Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
2.138.7.8 attackspambots
Unauthorized connection attempt detected from IP address 2.138.7.8 to port 445
2020-04-10 02:19:44
2.138.7.8 attackspam
Unauthorized connection attempt from IP address 2.138.7.8 on Port 445(SMB)
2020-04-03 21:37:02
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.138.7.165
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37342
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;2.138.7.165.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020302 1800 900 604800 86400

;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 07:24:08 CST 2025
;; MSG SIZE  rcvd: 104
Host info
165.7.138.2.in-addr.arpa domain name pointer 165.red-2-138-7.dynamicip.rima-tde.net.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
165.7.138.2.in-addr.arpa	name = 165.red-2-138-7.dynamicip.rima-tde.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
51.77.223.80 attack
SSH Honeypot -> SSH Bruteforce / Login
2020-06-03 00:58:32
209.141.60.208 attack
Malicious Traffic/Form Submission
2020-06-03 01:05:14
210.113.7.61 attack
May 28 10:13:31 v2202003116398111542 sshd[11229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.113.7.61  user=root
2020-06-03 01:24:02
80.82.77.33 attackbots
 TCP (SYN) 80.82.77.33:19330 -> port 4242, len 44
2020-06-03 01:09:58
159.100.24.6 attackbots
2020-06-02 06:50:33.068067-0500  localhost smtpd[76437]: NOQUEUE: reject: RCPT from unknown[159.100.24.6]: 450 4.7.25 Client host rejected: cannot find your hostname, [159.100.24.6]; from= to= proto=ESMTP helo=<009bdd7d.hgaksj.xyz>
2020-06-03 01:26:15
192.95.6.110 attackbots
detected by Fail2Ban
2020-06-03 01:13:55
92.18.125.33 attack
Automatic report - Port Scan Attack
2020-06-03 01:00:44
54.39.156.177 attackbotsspam
prod6
...
2020-06-03 00:56:50
202.137.155.4 attackspambots
Dovecot Invalid User Login Attempt.
2020-06-03 01:16:40
54.38.241.162 attack
bruteforce detected
2020-06-03 01:10:50
104.248.56.150 attack
reported through recidive - multiple failed attempts(SSH)
2020-06-03 01:08:43
49.232.34.247 attackbots
Jun  3 00:44:10 web1 sshd[31658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.34.247  user=root
Jun  3 00:44:12 web1 sshd[31658]: Failed password for root from 49.232.34.247 port 48968 ssh2
Jun  3 00:47:57 web1 sshd[32561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.34.247  user=root
Jun  3 00:48:00 web1 sshd[32561]: Failed password for root from 49.232.34.247 port 58898 ssh2
Jun  3 00:51:15 web1 sshd[937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.34.247  user=root
Jun  3 00:51:17 web1 sshd[937]: Failed password for root from 49.232.34.247 port 34618 ssh2
Jun  3 00:54:17 web1 sshd[1671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.34.247  user=root
Jun  3 00:54:19 web1 sshd[1671]: Failed password for root from 49.232.34.247 port 38566 ssh2
Jun  3 01:00:19 web1 sshd[3197]: pam_unix(
...
2020-06-03 01:19:54
37.49.226.181 attack
Jun  2 **REMOVED** sshd\[5161\]: Invalid user user from 37.49.226.181
Jun  2 **REMOVED** sshd\[5163\]: Invalid user git from 37.49.226.181
Jun  2 **REMOVED** sshd\[5166\]: Invalid user postgres from 37.49.226.181
2020-06-03 00:44:46
190.55.158.182 attackbotsspam
Jun  2 13:57:52 mxgate1 postfix/postscreen[1621]: CONNECT from [190.55.158.182]:14039 to [176.31.12.44]:25
Jun  2 13:57:52 mxgate1 postfix/dnsblog[1624]: addr 190.55.158.182 listed by domain zen.spamhaus.org as 127.0.0.4
Jun  2 13:57:52 mxgate1 postfix/dnsblog[1624]: addr 190.55.158.182 listed by domain zen.spamhaus.org as 127.0.0.11
Jun  2 13:57:52 mxgate1 postfix/dnsblog[1622]: addr 190.55.158.182 listed by domain cbl.abuseat.org as 127.0.0.2
Jun  2 13:57:53 mxgate1 postfix/dnsblog[1627]: addr 190.55.158.182 listed by domain b.barracudacentral.org as 127.0.0.2
Jun  2 13:57:58 mxgate1 postfix/postscreen[1621]: DNSBL rank 4 for [190.55.158.182]:14039
Jun x@x
Jun  2 13:57:59 mxgate1 postfix/postscreen[1621]: HANGUP after 1.2 from [190.55.158.182]:14039 in tests after SMTP handshake
Jun  2 13:57:59 mxgate1 postfix/postscreen[1621]: DISCONNECT [190.55.158.182]:14039


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=190.55.158.182
2020-06-03 00:43:34
84.1.30.70 attack
...
2020-06-03 01:18:32

Recently Reported IPs

21.239.5.76 18.123.219.124 33.11.237.153 57.57.167.198
141.108.186.217 225.218.35.210 133.81.169.181 29.66.79.153
158.38.228.144 116.198.98.10 9.134.171.218 98.180.193.184
71.220.250.34 232.7.136.167 213.95.78.41 13.129.194.91
230.74.131.199 64.101.162.241 194.230.94.210 151.174.45.98