Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Japan

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 133.131.97.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42671
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;133.131.97.138.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025031302 1800 900 604800 86400

;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 14 03:36:38 CST 2025
;; MSG SIZE  rcvd: 107
Host info
Host 138.97.131.133.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 138.97.131.133.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
45.83.118.106 attack
[2020-04-23 15:18:20] NOTICE[1170][C-000043bb] chan_sip.c: Call from '' (45.83.118.106:52280) to extension '46842002315' rejected because extension not found in context 'public'.
[2020-04-23 15:18:20] SECURITY[1184] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-23T15:18:20.699-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="46842002315",SessionID="0x7f6c0866f058",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.83.118.106/52280",ACLName="no_extension_match"
[2020-04-23 15:20:21] NOTICE[1170][C-000043bf] chan_sip.c: Call from '' (45.83.118.106:51258) to extension '01146842002315' rejected because extension not found in context 'public'.
[2020-04-23 15:20:21] SECURITY[1184] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-23T15:20:21.010-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01146842002315",SessionID="0x7f6c0805fd68",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.83.118.
...
2020-04-24 03:51:45
49.233.77.87 attack
Apr 23 07:52:45 zn006 sshd[6782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.77.87  user=r.r
Apr 23 07:52:47 zn006 sshd[6782]: Failed password for r.r from 49.233.77.87 port 37892 ssh2
Apr 23 07:52:47 zn006 sshd[6782]: Received disconnect from 49.233.77.87: 11: Bye Bye [preauth]
Apr 23 08:10:36 zn006 sshd[9204]: Invalid user qp from 49.233.77.87
Apr 23 08:10:36 zn006 sshd[9204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.77.87 
Apr 23 08:10:37 zn006 sshd[9204]: Failed password for invalid user qp from 49.233.77.87 port 57582 ssh2
Apr 23 08:10:37 zn006 sshd[9204]: Received disconnect from 49.233.77.87: 11: Bye Bye [preauth]
Apr 23 08:14:59 zn006 sshd[9451]: Invalid user mu from 49.233.77.87
Apr 23 08:14:59 zn006 sshd[9451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.77.87 
Apr 23 08:15:00 zn006 sshd[9451]: Failed pass........
-------------------------------
2020-04-24 03:51:17
37.187.150.194 attackspambots
Automated report - ssh fail2ban:
Apr 23 20:52:11 Unable to negotiate with 37.187.150.194 port=60426: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
Apr 23 20:52:49 Unable to negotiate with 37.187.150.194 port=35492: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
Apr 23 20:53:28 Unable to negotiate with 37.187.150.194 port=38790: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
Apr 23 20:54:08 Unable to negotiate with 37.187.150.194 port=42088: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
2020-04-24 03:18:50
41.47.216.3 attackspambots
Honeypot attack, port: 445, PTR: host-41.47.216.3.tedata.net.
2020-04-24 03:23:58
5.45.68.189 attackbotsspam
Dear Sir / Madam, 
Yesterday, my close friend (Simona Simova) was contacted via fake Facebook profile to be informed that she has a profile on a escort website. While researching via the German phone number used in the advert, we have came across more ads. These profiles are created without her permission and she is now very upset. 

Here is a list of the profiles we have found: 

- https://escortsofia.info/de/sia-11/ (5.45.68.189)
- https://escortsofia.info/de/eleonora-8/ (5.45.68.189)
- https://escortinberlin.info/eleonora-3/ (5.45.68.189)
- https://escortinberlin.info/sia-2/ (5.45.68.189)

We have already hired a lawyer in Germany who will escalate the issue to the authorities.
2020-04-24 03:31:08
62.234.186.25 attack
Invalid user xn from 62.234.186.25 port 35042
2020-04-24 03:36:19
106.12.149.253 attackspambots
Apr 23 09:59:30 mockhub sshd[28137]: Failed password for root from 106.12.149.253 port 43674 ssh2
Apr 23 10:02:38 mockhub sshd[28307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.149.253
...
2020-04-24 03:25:25
211.99.212.60 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-04-24 03:29:17
13.70.139.79 attack
RDP Bruteforce
2020-04-24 03:47:51
123.241.133.107 attackbotsspam
Honeypot attack, port: 5555, PTR: 123-241-133-107.sh.dynamic.tbcnet.net.tw.
2020-04-24 03:35:07
117.4.185.183 attackbotsspam
Honeypot attack, port: 139, PTR: localhost.
2020-04-24 03:52:00
113.204.205.66 attack
Apr 23 19:06:01 *** sshd[24187]: Invalid user hh from 113.204.205.66
2020-04-24 03:34:18
2.249.176.128 attackbots
Honeypot attack, port: 5555, PTR: 2-249-176-128-no2200.tbcn.telia.com.
2020-04-24 03:49:51
103.48.192.48 attack
Apr 23 23:47:46 webhost01 sshd[23799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.48.192.48
Apr 23 23:47:48 webhost01 sshd[23799]: Failed password for invalid user ubuntu from 103.48.192.48 port 52906 ssh2
...
2020-04-24 03:30:11
87.226.165.143 attackspam
SSH authentication failure x 6 reported by Fail2Ban
...
2020-04-24 03:28:18

Recently Reported IPs

49.232.100.89 204.96.211.236 216.241.50.96 59.133.157.131
218.212.236.4 141.221.139.216 160.50.197.171 175.14.64.246
142.229.190.31 95.217.129.19 199.249.107.171 164.212.131.166
247.169.120.242 106.2.170.206 95.49.170.81 222.38.204.231
65.66.129.210 95.217.129.194 202.46.9.71 125.237.113.109