Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
138.97.224.88 attack
Automatic report - Port Scan Attack
2020-10-01 08:47:47
138.97.224.88 attackspam
Automatic report - Port Scan Attack
2020-10-01 01:23:20
138.97.224.88 attackbotsspam
Automatic report - Port Scan Attack
2020-09-30 17:35:18
138.97.22.186 attackspambots
SSH/22 MH Probe, BF, Hack -
2020-09-30 02:59:46
138.97.22.186 attack
SSH/22 MH Probe, BF, Hack -
2020-09-29 19:02:11
138.97.241.37 attackbots
Sep 26 16:13:02 server sshd[18441]: Failed password for invalid user openvpn from 138.97.241.37 port 42432 ssh2
Sep 26 16:16:43 server sshd[19383]: Failed password for invalid user dmdba from 138.97.241.37 port 34428 ssh2
Sep 26 16:20:29 server sshd[20264]: Failed password for invalid user transfer from 138.97.241.37 port 54654 ssh2
2020-09-27 00:49:16
138.97.241.37 attackbots
21125/tcp 9563/tcp 15319/tcp...
[2020-08-31/09-26]19pkt,18pt.(tcp)
2020-09-26 16:40:09
138.97.23.190 attack
Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):
2020-09-25 05:18:57
138.97.241.37 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-09-13 21:56:34
138.97.241.37 attackspam
Sep 13 07:25:21 abendstille sshd\[21590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep 13 07:25:23 abendstille sshd\[21590\]: Failed password for root from 138.97.241.37 port 33160 ssh2
Sep 13 07:29:54 abendstille sshd\[25756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep 13 07:29:56 abendstille sshd\[25756\]: Failed password for root from 138.97.241.37 port 41632 ssh2
Sep 13 07:34:29 abendstille sshd\[30104\]: Invalid user it from 138.97.241.37
Sep 13 07:34:29 abendstille sshd\[30104\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37
...
2020-09-13 13:51:43
138.97.241.37 attackbots
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-09-13 05:35:24
138.97.212.245 attackbots
IP 138.97.212.245 attacked honeypot on port: 1433 at 9/9/2020 9:46:48 AM
2020-09-11 03:23:00
138.97.212.245 attackspambots
IP 138.97.212.245 attacked honeypot on port: 1433 at 9/9/2020 9:46:48 AM
2020-09-10 18:52:45
138.97.241.37 attackbotsspam
Sep  8 02:23:41 web9 sshd\[17871\]: Invalid user raudel from 138.97.241.37
Sep  8 02:23:41 web9 sshd\[17871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37
Sep  8 02:23:42 web9 sshd\[17871\]: Failed password for invalid user raudel from 138.97.241.37 port 34302 ssh2
Sep  8 02:27:31 web9 sshd\[18342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep  8 02:27:33 web9 sshd\[18342\]: Failed password for root from 138.97.241.37 port 60396 ssh2
2020-09-08 21:19:02
138.97.241.37 attackspam
Sep  8 04:42:19 ns382633 sshd\[23233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep  8 04:42:21 ns382633 sshd\[23233\]: Failed password for root from 138.97.241.37 port 47262 ssh2
Sep  8 04:47:18 ns382633 sshd\[24132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep  8 04:47:20 ns382633 sshd\[24132\]: Failed password for root from 138.97.241.37 port 58364 ssh2
Sep  8 04:51:08 ns382633 sshd\[24920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
2020-09-08 13:11:24
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.97.2.246
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26843
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.97.2.246.			IN	A

