Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
138.97.224.88 attack
Automatic report - Port Scan Attack
2020-10-01 08:47:47
138.97.224.88 attackspam
Automatic report - Port Scan Attack
2020-10-01 01:23:20
138.97.224.88 attackbotsspam
Automatic report - Port Scan Attack
2020-09-30 17:35:18
138.97.22.186 attackspambots
SSH/22 MH Probe, BF, Hack -
2020-09-30 02:59:46
138.97.22.186 attack
SSH/22 MH Probe, BF, Hack -
2020-09-29 19:02:11
138.97.241.37 attackbots
Sep 26 16:13:02 server sshd[18441]: Failed password for invalid user openvpn from 138.97.241.37 port 42432 ssh2
Sep 26 16:16:43 server sshd[19383]: Failed password for invalid user dmdba from 138.97.241.37 port 34428 ssh2
Sep 26 16:20:29 server sshd[20264]: Failed password for invalid user transfer from 138.97.241.37 port 54654 ssh2
2020-09-27 00:49:16
138.97.241.37 attackbots
21125/tcp 9563/tcp 15319/tcp...
[2020-08-31/09-26]19pkt,18pt.(tcp)
2020-09-26 16:40:09
138.97.23.190 attack
Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):
2020-09-25 05:18:57
138.97.241.37 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-09-13 21:56:34
138.97.241.37 attackspam
Sep 13 07:25:21 abendstille sshd\[21590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep 13 07:25:23 abendstille sshd\[21590\]: Failed password for root from 138.97.241.37 port 33160 ssh2
Sep 13 07:29:54 abendstille sshd\[25756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep 13 07:29:56 abendstille sshd\[25756\]: Failed password for root from 138.97.241.37 port 41632 ssh2
Sep 13 07:34:29 abendstille sshd\[30104\]: Invalid user it from 138.97.241.37
Sep 13 07:34:29 abendstille sshd\[30104\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37
...
2020-09-13 13:51:43
138.97.241.37 attackbots
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-09-13 05:35:24
138.97.212.245 attackbots
IP 138.97.212.245 attacked honeypot on port: 1433 at 9/9/2020 9:46:48 AM
2020-09-11 03:23:00
138.97.212.245 attackspambots
IP 138.97.212.245 attacked honeypot on port: 1433 at 9/9/2020 9:46:48 AM
2020-09-10 18:52:45
138.97.241.37 attackbotsspam
Sep  8 02:23:41 web9 sshd\[17871\]: Invalid user raudel from 138.97.241.37
Sep  8 02:23:41 web9 sshd\[17871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37
Sep  8 02:23:42 web9 sshd\[17871\]: Failed password for invalid user raudel from 138.97.241.37 port 34302 ssh2
Sep  8 02:27:31 web9 sshd\[18342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep  8 02:27:33 web9 sshd\[18342\]: Failed password for root from 138.97.241.37 port 60396 ssh2
2020-09-08 21:19:02
138.97.241.37 attackspam
Sep  8 04:42:19 ns382633 sshd\[23233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep  8 04:42:21 ns382633 sshd\[23233\]: Failed password for root from 138.97.241.37 port 47262 ssh2
Sep  8 04:47:18 ns382633 sshd\[24132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep  8 04:47:20 ns382633 sshd\[24132\]: Failed password for root from 138.97.241.37 port 58364 ssh2
Sep  8 04:51:08 ns382633 sshd\[24920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
2020-09-08 13:11:24
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.97.2.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64042
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.97.2.34.			IN	A

;; AUTHORITY SECTION:
.			579	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:58:21 CST 2022
;; MSG SIZE  rcvd: 104
Host info
34.2.97.138.in-addr.arpa domain name pointer 34-2-97-138.clickturbo.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
34.2.97.138.in-addr.arpa	name = 34-2-97-138.clickturbo.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
139.59.243.224 attackbotsspam
Jun 25 01:01:51 meumeu sshd[1340421]: Invalid user admin from 139.59.243.224 port 50906
Jun 25 01:01:51 meumeu sshd[1340421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.243.224 
Jun 25 01:01:51 meumeu sshd[1340421]: Invalid user admin from 139.59.243.224 port 50906
Jun 25 01:01:54 meumeu sshd[1340421]: Failed password for invalid user admin from 139.59.243.224 port 50906 ssh2
Jun 25 01:04:53 meumeu sshd[1340590]: Invalid user biba from 139.59.243.224 port 42210
Jun 25 01:04:53 meumeu sshd[1340590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.243.224 
Jun 25 01:04:53 meumeu sshd[1340590]: Invalid user biba from 139.59.243.224 port 42210
Jun 25 01:04:54 meumeu sshd[1340590]: Failed password for invalid user biba from 139.59.243.224 port 42210 ssh2
Jun 25 01:07:51 meumeu sshd[1340828]: Invalid user admin from 139.59.243.224 port 33512
...
