138.97.2.12 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.97.224.88	attack	Automatic report - Port Scan Attack	2020-10-01 08:47:47
138.97.224.88	attackspam	Automatic report - Port Scan Attack	2020-10-01 01:23:20
138.97.224.88	attackbotsspam	Automatic report - Port Scan Attack	2020-09-30 17:35:18
138.97.22.186	attackspambots	SSH/22 MH Probe, BF, Hack -	2020-09-30 02:59:46
138.97.22.186	attack	SSH/22 MH Probe, BF, Hack -	2020-09-29 19:02:11
138.97.241.37	attackbots	Sep 26 16:13:02 server sshd[18441]: Failed password for invalid user openvpn from 138.97.241.37 port 42432 ssh2 Sep 26 16:16:43 server sshd[19383]: Failed password for invalid user dmdba from 138.97.241.37 port 34428 ssh2 Sep 26 16:20:29 server sshd[20264]: Failed password for invalid user transfer from 138.97.241.37 port 54654 ssh2	2020-09-27 00:49:16
138.97.241.37	attackbots	21125/tcp 9563/tcp 15319/tcp... [2020-08-31/09-26]19pkt,18pt.(tcp)	2020-09-26 16:40:09
138.97.23.190	attack	Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):	2020-09-25 05:18:57
138.97.241.37	attack	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-13 21:56:34
138.97.241.37	attackspam	Sep 13 07:25:21 abendstille sshd\[21590\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37 user=root Sep 13 07:25:23 abendstille sshd\[21590\]: Failed password for root from 138.97.241.37 port 33160 ssh2 Sep 13 07:29:54 abendstille sshd\[25756\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37 user=root Sep 13 07:29:56 abendstille sshd\[25756\]: Failed password for root from 138.97.241.37 port 41632 ssh2 Sep 13 07:34:29 abendstille sshd\[30104\]: Invalid user it from 138.97.241.37 Sep 13 07:34:29 abendstille sshd\[30104\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37 ...	2020-09-13 13:51:43
138.97.241.37	attackbots	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-09-13 05:35:24
138.97.212.245	attackbots	IP 138.97.212.245 attacked honeypot on port: 1433 at 9/9/2020 9:46:48 AM	2020-09-11 03:23:00
138.97.212.245	attackspambots	IP 138.97.212.245 attacked honeypot on port: 1433 at 9/9/2020 9:46:48 AM	2020-09-10 18:52:45
138.97.241.37	attackbotsspam	Sep 8 02:23:41 web9 sshd\[17871\]: Invalid user raudel from 138.97.241.37 Sep 8 02:23:41 web9 sshd\[17871\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37 Sep 8 02:23:42 web9 sshd\[17871\]: Failed password for invalid user raudel from 138.97.241.37 port 34302 ssh2 Sep 8 02:27:31 web9 sshd\[18342\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37 user=root Sep 8 02:27:33 web9 sshd\[18342\]: Failed password for root from 138.97.241.37 port 60396 ssh2	2020-09-08 21:19:02
138.97.241.37	attackspam	Sep 8 04:42:19 ns382633 sshd\[23233\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37 user=root Sep 8 04:42:21 ns382633 sshd\[23233\]: Failed password for root from 138.97.241.37 port 47262 ssh2 Sep 8 04:47:18 ns382633 sshd\[24132\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37 user=root Sep 8 04:47:20 ns382633 sshd\[24132\]: Failed password for root from 138.97.241.37 port 58364 ssh2 Sep 8 04:51:08 ns382633 sshd\[24920\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37 user=root	2020-09-08 13:11:24

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.97.2.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14477
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.97.2.12.			IN	A

;; AUTHORITY SECTION:
.			135	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:57:53 CST 2022
;; MSG SIZE  rcvd: 104

Host info

b'12.2.97.138.in-addr.arpa domain name pointer 12-2-97-138.clickturbo.com.br.
'

