Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: CR Net Telecomunicacoes Ltda-ME

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackbots
Oct  9 19:26:23 nas sshd[5024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.78.249 
Oct  9 19:26:26 nas sshd[5024]: Failed password for invalid user stream from 138.204.78.249 port 44230 ssh2
Oct  9 19:29:57 nas sshd[5190]: Failed password for root from 138.204.78.249 port 55916 ssh2
...
2020-10-10 02:37:01
attackspam
SSH login attempts.
2020-10-09 18:22:01
attackspambots
Invalid user tmpuser from 138.204.78.249 port 49538
2020-08-30 19:02:52
attackspam
Bruteforce detected by fail2ban
2020-08-05 01:39:26
attack
2020-08-02T09:45:17.278622morrigan.ad5gb.com sshd[1436029]: Failed password for root from 138.204.78.249 port 59278 ssh2
2020-08-02T09:45:17.588328morrigan.ad5gb.com sshd[1436029]: Disconnected from authenticating user root 138.204.78.249 port 59278 [preauth]
2020-08-02 23:35:01
attackspam
Jul 29 22:54:38 OPSO sshd\[26279\]: Invalid user mchen from 138.204.78.249 port 58762
Jul 29 22:54:38 OPSO sshd\[26279\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.78.249
Jul 29 22:54:40 OPSO sshd\[26279\]: Failed password for invalid user mchen from 138.204.78.249 port 58762 ssh2
Jul 29 22:57:07 OPSO sshd\[26927\]: Invalid user wjzhong from 138.204.78.249 port 37266
Jul 29 22:57:07 OPSO sshd\[26927\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.78.249
2020-07-30 04:58:03
attack
Jul 18 17:15:46 mout sshd[313]: Invalid user zhaoshaojing from 138.204.78.249 port 55478
2020-07-19 01:36:45
attack
Jul 17 21:29:00 ws26vmsma01 sshd[185662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.78.249
Jul 17 21:29:02 ws26vmsma01 sshd[185662]: Failed password for invalid user dqq from 138.204.78.249 port 36162 ssh2
...
2020-07-18 08:25:00
attackspambots
Jul 15 04:34:05 inter-technics sshd[553]: Invalid user openerp from 138.204.78.249 port 55624
Jul 15 04:34:05 inter-technics sshd[553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.78.249
Jul 15 04:34:05 inter-technics sshd[553]: Invalid user openerp from 138.204.78.249 port 55624
Jul 15 04:34:08 inter-technics sshd[553]: Failed password for invalid user openerp from 138.204.78.249 port 55624 ssh2
Jul 15 04:37:24 inter-technics sshd[790]: Invalid user atom from 138.204.78.249 port 42688
...
2020-07-15 11:53:19
attackbots
Jul  9 23:07:52 buvik sshd[20493]: Invalid user andralyn from 138.204.78.249
Jul  9 23:07:52 buvik sshd[20493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.78.249
Jul  9 23:07:54 buvik sshd[20493]: Failed password for invalid user andralyn from 138.204.78.249 port 46504 ssh2
...
2020-07-10 05:52:21
attackbotsspam
5x Failed Password
2020-07-09 23:11:26
attackbotsspam
(sshd) Failed SSH login from 138.204.78.249 (BR/Brazil/-): 5 in the last 3600 secs
2020-06-01 16:09:33
attack
May 22 22:29:56 legacy sshd[30990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.78.249
May 22 22:29:57 legacy sshd[30990]: Failed password for invalid user qec from 138.204.78.249 port 53932 ssh2
May 22 22:33:58 legacy sshd[31078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.78.249
...
2020-05-23 05:37:35
attackbotsspam
May  9 05:42:49 lukav-desktop sshd\[19011\]: Invalid user john from 138.204.78.249
May  9 05:42:49 lukav-desktop sshd\[19011\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.78.249
