Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Canada

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
Oct 28 23:27:16 server2 sshd\[9245\]: User root from 138.197.164.53 not allowed because not listed in AllowUsers
Oct 28 23:27:17 server2 sshd\[9247\]: Invalid user admin from 138.197.164.53
Oct 28 23:27:17 server2 sshd\[9250\]: Invalid user admin from 138.197.164.53
Oct 28 23:27:18 server2 sshd\[9252\]: Invalid user user from 138.197.164.53
Oct 28 23:27:19 server2 sshd\[9254\]: Invalid user ubnt from 138.197.164.53
Oct 28 23:27:20 server2 sshd\[9256\]: Invalid user admin from 138.197.164.53
2019-10-29 05:43:47
Comments on same subnet:
IP Type Details Datetime
138.197.164.222 attackspam
Sep  1 20:52:06 haigwepa sshd[6508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.164.222 
Sep  1 20:52:09 haigwepa sshd[6508]: Failed password for invalid user deploy from 138.197.164.222 port 59404 ssh2
...
2020-09-02 04:58:41
138.197.164.222 attackspam
Aug 13 07:50:06 rancher-0 sshd[1036529]: Invalid user sa12345! from 138.197.164.222 port 40368
...
2020-08-13 19:09:25
138.197.164.222 attackbotsspam
Aug  7 11:37:38 hosting sshd[15877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.164.222  user=root
Aug  7 11:37:40 hosting sshd[15877]: Failed password for root from 138.197.164.222 port 60278 ssh2
Aug  7 11:41:06 hosting sshd[16265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.164.222  user=root
Aug  7 11:41:08 hosting sshd[16265]: Failed password for root from 138.197.164.222 port 36376 ssh2
Aug  7 11:43:49 hosting sshd[16410]: Invalid user com from 138.197.164.222 port 35670
...
2020-08-07 17:20:52
138.197.164.222 attackspambots
Brute-force attempt banned
2020-07-23 05:20:48
138.197.164.222 attack
DATE:2020-07-10 18:04:36, IP:138.197.164.222, PORT:ssh SSH brute force auth (docker-dc)
2020-07-11 04:56:23
138.197.164.222 attack
2020-07-09T22:16:03.593957vps751288.ovh.net sshd\[14955\]: Invalid user user from 138.197.164.222 port 43964
2020-07-09T22:16:03.604467vps751288.ovh.net sshd\[14955\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.164.222
2020-07-09T22:16:05.684388vps751288.ovh.net sshd\[14955\]: Failed password for invalid user user from 138.197.164.222 port 43964 ssh2
2020-07-09T22:19:52.325208vps751288.ovh.net sshd\[14967\]: Invalid user jifeidata from 138.197.164.222 port 54970
2020-07-09T22:19:52.334088vps751288.ovh.net sshd\[14967\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.164.222
2020-07-10 06:19:32
138.197.164.222 attackbots
2020-06-13T04:07:24.333931abusebot-5.cloudsearch.cf sshd[12709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.164.222  user=root
2020-06-13T04:07:26.425347abusebot-5.cloudsearch.cf sshd[12709]: Failed password for root from 138.197.164.222 port 52894 ssh2
2020-06-13T04:11:02.484349abusebot-5.cloudsearch.cf sshd[12816]: Invalid user sshvpn from 138.197.164.222 port 53948
