138.97.1.238 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.97.171.105	attackspambots	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: CableLink-138-97-171-105.PCs.InterCable.net.	2020-10-08 01:53:27
138.97.171.105	attack	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: CableLink-138-97-171-105.PCs.InterCable.net.	2020-10-07 18:02:10
138.97.181.169	attack	port scan and connect, tcp 23 (telnet)	2020-08-16 08:45:14
138.97.154.142	attackspambots	Attempted connection to port 445.	2020-07-25 03:02:54
138.97.123.176	attack	cctv illegal login	2020-07-06 23:54:52
138.97.123.12	attack	cctv illegal login	2020-07-06 23:53:45
138.97.15.125	attackbots	Invalid user admin from 138.97.15.125 port 35876	2020-06-18 05:47:33
138.97.161.78	attack	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-06-02 17:30:10
138.97.165.209	attackspam	1587038961 - 04/16/2020 14:09:21 Host: 138.97.165.209/138.97.165.209 Port: 445 TCP Blocked	2020-04-17 02:54:14
138.97.145.148	attack	Automatic report - Port Scan Attack	2020-04-04 23:43:17
138.97.124.13	attackbotsspam	2020-03-07T16:10:54.347097linuxbox-skyline sshd[28933]: Invalid user uno85123 from 138.97.124.13 port 58210 ...	2020-03-08 08:53:25
138.97.159.217	attackbots	From: Walgreens Rewards Repetitive Walgreens reward spam - likely fraud – primarily Ukraine ISP; targeted Google phishing redirect; repetitive blacklisted phishing redirect spam links. No entity name; BBB results for "8 The Green, Dover, DE 19901": … The websites collect personal information and then transfer it to lenders and other service providers and marketing companies. BBB suggests caution in dealing with these websites. … Unsolicited bulk spam - (EHLO betrothment.clausloan.eu) (138.97.159.217) – repetitive UBE from IP range 138.97.156.* Spam link clausloan.eu = 138.97.159.10 My Tech BZ – blacklisted – phishing redirect: - www.google.com – effective URL; phishing redirect - lukkins.com = 139.99.70.208 Ovh Sas - link.agnesta.com = 62.113.207.188 23Media GmbH (previous domain link.orcelsor.com) - kq6.securessl.company = 104.223.205.137, 104.223.205.138 Global Frag Networks	2020-03-05 23:25:42
138.97.159.10	attackspam	From: Walgreens Rewards Repetitive Walgreens reward spam - likely fraud – primarily Ukraine ISP; targeted Google phishing redirect; repetitive blacklisted phishing redirect spam links. No entity name; BBB results for "8 The Green, Dover, DE 19901": … The websites collect personal information and then transfer it to lenders and other service providers and marketing companies. BBB suggests caution in dealing with these websites. … Unsolicited bulk spam - (EHLO betrothment.clausloan.eu) (138.97.159.217) – repetitive UBE from IP range 138.97.156.* Spam link clausloan.eu = 138.97.159.10 My Tech BZ – blacklisted – phishing redirect: - www.google.com – effective URL; phishing redirect - lukkins.com = 139.99.70.208 Ovh Sas - link.agnesta.com = 62.113.207.188 23Media GmbH (previous domain link.orcelsor.com) - kq6.securessl.company = 104.223.205.137, 104.223.205.138 Global Frag Networks	2020-03-05 22:38:17
138.97.124.13	attack	Mar 4 08:46:42 server sshd[1193695]: Failed password for invalid user info from 138.97.124.13 port 52798 ssh2 Mar 4 08:57:53 server sshd[1197063]: Failed password for invalid user wp-user from 138.97.124.13 port 35458 ssh2 Mar 4 09:09:03 server sshd[1200630]: Failed password for invalid user isa from 138.97.124.13 port 46350 ssh2	2020-03-04 16:13:49
138.97.147.3	attackbots	Unauthorized connection attempt detected from IP address 138.97.147.3 to port 8080	2020-03-02 04:03:32

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.97.1.238
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64509
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.97.1.238.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 44 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:56:32 CST 2022
;; MSG SIZE  rcvd: 105