May  9 05:42:51 lukav-desktop sshd\[19011\]: Failed password for invalid user john from 138.204.78.249 port 43038 ssh2
May  9 05:47:08 lukav-desktop sshd\[19096\]: Invalid user demo from 138.204.78.249
May  9 05:47:08 lukav-desktop sshd\[19096\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.78.249
2020-05-09 15:37:40
attack
May  7 07:07:55 electroncash sshd[58020]: Failed password for root from 138.204.78.249 port 45414 ssh2
May  7 07:12:29 electroncash sshd[59191]: Invalid user diana from 138.204.78.249 port 55004
May  7 07:12:29 electroncash sshd[59191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.78.249 
May  7 07:12:29 electroncash sshd[59191]: Invalid user diana from 138.204.78.249 port 55004
May  7 07:12:31 electroncash sshd[59191]: Failed password for invalid user diana from 138.204.78.249 port 55004 ssh2
...
2020-05-07 13:26:44
attackbotsspam
2020-04-21T06:10:29.462364struts4.enskede.local sshd\[17251\]: Invalid user admin from 138.204.78.249 port 41370
2020-04-21T06:10:29.471568struts4.enskede.local sshd\[17251\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.78.249
2020-04-21T06:10:33.096435struts4.enskede.local sshd\[17251\]: Failed password for invalid user admin from 138.204.78.249 port 41370 ssh2
2020-04-21T06:15:32.601655struts4.enskede.local sshd\[17325\]: Invalid user oracle from 138.204.78.249 port 59118
2020-04-21T06:15:32.610490struts4.enskede.local sshd\[17325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.78.249
...
2020-04-21 14:22:10
attackspambots
Apr 18 19:33:58 hpm sshd\[23756\]: Invalid user vyatta from 138.204.78.249
Apr 18 19:33:58 hpm sshd\[23756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.78.249
Apr 18 19:34:00 hpm sshd\[23756\]: Failed password for invalid user vyatta from 138.204.78.249 port 57066 ssh2
Apr 18 19:38:43 hpm sshd\[24124\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.78.249  user=root
Apr 18 19:38:44 hpm sshd\[24124\]: Failed password for root from 138.204.78.249 port 38264 ssh2
2020-04-19 17:05:44
attackspam
2020-04-16T15:19:04.623945librenms sshd[26976]: Invalid user test from 138.204.78.249 port 34138
2020-04-16T15:19:06.956622librenms sshd[26976]: Failed password for invalid user test from 138.204.78.249 port 34138 ssh2
2020-04-16T15:24:15.792766librenms sshd[27451]: Invalid user jy from 138.204.78.249 port 48352
...
2020-04-16 21:40:33
attack
Apr  7 04:33:10 ws22vmsma01 sshd[12010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.78.249
Apr  7 04:33:13 ws22vmsma01 sshd[12010]: Failed password for invalid user user from 138.204.78.249 port 50882 ssh2
...
2020-04-07 16:01:02
attack
Brute force SMTP login attempted.
...
2020-04-06 05:48:50
attackspam
Mar 20 23:05:49 * sshd[16536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.204.78.249
Mar 20 23:05:51 * sshd[16536]: Failed password for invalid user jsimon from 138.204.78.249 port 52670 ssh2
2020-03-21 09:58:09
Comments on same subnet:
IP Type Details Datetime
138.204.78.234 attackbotsspam
Brute force SMTP login attempts.
2020-01-20 17:31:31
138.204.78.251 attack
Sun, 21 Jul 2019 07:36:43 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-21 20:54:25
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.204.78.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13038
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.204.78.249.			IN	A

