Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
159.89.138.235 attack
 TCP (SYN) 159.89.138.235:57212 -> port 9100, len 44
2020-05-24 19:22:50
159.89.138.85 attack
Unauthorized connection attempt detected from IP address 159.89.138.85 to port 8088
2019-12-17 05:48:02
159.89.138.85 attack
Scanning random ports - tries to find possible vulnerable services
2019-12-02 06:40:33
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.89.138.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15891
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;159.89.138.2.			IN	A

;; AUTHORITY SECTION:
.			162	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 13:42:53 CST 2022
;; MSG SIZE  rcvd: 105
Host info
Host 2.138.89.159.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 2.138.89.159.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
120.239.196.94 attackspam
2020-10-11T00:35:52.448059vps-d63064a2 sshd[51184]: User root from 120.239.196.94 not allowed because not listed in AllowUsers
2020-10-11T00:35:54.709073vps-d63064a2 sshd[51184]: Failed password for invalid user root from 120.239.196.94 port 2008 ssh2
2020-10-11T00:40:48.488889vps-d63064a2 sshd[51342]: User root from 120.239.196.94 not allowed because not listed in AllowUsers
2020-10-11T00:40:48.509918vps-d63064a2 sshd[51342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.239.196.94  user=root
2020-10-11T00:40:48.488889vps-d63064a2 sshd[51342]: User root from 120.239.196.94 not allowed because not listed in AllowUsers
2020-10-11T00:40:50.670492vps-d63064a2 sshd[51342]: Failed password for invalid user root from 120.239.196.94 port 1350 ssh2
...
2020-10-11 09:24:30
180.183.232.50 attack
1602362742 - 10/10/2020 22:45:42 Host: 180.183.232.50/180.183.232.50 Port: 8080 TCP Blocked
2020-10-11 09:38:28
47.24.143.195 attackbots
(Oct 11)  LEN=44 TOS=0x10 PREC=0x40 TTL=50 ID=19118 TCP DPT=8080 WINDOW=23897 SYN 
 (Oct 10)  LEN=44 TOS=0x10 PREC=0x40 TTL=50 ID=14428 TCP DPT=8080 WINDOW=57779 SYN 
 (Oct  9)  LEN=44 TOS=0x10 PREC=0x40 TTL=50 ID=13771 TCP DPT=8080 WINDOW=57779 SYN 
 (Oct  8)  LEN=44 TOS=0x10 PREC=0x40 TTL=50 ID=24462 TCP DPT=8080 WINDOW=57779 SYN 
 (Oct  7)  LEN=44 TOS=0x10 PREC=0x40 TTL=50 ID=14817 TCP DPT=8080 WINDOW=23897 SYN 
 (Oct  6)  LEN=44 TOS=0x10 PREC=0x40 TTL=50 ID=38361 TCP DPT=8080 WINDOW=23897 SYN 
 (Oct  5)  LEN=44 TOS=0x10 PREC=0x40 TTL=50 ID=53138 TCP DPT=8080 WINDOW=23897 SYN 
 (Oct  4)  LEN=44 TOS=0x10 PREC=0x40 TTL=50 ID=50990 TCP DPT=8080 WINDOW=23897 SYN 
 (Oct  4)  LEN=44 TOS=0x10 PREC=0x40 TTL=50 ID=19738 TCP DPT=8080 WINDOW=23897 SYN 
 (Oct  4)  LEN=44 TOS=0x10 PREC=0x40 TTL=50 ID=19885 TCP DPT=8080 WINDOW=57779 SYN
2020-10-11 09:46:19
81.68.123.185 attackspam
Oct 11 03:12:29 DAAP sshd[24560]: Invalid user dovecot from 81.68.123.185 port 56142
Oct 11 03:12:29 DAAP sshd[24560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.123.185
Oct 11 03:12:29 DAAP sshd[24560]: Invalid user dovecot from 81.68.123.185 port 56142
Oct 11 03:12:31 DAAP sshd[24560]: Failed password for invalid user dovecot from 81.68.123.185 port 56142 ssh2
Oct 11 03:18:19 DAAP sshd[24630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.123.185  user=root
