138.197.12.227

Basic Info

City: Clifton

Region: New Jersey

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.197.12.179	attackbots	Invalid user sysadmin from 138.197.12.179 port 34892	2020-09-25 05:18:35
138.197.12.179	attack	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-02T08:26:19Z and 2020-09-02T08:34:15Z	2020-09-03 01:40:17
138.197.12.179	attack	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-02T08:26:19Z and 2020-09-02T08:34:15Z	2020-09-02 17:08:22
138.197.12.179	attack	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-29T04:47:38Z and 2020-08-29T04:55:36Z	2020-08-29 14:14:37
138.197.12.179	attackspam	Aug 24 07:52:30 xxxxxxx9247313 sshd[14912]: Invalid user gjf from 138.197.12.179 Aug 24 07:52:30 xxxxxxx9247313 sshd[14912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=box.computerfahostnameh.com Aug 24 07:52:32 xxxxxxx9247313 sshd[14912]: Failed password for invalid user gjf from 138.197.12.179 port 39630 ssh2 Aug 24 07:54:19 xxxxxxx9247313 sshd[14931]: Invalid user tommy from 138.197.12.179 Aug 24 07:54:19 xxxxxxx9247313 sshd[14931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=box.computerfahostnameh.com Aug 24 07:54:21 xxxxxxx9247313 sshd[14931]: Failed password for invalid user tommy from 138.197.12.179 port 60660 ssh2 Aug 24 07:55:20 xxxxxxx9247313 sshd[15013]: Invalid user testmail from 138.197.12.179 Aug 24 07:55:20 xxxxxxx9247313 sshd[15013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=box.computerfahostnameh.com Aug 24 07:55:22 ........ ------------------------------	2020-08-27 09:37:41
138.197.129.38	attackbots	Aug 20 21:01:51 vps-51d81928 sshd[779374]: Invalid user tom from 138.197.129.38 port 36380 Aug 20 21:01:51 vps-51d81928 sshd[779374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.129.38 Aug 20 21:01:51 vps-51d81928 sshd[779374]: Invalid user tom from 138.197.129.38 port 36380 Aug 20 21:01:53 vps-51d81928 sshd[779374]: Failed password for invalid user tom from 138.197.129.38 port 36380 ssh2 Aug 20 21:05:30 vps-51d81928 sshd[779440]: Invalid user neide from 138.197.129.38 port 37212 ...	2020-08-21 05:09:20
138.197.129.38	attack	Aug 17 07:01:30 124388 sshd[30315]: Invalid user sam from 138.197.129.38 port 58294 Aug 17 07:01:30 124388 sshd[30315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.129.38 Aug 17 07:01:30 124388 sshd[30315]: Invalid user sam from 138.197.129.38 port 58294 Aug 17 07:01:32 124388 sshd[30315]: Failed password for invalid user sam from 138.197.129.38 port 58294 ssh2 Aug 17 07:05:23 124388 sshd[30468]: Invalid user teste2 from 138.197.129.38 port 38354	2020-08-17 19:38:03
138.197.129.38	attack	Aug 7 19:04:42 webhost01 sshd[30099]: Failed password for root from 138.197.129.38 port 37666 ssh2 ...	2020-08-07 20:34:35
138.197.129.38	attackbots	Aug 5 23:26:35 django-0 sshd[28429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.129.38 user=root Aug 5 23:26:38 django-0 sshd[28429]: Failed password for root from 138.197.129.38 port 57798 ssh2 ...	2020-08-06 08:47:21
138.197.129.38	attack	2020-08-05T10:43:02.098652hostname sshd[5906]: Failed password for root from 138.197.129.38 port 39908 ssh2 2020-08-05T10:47:15.066770hostname sshd[6675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.129.38 user=root 2020-08-05T10:47:16.929557hostname sshd[6675]: Failed password for root from 138.197.129.38 port 51910 ssh2 ...	2020-08-05 19:56:30
138.197.129.38	attackbots	$f2bV_matches	2020-08-03 14:35:14
138.197.129.38	attackbots	Brute-force attempt banned	2020-07-26 07:59:55
138.197.120.36	attackspambots	Jul 23 05:59:14 [host] sshd[4795]: Invalid user no Jul 23 05:59:14 [host] sshd[4795]: pam_unix(sshd:a Jul 23 05:59:16 [host] sshd[4795]: Failed password	2020-07-23 12:20:04
138.197.129.38	attack	2020-07-20T05:02:59.493634shield sshd\[618\]: Invalid user rti from 138.197.129.38 port 47320 2020-07-20T05:02:59.502707shield sshd\[618\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.129.38 2020-07-20T05:03:01.728810shield sshd\[618\]: Failed password for invalid user rti from 138.197.129.38 port 47320 ssh2 2020-07-20T05:07:42.733487shield sshd\[2179\]: Invalid user theforest from 138.197.129.38 port 35436 2020-07-20T05:07:42.742999shield sshd\[2179\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.129.38	2020-07-20 15:13:23
138.197.129.38	attack	<6 unauthorized SSH connections	2020-07-15 17:16:06

