Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
138.97.224.88 attack
Automatic report - Port Scan Attack
2020-10-01 08:47:47
138.97.224.88 attackspam
Automatic report - Port Scan Attack
2020-10-01 01:23:20
138.97.224.88 attackbotsspam
Automatic report - Port Scan Attack
2020-09-30 17:35:18
138.97.22.186 attackspambots
SSH/22 MH Probe, BF, Hack -
2020-09-30 02:59:46
138.97.22.186 attack
SSH/22 MH Probe, BF, Hack -
2020-09-29 19:02:11
138.97.241.37 attackbots
Sep 26 16:13:02 server sshd[18441]: Failed password for invalid user openvpn from 138.97.241.37 port 42432 ssh2
Sep 26 16:16:43 server sshd[19383]: Failed password for invalid user dmdba from 138.97.241.37 port 34428 ssh2
Sep 26 16:20:29 server sshd[20264]: Failed password for invalid user transfer from 138.97.241.37 port 54654 ssh2
2020-09-27 00:49:16
138.97.241.37 attackbots
21125/tcp 9563/tcp 15319/tcp...
[2020-08-31/09-26]19pkt,18pt.(tcp)
2020-09-26 16:40:09
138.97.23.190 attack
Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):
2020-09-25 05:18:57
138.97.241.37 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-09-13 21:56:34
138.97.241.37 attackspam
Sep 13 07:25:21 abendstille sshd\[21590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep 13 07:25:23 abendstille sshd\[21590\]: Failed password for root from 138.97.241.37 port 33160 ssh2
Sep 13 07:29:54 abendstille sshd\[25756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep 13 07:29:56 abendstille sshd\[25756\]: Failed password for root from 138.97.241.37 port 41632 ssh2
Sep 13 07:34:29 abendstille sshd\[30104\]: Invalid user it from 138.97.241.37
Sep 13 07:34:29 abendstille sshd\[30104\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37
...
2020-09-13 13:51:43
138.97.241.37 attackbots
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-09-13 05:35:24
138.97.212.245 attackbots
IP 138.97.212.245 attacked honeypot on port: 1433 at 9/9/2020 9:46:48 AM
2020-09-11 03:23:00
138.97.212.245 attackspambots
IP 138.97.212.245 attacked honeypot on port: 1433 at 9/9/2020 9:46:48 AM
2020-09-10 18:52:45
138.97.241.37 attackbotsspam
Sep  8 02:23:41 web9 sshd\[17871\]: Invalid user raudel from 138.97.241.37
Sep  8 02:23:41 web9 sshd\[17871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37
Sep  8 02:23:42 web9 sshd\[17871\]: Failed password for invalid user raudel from 138.97.241.37 port 34302 ssh2
Sep  8 02:27:31 web9 sshd\[18342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep  8 02:27:33 web9 sshd\[18342\]: Failed password for root from 138.97.241.37 port 60396 ssh2
2020-09-08 21:19:02
138.97.241.37 attackspam
Sep  8 04:42:19 ns382633 sshd\[23233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep  8 04:42:21 ns382633 sshd\[23233\]: Failed password for root from 138.97.241.37 port 47262 ssh2
Sep  8 04:47:18 ns382633 sshd\[24132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep  8 04:47:20 ns382633 sshd\[24132\]: Failed password for root from 138.97.241.37 port 58364 ssh2
Sep  8 04:51:08 ns382633 sshd\[24920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
2020-09-08 13:11:24
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.97.2.204
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6959
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.97.2.204.			IN	A

;; AUTHORITY SECTION:
.			369	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:58:10 CST 2022
;; MSG SIZE  rcvd: 105
Host info
204.2.97.138.in-addr.arpa domain name pointer 204-2-97-138.clickturbo.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
204.2.97.138.in-addr.arpa	name = 204-2-97-138.clickturbo.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
173.244.209.5 attackbots
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.244.209.5  user=root
Failed password for root from 173.244.209.5 port 53814 ssh2
Failed password for root from 173.244.209.5 port 53814 ssh2
Failed password for root from 173.244.209.5 port 53814 ssh2
Failed password for root from 173.244.209.5 port 53814 ssh2
2019-06-24 09:43:26
179.32.1.90 attack
Jun 23 21:56:07 web02 sshd\[22412\]: Invalid user pi from 179.32.1.90 port 35862
Jun 23 21:56:07 web02 sshd\[22410\]: Invalid user pi from 179.32.1.90 port 35858
...
2019-06-24 09:49:59
150.95.54.141 attackspam
Brute force attempt
2019-06-24 09:52:23
112.85.42.185 attack
Jun 24 02:03:42 MK-Soft-VM5 sshd\[781\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.185  user=root
Jun 24 02:03:44 MK-Soft-VM5 sshd\[781\]: Failed password for root from 112.85.42.185 port 59152 ssh2
Jun 24 02:03:46 MK-Soft-VM5 sshd\[781\]: Failed password for root from 112.85.42.185 port 59152 ssh2
...
2019-06-24 10:11:26
216.218.206.67 attackbots
GET / HTTP/1.1
2019-06-24 09:45:39
185.220.101.21 attackspam
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.21  user=root
Failed password for root from 185.220.101.21 port 36659 ssh2
Failed password for root from 185.220.101.21 port 36659 ssh2
Failed password for root from 185.220.101.21 port 36659 ssh2
Failed password for root from 185.220.101.21 port 36659 ssh2
2019-06-24 10:24:46
101.89.217.185 attackbots
Trying ports that it shouldn't be.
2019-06-24 10:25:42
139.59.5.178 attackspambots
MultiHost/MultiPort Probe, Scan, Hack -
2019-06-24 10:22:22
123.188.18.154 attackspam
" "
2019-06-24 10:15:08
82.53.125.5 attack
SSH invalid-user multiple login try
2019-06-24 10:05:04
36.226.247.129 attackbotsspam
Unauthorised access (Jun 23) SRC=36.226.247.129 LEN=52 PREC=0x20 TTL=117 ID=13565 DF TCP DPT=445 WINDOW=8192 SYN
2019-06-24 09:52:42
191.53.199.245 attack
SMTP-sasl brute force
...
2019-06-24 10:06:50
39.38.24.86 attackbots
C1,WP GET /comic/wp-login.php
2019-06-24 09:45:08
68.41.23.123 attack
Jun 23 20:56:49 ip-172-31-62-245 sshd\[19138\]: Invalid user webmaster from 68.41.23.123\
Jun 23 20:56:51 ip-172-31-62-245 sshd\[19138\]: Failed password for invalid user webmaster from 68.41.23.123 port 34900 ssh2\
Jun 23 20:59:41 ip-172-31-62-245 sshd\[19146\]: Invalid user mongo from 68.41.23.123\
Jun 23 20:59:43 ip-172-31-62-245 sshd\[19146\]: Failed password for invalid user mongo from 68.41.23.123 port 49256 ssh2\
Jun 23 21:02:26 ip-172-31-62-245 sshd\[19149\]: Invalid user shares from 68.41.23.123\
2019-06-24 10:03:58
187.61.122.162 attack
failed_logins
2019-06-24 10:14:39

Recently Reported IPs

138.97.2.203 138.97.2.20 138.97.2.210 138.97.2.212
138.97.2.22 138.97.2.215 138.97.2.206 138.97.2.216
138.97.2.208 118.190.25.146 138.97.2.218 138.97.2.221
138.97.2.222 138.97.2.227 138.97.2.231 138.97.2.230
118.190.34.249 138.97.2.233 138.97.2.238 138.97.2.243