Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
138.197.189.231 attackbotsspam
*Port Scan* detected from 138.197.189.231 (DE/Germany/Hesse/Frankfurt am Main/-). 4 hits in the last 235 seconds
2020-10-08 05:34:44
138.197.189.231 attack
 TCP (SYN) 138.197.189.231:48110 -> port 5900, len 48
2020-10-07 13:47:56
138.197.189.136 attackbotsspam
Sep 27 22:43:11 buvik sshd[2511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.189.136
Sep 27 22:43:13 buvik sshd[2511]: Failed password for invalid user debian from 138.197.189.136 port 53246 ssh2
Sep 27 22:46:26 buvik sshd[3013]: Invalid user james from 138.197.189.136
...
2020-09-28 04:52:59
138.197.189.136 attack
Sep 27 12:07:09 buvik sshd[8860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.189.136
Sep 27 12:07:12 buvik sshd[8860]: Failed password for invalid user testuser1 from 138.197.189.136 port 48080 ssh2
Sep 27 12:08:02 buvik sshd[8978]: Invalid user kk from 138.197.189.136
...
2020-09-27 21:10:17
138.197.189.136 attack
Invalid user sinusbot from 138.197.189.136 port 57742
2020-09-05 21:12:50
138.197.189.136 attackbotsspam
Sep  5 06:21:39 rotator sshd\[17854\]: Invalid user administrador from 138.197.189.136Sep  5 06:21:40 rotator sshd\[17854\]: Failed password for invalid user administrador from 138.197.189.136 port 58512 ssh2Sep  5 06:25:18 rotator sshd\[18687\]: Invalid user bsnl from 138.197.189.136Sep  5 06:25:20 rotator sshd\[18687\]: Failed password for invalid user bsnl from 138.197.189.136 port 37018 ssh2Sep  5 06:28:48 rotator sshd\[18797\]: Invalid user werner from 138.197.189.136Sep  5 06:28:50 rotator sshd\[18797\]: Failed password for invalid user werner from 138.197.189.136 port 43756 ssh2
...
2020-09-05 12:48:11
138.197.189.136 attackspam
2020-09-04T17:03:26.5727331495-001 sshd[3989]: Invalid user atul from 138.197.189.136 port 40978
2020-09-04T17:03:28.5490121495-001 sshd[3989]: Failed password for invalid user atul from 138.197.189.136 port 40978 ssh2
2020-09-04T17:06:28.5400741495-001 sshd[4094]: Invalid user test from 138.197.189.136 port 45722
2020-09-04T17:06:28.5434111495-001 sshd[4094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.189.136
2020-09-04T17:06:28.5400741495-001 sshd[4094]: Invalid user test from 138.197.189.136 port 45722
2020-09-04T17:06:30.1698341495-001 sshd[4094]: Failed password for invalid user test from 138.197.189.136 port 45722 ssh2
...
2020-09-05 05:36:29
138.197.189.136 attackspambots
detected by Fail2Ban
2020-08-16 21:57:07
138.197.189.136 attackbots
Aug  8 09:07:02 v22019038103785759 sshd\[22732\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.189.136  user=root
Aug  8 09:07:04 v22019038103785759 sshd\[22732\]: Failed password for root from 138.197.189.136 port 34692 ssh2
Aug  8 09:10:43 v22019038103785759 sshd\[22875\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.189.136  user=root
Aug  8 09:10:46 v22019038103785759 sshd\[22875\]: Failed password for root from 138.197.189.136 port 45512 ssh2
Aug  8 09:14:09 v22019038103785759 sshd\[23016\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.189.136  user=root
...
2020-08-08 16:41:21
138.197.189.136 attack
Jul 31 07:01:19 *hidden* sshd[29409]: Failed password for *hidden* from 138.197.189.136 port 46234 ssh2 Jul 31 07:05:05 *hidden* sshd[30006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.189.136 user=root Jul 31 07:05:07 *hidden* sshd[30006]: Failed password for *hidden* from 138.197.189.136 port 56882 ssh2
2020-07-31 13:43:36
138.197.189.136 attackspambots
2020-07-29T10:28:50.611574shield sshd\[25847\]: Invalid user ncs from 138.197.189.136 port 37896
2020-07-29T10:28:50.620847shield sshd\[25847\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.189.136
2020-07-29T10:28:52.463201shield sshd\[25847\]: Failed password for invalid user ncs from 138.197.189.136 port 37896 ssh2
2020-07-29T10:33:01.963503shield sshd\[26213\]: Invalid user wjzhong from 138.197.189.136 port 50670
2020-07-29T10:33:01.973000shield sshd\[26213\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.189.136
2020-07-29 18:46:22
138.197.189.136 attack
Jul 24 14:51:11 XXX sshd[11359]: Invalid user git from 138.197.189.136 port 35436
2020-07-25 00:05:13
138.197.189.136 attackspambots
Jul 12 15:07:06 server sshd[28030]: Failed password for invalid user test from 138.197.189.136 port 37022 ssh2
Jul 12 15:10:06 server sshd[30863]: Failed password for invalid user hst from 138.197.189.136 port 33448 ssh2
Jul 12 15:13:03 server sshd[1239]: Failed password for invalid user wangjiaqi from 138.197.189.136 port 58096 ssh2
2020-07-12 21:20:06
138.197.189.136 attackspam
SSH Invalid Login
2020-07-11 06:34:46
138.197.189.136 attackbotsspam
Jul  3 20:57:11 django-0 sshd[10529]: Invalid user abcdef from 138.197.189.136
...
2020-07-04 05:04:46
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.197.189.69
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44886
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.197.189.69.			IN	A