2020-06-25 07:18:52
120.70.101.85 attack
Jun 25 01:17:24 raspberrypi sshd[20452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.70.101.85 
Jun 25 01:17:27 raspberrypi sshd[20452]: Failed password for invalid user leo from 120.70.101.85 port 50836 ssh2
...
2020-06-25 07:19:46
222.186.190.2 attack
Jun 25 01:25:44 vm1 sshd[9628]: Failed password for root from 222.186.190.2 port 44962 ssh2
Jun 25 01:25:56 vm1 sshd[9628]: error: maximum authentication attempts exceeded for root from 222.186.190.2 port 44962 ssh2 [preauth]
...
2020-06-25 07:29:55
173.244.209.5 attackspambots
Jun 24 22:35:25 mellenthin sshd[2624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.244.209.5  user=root
Jun 24 22:35:27 mellenthin sshd[2624]: Failed password for invalid user root from 173.244.209.5 port 35346 ssh2
2020-06-25 07:07:17
182.61.1.130 attackbots
Jun 24 16:22:25 mockhub sshd[16373]: Failed password for root from 182.61.1.130 port 60048 ssh2
...
2020-06-25 07:25:22
129.226.224.8 attackspambots
Jun 24 18:07:47 v2hgb sshd[4051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.224.8  user=r.r
Jun 24 18:07:48 v2hgb sshd[4051]: Failed password for r.r from 129.226.224.8 port 57336 ssh2
Jun 24 18:07:50 v2hgb sshd[4051]: Received disconnect from 129.226.224.8 port 57336:11: Bye Bye [preauth]
Jun 24 18:07:50 v2hgb sshd[4051]: Disconnected from authenticating user r.r 129.226.224.8 port 57336 [preauth]
Jun 24 18:14:16 v2hgb sshd[4529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.224.8  user=r.r
Jun 24 18:14:18 v2hgb sshd[4529]: Failed password for r.r from 129.226.224.8 port 45124 ssh2
Jun 24 18:14:18 v2hgb sshd[4529]: Received disconnect from 129.226.224.8 port 45124:11: Bye Bye [preauth]
Jun 24 18:14:18 v2hgb sshd[4529]: Disconnected from authenticating user r.r 129.226.224.8 port 45124 [preauth]
Jun 24 18:16:09 v2hgb sshd[4652]: pam_unix(sshd:auth): authentication fa........
