Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
138.201.2.53 attackspam
Invalid user yoneda from 138.201.2.53 port 57962
2020-10-14 01:17:36
138.201.2.53 attack
SSH login attempts.
2020-10-13 16:27:59
138.201.2.53 attackspam
2020-10-12T21:38:57.751645shield sshd\[5350\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.53.2.201.138.clients.your-server.de  user=root
2020-10-12T21:39:00.137380shield sshd\[5350\]: Failed password for root from 138.201.2.53 port 55694 ssh2
2020-10-12T21:43:54.589124shield sshd\[6195\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.53.2.201.138.clients.your-server.de  user=root
2020-10-12T21:43:56.068061shield sshd\[6195\]: Failed password for root from 138.201.2.53 port 57360 ssh2
2020-10-12T21:48:40.551136shield sshd\[7144\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.53.2.201.138.clients.your-server.de  user=root
2020-10-13 09:00:14
138.201.245.106 attackbotsspam
2020-10-08T04:27:49.006296hostname sshd[59806]: Failed password for root from 138.201.245.106 port 35910 ssh2
...
2020-10-09 03:33:42
138.201.245.106 attack
Oct  7 20:13:13 pl3server sshd[9540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.245.106  user=r.r
Oct  7 20:13:15 pl3server sshd[9540]: Failed password for r.r from 138.201.245.106 port 53814 ssh2
Oct  7 20:13:15 pl3server sshd[9540]: Received disconnect from 138.201.245.106 port 53814:11: Bye Bye [preauth]
Oct  7 20:13:15 pl3server sshd[9540]: Disconnected from 138.201.245.106 port 53814 [preauth]
Oct  7 20:29:03 pl3server sshd[15871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.245.106  user=r.r
Oct  7 20:29:05 pl3server sshd[15871]: Failed password for r.r from 138.201.245.106 port 50608 ssh2
Oct  7 20:29:06 pl3server sshd[15871]: Received disconnect from 138.201.245.106 port 50608:11: Bye Bye [preauth]
Oct  7 20:29:06 pl3server sshd[15871]: Disconnected from 138.201.245.106 port 50608 [preauth]
Oct  7 20:32:27 pl3server sshd[17292]: pam_unix(sshd:auth): authenti........
-------------------------------
2020-10-08 19:39:10
138.201.2.53 attack
2020-10-07T19:56:37.449534dmca.cloudsearch.cf sshd[3326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.53.2.201.138.clients.your-server.de  user=root
2020-10-07T19:56:39.160941dmca.cloudsearch.cf sshd[3326]: Failed password for root from 138.201.2.53 port 37510 ssh2
2020-10-07T19:59:53.481579dmca.cloudsearch.cf sshd[3343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.53.2.201.138.clients.your-server.de  user=root
2020-10-07T19:59:55.434143dmca.cloudsearch.cf sshd[3343]: Failed password for root from 138.201.2.53 port 44564 ssh2
2020-10-07T20:03:03.260950dmca.cloudsearch.cf sshd[3394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.53.2.201.138.clients.your-server.de  user=root
2020-10-07T20:03:05.297706dmca.cloudsearch.cf sshd[3394]: Failed password for root from 138.201.2.53 port 51626 ssh2
2020-10-07T20:06:01.951612dmca.cloudsearch.cf ssh
...
2020-10-08 05:17:00
138.201.2.53 attack
138.201.2.53 (DE/Germany/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct  7 09:34:08 server4 sshd[8055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.167.240.210  user=root
Oct  7 09:34:34 server4 sshd[8475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.53.227.180  user=root
Oct  7 09:34:36 server4 sshd[8475]: Failed password for root from 120.53.227.180 port 57810 ssh2
Oct  7 09:36:16 server4 sshd[9357]: Failed password for root from 51.254.114.105 port 52765 ssh2
Oct  7 09:31:55 server4 sshd[6694]: Failed password for root from 138.201.2.53 port 59436 ssh2
Oct  7 09:34:09 server4 sshd[8055]: Failed password for root from 180.167.240.210 port 51826 ssh2

IP Addresses Blocked:

180.167.240.210 (CN/China/-)
120.53.227.180 (CN/China/-)
51.254.114.105 (FR/France/-)
2020-10-07 21:40:50
138.201.2.53 attackspambots
Lines containing failures of 138.201.2.53
Oct  6 01:09:38 shared07 sshd[12937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.2.53  user=r.r
Oct  6 01:09:40 shared07 sshd[12937]: Failed password for r.r from 138.201.2.53 port 37592 ssh2
Oct  6 01:09:40 shared07 sshd[12937]: Received disconnect from 138.201.2.53 port 37592:11: Bye Bye [preauth]
Oct  6 01:09:40 shared07 sshd[12937]: Disconnected from authenticating user r.r 138.201.2.53 port 37592 [preauth]
Oct  6 01:24:52 shared07 sshd[18990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.2.53  user=r.r
Oct  6 01:24:54 shared07 sshd[18990]: Failed password for r.r from 138.201.2.53 port 49958 ssh2
Oct  6 01:24:54 shared07 sshd[18990]: Received disconnect from 138.201.2.53 port 49958:11: Bye Bye [preauth]
Oct  6 01:24:54 shared07 sshd[18990]: Disconnected from authenticating user r.r 138.201.2.53 port 49958 [preauth]
Oct  6 ........
------------------------------
2020-10-07 13:27:20
138.201.200.50 attackspam
15.09.2020 18:58:25 - Bad Robot 
Ignore Robots.txt
2020-09-17 00:12:59
138.201.200.50 attackbotsspam
15.09.2020 18:58:25 - Bad Robot 
Ignore Robots.txt
2020-09-16 16:29:55
138.201.223.200 attackspambots
Detected by ModSecurity. Request URI: /wp-login.php
2020-08-21 05:48:42
138.201.207.106 attackspambots
Automatic report - Port Scan Attack
2020-03-12 03:31:36
138.201.21.124 attackbotsspam
suspicious action Tue, 10 Mar 2020 15:10:37 -0300
2020-03-11 08:23:31
138.201.251.170 attackbots
3x Failed Password
2020-01-27 13:11:12
138.201.254.88 spambotsattackproxynormal
Log
2019-12-19 22:29:42
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.201.2.204
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11914
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.201.2.204.			IN	A