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
12.2.97.138.in-addr.arpa	name = 12-2-97-138.clickturbo.com.br.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
139.199.85.241	attackspam	DATE:2020-06-14 14:50:59, IP:139.199.85.241, PORT:ssh SSH brute force auth (docker-dc)	2020-06-14 21:09:14
220.133.213.191	attackbotsspam	firewall-block, port(s): 23/tcp	2020-06-14 21:38:21
13.82.144.45	attackbotsspam	"Test Inject v'a=0"	2020-06-14 21:21:32
107.170.192.131	attack	Jun 14 15:24:12 inter-technics sshd[16134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.192.131 user=root Jun 14 15:24:14 inter-technics sshd[16134]: Failed password for root from 107.170.192.131 port 52111 ssh2 Jun 14 15:31:03 inter-technics sshd[16431]: Invalid user chucky from 107.170.192.131 port 53020 Jun 14 15:31:03 inter-technics sshd[16431]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.192.131 Jun 14 15:31:03 inter-technics sshd[16431]: Invalid user chucky from 107.170.192.131 port 53020 Jun 14 15:31:04 inter-technics sshd[16431]: Failed password for invalid user chucky from 107.170.192.131 port 53020 ssh2 ...	2020-06-14 21:33:37
157.230.150.140	attackspambots	firewall-block, port(s): 8545/tcp	2020-06-14 21:48:55
146.164.51.61	attack	Jun 14 15:43:33 lukav-desktop sshd\[1441\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.164.51.61 user=root Jun 14 15:43:35 lukav-desktop sshd\[1441\]: Failed password for root from 146.164.51.61 port 47358 ssh2 Jun 14 15:47:14 lukav-desktop sshd\[1507\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.164.51.61 user=root Jun 14 15:47:15 lukav-desktop sshd\[1507\]: Failed password for root from 146.164.51.61 port 34442 ssh2 Jun 14 15:50:47 lukav-desktop sshd\[1566\]: Invalid user userftp from 146.164.51.61	2020-06-14 21:15:15
139.199.30.155	attackbotsspam	Jun 14 19:44:15 itv-usvr-01 sshd[26970]: Invalid user finebox from 139.199.30.155 Jun 14 19:44:15 itv-usvr-01 sshd[26970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.30.155 Jun 14 19:44:15 itv-usvr-01 sshd[26970]: Invalid user finebox from 139.199.30.155 Jun 14 19:44:17 itv-usvr-01 sshd[26970]: Failed password for invalid user finebox from 139.199.30.155 port 45758 ssh2 Jun 14 19:50:52 itv-usvr-01 sshd[27237]: Invalid user reply from 139.199.30.155	2020-06-14 21:17:02
68.168.128.94	attackspam	$f2bV_matches	2020-06-14 21:40:44
46.101.224.184	attack	Jun 14 14:50:24 vps639187 sshd\[2839\]: Invalid user pulse from 46.101.224.184 port 49988 Jun 14 14:50:24 vps639187 sshd\[2839\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.224.184 Jun 14 14:50:26 vps639187 sshd\[2839\]: Failed password for invalid user pulse from 46.101.224.184 port 49988 ssh2 ...	2020-06-14 21:37:33
65.182.2.241	attackspam	(sshd) Failed SSH login from 65.182.2.241 (HN/Honduras/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 14 15:31:27 s1 sshd[16263]: Invalid user test1 from 65.182.2.241 port 58432 Jun 14 15:31:30 s1 sshd[16263]: Failed password for invalid user test1 from 65.182.2.241 port 58432 ssh2 Jun 14 15:47:04 s1 sshd[16876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.182.2.241 user=root Jun 14 15:47:06 s1 sshd[16876]: Failed password for root from 65.182.2.241 port 60274 ssh2 Jun 14 15:50:18 s1 sshd[17017]: Invalid user sysop from 65.182.2.241 port 54746	2020-06-14 21:44:42
