Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
138.97.171.105 attackspambots
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: CableLink-138-97-171-105.PCs.InterCable.net.
2020-10-08 01:53:27
138.97.171.105 attack
SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: CableLink-138-97-171-105.PCs.InterCable.net.
2020-10-07 18:02:10
138.97.181.169 attack
port scan and connect, tcp 23 (telnet)
2020-08-16 08:45:14
138.97.154.142 attackspambots
Attempted connection to port 445.
2020-07-25 03:02:54
138.97.123.176 attack
cctv illegal login
2020-07-06 23:54:52
138.97.123.12 attack
cctv illegal login
2020-07-06 23:53:45
138.97.15.125 attackbots
Invalid user admin from 138.97.15.125 port 35876
2020-06-18 05:47:33
138.97.161.78 attack
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-06-02 17:30:10
138.97.165.209 attackspam
1587038961 - 04/16/2020 14:09:21 Host: 138.97.165.209/138.97.165.209 Port: 445 TCP Blocked
2020-04-17 02:54:14
138.97.145.148 attack
Automatic report - Port Scan Attack
2020-04-04 23:43:17
138.97.124.13 attackbotsspam
2020-03-07T16:10:54.347097linuxbox-skyline sshd[28933]: Invalid user uno85123 from 138.97.124.13 port 58210
...
2020-03-08 08:53:25
138.97.159.217 attackbots
From: Walgreens Rewards 
Repetitive Walgreens reward spam - likely fraud – primarily Ukraine ISP; targeted Google phishing redirect; repetitive blacklisted phishing redirect spam links.

No entity name; BBB results for "8 The Green, Dover, DE 19901":
… The websites collect personal information and then transfer it to lenders and other service providers and marketing companies. BBB suggests caution in dealing with these websites. …

Unsolicited bulk spam - (EHLO betrothment.clausloan.eu) (138.97.159.217) – repetitive UBE from IP range 138.97.156.*

Spam link clausloan.eu = 138.97.159.10 My Tech BZ – blacklisted – phishing redirect:
-	www.google.com – effective URL; phishing redirect
-	lukkins.com = 139.99.70.208 Ovh Sas
-	link.agnesta.com = 62.113.207.188 23Media GmbH (previous domain link.orcelsor.com)
-	kq6.securessl.company = 104.223.205.137, 104.223.205.138 Global Frag Networks
2020-03-05 23:25:42
138.97.159.10 attackspam
From: Walgreens Rewards 
Repetitive Walgreens reward spam - likely fraud – primarily Ukraine ISP; targeted Google phishing redirect; repetitive blacklisted phishing redirect spam links.

No entity name; BBB results for "8 The Green, Dover, DE 19901":
… The websites collect personal information and then transfer it to lenders and other service providers and marketing companies. BBB suggests caution in dealing with these websites. …

Unsolicited bulk spam - (EHLO betrothment.clausloan.eu) (138.97.159.217) – repetitive UBE from IP range 138.97.156.*