Oct 11 03:18:21 DAAP sshd[24630]: Failed password for root from 81.68.123.185 port 33466 ssh2
...
2020-10-11 09:46:03
118.24.243.53 attack
Oct  9 14:35:31 roki-contabo sshd\[28308\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.243.53  user=root
Oct  9 14:35:33 roki-contabo sshd\[28308\]: Failed password for root from 118.24.243.53 port 47466 ssh2
Oct  9 15:03:25 roki-contabo sshd\[29203\]: Invalid user majordom from 118.24.243.53
Oct  9 15:03:25 roki-contabo sshd\[29203\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.243.53
Oct  9 15:03:27 roki-contabo sshd\[29203\]: Failed password for invalid user majordom from 118.24.243.53 port 59278 ssh2
...
2020-10-11 09:34:34
60.100.10.195 attackbots
Port Scan: TCP/443
2020-10-11 09:52:24
103.138.78.135 attackspambots
Unauthorized connection attempt from IP address 103.138.78.135 on Port 445(SMB)
2020-10-11 09:47:15
35.185.38.253 attack
35.185.38.253 - - \[10/Oct/2020:22:45:33 +0200\] "POST /wp-login.php HTTP/1.0" 200 9295 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
35.185.38.253 - - \[10/Oct/2020:22:45:34 +0200\] "POST /wp-login.php HTTP/1.0" 200 9264 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
35.185.38.253 - - \[10/Oct/2020:22:45:35 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-10-11 09:42:40
96.58.39.28 attackbotsspam
TCP Port Scanning
2020-10-11 09:50:19
5.188.86.174 attackspam
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-10-10T20:45:36Z
2020-10-11 09:47:35
1.179.180.98 attackbots
Oct 10 23:58:02 server1 sshd[9681]: Bad protocol version identification 'GET / HTTP/1.1' from 1.179.180.98 port 58208
Oct 10 23:59:05 server1 sshd[14570]: Bad protocol version identification 'GET / HTTP/1.1' from 1.179.180.98 port 59054
Oct 10 23:59:35 server1 sshd[16729]: Bad protocol version identification 'GET / HTTP/1.1' from 1.179.180.98 port 59389
...
2020-10-11 09:55:58
159.65.77.254 attackspambots
Oct 11 01:55:14 s2 sshd[26113]: Failed password for root from 159.65.77.254 port 47182 ssh2
Oct 11 02:11:40 s2 sshd[26969]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.77.254 
Oct 11 02:11:43 s2 sshd[26969]: Failed password for invalid user tests from 159.65.77.254 port 45268 ssh2
2020-10-11 09:36:59
185.220.101.202 attackspambots
21 attempts against mh-misbehave-ban on sonic
2020-10-11 09:51:16
82.196.14.163 attackspambots
Invalid user customer1 from 82.196.14.163 port 50056
2020-10-11 09:27:50
142.93.193.63 attackspambots
142.93.193.63 - - [10/Oct/2020:23:36:39 +0100] "POST /wp-login.php HTTP/1.1" 200 2302 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.93.193.63 - - [10/Oct/2020:23:36:41 +0100] "POST /wp-login.php HTTP/1.1" 200 2238 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
142.93.193.63 - - [10/Oct/2020:23:36:43 +0100] "POST /wp-login.php HTTP/1.1" 200 2282 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-11 09:30:22

Recently Reported IPs

159.89.134.120 159.89.129.172 159.89.136.114 159.89.135.10
159.89.138.204 159.89.139.29 159.89.133.221 159.89.143.134
159.89.141.152 159.89.144.159 159.89.139.46 159.89.146.131
159.89.144.252 159.89.144.50 159.89.144.213 159.89.148.163
159.89.147.6 159.89.148.105 159.89.144.229 159.89.148.139