;; AUTHORITY SECTION:
.			237	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 11:53:51 CST 2022
;; MSG SIZE  rcvd: 107
Host info
Host 69.189.197.138.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 69.189.197.138.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
139.155.31.52 attackspambots
Sep 23 05:33:34 web1 sshd[7088]: Invalid user cloud from 139.155.31.52 port 36474
Sep 23 05:33:34 web1 sshd[7088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.31.52
Sep 23 05:33:34 web1 sshd[7088]: Invalid user cloud from 139.155.31.52 port 36474
Sep 23 05:33:37 web1 sshd[7088]: Failed password for invalid user cloud from 139.155.31.52 port 36474 ssh2
Sep 23 05:41:04 web1 sshd[9609]: Invalid user kodiak from 139.155.31.52 port 54724
Sep 23 05:41:04 web1 sshd[9609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.31.52
Sep 23 05:41:04 web1 sshd[9609]: Invalid user kodiak from 139.155.31.52 port 54724
Sep 23 05:41:07 web1 sshd[9609]: Failed password for invalid user kodiak from 139.155.31.52 port 54724 ssh2
Sep 23 05:46:55 web1 sshd[11511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.31.52  user=root
Sep 23 05:46:57 web1 sshd[11511]: Fail
...
2020-09-23 14:26:47
78.87.195.4 attack
Telnet Server BruteForce Attack
2020-09-23 14:35:01
162.245.218.48 attackbots
Invalid user vnc from 162.245.218.48 port 52696
2020-09-23 14:44:43
42.177.78.48 attackspambots
Sep 23 01:59:00 r.ca sshd[11779]: Failed password for invalid user osm from 42.177.78.48 port 58766 ssh2
2020-09-23 14:29:37
218.78.50.164 attackspam
SSH Bruteforce attack
2020-09-23 14:32:59
184.72.65.244 attackbots
Automatic report - Port Scan
2020-09-23 14:22:28
178.129.82.213 attackspambots
Unauthorized connection attempt from IP address 178.129.82.213 on Port 445(SMB)
2020-09-23 14:28:23
116.22.198.8 attack
Found on   CINS badguys     / proto=6  .  srcport=57685  .  dstport=445  .     (3078)
2020-09-23 14:59:38
188.193.32.62 attackbotsspam
Listed on    zen-spamhaus also barracudaCentral and abuseat.org   / proto=6  .  srcport=22664  .  dstport=5555  .     (3079)
2020-09-23 14:47:14
93.109.34.189 attackspam
Sep 23 03:02:39 eventyay sshd[18736]: Failed password for root from 93.109.34.189 port 60758 ssh2
Sep 23 03:02:43 eventyay sshd[18755]: Failed password for root from 93.109.34.189 port 60845 ssh2
...
2020-09-23 14:56:45
47.31.208.154 attack
Unauthorized connection attempt from IP address 47.31.208.154 on Port 445(SMB)
2020-09-23 14:38:57
189.26.221.82 attackspam
Unauthorized connection attempt from IP address 189.26.221.82 on Port 445(SMB)
2020-09-23 14:28:07
201.22.230.132 attack
Unauthorized connection attempt from IP address 201.22.230.132 on Port 445(SMB)
2020-09-23 14:30:36
117.103.168.204 attack
Sep 23 07:23:23 vpn01 sshd[24045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.103.168.204
Sep 23 07:23:25 vpn01 sshd[24045]: Failed password for invalid user albert from 117.103.168.204 port 37534 ssh2
...
2020-09-23 14:33:45
14.177.113.105 attack
1600794263 - 09/22/2020 19:04:23 Host: 14.177.113.105/14.177.113.105 Port: 445 TCP Blocked
2020-09-23 14:24:17

Recently Reported IPs

138.197.19.154 138.197.190.235 138.197.192.177 138.197.193.33
138.197.190.234 138.197.193.204 138.197.194.109 138.197.195.139
138.197.192.47 138.197.192.10 138.197.196.23 138.197.194.126
138.197.197.111 138.197.197.148 138.197.197.36 138.197.197.62
138.197.203.144 138.197.203.244 138.197.197.52 138.197.201.209