Spam link clausloan.eu = 138.97.159.10 My Tech BZ – blacklisted – phishing redirect:
-	www.google.com – effective URL; phishing redirect
-	lukkins.com = 139.99.70.208 Ovh Sas
-	link.agnesta.com = 62.113.207.188 23Media GmbH (previous domain link.orcelsor.com)
-	kq6.securessl.company = 104.223.205.137, 104.223.205.138 Global Frag Networks
2020-03-05 22:38:17
138.97.124.13 attack
Mar  4 08:46:42 server sshd[1193695]: Failed password for invalid user info from 138.97.124.13 port 52798 ssh2
Mar  4 08:57:53 server sshd[1197063]: Failed password for invalid user wp-user from 138.97.124.13 port 35458 ssh2
Mar  4 09:09:03 server sshd[1200630]: Failed password for invalid user isa from 138.97.124.13 port 46350 ssh2
2020-03-04 16:13:49
138.97.147.3 attackbots
Unauthorized connection attempt detected from IP address 138.97.147.3 to port 8080
2020-03-02 04:03:32
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.97.1.24
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9631
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.97.1.24.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:56:33 CST 2022
;; MSG SIZE  rcvd: 104
Host info
24.1.97.138.in-addr.arpa domain name pointer 24-1-97-138.clickturbo.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
24.1.97.138.in-addr.arpa	name = 24-1-97-138.clickturbo.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
195.189.108.116 attackbotsspam
firewall-block, port(s): 1433/tcp
2020-06-21 02:30:43
54.218.125.248 attack
SSH invalid-user multiple login attempts
2020-06-21 01:50:01
112.85.42.188 attackbots
06/20/2020-14:20:17.558685 112.85.42.188 Protocol: 6 ET SCAN Potential SSH Scan
2020-06-21 02:23:00
150.109.151.244 attackspam
Jun 20 19:43:12 piServer sshd[1340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.151.244 
Jun 20 19:43:14 piServer sshd[1340]: Failed password for invalid user cib from 150.109.151.244 port 44290 ssh2
Jun 20 19:50:52 piServer sshd[1879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.151.244 
...
2020-06-21 02:05:51
192.35.169.40 attackspambots
firewall-block, port(s): 9991/tcp
2020-06-21 02:32:02
139.99.165.100 attackspambots
Invalid user lkf from 139.99.165.100 port 39590
2020-06-21 01:49:09
195.204.16.82 attackbots
Jun 20 20:50:26 pkdns2 sshd\[7373\]: Address 195.204.16.82 maps to mail.folloelektriske.no, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Jun 20 20:50:26 pkdns2 sshd\[7373\]: Invalid user roo from 195.204.16.82Jun 20 20:50:29 pkdns2 sshd\[7373\]: Failed password for invalid user roo from 195.204.16.82 port 48866 ssh2Jun 20 20:53:56 pkdns2 sshd\[7475\]: Address 195.204.16.82 maps to mail.folloelektriske.no, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Jun 20 20:53:58 pkdns2 sshd\[7475\]: Failed password for root from 195.204.16.82 port 49882 ssh2Jun 20 20:57:29 pkdns2 sshd\[7639\]: Address 195.204.16.82 maps to mail.folloelektriske.no, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Jun 20 20:57:29 pkdns2 sshd\[7639\]: Invalid user admin from 195.204.16.82
...
2020-06-21 02:00:14
104.243.19.97 attack
Jun 20 20:03:09 plex sshd[2599]: Failed password for root from 104.243.19.97 port 40528 ssh2
Jun 20 20:06:18 plex sshd[2627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.243.19.97  user=root
Jun 20 20:06:20 plex sshd[2627]: Failed password for root from 104.243.19.97 port 40246 ssh2
Jun 20 20:06:18 plex sshd[2627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.243.19.97  user=root
Jun 20 20:06:20 plex sshd[2627]: Failed password for root from 104.243.19.97 port 40246 ssh2
2020-06-21 02:17:20
186.4.242.37 attackspambots
2020-06-20T17:47:29.680467shield sshd\[5039\]: Invalid user yly from 186.4.242.37 port 54598
2020-06-20T17:47:29.684459shield sshd\[5039\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host-186-4-242-37.netlife.ec
2020-06-20T17:47:31.612274shield sshd\[5039\]: Failed password for invalid user yly from 186.4.242.37 port 54598 ssh2
2020-06-20T17:50:59.895664shield sshd\[5864\]: Invalid user admin from 186.4.242.37 port 53164
2020-06-20T17:50:59.899283shield sshd\[5864\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host-186-4-242-37.netlife.ec
2020-06-21 01:55:42
218.92.0.247 attackbots
Jun 20 20:20:38 server sshd[12733]: Failed none for root from 218.92.0.247 port 64839 ssh2
Jun 20 20:20:40 server sshd[12733]: Failed password for root from 218.92.0.247 port 64839 ssh2
Jun 20 20:20:45 server sshd[12733]: Failed password for root from 218.92.0.247 port 64839 ssh2
2020-06-21 02:24:31
35.214.141.53 attackbots
Jun 20 20:20:47 vps10825 sshd[22911]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.214.141.53
Jun 20 20:20:49 vps10825 sshd[22911]: Failed password for invalid user linux from 35.214.141.53 port 52566 ssh2
...
2020-06-21 02:23:12
141.98.81.208 attackspam
Jun 20 18:10:58 scw-6657dc sshd[13220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.208
Jun 20 18:10:58 scw-6657dc sshd[13220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.208
Jun 20 18:11:00 scw-6657dc sshd[13220]: Failed password for invalid user Administrator from 141.98.81.208 port 27221 ssh2
...
2020-06-21 02:20:58
151.52.101.105 attackbots
Automatic report - Port Scan Attack
2020-06-21 02:27:04
27.221.97.4 attackspam
2020-06-20T20:06:11.190482galaxy.wi.uni-potsdam.de sshd[22173]: Invalid user developer from 27.221.97.4 port 55384
2020-06-20T20:06:11.195807galaxy.wi.uni-potsdam.de sshd[22173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.221.97.4
2020-06-20T20:06:11.190482galaxy.wi.uni-potsdam.de sshd[22173]: Invalid user developer from 27.221.97.4 port 55384
2020-06-20T20:06:13.146707galaxy.wi.uni-potsdam.de sshd[22173]: Failed password for invalid user developer from 27.221.97.4 port 55384 ssh2
2020-06-20T20:07:53.770536galaxy.wi.uni-potsdam.de sshd[22332]: Invalid user bruce from 27.221.97.4 port 38512
2020-06-20T20:07:53.775098galaxy.wi.uni-potsdam.de sshd[22332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.221.97.4
2020-06-20T20:07:53.770536galaxy.wi.uni-potsdam.de sshd[22332]: Invalid user bruce from 27.221.97.4 port 38512
2020-06-20T20:07:55.730672galaxy.wi.uni-potsdam.de sshd[22332]: Failed password 
...
2020-06-21 02:19:46
110.188.20.58 attackspambots
$f2bV_matches
2020-06-21 02:17:07

Recently Reported IPs

138.97.1.253 138.97.1.30 138.97.1.255 138.97.1.27
118.190.201.106 138.97.1.4 138.97.1.42 138.97.1.40
138.97.1.36 138.97.1.44 138.97.1.52 138.97.1.43
138.97.1.55 138.97.1.48 138.97.1.35 138.97.1.46
138.97.1.45 118.190.201.50 138.97.1.58 138.97.1.56