.89 138.201.123.202 138.201.125.168 138.201.126.163
138.201.125.99 138.201.126.165 138.201.126.81 138.201.127.24