;; AUTHORITY SECTION:
.			468	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:37:54 CST 2022
;; MSG SIZE  rcvd: 106
Host info
204.2.201.138.in-addr.arpa domain name pointer server113.cretaforce.gr.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
204.2.201.138.in-addr.arpa	name = server113.cretaforce.gr.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
45.238.210.38 attack
Automatic report - Port Scan Attack
2019-07-17 08:14:18
103.52.52.23 attackbots
Invalid user tw from 103.52.52.23 port 42576
2019-07-17 08:10:27
175.138.212.205 attack
2019-07-16T23:40:46.515043abusebot-3.cloudsearch.cf sshd\[9179\]: Invalid user service from 175.138.212.205 port 50045
2019-07-17 08:05:19
92.86.16.142 attack
port scan and connect, tcp 23 (telnet)
2019-07-17 07:58:38
188.162.132.250 attackspambots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-16 20:35:13,486 INFO [amun_request_handler] PortScan Detected on Port: 445 (188.162.132.250)
2019-07-17 08:08:08
211.35.76.241 attack
Jul 17 01:42:04 SilenceServices sshd[426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.35.76.241
Jul 17 01:42:06 SilenceServices sshd[426]: Failed password for invalid user deploy from 211.35.76.241 port 58578 ssh2
Jul 17 01:45:57 SilenceServices sshd[2774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.35.76.241
2019-07-17 07:46:07
120.138.9.51 attackbots
May 16 02:09:03 server sshd\[44384\]: Invalid user vm from 120.138.9.51
May 16 02:09:03 server sshd\[44384\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.138.9.51
May 16 02:09:05 server sshd\[44384\]: Failed password for invalid user vm from 120.138.9.51 port 46894 ssh2
...
2019-07-17 07:46:27
207.46.13.76 attackspam
Automatic report - Banned IP Access
2019-07-17 08:16:50
123.127.107.70 attack
Jul 17 05:28:45 vibhu-HP-Z238-Microtower-Workstation sshd\[7093\]: Invalid user alex from 123.127.107.70
Jul 17 05:28:45 vibhu-HP-Z238-Microtower-Workstation sshd\[7093\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.127.107.70
Jul 17 05:28:47 vibhu-HP-Z238-Microtower-Workstation sshd\[7093\]: Failed password for invalid user alex from 123.127.107.70 port 45907 ssh2
Jul 17 05:34:56 vibhu-HP-Z238-Microtower-Workstation sshd\[7256\]: Invalid user ts3 from 123.127.107.70
Jul 17 05:34:56 vibhu-HP-Z238-Microtower-Workstation sshd\[7256\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.127.107.70
...
2019-07-17 08:08:29
64.113.32.29 attackbotsspam
Jul 17 00:27:39 km20725 sshd\[27559\]: Failed password for root from 64.113.32.29 port 40282 ssh2Jul 17 00:27:42 km20725 sshd\[27559\]: Failed password for root from 64.113.32.29 port 40282 ssh2Jul 17 00:27:45 km20725 sshd\[27559\]: Failed password for root from 64.113.32.29 port 40282 ssh2Jul 17 00:27:48 km20725 sshd\[27559\]: Failed password for root from 64.113.32.29 port 40282 ssh2
...
2019-07-17 08:04:54
200.57.73.170 attackbots
Rude login attack (69 tries in 1d)
2019-07-17 07:48:37
89.154.78.219 attackbotsspam
Multiple SSH auth failures recorded by fail2ban
2019-07-17 07:46:48
37.49.224.123 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-16 21:58:53,082 INFO [amun_request_handler] unknown vuln (Attacker: 37.49.224.123 Port: 25, Mess: ['QUIT
'] (6) Stages: ['IMAIL_STAGE2'])
2019-07-17 07:45:34
36.85.102.222 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-16 20:34:03,568 INFO [amun_request_handler] PortScan Detected on Port: 445 (36.85.102.222)
2019-07-17 08:23:28
210.4.119.59 attackspam
Jun 25 14:51:47 server sshd\[167911\]: Invalid user ntp from 210.4.119.59
Jun 25 14:51:47 server sshd\[167911\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.4.119.59
Jun 25 14:51:49 server sshd\[167911\]: Failed password for invalid user ntp from 210.4.119.59 port 52921 ssh2
...
2019-07-17 08:24:27

Recently Reported IPs

118.175.206.32 138.201.20.165 138.201.20.151 138.201.20.208
138.201.20.3 138.201.20.22 138.201.20.5 138.201.200.158
138.201.200.61 138.201.201.131 138.201.201.196 118.175.206.46
138.201.201.239 138.201.201.40 138.201.202.206 138.201.202.39
138.201.202.94 138.201.203.211 138.201.203.55 118.175.206.63