Whois info:

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#


NetRange:       138.197.0.0 - 138.197.255.255
CIDR:           138.197.0.0/16
NetName:        DIGITALOCEAN-138-197-0-0
NetHandle:      NET-138-197-0-0-1
Parent:         NET138 (NET-138-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   DigitalOcean, LLC (DO-13)
RegDate:        2016-01-26
Updated:        2020-04-03
Comment:        Routing and Peering Policy can be found at https://www.as14061.net
Comment:        
Comment:        Please submit abuse reports at https://www.digitalocean.com/company/contact/#abuse
Ref:            https://rdap.arin.net/registry/ip/138.197.0.0



OrgName:        DigitalOcean, LLC
OrgId:          DO-13
Address:        105 Edgeview Drive, Suite 425
City:           Broomfield
StateProv:      CO
PostalCode:     80021
Country:        US
RegDate:        2012-05-14
Updated:        2025-04-11
Ref:            https://rdap.arin.net/registry/entity/DO-13


OrgNOCHandle: NOC32014-ARIN
OrgNOCName:   Network Operations Center
OrgNOCPhone:  +1-646-827-4366 
OrgNOCEmail:  noc@digitalocean.com
OrgNOCRef:    https://rdap.arin.net/registry/entity/NOC32014-ARIN

OrgAbuseHandle: DIGIT19-ARIN
OrgAbuseName:   DigitalOcean Abuse
OrgAbusePhone:  +1-646-827-4366 
OrgAbuseEmail:  abuse@digitalocean.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/DIGIT19-ARIN

OrgTechHandle: NOC32014-ARIN
OrgTechName:   Network Operations Center
OrgTechPhone:  +1-646-827-4366 
OrgTechEmail:  noc@digitalocean.com
OrgTechRef:    https://rdap.arin.net/registry/entity/NOC32014-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.197.12.227
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51131
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.197.12.227.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025112902 1800 900 604800 86400

;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Nov 30 12:30:42 CST 2025
;; MSG SIZE  rcvd: 107