51.178.41.60	attackspambots	Jun 14 15:03:32 server sshd[26413]: Failed password for root from 51.178.41.60 port 54931 ssh2 Jun 14 15:06:53 server sshd[26684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.41.60 Jun 14 15:06:55 server sshd[26684]: Failed password for invalid user jf from 51.178.41.60 port 55444 ssh2 ...	2020-06-14 21:20:05
170.130.7.171	attackspam	From: "Zgliniec, Emily" To: "noreply@dd.dd" Subject: Re: Thread-Topic: Re: Thread-Index: AdZCJCre0nPPwBN6Qyq5q/GtMeIkogAADgqAAAAAKNAAAAAdQAAAABvQAAAAHzAAAAAZwAAAABcgAAAAGYAAAAAX4AAAAB4AAAAAHJAAAAAhkAAAABrwAAAAH1AAAAAbQAAAABwAAAAAGTAAAAAZkAAAABvwAAAAGbAAAAAZgAAAABugAAHCjvAAAAA6UAAAABbQAAAAFqAAAAAZkAAAABTAAAAAO8AAAAAX4AAAABgAAAAOCTAAAAAZQAAAABZwAAAAGNAAAAAbMAAAABjwAAAAHJAAAAAb4AAAACYQAAAAGwAAAAAoYAAAAI8gAAAAGgAAAAAbkAAAABrAAAAAHFAAAAAasAAAABvQAAAAG9AAAAAcwAAAABxQAAAAH7AAAAAdEAAAAB3QAAAAHtAAAADHYAAAAB2QAAAAILAAAAAjgAAAAB/QAAAAIdAAAAAjkAAAACXwAAAAIxAAAAArcAAAACZgAAAAJ1AAAAAmgAAAACQQAAAAKmA= Date: Sun, 14 Jun 2020 09:13:19 +0000 Message-ID: <86181a5adbec4892ae8973e429461cba@DOEXCHMBX1.ad.venturausd.org> Reply-To: "pernilleerenbjerg@hotmail.com" Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [170.130.7.171]	2020-06-14 21:12:57
1.174.25.202	attackbotsspam	Port Scan detected! ...	2020-06-14 21:20:40
185.143.72.23	attackbots	2020-06-14 16:42:36 dovecot_login authenticator failed for $User$ \[185.143.72.23\]: 535 Incorrect authentication data $set_id=philly@org.ua$2020-06-14 16:44:11 dovecot_login authenticator failed for $User$ \[185.143.72.23\]: 535 Incorrect authentication data $set_id=server21@org.ua$2020-06-14 16:45:44 dovecot_login authenticator failed for $User$ \[185.143.72.23\]: 535 Incorrect authentication data $set_id=yes@org.ua$ ...	2020-06-14 21:50:35
129.213.101.176	attackspam	Lines containing failures of 129.213.101.176 Jun 11 02:14:08 mx-in-02 sshd[13932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.101.176 user=r.r Jun 11 02:14:10 mx-in-02 sshd[13932]: Failed password for r.r from 129.213.101.176 port 46084 ssh2 Jun 11 02:14:10 mx-in-02 sshd[13932]: Received disconnect from 129.213.101.176 port 46084:11: Bye Bye [preauth] Jun 11 02:14:10 mx-in-02 sshd[13932]: Disconnected from authenticating user r.r 129.213.101.176 port 46084 [preauth] Jun 11 02:28:32 mx-in-02 sshd[15259]: Invalid user testftp from 129.213.101.176 port 58490 Jun 11 02:28:32 mx-in-02 sshd[15259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.101.176 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=129.213.101.176	2020-06-14 21:51:43

Recently Reported IPs

138.97.2.125	138.97.2.121	138.97.2.126	118.190.24.37
138.97.2.132	138.97.2.128	138.97.2.136	138.97.2.14
138.97.2.138	138.97.2.135	138.97.2.150	138.97.2.145
138.97.2.140	138.97.2.152	138.97.2.148	118.190.244.220
138.97.2.155	138.97.2.16	138.97.2.160	138.97.2.159