2020-06-13T04:11:02.489464abusebot-5.cloudsearch.cf sshd[12816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.164.222
2020-06-13T04:11:02.484349abusebot-5.cloudsearch.cf sshd[12816]: Invalid user sshvpn from 138.197.164.222 port 53948
2020-06-13T04:11:04.510258abusebot-5.cloudsearch.cf sshd[12816]: Failed password for invalid user sshvpn from 138.197.164.222 port 53948 ssh2
2020-06-13T04:12:41.102425abusebot-5.cloudsearch.cf sshd[12869]: Invalid user test from 138.197.164.222 port 43502
...
2020-06-13 13:26:45
138.197.164.222 attackspam
k+ssh-bruteforce
2020-06-08 23:51:05
138.197.164.222 attackbots
$f2bV_matches
2020-06-06 16:31:46
138.197.164.222 attack
2020-06-05T14:00:27.802906  sshd[5902]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.164.222
2020-06-05T14:00:27.788830  sshd[5902]: Invalid user 0\r from 138.197.164.222 port 58198
2020-06-05T14:00:30.000515  sshd[5902]: Failed password for invalid user 0\r from 138.197.164.222 port 58198 ssh2
2020-06-05T16:02:36.043820  sshd[8356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.164.222  user=root
2020-06-05T16:02:38.050075  sshd[8356]: Failed password for root from 138.197.164.222 port 55010 ssh2
...
2020-06-05 23:57:39
138.197.164.222 attackspam
Jun  3 17:26:34 OPSO sshd\[31478\]: Invalid user levko\\r from 138.197.164.222 port 42480
Jun  3 17:26:34 OPSO sshd\[31478\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.164.222
Jun  3 17:26:36 OPSO sshd\[31478\]: Failed password for invalid user levko\\r from 138.197.164.222 port 42480 ssh2
Jun  3 17:31:13 OPSO sshd\[32265\]: Invalid user Qwer!@\#\$%\^\\r from 138.197.164.222 port 57500
Jun  3 17:31:13 OPSO sshd\[32265\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.164.222
2020-06-04 03:48:00
138.197.164.222 attack
Invalid user imp from 138.197.164.222 port 52354
2020-05-22 04:00:19
138.197.164.222 attackspam
$f2bV_matches
2020-05-04 15:55:12
138.197.164.222 attackspambots
Apr 19 16:47:55 server sshd[2222]: Failed password for invalid user xb from 138.197.164.222 port 34574 ssh2
Apr 19 16:52:26 server sshd[3010]: Failed password for root from 138.197.164.222 port 48658 ssh2
Apr 19 16:54:12 server sshd[3408]: Failed password for root from 138.197.164.222 port 37916 ssh2
2020-04-20 02:25:01
138.197.164.222 attackspam
Apr 11 05:48:29 ourumov-web sshd\[19334\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.164.222  user=root
Apr 11 05:48:31 ourumov-web sshd\[19334\]: Failed password for root from 138.197.164.222 port 45958 ssh2
Apr 11 05:56:28 ourumov-web sshd\[19823\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.164.222  user=root
...
2020-04-11 12:08:02
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.197.164.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17608
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.197.164.53.			IN	A