Host info

Host 227.12.197.138.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 227.12.197.138.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
160.20.96.33	attackbots	160.20.96.33 - - \[08/Nov/2019:14:31:56 +0000\] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 11860 "https://vattenfall.upup.se/" "Mozilla/5.0 $Windows NT 10.0\; Win64\; x64$ AppleWebKit/537.36 $KHTML, like Gecko$ Chrome/78.0.3904.97 Safari/537.36" "-"160.20.96.33 - - \[08/Nov/2019:14:32:10 +0000\] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 51 "https://vattenfall.upup.se/" "Mozilla/5.0 $Windows NT 10.0\; Win64\; x64$ AppleWebKit/537.36 $KHTML, like Gecko$ Chrome/78.0.3904.97 Safari/537.36" "-"160.20.96.33 - - \[08/Nov/2019:14:32:10 +0000\] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 51 "https://vattenfall.upup.se/" "Mozilla/5.0 $Windows NT 10.0\; Win64\; x64$ AppleWebKit/537.36 $KHTML, like Gecko$ Chrome/78.0.3904.97 Safari/537.36" "-"160.20.96.33 - - \[08/Nov/2019:14:32:10 +0000\] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 51 "https://vattenfall.upup.se/" "Mozilla/5.0 $Windows NT 10.0\; Win64\; x64$ AppleWebKit/537.36 $KHTML, like Gecko$ Chrome/78.0.3904.97 Safari/537.36" "-"160.20.96.33	2019-11-09 04:37:45
14.189.167.43	attack	Unauthorized connection attempt from IP address 14.189.167.43 on Port 445(SMB)	2019-11-09 04:29:47
46.121.220.52	attackspam	Brute force attempt	2019-11-09 04:37:00
148.70.118.95	attack	Nov 8 15:26:48 ns381471 sshd[13538]: Failed password for root from 148.70.118.95 port 38088 ssh2	2019-11-09 04:17:04
206.189.103.18	attackbotsspam	$f2bV_matches	2019-11-09 04:47:31
81.171.75.48	attack	\[2019-11-08 15:05:02\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '81.171.75.48:64619' - Wrong password \[2019-11-08 15:05:02\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-08T15:05:02.018-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="8515",SessionID="0x7fdf2c003608",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.75.48/64619",Challenge="0dc0dca4",ReceivedChallenge="0dc0dca4",ReceivedHash="e7059e50f0ddf1ae6c424dc2c6f14944" \[2019-11-08 15:05:40\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '81.171.75.48:52933' - Wrong password \[2019-11-08 15:05:40\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-08T15:05:40.832-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="641",SessionID="0x7fdf2c2677c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.75.48/5	2019-11-09 04:18:22
188.166.181.139	attackbots	Forged login request.	2019-11-09 04:34:32
103.248.25.171	attackbotsspam	2019-10-02 10:55:29,588 fail2ban.actions [818]: NOTICE [sshd] Ban 103.248.25.171 2019-10-02 14:03:38,854 fail2ban.actions [818]: NOTICE [sshd] Ban 103.248.25.171 2019-10-02 17:13:06,344 fail2ban.actions [818]: NOTICE [sshd] Ban 103.248.25.171 ...	2019-11-09 04:11:45
103.252.117.115	attack	Unauthorized connection attempt from IP address 103.252.117.115 on Port 445(SMB)	2019-11-09 04:43:24
27.72.78.220	attackspam	Unauthorized connection attempt from IP address 27.72.78.220 on Port 445(SMB)	2019-11-09 04:31:52
186.144.72.32	attackspambots	Brute force attempt	2019-11-09 04:13:51
195.231.1.76	attackspambots	5x Failed Password	2019-11-09 04:21:32
177.129.207.41	attackbotsspam	Caught in portsentry honeypot	2019-11-09 04:21:48
185.200.118.76	attack	proto=tcp . spt=33646 . dpt=3389 . src=185.200.118.76 . dst=xx.xx.4.1 . (Listed on rbldns-ru) (493)	2019-11-09 04:30:02
210.4.122.130	attack	Unauthorized connection attempt from IP address 210.4.122.130 on Port 445(SMB)	2019-11-09 04:39:44

Recently Reported IPs

111.221.213.99	137.184.10.92	135.237.126.204	103.167.204.86
79.185.46.83	174.138.16.66	167.172.156.203	199.45.155.107
57.180.15.86	161.35.199.233	195.178.110.54	40.90.250.163
14.212.107.120	155.117.98.112	154.28.229.158	103.4.251.240
47.76.227.105	205.210.31.206	112.121.183.114	20.83.27.89