;; AUTHORITY SECTION:
.			356	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020032001 1800 900 604800 86400

;; Query time: 448 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 21 09:58:02 CST 2020
;; MSG SIZE  rcvd: 118
Host info
249.78.204.138.in-addr.arpa domain name pointer 138-204-78-249.crnetbrasil.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
249.78.204.138.in-addr.arpa	name = 138-204-78-249.crnetbrasil.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
52.149.134.171 attack
Jul 15 02:05:08 fhem-rasp sshd[3277]: Disconnected from invalid user admin 52.149.134.171 port 33126 [preauth]
Jul 15 04:12:48 fhem-rasp sshd[19673]: Invalid user admin from 52.149.134.171 port 17854
...
2020-07-15 10:50:55
123.108.35.186 attack
Jul 15 04:18:32 PorscheCustomer sshd[23564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.108.35.186
Jul 15 04:18:34 PorscheCustomer sshd[23564]: Failed password for invalid user cacti from 123.108.35.186 port 48794 ssh2
Jul 15 04:22:00 PorscheCustomer sshd[23622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.108.35.186
...
2020-07-15 10:22:16
37.252.188.130 attackbots
SSH Brute-Forcing (server2)
2020-07-15 10:48:56
103.92.24.240 attack
Jul 14 20:24:58 server1 sshd\[27554\]: Failed password for invalid user flask from 103.92.24.240 port 35900 ssh2
Jul 14 20:26:06 server1 sshd\[27938\]: Invalid user customer from 103.92.24.240
Jul 14 20:26:06 server1 sshd\[27938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.92.24.240 
Jul 14 20:26:08 server1 sshd\[27938\]: Failed password for invalid user customer from 103.92.24.240 port 50864 ssh2
Jul 14 20:27:14 server1 sshd\[28348\]: Invalid user ftpuser1 from 103.92.24.240
...
2020-07-15 10:45:23
123.30.149.34 attackspambots
Jul 15 03:57:08 vps687878 sshd\[21855\]: Failed password for invalid user ftp2 from 123.30.149.34 port 47145 ssh2
Jul 15 04:00:41 vps687878 sshd\[22228\]: Invalid user mrm from 123.30.149.34 port 43113
Jul 15 04:00:41 vps687878 sshd\[22228\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.30.149.34
Jul 15 04:00:43 vps687878 sshd\[22228\]: Failed password for invalid user mrm from 123.30.149.34 port 43113 ssh2
Jul 15 04:04:18 vps687878 sshd\[22565\]: Invalid user jack from 123.30.149.34 port 39077
Jul 15 04:04:18 vps687878 sshd\[22565\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.30.149.34
...
2020-07-15 10:25:03
13.92.134.72 attackspam
Jul 15 04:42:41 ourumov-web sshd\[24812\]: Invalid user admin from 13.92.134.72 port 65447
Jul 15 04:42:41 ourumov-web sshd\[24812\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.92.134.72
Jul 15 04:42:43 ourumov-web sshd\[24812\]: Failed password for invalid user admin from 13.92.134.72 port 65447 ssh2
...
2020-07-15 10:44:04
52.178.30.168 attackspam
SSH invalid-user multiple login try
2020-07-15 10:28:20
13.70.89.23 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-07-15 10:40:28
72.167.223.158 attack
Jul 15 04:41:31 ArkNodeAT sshd\[12584\]: Invalid user admin from 72.167.223.158
Jul 15 04:41:31 ArkNodeAT sshd\[12584\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.167.223.158
Jul 15 04:41:33 ArkNodeAT sshd\[12584\]: Failed password for invalid user admin from 72.167.223.158 port 24711 ssh2
2020-07-15 10:50:42
52.227.173.224 attackbots
Jul 15 04:23:19 ourumov-web sshd\[23444\]: Invalid user admin from 52.227.173.224 port 8340
Jul 15 04:23:19 ourumov-web sshd\[23444\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.227.173.224
Jul 15 04:23:22 ourumov-web sshd\[23444\]: Failed password for invalid user admin from 52.227.173.224 port 8340 ssh2
...
2020-07-15 10:30:43
52.172.53.254 attack
Jul 15 02:28:54 scw-focused-cartwright sshd[25778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.172.53.254
Jul 15 02:28:56 scw-focused-cartwright sshd[25778]: Failed password for invalid user admin from 52.172.53.254 port 45320 ssh2
2020-07-15 10:38:49
111.72.196.38 attackspambots
Jul 15 02:59:01 nirvana postfix/smtpd[20915]: connect from unknown[111.72.196.38]
Jul 15 02:59:02 nirvana postfix/smtpd[20915]: lost connection after AUTH from unknown[111.72.196.38]
Jul 15 02:59:02 nirvana postfix/smtpd[20915]: disconnect from unknown[111.72.196.38]
Jul 15 03:02:36 nirvana postfix/smtpd[21206]: connect from unknown[111.72.196.38]
Jul 15 03:02:37 nirvana postfix/smtpd[21206]: warning: unknown[111.72.196.38]: SASL LOGIN authentication failed: authentication failure
Jul 15 03:02:38 nirvana postfix/smtpd[21206]: warning: unknown[111.72.196.38]: SASL LOGIN authentication failed: authentication failure
Jul 15 03:02:39 nirvana postfix/smtpd[21206]: warning: unknown[111.72.196.38]: SASL LOGIN authentication failed: authentication failure
Jul 15 03:02:40 nirvana postfix/smtpd[21206]: warning: unknown[111.72.196.38]: SASL LOGIN authentication failed: authentication failure
Jul 15 03:02:43 nirvana postfix/smtpd[21206]: warning: unknown[111.72.196.38]: SASL LOGIN ........
-------------------------------
2020-07-15 10:41:46
13.72.82.152 attackspambots
Jul 15 04:43:28 jane sshd[28426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.72.82.152 
Jul 15 04:43:30 jane sshd[28426]: Failed password for invalid user admin from 13.72.82.152 port 46802 ssh2
...
2020-07-15 10:47:35
52.186.148.28 attackspambots
SSH bruteforce
2020-07-15 10:20:56
104.44.141.85 attack
Jul 15 04:41:58 vpn01 sshd[10089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.44.141.85
Jul 15 04:42:00 vpn01 sshd[10089]: Failed password for invalid user admin from 104.44.141.85 port 32391 ssh2
...
2020-07-15 10:42:12

Recently Reported IPs

5.160.129.128 202.51.74.188 182.71.19.146 200.188.19.32
223.159.21.196 49.51.164.212 122.51.92.215 103.242.118.167
122.51.177.96 186.195.11.170 41.64.103.45 49.51.171.154
200.144.244.60 121.78.221.22 84.52.65.248 173.161.87.170
134.73.51.202 129.211.0.204 106.54.29.199 91.134.50.12