Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
138.197.142.81 attack
Jun 23 09:13:11 [host] sshd[2538]: Invalid user bo
Jun 23 09:13:11 [host] sshd[2538]: pam_unix(sshd:a
Jun 23 09:13:13 [host] sshd[2538]: Failed password
2020-06-23 16:31:43
138.197.142.81 attackbots
2020-06-17T08:22:01.882591shield sshd\[5467\]: Invalid user ty from 138.197.142.81 port 54782
2020-06-17T08:22:01.886360shield sshd\[5467\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.81
2020-06-17T08:22:03.435877shield sshd\[5467\]: Failed password for invalid user ty from 138.197.142.81 port 54782 ssh2
2020-06-17T08:25:18.426479shield sshd\[5770\]: Invalid user 3 from 138.197.142.81 port 54958
2020-06-17T08:25:18.430407shield sshd\[5770\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.81
2020-06-17 19:27:14
138.197.142.81 attack
May  5 18:58:27 pi sshd[15316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.81 
May  5 18:58:29 pi sshd[15316]: Failed password for invalid user lh from 138.197.142.81 port 59308 ssh2
2020-06-07 03:38:44
138.197.142.81 attack
(sshd) Failed SSH login from 138.197.142.81 (CA/Canada/-): 5 in the last 3600 secs
2020-05-25 03:32:58
138.197.142.81 attack
May 21 23:43:34 eventyay sshd[27112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.81
May 21 23:43:37 eventyay sshd[27112]: Failed password for invalid user ziyang from 138.197.142.81 port 35812 ssh2
May 21 23:46:13 eventyay sshd[27253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.81
...
2020-05-22 06:00:48
138.197.142.81 attackbots
Invalid user iff from 138.197.142.81 port 46016
2020-05-20 04:14:36
138.197.142.81 attack
May 15 09:04:15 sso sshd[20968]: Failed password for root from 138.197.142.81 port 51588 ssh2
...
2020-05-15 16:23:54
138.197.142.81 attack
May  9 04:43:27 piServer sshd[7387]: Failed password for root from 138.197.142.81 port 52814 ssh2
May  9 04:46:58 piServer sshd[7638]: Failed password for root from 138.197.142.81 port 33662 ssh2
...
2020-05-09 17:17:27
138.197.142.81 attack
Apr 26 23:17:00 electroncash sshd[25532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.81 
Apr 26 23:17:00 electroncash sshd[25532]: Invalid user mjs from 138.197.142.81 port 44842
Apr 26 23:17:01 electroncash sshd[25532]: Failed password for invalid user mjs from 138.197.142.81 port 44842 ssh2
Apr 26 23:20:38 electroncash sshd[26569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.81  user=root
Apr 26 23:20:41 electroncash sshd[26569]: Failed password for root from 138.197.142.81 port 55164 ssh2
...
2020-04-27 05:27:02
138.197.142.81 attackspambots
Apr 24 04:20:54 firewall sshd[5233]: Failed password for invalid user deploy from 138.197.142.81 port 57692 ssh2
Apr 24 04:25:00 firewall sshd[5331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.81  user=root
Apr 24 04:25:02 firewall sshd[5331]: Failed password for root from 138.197.142.81 port 43674 ssh2
...
2020-04-24 16:56:47
138.197.142.181 attackspam
Aug 20 03:40:58 plusreed sshd[14711]: Invalid user legal3 from 138.197.142.181
...
2019-08-20 15:51:38
138.197.142.181 attackspambots
Aug 19 00:40:03 OPSO sshd\[1571\]: Invalid user fei from 138.197.142.181 port 58378
Aug 19 00:40:03 OPSO sshd\[1571\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.181
Aug 19 00:40:05 OPSO sshd\[1571\]: Failed password for invalid user fei from 138.197.142.181 port 58378 ssh2
Aug 19 00:44:10 OPSO sshd\[1883\]: Invalid user mother from 138.197.142.181 port 47926
Aug 19 00:44:10 OPSO sshd\[1883\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.181
2019-08-19 06:45:59
138.197.142.181 attackspam
Aug  9 18:54:24 *** sshd[16177]: User root from 138.197.142.181 not allowed because not listed in AllowUsers
2019-08-10 03:43:22
138.197.142.181 attack
Automatic report - Banned IP Access
2019-08-07 21:49:38
138.197.142.181 attack
Aug  3 09:41:23 MK-Soft-Root2 sshd\[8876\]: Invalid user master1 from 138.197.142.181 port 46274
Aug  3 09:41:23 MK-Soft-Root2 sshd\[8876\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.142.181
Aug  3 09:41:25 MK-Soft-Root2 sshd\[8876\]: Failed password for invalid user master1 from 138.197.142.181 port 46274 ssh2
...
2019-08-03 18:57:21
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.197.142.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26332
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.197.142.249.		IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 06:12:02 CST 2022
;; MSG SIZE  rcvd: 108
Host info
249.142.197.138.in-addr.arpa domain name pointer bluework.ca.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
249.142.197.138.in-addr.arpa	name = bluework.ca.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
172.245.116.2 attackbotsspam
Invalid user allahd from 172.245.116.2 port 57948
2019-12-28 06:49:32
201.16.228.170 attackbots
2019-12-27 23:57:11 H=(201-016-228-170.xf-static.ctbcnetsuper.com.br.228.16.201.in-addr.arpa) [201.16.228.170] sender verify fail for : Unrouteable address
2019-12-27 23:57:11 H=(201-016-228-170.xf-static.ctbcnetsuper.com.br.228.16.201.in-addr.arpa) [201.16.228.170] F= rejected RCPT : Sender verify failed
...
