Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
138.97.224.88 attack
Automatic report - Port Scan Attack
2020-10-01 08:47:47
138.97.224.88 attackspam
Automatic report - Port Scan Attack
2020-10-01 01:23:20
138.97.224.88 attackbotsspam
Automatic report - Port Scan Attack
2020-09-30 17:35:18
138.97.22.186 attackspambots
SSH/22 MH Probe, BF, Hack -
2020-09-30 02:59:46
138.97.22.186 attack
SSH/22 MH Probe, BF, Hack -
2020-09-29 19:02:11
138.97.241.37 attackbots
Sep 26 16:13:02 server sshd[18441]: Failed password for invalid user openvpn from 138.97.241.37 port 42432 ssh2
Sep 26 16:16:43 server sshd[19383]: Failed password for invalid user dmdba from 138.97.241.37 port 34428 ssh2
Sep 26 16:20:29 server sshd[20264]: Failed password for invalid user transfer from 138.97.241.37 port 54654 ssh2
2020-09-27 00:49:16
138.97.241.37 attackbots
21125/tcp 9563/tcp 15319/tcp...
[2020-08-31/09-26]19pkt,18pt.(tcp)
2020-09-26 16:40:09
138.97.23.190 attack
Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):
2020-09-25 05:18:57
138.97.241.37 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-09-13 21:56:34
138.97.241.37 attackspam
Sep 13 07:25:21 abendstille sshd\[21590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep 13 07:25:23 abendstille sshd\[21590\]: Failed password for root from 138.97.241.37 port 33160 ssh2
Sep 13 07:29:54 abendstille sshd\[25756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep 13 07:29:56 abendstille sshd\[25756\]: Failed password for root from 138.97.241.37 port 41632 ssh2
Sep 13 07:34:29 abendstille sshd\[30104\]: Invalid user it from 138.97.241.37
Sep 13 07:34:29 abendstille sshd\[30104\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37
...
2020-09-13 13:51:43
138.97.241.37 attackbots
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-09-13 05:35:24
138.97.212.245 attackbots
IP 138.97.212.245 attacked honeypot on port: 1433 at 9/9/2020 9:46:48 AM
2020-09-11 03:23:00
138.97.212.245 attackspambots
IP 138.97.212.245 attacked honeypot on port: 1433 at 9/9/2020 9:46:48 AM
2020-09-10 18:52:45
138.97.241.37 attackbotsspam
Sep  8 02:23:41 web9 sshd\[17871\]: Invalid user raudel from 138.97.241.37
Sep  8 02:23:41 web9 sshd\[17871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37
Sep  8 02:23:42 web9 sshd\[17871\]: Failed password for invalid user raudel from 138.97.241.37 port 34302 ssh2
Sep  8 02:27:31 web9 sshd\[18342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep  8 02:27:33 web9 sshd\[18342\]: Failed password for root from 138.97.241.37 port 60396 ssh2
2020-09-08 21:19:02
138.97.241.37 attackspam
Sep  8 04:42:19 ns382633 sshd\[23233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep  8 04:42:21 ns382633 sshd\[23233\]: Failed password for root from 138.97.241.37 port 47262 ssh2
Sep  8 04:47:18 ns382633 sshd\[24132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep  8 04:47:20 ns382633 sshd\[24132\]: Failed password for root from 138.97.241.37 port 58364 ssh2
Sep  8 04:51:08 ns382633 sshd\[24920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
2020-09-08 13:11:24
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.97.2.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55393
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.97.2.148.			IN	A

