Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
138.97.224.88 attack
Automatic report - Port Scan Attack
2020-10-01 08:47:47
138.97.224.88 attackspam
Automatic report - Port Scan Attack
2020-10-01 01:23:20
138.97.224.88 attackbotsspam
Automatic report - Port Scan Attack
2020-09-30 17:35:18
138.97.22.186 attackspambots
SSH/22 MH Probe, BF, Hack -
2020-09-30 02:59:46
138.97.22.186 attack
SSH/22 MH Probe, BF, Hack -
2020-09-29 19:02:11
138.97.241.37 attackbots
Sep 26 16:13:02 server sshd[18441]: Failed password for invalid user openvpn from 138.97.241.37 port 42432 ssh2
Sep 26 16:16:43 server sshd[19383]: Failed password for invalid user dmdba from 138.97.241.37 port 34428 ssh2
Sep 26 16:20:29 server sshd[20264]: Failed password for invalid user transfer from 138.97.241.37 port 54654 ssh2
2020-09-27 00:49:16
138.97.241.37 attackbots
21125/tcp 9563/tcp 15319/tcp...
[2020-08-31/09-26]19pkt,18pt.(tcp)
2020-09-26 16:40:09
138.97.23.190 attack
Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):
2020-09-25 05:18:57
138.97.241.37 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-09-13 21:56:34
138.97.241.37 attackspam
Sep 13 07:25:21 abendstille sshd\[21590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep 13 07:25:23 abendstille sshd\[21590\]: Failed password for root from 138.97.241.37 port 33160 ssh2
Sep 13 07:29:54 abendstille sshd\[25756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep 13 07:29:56 abendstille sshd\[25756\]: Failed password for root from 138.97.241.37 port 41632 ssh2
Sep 13 07:34:29 abendstille sshd\[30104\]: Invalid user it from 138.97.241.37
Sep 13 07:34:29 abendstille sshd\[30104\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37
...
2020-09-13 13:51:43
138.97.241.37 attackbots
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-09-13 05:35:24
138.97.212.245 attackbots
IP 138.97.212.245 attacked honeypot on port: 1433 at 9/9/2020 9:46:48 AM
2020-09-11 03:23:00
138.97.212.245 attackspambots
IP 138.97.212.245 attacked honeypot on port: 1433 at 9/9/2020 9:46:48 AM
2020-09-10 18:52:45
138.97.241.37 attackbotsspam
Sep  8 02:23:41 web9 sshd\[17871\]: Invalid user raudel from 138.97.241.37
Sep  8 02:23:41 web9 sshd\[17871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37
Sep  8 02:23:42 web9 sshd\[17871\]: Failed password for invalid user raudel from 138.97.241.37 port 34302 ssh2
Sep  8 02:27:31 web9 sshd\[18342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep  8 02:27:33 web9 sshd\[18342\]: Failed password for root from 138.97.241.37 port 60396 ssh2
2020-09-08 21:19:02
138.97.241.37 attackspam
Sep  8 04:42:19 ns382633 sshd\[23233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep  8 04:42:21 ns382633 sshd\[23233\]: Failed password for root from 138.97.241.37 port 47262 ssh2
Sep  8 04:47:18 ns382633 sshd\[24132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep  8 04:47:20 ns382633 sshd\[24132\]: Failed password for root from 138.97.241.37 port 58364 ssh2
Sep  8 04:51:08 ns382633 sshd\[24920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
2020-09-08 13:11:24
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.97.2.50
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24458
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.97.2.50.			IN	A

