Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
138.97.224.88 attack
Automatic report - Port Scan Attack
2020-10-01 08:47:47
138.97.224.88 attackspam
Automatic report - Port Scan Attack
2020-10-01 01:23:20
138.97.224.88 attackbotsspam
Automatic report - Port Scan Attack
2020-09-30 17:35:18
138.97.22.186 attackspambots
SSH/22 MH Probe, BF, Hack -
2020-09-30 02:59:46
138.97.22.186 attack
SSH/22 MH Probe, BF, Hack -
2020-09-29 19:02:11
138.97.241.37 attackbots
Sep 26 16:13:02 server sshd[18441]: Failed password for invalid user openvpn from 138.97.241.37 port 42432 ssh2
Sep 26 16:16:43 server sshd[19383]: Failed password for invalid user dmdba from 138.97.241.37 port 34428 ssh2
Sep 26 16:20:29 server sshd[20264]: Failed password for invalid user transfer from 138.97.241.37 port 54654 ssh2
2020-09-27 00:49:16
138.97.241.37 attackbots
21125/tcp 9563/tcp 15319/tcp...
[2020-08-31/09-26]19pkt,18pt.(tcp)
2020-09-26 16:40:09
138.97.23.190 attack
Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):
2020-09-25 05:18:57
138.97.241.37 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-09-13 21:56:34
138.97.241.37 attackspam
Sep 13 07:25:21 abendstille sshd\[21590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep 13 07:25:23 abendstille sshd\[21590\]: Failed password for root from 138.97.241.37 port 33160 ssh2
Sep 13 07:29:54 abendstille sshd\[25756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep 13 07:29:56 abendstille sshd\[25756\]: Failed password for root from 138.97.241.37 port 41632 ssh2
Sep 13 07:34:29 abendstille sshd\[30104\]: Invalid user it from 138.97.241.37
Sep 13 07:34:29 abendstille sshd\[30104\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37
...
2020-09-13 13:51:43
138.97.241.37 attackbots
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-09-13 05:35:24
138.97.212.245 attackbots
IP 138.97.212.245 attacked honeypot on port: 1433 at 9/9/2020 9:46:48 AM
2020-09-11 03:23:00
138.97.212.245 attackspambots
IP 138.97.212.245 attacked honeypot on port: 1433 at 9/9/2020 9:46:48 AM
2020-09-10 18:52:45
138.97.241.37 attackbotsspam
Sep  8 02:23:41 web9 sshd\[17871\]: Invalid user raudel from 138.97.241.37
Sep  8 02:23:41 web9 sshd\[17871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37
Sep  8 02:23:42 web9 sshd\[17871\]: Failed password for invalid user raudel from 138.97.241.37 port 34302 ssh2
Sep  8 02:27:31 web9 sshd\[18342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep  8 02:27:33 web9 sshd\[18342\]: Failed password for root from 138.97.241.37 port 60396 ssh2
2020-09-08 21:19:02
138.97.241.37 attackspam
Sep  8 04:42:19 ns382633 sshd\[23233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep  8 04:42:21 ns382633 sshd\[23233\]: Failed password for root from 138.97.241.37 port 47262 ssh2
Sep  8 04:47:18 ns382633 sshd\[24132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep  8 04:47:20 ns382633 sshd\[24132\]: Failed password for root from 138.97.241.37 port 58364 ssh2
Sep  8 04:51:08 ns382633 sshd\[24920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
2020-09-08 13:11:24
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.97.2.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1922
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.97.2.14.			IN	A

;; AUTHORITY SECTION:
.			469	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:57:57 CST 2022
;; MSG SIZE  rcvd: 104
Host info
14.2.97.138.in-addr.arpa domain name pointer 14-2-97-138.clickturbo.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
14.2.97.138.in-addr.arpa	name = 14-2-97-138.clickturbo.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
93.152.159.11 attackbotsspam
Nov  5 11:12:52 hcbbdb sshd\[13966\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.152.159.11  user=root
Nov  5 11:12:53 hcbbdb sshd\[13966\]: Failed password for root from 93.152.159.11 port 35360 ssh2
Nov  5 11:16:47 hcbbdb sshd\[14388\]: Invalid user download from 93.152.159.11
Nov  5 11:16:47 hcbbdb sshd\[14388\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.152.159.11
Nov  5 11:16:49 hcbbdb sshd\[14388\]: Failed password for invalid user download from 93.152.159.11 port 44184 ssh2
2019-11-05 19:18:56
87.101.240.10 attack
Nov  5 13:55:21 webhost01 sshd[794]: Failed password for root from 87.101.240.10 port 46750 ssh2
...