;; AUTHORITY SECTION:
.			468	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:57:58 CST 2022
;; MSG SIZE  rcvd: 105
Host info
b'148.2.97.138.in-addr.arpa domain name pointer 148-2-97-138.clickturbo.com.br.
'
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
148.2.97.138.in-addr.arpa	name = 148-2-97-138.clickturbo.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
178.20.41.83 attackbots
Honeypot attack, port: 445, PTR: PTR record not found
2019-07-30 04:37:47
62.233.65.182 attackspam
\[2019-07-29 21:55:50\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-07-29T21:55:50.919+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="655442262-1160005794-1688747169",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/62.233.65.182/50493",Challenge="1564430150/3843a2808b19af62feed4a5dc27b0530",Response="aa2957a8a7fea859a05508c5e4e2531a",ExpectedResponse=""
\[2019-07-29 21:55:50\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-07-29T21:55:50.976+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="655442262-1160005794-1688747169",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/62.233.65.182/50493",Challenge="1564430150/3843a2808b19af62feed4a5dc27b0530",Response="f0b5467bb257ee1e6c3d6b6a116f755c",ExpectedResponse=""
\[2019-07-29 21:55:51\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResp
2019-07-30 04:43:01
158.69.163.146 attackspambots
firewall-block, port(s): 445/tcp
2019-07-30 04:49:21
86.144.157.238 attack
Automatic report - Port Scan Attack
2019-07-30 04:33:30
104.206.128.54 attackbots
Scanning random ports - tries to find possible vulnerable services
2019-07-30 04:12:36
159.65.162.182 attack
2019-07-30T03:21:14.385030enmeeting.mahidol.ac.th sshd\[14849\]: Invalid user ftpuser from 159.65.162.182 port 50366
2019-07-30T03:21:14.399047enmeeting.mahidol.ac.th sshd\[14849\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.162.182
2019-07-30T03:21:16.715670enmeeting.mahidol.ac.th sshd\[14849\]: Failed password for invalid user ftpuser from 159.65.162.182 port 50366 ssh2
...
2019-07-30 04:42:07
123.130.118.19 attack
Jul 29 19:41:20 srv03 sshd\[29699\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.130.118.19  user=root
Jul 29 19:41:23 srv03 sshd\[29699\]: Failed password for root from 123.130.118.19 port 17518 ssh2
Jul 29 19:41:50 srv03 sshd\[29705\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.130.118.19  user=root
2019-07-30 04:03:33
45.234.109.34 attackspam
Honeypot attack, port: 23, PTR: din-45-234-109-34.connectnetbrasil.com.br.
2019-07-30 04:34:58
178.73.215.171 attackbotsspam
29.07.2019 19:37:25 Connection to port 5281 blocked by firewall
2019-07-30 04:36:42
182.162.70.252 attackspam
Wordpress Admin Login attack
2019-07-30 04:03:15
154.126.235.38 attackbots
Honeypot attack, port: 23, PTR: PTR record not found
2019-07-30 04:26:40
120.150.218.218 attackspambots
RDP Bruteforce
2019-07-30 04:17:04
185.246.128.26 attackbotsspam
Jul 29 21:49:01 rpi sshd[18620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.246.128.26 
Jul 29 21:49:03 rpi sshd[18620]: Failed password for invalid user 0 from 185.246.128.26 port 32874 ssh2
2019-07-30 04:09:29
23.250.70.239 attackspambots
(From grace.freeman925@gmail.com) Greetings!

I'm a freelance designer, and I sent you this message since I wanted to tell you about your website's potential to get you more sales. I can help you significantly improve your current website or rebuild you a new one from scratch, all for a cheap cost! Are you currently satisfied with how your website looks and functions? 

I can give you a call you and provide you with a free consultation if you have some spare time in the next few days. I also hope to give you some design ideas, get your feedback and give you a proposal. Please reply to let me know about the best time to reach out. I look forward to hearing back from you. 

Grace Freeman
2019-07-30 04:13:10
120.52.152.18 attackbotsspam
MultiHost/MultiPort Probe, Scan, Hack -
2019-07-30 04:04:08

Recently Reported IPs

138.97.2.152 118.190.244.220 138.97.2.155 138.97.2.16
138.97.2.160 138.97.2.159 138.97.2.166 138.97.2.171
138.97.2.168 138.97.2.156 138.97.2.177 118.190.244.234
138.97.2.163 138.97.2.173 138.97.2.172 138.97.2.178
138.97.2.18 118.190.247.154 138.97.2.182 138.97.2.180