138.94.166.97 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.94.166.46	attackspambots	Fail2Ban Ban Triggered	2019-12-02 03:17:54
138.94.166.127	attack	Honeypot attack, port: 23, PTR: PTR record not found	2019-11-30 16:18:50
138.94.166.160	attackbots	UTC: 2019-11-26 port: 23/tcp	2019-11-28 01:24:38

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.94.166.97
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29049
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.94.166.97.			IN	A

;; AUTHORITY SECTION:
.			470	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:54:54 CST 2022
;; MSG SIZE  rcvd: 106

Host info

97.166.94.138.in-addr.arpa domain name pointer 97-166-94-138.fernandonet.net.br.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
97.166.94.138.in-addr.arpa	name = 97-166-94-138.fernandonet.net.br.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
180.114.12.99	attackspambots	2020-07-22T18:59:01.303940upcloud.m0sh1x2.com sshd[9705]: Invalid user svaadmin from 180.114.12.99 port 46616	2020-07-23 03:32:16
197.87.225.46	attackspam	"fail2ban match"	2020-07-23 03:33:35
187.141.128.42	attackbots	Jul 22 18:20:43 buvik sshd[6881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.141.128.42 Jul 22 18:20:45 buvik sshd[6881]: Failed password for invalid user sysadmin from 187.141.128.42 port 52914 ssh2 Jul 22 18:23:35 buvik sshd[7250]: Invalid user reynaldo from 187.141.128.42 ...	2020-07-23 03:15:31
124.205.224.179	attack	Jul 22 21:46:17 home sshd[178228]: Invalid user admin from 124.205.224.179 port 33288 Jul 22 21:46:17 home sshd[178228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.205.224.179 Jul 22 21:46:17 home sshd[178228]: Invalid user admin from 124.205.224.179 port 33288 Jul 22 21:46:19 home sshd[178228]: Failed password for invalid user admin from 124.205.224.179 port 33288 ssh2 Jul 22 21:49:38 home sshd[178586]: Invalid user low from 124.205.224.179 port 60836 ...	2020-07-23 03:54:26
85.57.145.133	attack	Jul 22 14:55:09 WHD8 dovecot: pop3-login: Disconnected $auth failed, 1 attempts in 8 secs$: user=\, method=PLAIN, rip=85.57.145.133, lip=10.64.89.208, session=\ Jul 22 15:08:03 WHD8 dovecot: pop3-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=85.57.145.133, lip=10.64.89.208, session=\<00ZVYwerup9VOZGF\> Jul 22 15:08:27 WHD8 dovecot: pop3-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=85.57.145.133, lip=10.64.89.208, session=\ Jul 22 15:30:06 WHD8 dovecot: pop3-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=85.57.145.133, lip=10.64.89.208, session=\ Jul 22 15:30:08 WHD8 dovecot: pop3-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\	2020-07-23 03:32:35
14.98.157.126	attackbotsspam	WordPress login Brute force / Web App Attack on client site.	2020-07-23 03:44:51
111.241.17.84	attackbotsspam	1595429256 - 07/22/2020 16:47:36 Host: 111.241.17.84/111.241.17.84 Port: 445 TCP Blocked	2020-07-23 03:50:39
73.6.227.20	attackbots	Jul 22 07:27:46 pl3server sshd[28731]: Invalid user pi from 73.6.227.20 port 40898 Jul 22 07:27:46 pl3server sshd[28732]: Invalid user pi from 73.6.227.20 port 40902 Jul 22 07:27:46 pl3server sshd[28731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.6.227.20 Jul 22 07:27:46 pl3server sshd[28732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.6.227.20 Jul 22 07:27:48 pl3server sshd[28731]: Failed password for invalid user pi from 73.6.227.20 port 40898 ssh2 Jul 22 07:27:48 pl3server sshd[28732]: Failed password for invalid user pi from 73.6.227.20 port 40902 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=73.6.227.20	2020-07-23 03:27:02
201.241.79.121	attack	$f2bV_matches	2020-07-23 03:28:23
138.68.237.12	attackspam	Failed password for invalid user pruebas from 138.68.237.12 port 42900 ssh2	2020-07-23 03:39:41
141.98.10.208	attackbots	2020-07-22T12:59:11.253746linuxbox-skyline auth[141220]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=username rhost=141.98.10.208 ...	2020-07-23 03:13:46
106.38.33.70	attackbots	Jul 22 18:33:27 haigwepa sshd[17480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.38.33.70 Jul 22 18:33:28 haigwepa sshd[17480]: Failed password for invalid user ramesh from 106.38.33.70 port 34366 ssh2 ...	2020-07-23 03:14:11
149.56.15.98	attack	Tried sshing with brute force.	2020-07-23 03:46:49
118.25.82.219	attack	Jul 22 14:41:58 vlre-nyc-1 sshd\[22860\]: Invalid user griffin from 118.25.82.219 Jul 22 14:41:58 vlre-nyc-1 sshd\[22860\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.82.219 Jul 22 14:42:00 vlre-nyc-1 sshd\[22860\]: Failed password for invalid user griffin from 118.25.82.219 port 37828 ssh2 Jul 22 14:47:24 vlre-nyc-1 sshd\[22948\]: Invalid user onkar from 118.25.82.219 Jul 22 14:47:24 vlre-nyc-1 sshd\[22948\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.82.219 ...	2020-07-23 03:52:36
51.178.138.1	attackbotsspam	Jul 22 14:43:29 plex-server sshd[559466]: Invalid user frodo from 51.178.138.1 port 54804 Jul 22 14:43:29 plex-server sshd[559466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.138.1 Jul 22 14:43:29 plex-server sshd[559466]: Invalid user frodo from 51.178.138.1 port 54804 Jul 22 14:43:31 plex-server sshd[559466]: Failed password for invalid user frodo from 51.178.138.1 port 54804 ssh2 Jul 22 14:48:05 plex-server sshd[561371]: Invalid user support from 51.178.138.1 port 39036 ...	2020-07-23 03:21:05

Recently Reported IPs

138.94.164.29	138.94.166.2	138.94.172.105	138.94.163.60
138.94.166.22	138.94.172.116	138.94.172.108	138.94.172.120
118.190.153.95	138.94.172.126	138.94.172.140	138.94.172.101
138.94.172.142	138.94.172.170	138.94.172.168	138.94.172.160
138.94.172.196	138.94.172.166	138.94.172.187	138.94.172.174