;; AUTHORITY SECTION:
.			359	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:58:24 CST 2022
;; MSG SIZE  rcvd: 104
Host info
50.2.97.138.in-addr.arpa domain name pointer 50-2-97-138.clickturbo.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
50.2.97.138.in-addr.arpa	name = 50-2-97-138.clickturbo.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
123.30.149.76 attackspambots
2020-09-02T22:00:26.173781paragon sshd[16398]: Invalid user administrator from 123.30.149.76 port 54512
2020-09-02T22:00:26.177724paragon sshd[16398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.30.149.76
2020-09-02T22:00:26.173781paragon sshd[16398]: Invalid user administrator from 123.30.149.76 port 54512
2020-09-02T22:00:28.359654paragon sshd[16398]: Failed password for invalid user administrator from 123.30.149.76 port 54512 ssh2
2020-09-02T22:04:34.131723paragon sshd[16460]: Invalid user sale from 123.30.149.76 port 57279
...
2020-09-03 05:42:44
117.28.25.50 attack
Sep  2 22:17:25 vpn01 sshd[23960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.28.25.50
Sep  2 22:17:27 vpn01 sshd[23960]: Failed password for invalid user status from 117.28.25.50 port 15005 ssh2
...
2020-09-03 05:24:00
142.93.121.47 attackspam
" "
2020-09-03 05:27:25
37.187.54.143 attack
21 attempts against mh_ha-misbehave-ban on ship
2020-09-03 05:32:45
3.81.26.85 attackspambots
Sep 02 15:18:23 askasleikir sshd[8552]: Failed password for invalid user admin from 3.81.26.85 port 51794 ssh2
2020-09-03 05:34:42
79.137.79.48 attackbots
79.137.79.48 - - \[02/Sep/2020:18:57:17 +0200\] "POST /wp-login.php HTTP/1.0" 200 5983 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
79.137.79.48 - - \[02/Sep/2020:18:57:17 +0200\] "POST /wp-login.php HTTP/1.0" 200 5981 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
79.137.79.48 - - \[02/Sep/2020:18:57:18 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-09-03 05:42:59
165.22.103.3 attack
165.22.103.3 - - [02/Sep/2020:21:09:18 +0100] "POST /wp-login.php HTTP/1.1" 200 2415 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
165.22.103.3 - - [02/Sep/2020:21:09:20 +0100] "POST /wp-login.php HTTP/1.1" 200 2342 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
165.22.103.3 - - [02/Sep/2020:21:09:21 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-03 05:14:49
137.117.178.120 attack
Wordpress_xmlrpc_attack
2020-09-03 05:19:20
157.230.39.120 attack
SSH brute force attempt
2020-09-03 05:20:51
40.84.156.241 attackspambots
WordPress XMLRPC scan :: 40.84.156.241 0.352 - [02/Sep/2020:19:23:15  0000] www.[censored_1] "POST //xmlrpc.php HTTP/1.1" 503 18231 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" "HTTP/1.1"
2020-09-03 05:28:24
49.88.90.87 attackbotsspam
Unauthorised access (Sep  2) SRC=49.88.90.87 LEN=40 TTL=50 ID=50539 TCP DPT=23 WINDOW=39898 SYN
2020-09-03 05:14:19
94.244.172.234 attackspam
SSH_attack
2020-09-03 05:47:50
200.198.180.178 attackspambots
Sep  2 09:48:25 server sshd[63037]: Invalid user miner from 200.198.180.178 port 39510
Sep  2 09:48:28 server sshd[63037]: Failed password for invalid user miner from 200.198.180.178 port 39510 ssh2
...
2020-09-03 05:28:03
183.136.222.142 attackbotsspam
Sep  2 23:02:55 cho sshd[2122356]: Failed password for invalid user www from 183.136.222.142 port 45581 ssh2
Sep  2 23:06:39 cho sshd[2122512]: Invalid user qwt from 183.136.222.142 port 21314
Sep  2 23:06:39 cho sshd[2122512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.136.222.142 
Sep  2 23:06:39 cho sshd[2122512]: Invalid user qwt from 183.136.222.142 port 21314
Sep  2 23:06:42 cho sshd[2122512]: Failed password for invalid user qwt from 183.136.222.142 port 21314 ssh2
...
2020-09-03 05:22:52
5.188.84.95 attack
0,17-02/04 [bc01/m09] PostRequest-Spammer scoring: brussels
2020-09-03 05:15:55

Recently Reported IPs

138.97.2.49 138.97.2.52 118.190.43.59 118.190.52.60
118.190.55.251 118.190.58.52 118.190.60.196 118.190.66.157
118.190.66.41 138.97.225.12 138.97.225.149 138.97.225.158
138.97.225.14 138.97.225.128 138.97.225.174 138.97.225.160
138.97.225.156 138.97.225.172 138.97.225.152 138.97.225.124