;; AUTHORITY SECTION:
.			381	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102801 1800 900 604800 86400

;; Query time: 41 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 29 05:43:44 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 53.164.197.138.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 53.164.197.138.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
207.46.13.4 attackspambots
Automatic report - Banned IP Access
2019-07-16 01:20:06
72.34.118.193 attack
Automatic report - Port Scan Attack
2019-07-16 01:39:33
45.7.230.226 attackspambots
Jul 15 19:46:09 meumeu sshd[27938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.7.230.226 
Jul 15 19:46:11 meumeu sshd[27938]: Failed password for invalid user design from 45.7.230.226 port 43580 ssh2
Jul 15 19:52:10 meumeu sshd[29098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.7.230.226 
...
2019-07-16 01:58:15
5.135.182.84 attackspambots
Jul 15 22:42:52 vibhu-HP-Z238-Microtower-Workstation sshd\[2276\]: Invalid user jj from 5.135.182.84
Jul 15 22:42:52 vibhu-HP-Z238-Microtower-Workstation sshd\[2276\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.182.84
Jul 15 22:42:54 vibhu-HP-Z238-Microtower-Workstation sshd\[2276\]: Failed password for invalid user jj from 5.135.182.84 port 34762 ssh2
Jul 15 22:49:47 vibhu-HP-Z238-Microtower-Workstation sshd\[3916\]: Invalid user alumni from 5.135.182.84
Jul 15 22:49:47 vibhu-HP-Z238-Microtower-Workstation sshd\[3916\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.182.84
...
2019-07-16 01:35:55
46.60.1.10 attack
TCP port 445 (SMB) attempt blocked by firewall. [2019-07-15 18:57:54]
2019-07-16 01:45:39
195.38.104.232 attack
2019-07-15T18:58:55.415384vfs-server-01 sshd\[12081\]: Invalid user pi from 195.38.104.232 port 38270
2019-07-15T18:59:01.619253vfs-server-01 sshd\[12087\]: Invalid user pi from 195.38.104.232 port 42170
2019-07-15T18:59:08.832330vfs-server-01 sshd\[12093\]: Invalid user pi from 195.38.104.232 port 45232
2019-07-16 01:42:06
218.111.88.185 attack
Jul 15 19:28:36 OPSO sshd\[9434\]: Invalid user curtis from 218.111.88.185 port 47320
Jul 15 19:28:36 OPSO sshd\[9434\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.111.88.185
Jul 15 19:28:39 OPSO sshd\[9434\]: Failed password for invalid user curtis from 218.111.88.185 port 47320 ssh2
Jul 15 19:34:43 OPSO sshd\[10099\]: Invalid user usuario from 218.111.88.185 port 45244
Jul 15 19:34:43 OPSO sshd\[10099\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.111.88.185
2019-07-16 01:46:22
38.39.192.78 attack
abuseConfidenceScore blocked for 12h
2019-07-16 01:46:00
43.241.234.27 attackbots
Jul 15 19:11:04 s64-1 sshd[28023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.241.234.27
Jul 15 19:11:06 s64-1 sshd[28023]: Failed password for invalid user theo from 43.241.234.27 port 58598 ssh2
Jul 15 19:16:50 s64-1 sshd[28154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.241.234.27
...
2019-07-16 01:27:23
121.182.166.82 attackbots
Jul 15 19:22:16 vps647732 sshd[19276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.182.166.82
Jul 15 19:22:18 vps647732 sshd[19276]: Failed password for invalid user maria from 121.182.166.82 port 33247 ssh2
...
2019-07-16 01:29:44
201.249.89.102 attackspambots
Jul 15 17:59:52 debian sshd\[28186\]: Invalid user mike from 201.249.89.102 port 36084
Jul 15 17:59:52 debian sshd\[28186\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.249.89.102
...
2019-07-16 01:13:19
142.93.208.158 attackspambots
2019-07-15T17:06:48.204572abusebot-7.cloudsearch.cf sshd\[5504\]: Invalid user bank from 142.93.208.158 port 43958
2019-07-16 01:41:09
178.128.215.16 attack
Jul 15 19:26:40 s64-1 sshd[28386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.215.16
Jul 15 19:26:41 s64-1 sshd[28386]: Failed password for invalid user maven from 178.128.215.16 port 58082 ssh2
Jul 15 19:32:14 s64-1 sshd[28507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.215.16
...
2019-07-16 01:43:17
187.110.212.220 attack
Automatic report - Port Scan Attack
2019-07-16 01:34:16
197.253.14.6 attackspambots
Jul 16 00:59:06 localhost sshd[25817]: Invalid user polycom from 197.253.14.6 port 56714
Jul 16 00:59:06 localhost sshd[25817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.253.14.6
Jul 16 00:59:06 localhost sshd[25817]: Invalid user polycom from 197.253.14.6 port 56714
Jul 16 00:59:08 localhost sshd[25817]: Failed password for invalid user polycom from 197.253.14.6 port 56714 ssh2
...
2019-07-16 01:41:34

Recently Reported IPs

62.226.47.210 210.82.30.225 110.54.60.46 96.251.179.115
85.214.230.105 83.52.70.229 197.61.47.178 39.35.197.156
191.34.74.55 176.199.253.177 119.39.248.91 160.236.29.156
148.165.42.208 110.198.185.88 84.192.104.54 68.183.190.161
62.210.144.167 46.45.109.231 216.165.113.154 198.98.56.32