2019-12-28 06:57:40
222.186.190.2 attack
Triggered by Fail2Ban at Ares web server
2019-12-28 07:03:19
218.92.0.178 attackspam
Dec 27 17:57:14 ny01 sshd[13809]: Failed password for root from 218.92.0.178 port 63915 ssh2
Dec 27 17:57:17 ny01 sshd[13809]: Failed password for root from 218.92.0.178 port 63915 ssh2
Dec 27 17:57:26 ny01 sshd[13809]: error: maximum authentication attempts exceeded for root from 218.92.0.178 port 63915 ssh2 [preauth]
2019-12-28 06:59:59
185.184.79.30 attackbots
Fail2Ban Ban Triggered
2019-12-28 06:56:33
45.143.223.15 attackbots
Brute force attempt
2019-12-28 07:02:48
121.201.40.63 attack
Dec 27 23:57:01 debian64 sshd\[28912\]: Invalid user gytri from 121.201.40.63 port 39846
Dec 27 23:57:01 debian64 sshd\[28912\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.201.40.63
Dec 27 23:57:03 debian64 sshd\[28912\]: Failed password for invalid user gytri from 121.201.40.63 port 39846 ssh2
...
2019-12-28 07:02:25
157.120.255.38 attackbotsspam
Unauthorized login attempts, brute force attack on website login page
2019-12-28 06:42:15
165.22.107.73 attack
3389BruteforceFW23
2019-12-28 06:48:17
104.236.112.52 attackspambots
Dec 27 23:11:41 localhost sshd[24309]: Failed password for invalid user server from 104.236.112.52 port 50683 ssh2
Dec 27 23:23:02 localhost sshd[24814]: Failed password for root from 104.236.112.52 port 58681 ssh2
Dec 27 23:25:15 localhost sshd[24896]: Failed password for invalid user lemon from 104.236.112.52 port 42501 ssh2
2019-12-28 06:32:39
182.156.72.222 attackspambots
Honeypot attack, port: 445, PTR: static-222.72.156.182-tataidc.co.in.
2019-12-28 06:47:57
139.59.61.99 attackbotsspam
3389BruteforceFW23
2019-12-28 06:39:27
104.237.255.206 attackspambots
SIP/5060 Probe, BF, Hack -
2019-12-28 06:33:46
41.46.138.123 attackspam
2019-12-2715:44:271ikqqo-0004Ky-Lw\<=verena@rs-solution.chH=\(localhost\)[197.54.90.251]:48376P=esmtpsaX=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:verena@rs-solution.chS=1605id=84ca7a353e15c03310ee184b4094ad81a2513c90dc@rs-solution.chT="Verytight:Localmasseuse"forhassaanfurqan13@gmail.comtrejo2ivan1@gmail.comjhill41808@gmail.commetalman@yahoo.com2019-12-2715:42:151ikqog-0004CZ-WD\<=verena@rs-solution.chH=\(localhost\)[200.187.181.125]:42452P=esmtpsaX=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:verena@rs-solution.chS=1638id=282197c4cfe4cec65a5fe945a2567c79a8427a@rs-solution.chT="Enjoysexwiththem:Hookupwithamom"foralvarezjossue@gmail.comkenelk1975@yahoo.comguzmanjocelyn995@gmail.comcolsonking69@gmail.com2019-12-2715:44:351ikqqx-0004MY-5I\<=verena@rs-solution.chH=\(localhost\)[41.46.138.123]:47444P=esmtpsaX=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:verena@rs-solution.chS=1663id=a6a8d05e557eab587b8573202bffc6eac93a3673d7@rs-solution.chT="Sexandrelaxation:Ar
2019-12-28 06:31:25
197.54.90.251 attack
2019-12-2715:44:271ikqqo-0004Ky-Lw\<=verena@rs-solution.chH=\(localhost\)[197.54.90.251]:48376P=esmtpsaX=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:verena@rs-solution.chS=1605id=84ca7a353e15c03310ee184b4094ad81a2513c90dc@rs-solution.chT="Verytight:Localmasseuse"forhassaanfurqan13@gmail.comtrejo2ivan1@gmail.comjhill41808@gmail.commetalman@yahoo.com2019-12-2715:42:151ikqog-0004CZ-WD\<=verena@rs-solution.chH=\(localhost\)[200.187.181.125]:42452P=esmtpsaX=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:verena@rs-solution.chS=1638id=282197c4cfe4cec65a5fe945a2567c79a8427a@rs-solution.chT="Enjoysexwiththem:Hookupwithamom"foralvarezjossue@gmail.comkenelk1975@yahoo.comguzmanjocelyn995@gmail.comcolsonking69@gmail.com2019-12-2715:44:351ikqqx-0004MY-5I\<=verena@rs-solution.chH=\(localhost\)[41.46.138.123]:47444P=esmtpsaX=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:verena@rs-solution.chS=1663id=a6a8d05e557eab587b8573202bffc6eac93a3673d7@rs-solution.chT="Sexandrelaxation:Ar
2019-12-28 06:35:28

Recently Reported IPs

49.234.114.42 59.115.38.243 124.121.191.157 195.2.76.246
67.210.155.47 93.99.105.20 183.245.209.58 77.220.195.37
172.106.17.218 185.109.55.179 178.71.32.203 103.79.35.9
18.237.63.86 47.242.173.151 189.43.68.151 221.15.118.22
171.244.139.202 49.68.229.230 193.169.253.195 142.251.40.229