2019-11-05 18:59:41
42.58.24.2 attackbotsspam
Honeypot attack, port: 23, PTR: PTR record not found
2019-11-05 19:08:49
51.254.141.18 attackspam
Nov  4 23:11:37 hpm sshd\[22762\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.smarteo.it  user=root
Nov  4 23:11:39 hpm sshd\[22762\]: Failed password for root from 51.254.141.18 port 57718 ssh2
Nov  4 23:15:30 hpm sshd\[23078\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.smarteo.it  user=root
Nov  4 23:15:32 hpm sshd\[23078\]: Failed password for root from 51.254.141.18 port 39422 ssh2
Nov  4 23:19:04 hpm sshd\[23374\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.smarteo.it  user=root
2019-11-05 19:24:33
61.142.72.150 attackspambots
Sent mail to target address hacked/leaked from abandonia in 2016
2019-11-05 19:21:11
129.211.22.189 attackspam
Nov  5 10:59:39 dedicated sshd[4215]: Invalid user sde from 129.211.22.189 port 60182
2019-11-05 19:17:06
93.43.76.70 attackspambots
Nov  4 21:55:12 server2 sshd[17722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93-43-76-70.ip91.fastwebnet.hostname  user=r.r
Nov  4 21:55:14 server2 sshd[17722]: Failed password for r.r from 93.43.76.70 port 45252 ssh2
Nov  4 21:55:14 server2 sshd[17722]: Received disconnect from 93.43.76.70: 11: Bye Bye [preauth]
Nov  4 22:25:22 server2 sshd[20948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93-43-76-70.ip91.fastwebnet.hostname  user=r.r
Nov  4 22:25:24 server2 sshd[20948]: Failed password for r.r from 93.43.76.70 port 45968 ssh2
Nov  4 22:25:24 server2 sshd[20948]: Received disconnect from 93.43.76.70: 11: Bye Bye [preauth]
Nov  4 22:43:53 server2 sshd[22278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93-43-76-70.ip91.fastwebnet.hostname  user=r.r
Nov  4 22:43:55 server2 sshd[22278]: Failed password for r.r from 93.43.76.70 port 380........
-------------------------------
2019-11-05 19:20:58
92.86.10.42 attackspambots
postfix
2019-11-05 19:03:03
191.34.162.186 attack
2019-11-05T08:31:10.142136shield sshd\[16025\]: Invalid user Password!@\#\$%\^\& from 191.34.162.186 port 46033
2019-11-05T08:31:10.150354shield sshd\[16025\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.34.162.186
2019-11-05T08:31:12.648317shield sshd\[16025\]: Failed password for invalid user Password!@\#\$%\^\& from 191.34.162.186 port 46033 ssh2
2019-11-05T08:36:04.547296shield sshd\[16561\]: Invalid user zhonghua from 191.34.162.186 port 43381
2019-11-05T08:36:04.553132shield sshd\[16561\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.34.162.186
2019-11-05 19:19:17
163.172.164.135 attackspam
Automatic report - XMLRPC Attack
2019-11-05 18:57:54
185.74.4.189 attack
2019-11-05T11:11:01.851173abusebot-3.cloudsearch.cf sshd\[28100\]: Invalid user cliente1 from 185.74.4.189 port 44250
2019-11-05 19:29:38
61.242.61.29 attack
Port 1433 Scan
2019-11-05 19:02:20
5.23.54.233 attackspambots
Nov  5 12:15:10 vps666546 sshd\[12786\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.23.54.233  user=root
Nov  5 12:15:12 vps666546 sshd\[12786\]: Failed password for root from 5.23.54.233 port 38882 ssh2
Nov  5 12:19:01 vps666546 sshd\[12892\]: Invalid user soeun from 5.23.54.233 port 50460
Nov  5 12:19:01 vps666546 sshd\[12892\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.23.54.233
Nov  5 12:19:04 vps666546 sshd\[12892\]: Failed password for invalid user soeun from 5.23.54.233 port 50460 ssh2
...