;; AUTHORITY SECTION:
.			232	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:58:16 CST 2022
;; MSG SIZE  rcvd: 105
Host info
246.2.97.138.in-addr.arpa domain name pointer 246-2-97-138.clickturbo.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
246.2.97.138.in-addr.arpa	name = 246-2-97-138.clickturbo.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
222.186.173.226 attackspam
Sep  4 14:48:24 markkoudstaal sshd[27635]: Failed password for root from 222.186.173.226 port 48468 ssh2
Sep  4 14:48:27 markkoudstaal sshd[27635]: Failed password for root from 222.186.173.226 port 48468 ssh2
Sep  4 14:48:31 markkoudstaal sshd[27635]: Failed password for root from 222.186.173.226 port 48468 ssh2
Sep  4 14:48:35 markkoudstaal sshd[27635]: Failed password for root from 222.186.173.226 port 48468 ssh2
...
2020-09-04 20:51:19
111.231.93.35 attack
Time:     Fri Sep  4 12:18:24 2020 +0200
IP:       111.231.93.35 (CN/China/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep  4 12:12:32 ca-3-ams1 sshd[24322]: Invalid user ghost from 111.231.93.35 port 57604
Sep  4 12:12:34 ca-3-ams1 sshd[24322]: Failed password for invalid user ghost from 111.231.93.35 port 57604 ssh2
Sep  4 12:16:35 ca-3-ams1 sshd[24467]: Invalid user tf2server from 111.231.93.35 port 37504
Sep  4 12:16:37 ca-3-ams1 sshd[24467]: Failed password for invalid user tf2server from 111.231.93.35 port 37504 ssh2
Sep  4 12:18:19 ca-3-ams1 sshd[24536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.93.35  user=ftp
2020-09-04 20:43:43
188.19.13.159 attackspambots
20/9/3@12:42:01: FAIL: Alarm-Network address from=188.19.13.159
20/9/3@12:42:01: FAIL: Alarm-Network address from=188.19.13.159
...
2020-09-04 20:11:08
202.153.37.195 attackspam
Sep 4 12:47:23 *hidden* sshd[43113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.153.37.195 Sep 4 12:47:24 *hidden* sshd[43113]: Failed password for invalid user virtual from 202.153.37.195 port 60976 ssh2 Sep 4 12:52:29 *hidden* sshd[43207]: Invalid user somnath from 202.153.37.195 port 30026
2020-09-04 20:36:01
51.158.111.157 attack
Automatic report - Banned IP Access
2020-09-04 20:20:59
2.58.12.26 attackspam
9/2/2020 5:03am Session activity: Incorrect password entered
2020-09-04 20:25:13
89.210.246.104 attackbotsspam
Honeypot attack, port: 445, PTR: ppp089210246104.access.hol.gr.
2020-09-04 20:13:16
213.108.161.64 attackspambots
Attempted Brute Force (dovecot)
2020-09-04 20:34:13
13.57.26.19 attack
2020-09-03 19:05 Unauthorized connection attempt to IMAP/POP
2020-09-04 20:29:24
49.235.69.80 attack
$f2bV_matches
2020-09-04 20:43:56
36.89.213.100 attackspam
Invalid user confluence from 36.89.213.100 port 39966
2020-09-04 20:47:25
195.54.160.180 attackspam
SSH Bruteforce attack
2020-09-04 20:24:28
106.13.98.132 attack
Sep  4 09:05:41 vps647732 sshd[20906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.98.132
Sep  4 09:05:44 vps647732 sshd[20906]: Failed password for invalid user test5 from 106.13.98.132 port 59672 ssh2
...
2020-09-04 20:41:45
142.4.4.229 attackspambots
142.4.4.229 - - \[04/Sep/2020:13:59:58 +0200\] "POST /wp-login.php HTTP/1.1" 200 12843 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
142.4.4.229 - - \[04/Sep/2020:14:00:05 +0200\] "POST /wp-login.php HTTP/1.1" 200 12712 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
...
2020-09-04 20:11:31
61.177.172.61 attackspam
Sep  4 14:40:43 nextcloud sshd\[15644\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.61  user=root
Sep  4 14:40:44 nextcloud sshd\[15644\]: Failed password for root from 61.177.172.61 port 16661 ssh2
Sep  4 14:41:02 nextcloud sshd\[16066\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.61  user=root
2020-09-04 20:46:18

Recently Reported IPs

138.97.2.243 138.97.2.236 138.97.2.244 138.97.2.241
138.97.2.234 118.190.37.211 138.97.2.249 138.97.2.252
138.97.2.31 138.97.2.26 138.97.2.254 138.97.2.42
138.97.2.38 138.97.2.40 138.97.2.4 138.97.2.37
138.97.2.34 118.190.42.97 138.97.2.49 138.97.2.50