-------------------------------
2020-06-25 07:16:27
2600:9000:20a6:e400:10:ab99:6600:21 attack
Organized crime hosting edge cache http://d841gzbjvio48.cloudfront.net/35381/Screen%20Shot%202019-08-06%20at%2011.55.25%20AM.png
2020-06-25 07:23:40
2600:9000:20a6:d400:10:ab99:6600:21 attack
Organized crime hosting edge cache http://d841gzbjvio48.cloudfront.net/35381/Screen%20Shot%202019-08-06%20at%2011.55.25%20AM.png
2020-06-25 07:31:17
185.226.232.228 attackbots
Jun 24 09:00:51 main sshd[28038]: Failed password for invalid user 185.226.232.228 - SSH-2.0-Ope.SSH_7.4\r from 40.87.31.208 port 56022 ssh2
2020-06-25 07:02:06
125.119.69.112 attackbots
2020-06-24T23:03:24.368108abusebot-5.cloudsearch.cf sshd[22635]: Invalid user tom from 125.119.69.112 port 12059
2020-06-24T23:03:24.373068abusebot-5.cloudsearch.cf sshd[22635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.119.69.112
2020-06-24T23:03:24.368108abusebot-5.cloudsearch.cf sshd[22635]: Invalid user tom from 125.119.69.112 port 12059
2020-06-24T23:03:26.344752abusebot-5.cloudsearch.cf sshd[22635]: Failed password for invalid user tom from 125.119.69.112 port 12059 ssh2
2020-06-24T23:07:40.215235abusebot-5.cloudsearch.cf sshd[22829]: Invalid user tom from 125.119.69.112 port 22912
2020-06-24T23:07:40.220807abusebot-5.cloudsearch.cf sshd[22829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.119.69.112
2020-06-24T23:07:40.215235abusebot-5.cloudsearch.cf sshd[22829]: Invalid user tom from 125.119.69.112 port 22912
2020-06-24T23:07:41.670574abusebot-5.cloudsearch.cf sshd[22829]: Failed pa
...
2020-06-25 07:26:52
106.52.102.190 attack
2020-06-25T06:07:49.874379billing sshd[18211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.102.190
2020-06-25T06:07:49.868865billing sshd[18211]: Invalid user inas from 106.52.102.190 port 46874
2020-06-25T06:07:52.227246billing sshd[18211]: Failed password for invalid user inas from 106.52.102.190 port 46874 ssh2
...
2020-06-25 07:18:07
185.143.75.153 attack
Jun 25 01:21:36 v22019058497090703 postfix/smtpd[10484]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:22:29 v22019058497090703 postfix/smtpd[10484]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 25 01:23:22 v22019058497090703 postfix/smtpd[10484]: warning: unknown[185.143.75.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-06-25 07:26:31
67.207.89.207 attack
2020-06-24T22:52:44.540236shield sshd\[10862\]: Invalid user hue from 67.207.89.207 port 60046
2020-06-24T22:52:44.543789shield sshd\[10862\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.207.89.207
2020-06-24T22:52:46.655858shield sshd\[10862\]: Failed password for invalid user hue from 67.207.89.207 port 60046 ssh2
2020-06-24T22:55:45.984463shield sshd\[11254\]: Invalid user devuser from 67.207.89.207 port 59544
2020-06-24T22:55:45.988075shield sshd\[11254\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.207.89.207
2020-06-25 07:01:11
148.71.44.11 attack
Jun 25 01:07:46 sso sshd[25944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.71.44.11
Jun 25 01:07:48 sso sshd[25944]: Failed password for invalid user ty from 148.71.44.11 port 56562 ssh2
...
2020-06-25 07:22:40
132.232.12.93 attackbots
Jun 25 01:03:10 datenbank sshd[36043]: Failed password for invalid user dp from 132.232.12.93 port 45980 ssh2
Jun 25 01:07:58 datenbank sshd[36055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.12.93  user=root
Jun 25 01:08:00 datenbank sshd[36055]: Failed password for root from 132.232.12.93 port 41030 ssh2
...
2020-06-25 07:13:33

Recently Reported IPs

138.97.2.37 118.190.42.97 138.97.2.49 138.97.2.50
138.97.2.52 118.190.43.59 118.190.52.60 118.190.55.251
118.190.58.52 118.190.60.196 118.190.66.157 118.190.66.41
138.97.225.12 138.97.225.149 138.97.225.158 138.97.225.14
138.97.225.128 138.97.225.174 138.97.225.160 138.97.225.156