2019-11-05 19:25:20
198.23.251.238 attackspam
Lines containing failures of 198.23.251.238
Nov  5 03:53:45 jarvis sshd[25851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.23.251.238  user=r.r
Nov  5 03:53:47 jarvis sshd[25851]: Failed password for r.r from 198.23.251.238 port 46351 ssh2
Nov  5 03:53:48 jarvis sshd[25851]: Received disconnect from 198.23.251.238 port 46351:11: Bye Bye [preauth]
Nov  5 03:53:48 jarvis sshd[25851]: Disconnected from authenticating user r.r 198.23.251.238 port 46351 [preauth]
Nov  5 04:13:11 jarvis sshd[30023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.23.251.238  user=r.r
Nov  5 04:13:12 jarvis sshd[30023]: Failed password for r.r from 198.23.251.238 port 45980 ssh2
Nov  5 04:13:13 jarvis sshd[30023]: Received disconnect from 198.23.251.238 port 45980:11: Bye Bye [preauth]
Nov  5 04:13:13 jarvis sshd[30023]: Disconnected from authenticating user r.r 198.23.251.238 port 45980 [preauth]
Nov  ........
------------------------------
2019-11-05 19:17:44
212.237.63.195 attackbots
Nov  4 01:21:48 h2570396 sshd[26017]: reveeclipse mapping checking getaddrinfo for host195-63-237-212.serverdedicati.aruba.hostname [212.237.63.195] failed - POSSIBLE BREAK-IN ATTEMPT!
Nov  4 01:21:50 h2570396 sshd[26017]: Failed password for invalid user admin from 212.237.63.195 port 44992 ssh2
Nov  4 01:21:50 h2570396 sshd[26017]: Received disconnect from 212.237.63.195: 11: Bye Bye [preauth]
Nov  4 01:44:59 h2570396 sshd[26698]: reveeclipse mapping checking getaddrinfo for host195-63-237-212.serverdedicati.aruba.hostname [212.237.63.195] failed - POSSIBLE BREAK-IN ATTEMPT!
Nov  4 01:45:01 h2570396 sshd[26698]: Failed password for invalid user info3 from 212.237.63.195 port 33734 ssh2
Nov  4 01:45:01 h2570396 sshd[26698]: Received disconnect from 212.237.63.195: 11: Bye Bye [preauth]
Nov  4 01:48:31 h2570396 sshd[26747]: reveeclipse mapping checking getaddrinfo for host195-63-237-212.serverdedicati.aruba.hostname [212.237.63.195] failed - POSSIBLE BREAK-IN ATTEMPT!
N........
-------------------------------
2019-11-05 19:04:33

Recently Reported IPs

138.97.2.136 138.97.2.138 138.97.2.135 138.97.2.150
138.97.2.145 138.97.2.140 138.97.2.152 138.97.2.148
118.190.244.220 138.97.2.155 138.97.2.16 138.97.2.160
138.97.2.159 138.97.2.166 138.97.2.171 138.97.2.168
138.97.2.156 138.97.2.177 118.190.244.234 138.97.2.163