Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
138.97.224.88 attack
Automatic report - Port Scan Attack
2020-10-01 08:47:47
138.97.224.88 attackspam
Automatic report - Port Scan Attack
2020-10-01 01:23:20
138.97.224.88 attackbotsspam
Automatic report - Port Scan Attack
2020-09-30 17:35:18
138.97.22.186 attackspambots
SSH/22 MH Probe, BF, Hack -
2020-09-30 02:59:46
138.97.22.186 attack
SSH/22 MH Probe, BF, Hack -
2020-09-29 19:02:11
138.97.241.37 attackbots
Sep 26 16:13:02 server sshd[18441]: Failed password for invalid user openvpn from 138.97.241.37 port 42432 ssh2
Sep 26 16:16:43 server sshd[19383]: Failed password for invalid user dmdba from 138.97.241.37 port 34428 ssh2
Sep 26 16:20:29 server sshd[20264]: Failed password for invalid user transfer from 138.97.241.37 port 54654 ssh2
2020-09-27 00:49:16
138.97.241.37 attackbots
21125/tcp 9563/tcp 15319/tcp...
[2020-08-31/09-26]19pkt,18pt.(tcp)
2020-09-26 16:40:09
138.97.23.190 attack
Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):
2020-09-25 05:18:57
138.97.241.37 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-09-13 21:56:34
138.97.241.37 attackspam
Sep 13 07:25:21 abendstille sshd\[21590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep 13 07:25:23 abendstille sshd\[21590\]: Failed password for root from 138.97.241.37 port 33160 ssh2
Sep 13 07:29:54 abendstille sshd\[25756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep 13 07:29:56 abendstille sshd\[25756\]: Failed password for root from 138.97.241.37 port 41632 ssh2
Sep 13 07:34:29 abendstille sshd\[30104\]: Invalid user it from 138.97.241.37
Sep 13 07:34:29 abendstille sshd\[30104\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37
...
2020-09-13 13:51:43
138.97.241.37 attackbots
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-09-13 05:35:24
138.97.212.245 attackbots
IP 138.97.212.245 attacked honeypot on port: 1433 at 9/9/2020 9:46:48 AM
2020-09-11 03:23:00
138.97.212.245 attackspambots
IP 138.97.212.245 attacked honeypot on port: 1433 at 9/9/2020 9:46:48 AM
2020-09-10 18:52:45
138.97.241.37 attackbotsspam
Sep  8 02:23:41 web9 sshd\[17871\]: Invalid user raudel from 138.97.241.37
Sep  8 02:23:41 web9 sshd\[17871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37
Sep  8 02:23:42 web9 sshd\[17871\]: Failed password for invalid user raudel from 138.97.241.37 port 34302 ssh2
Sep  8 02:27:31 web9 sshd\[18342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep  8 02:27:33 web9 sshd\[18342\]: Failed password for root from 138.97.241.37 port 60396 ssh2
2020-09-08 21:19:02
138.97.241.37 attackspam
Sep  8 04:42:19 ns382633 sshd\[23233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep  8 04:42:21 ns382633 sshd\[23233\]: Failed password for root from 138.97.241.37 port 47262 ssh2
Sep  8 04:47:18 ns382633 sshd\[24132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep  8 04:47:20 ns382633 sshd\[24132\]: Failed password for root from 138.97.241.37 port 58364 ssh2
Sep  8 04:51:08 ns382633 sshd\[24920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
2020-09-08 13:11:24
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.97.2.204
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6959
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.97.2.204.			IN	A

;; AUTHORITY SECTION:
.			369	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:58:10 CST 2022
;; MSG SIZE  rcvd: 105
Host info
204.2.97.138.in-addr.arpa domain name pointer 204-2-97-138.clickturbo.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
204.2.97.138.in-addr.arpa	name = 204-2-97-138.clickturbo.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
40.121.18.230 attackbotsspam
2020-06-17 23:46:03,500 fail2ban.actions: WARNING [ssh] Ban 40.121.18.230
2020-06-18 07:06:53
113.164.246.6 attackspambots
Jun 17 16:20:32 Tower sshd[30409]: refused connect from 125.94.75.169 (125.94.75.169)
Jun 17 17:45:58 Tower sshd[30409]: Connection from 113.164.246.6 port 48804 on 192.168.10.220 port 22 rdomain ""
Jun 17 17:46:00 Tower sshd[30409]: Failed password for root from 113.164.246.6 port 48804 ssh2
Jun 17 17:46:00 Tower sshd[30409]: Received disconnect from 113.164.246.6 port 48804:11: Bye Bye [preauth]
Jun 17 17:46:00 Tower sshd[30409]: Disconnected from authenticating user root 113.164.246.6 port 48804 [preauth]
2020-06-18 07:02:24
106.13.47.6 attackspam
Jun 17 22:38:05 ws26vmsma01 sshd[146410]: Failed password for root from 106.13.47.6 port 54868 ssh2
...
2020-06-18 07:21:28
211.239.170.90 attack
Jun 18 02:36:35 dhoomketu sshd[832974]: Invalid user production from 211.239.170.90 port 60942
Jun 18 02:36:35 dhoomketu sshd[832974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.239.170.90 
Jun 18 02:36:35 dhoomketu sshd[832974]: Invalid user production from 211.239.170.90 port 60942
Jun 18 02:36:37 dhoomketu sshd[832974]: Failed password for invalid user production from 211.239.170.90 port 60942 ssh2
Jun 18 02:40:29 dhoomketu sshd[833141]: Invalid user bogdan from 211.239.170.90 port 34556
...
2020-06-18 07:10:43
211.145.49.253 attackbots
Invalid user jeff from 211.145.49.253 port 21813
2020-06-18 06:55:38
27.72.195.145 attackspam
Invalid user cm from 27.72.195.145 port 44473
2020-06-18 07:08:56
106.52.187.48 attackspambots
Invalid user icecast from 106.52.187.48 port 33426
2020-06-18 07:21:07
122.51.72.249 attack
Invalid user test from 122.51.72.249 port 58672
2020-06-18 07:17:01
203.81.71.193 attackbots
Invalid user user from 203.81.71.193 port 61274
2020-06-18 06:56:23
183.83.74.80 attackbotsspam
Invalid user pi from 183.83.74.80 port 17886
2020-06-18 07:13:30
182.61.44.177 attack
Invalid user web5 from 182.61.44.177 port 39516
2020-06-18 06:58:00
193.181.245.224 attackbotsspam
Invalid user pi from 193.181.245.224 port 39649
2020-06-18 07:11:48
45.89.106.15 attack
Invalid user cnm from 45.89.106.15 port 54642
2020-06-18 07:06:15
115.79.42.109 attack
Invalid user admin from 115.79.42.109 port 58912
2020-06-18 07:19:40
18.224.93.24 attack
SSH/22 MH Probe, BF, Hack -
2020-06-18 07:09:22

Recently Reported IPs

138.97.2.203 138.97.2.20 138.97.2.210 138.97.2.212
138.97.2.22 138.97.2.215 138.97.2.206 138.97.2.216
138.97.2.208 118.190.25.146 138.97.2.218 138.97.2.221
138.97.2.222 138.97.2.227 138.97.2.231 138.97.2.230
118.190.34.249 138.97.2.233 138.97.2.238 138.97.2.243