Host info

238.1.97.138.in-addr.arpa domain name pointer 238-1-97-138.clickturbo.com.br.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
238.1.97.138.in-addr.arpa	name = 238-1-97-138.clickturbo.com.br.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.12.57.165	attackbotsspam	(sshd) Failed SSH login from 106.12.57.165 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 28 01:20:20 srv sshd[25079]: Invalid user wmu from 106.12.57.165 port 42446 Mar 28 01:20:22 srv sshd[25079]: Failed password for invalid user wmu from 106.12.57.165 port 42446 ssh2 Mar 28 01:30:44 srv sshd[25649]: Invalid user cgr from 106.12.57.165 port 60762 Mar 28 01:30:46 srv sshd[25649]: Failed password for invalid user cgr from 106.12.57.165 port 60762 ssh2 Mar 28 01:34:37 srv sshd[25809]: Invalid user apz from 106.12.57.165 port 33254	2020-03-28 07:42:21
190.9.132.186	attackspam	Invalid user xm from 190.9.132.186 port 50427	2020-03-28 08:21:30
165.227.173.121	attackspam	proto=tcp . spt=37636 . dpt=25 . Found on Blocklist de (705)	2020-03-28 07:48:32
103.95.41.9	attackbotsspam	Mar 26 05:32:28 home sshd[999]: Invalid user kt from 103.95.41.9 port 36422 Mar 26 05:32:28 home sshd[999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.95.41.9 Mar 26 05:32:28 home sshd[999]: Invalid user kt from 103.95.41.9 port 36422 Mar 26 05:32:30 home sshd[999]: Failed password for invalid user kt from 103.95.41.9 port 36422 ssh2 Mar 26 05:39:55 home sshd[1191]: Invalid user carol from 103.95.41.9 port 38137 Mar 26 05:39:55 home sshd[1191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.95.41.9 Mar 26 05:39:55 home sshd[1191]: Invalid user carol from 103.95.41.9 port 38137 Mar 26 05:39:57 home sshd[1191]: Failed password for invalid user carol from 103.95.41.9 port 38137 ssh2 Mar 26 05:44:04 home sshd[1320]: Invalid user of from 103.95.41.9 port 44879 Mar 26 05:44:04 home sshd[1320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.95.41.9 Mar 26 05:44:04 home sshd[1320]	2020-03-28 07:56:15
92.63.194.90	attackbotsspam	Mar 27 13:31:07 XXX sshd[62140]: Invalid user 1234 from 92.63.194.90 port 36422	2020-03-28 08:08:24
203.195.245.13	attack	Invalid user ottilie from 203.195.245.13 port 37360	2020-03-28 08:17:13
123.50.7.134	attackbotsspam	fail2ban	2020-03-28 07:51:44
37.123.163.106	attackspam	2020-03-28T00:18:18.509108v22018076590370373 sshd[6529]: Invalid user nbg from 37.123.163.106 port 35258 2020-03-28T00:18:18.514363v22018076590370373 sshd[6529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.123.163.106 2020-03-28T00:18:18.509108v22018076590370373 sshd[6529]: Invalid user nbg from 37.123.163.106 port 35258 2020-03-28T00:18:20.730946v22018076590370373 sshd[6529]: Failed password for invalid user nbg from 37.123.163.106 port 35258 ssh2 2020-03-28T00:21:41.560115v22018076590370373 sshd[7982]: Invalid user carl from 37.123.163.106 port 35258 ...	2020-03-28 08:16:43
148.233.136.34	attack	Mar 28 01:02:53 vps sshd\[2733\]: Invalid user oracle from 148.233.136.34 Mar 28 01:06:23 vps sshd\[2740\]: Invalid user test from 148.233.136.34 ...	2020-03-28 08:22:04
123.206.101.196	attackspambots	Mar 27 21:11:31 124388 sshd[30837]: Invalid user jwd from 123.206.101.196 port 59984 Mar 27 21:11:31 124388 sshd[30837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.101.196 Mar 27 21:11:31 124388 sshd[30837]: Invalid user jwd from 123.206.101.196 port 59984 Mar 27 21:11:34 124388 sshd[30837]: Failed password for invalid user jwd from 123.206.101.196 port 59984 ssh2 Mar 27 21:16:18 124388 sshd[31017]: Invalid user asn from 123.206.101.196 port 32996	2020-03-28 07:41:19
1.11.201.18	attackbotsspam	2020-03-27T23:45:31.007656shield sshd\[4942\]: Invalid user xui from 1.11.201.18 port 41002 2020-03-27T23:45:31.016820shield sshd\[4942\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.11.201.18 2020-03-27T23:45:33.418488shield sshd\[4942\]: Failed password for invalid user xui from 1.11.201.18 port 41002 ssh2 2020-03-27T23:48:47.567318shield sshd\[5506\]: Invalid user lpk from 1.11.201.18 port 42232 2020-03-27T23:48:47.570681shield sshd\[5506\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.11.201.18	2020-03-28 08:08:48
104.248.84.81	attackspambots	proto=tcp . spt=50622 . dpt=25 . Found on Blocklist de (708)	2020-03-28 07:42:03
200.41.183.233	attack	Unauthorized connection attempt from IP address 200.41.183.233 on Port 445(SMB)	2020-03-28 08:05:04
134.175.111.215	attackbotsspam	SSH Brute-Force attacks	2020-03-28 07:49:03
125.227.236.60	attackbots	Invalid user mckenna from 125.227.236.60 port 57312	2020-03-28 08:01:24

Recently Reported IPs

118.190.200.113	138.97.1.244	138.97.1.243	138.97.1.246
118.190.200.139	138.97.1.240	138.97.1.248	138.97.1.28
138.97.1.253	138.97.1.24	138.97.1.30	138.97.1.255
138.97.1.27	118.190.201.106	138.97.1.4	138.97.1.42
138.97.1.40	138.97.1.36	138.97.1.44	138.97.1.52