138.97.243.48 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.97.243.253	attackspam	Unauthorised access (Jan 24) SRC=138.97.243.253 LEN=44 TTL=242 ID=37548 DF TCP DPT=23 WINDOW=14600 SYN	2020-01-24 19:44:23

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.97.243.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37287
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.97.243.48.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:00:01 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 48.243.97.138.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 48.243.97.138.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.13.215.207	attackbotsspam	Aug 30 23:15:26 ns37 sshd[2041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.215.207	2020-08-31 08:06:09
41.65.225.245	attack	Unauthorized connection attempt from IP address 41.65.225.245 on Port 445(SMB)	2020-08-31 08:28:48
186.1.143.139	attack	Port Scan ...	2020-08-31 07:59:22
117.141.73.133	attackbots	Aug 30 18:48:23 NPSTNNYC01T sshd[16844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.141.73.133 Aug 30 18:48:25 NPSTNNYC01T sshd[16844]: Failed password for invalid user odoo from 117.141.73.133 port 47160 ssh2 Aug 30 18:53:47 NPSTNNYC01T sshd[17487]: Failed password for root from 117.141.73.133 port 50002 ssh2 ...	2020-08-31 08:00:51
106.12.133.225	attack	Aug 31 00:31:55 web sshd[222399]: Failed password for invalid user vyos from 106.12.133.225 port 37196 ssh2 Aug 31 00:49:13 web sshd[222516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.133.225 user=root Aug 31 00:49:15 web sshd[222516]: Failed password for root from 106.12.133.225 port 51530 ssh2 ...	2020-08-31 08:30:57
103.146.202.226	attackspam	" "	2020-08-31 08:05:41
222.186.175.182	attack	Aug 31 02:26:20 piServer sshd[16322]: Failed password for root from 222.186.175.182 port 42886 ssh2 Aug 31 02:26:23 piServer sshd[16322]: Failed password for root from 222.186.175.182 port 42886 ssh2 Aug 31 02:26:28 piServer sshd[16322]: Failed password for root from 222.186.175.182 port 42886 ssh2 Aug 31 02:26:33 piServer sshd[16322]: Failed password for root from 222.186.175.182 port 42886 ssh2 ...	2020-08-31 08:29:23
87.251.75.145	attackbotsspam	Multiple attacks.	2020-08-31 08:07:31
123.194.179.200	attack	Unauthorized connection attempt from IP address 123.194.179.200 on Port 445(SMB)	2020-08-31 08:15:29
217.23.10.20	attack	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-08-30T21:18:23Z and 2020-08-30T22:04:54Z	2020-08-31 07:57:10
66.240.205.34	attackspam	ET CINS Active Threat Intelligence Poor Reputation IP group 57 - port: 4282 proto: tcp cat: Misc Attackbytes: 60	2020-08-31 08:17:46
27.41.186.114	attackbotsspam	TCP (SYN) 27.41.186.114:37986 -> port 23, len 44	2020-08-31 08:09:40
54.236.41.118	attackbots	54.236.41.118 - - [31/Aug/2020:01:17:32 +0100] "POST /wp-login.php HTTP/1.1" 200 2435 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 54.236.41.118 - - [31/Aug/2020:01:17:33 +0100] "POST /wp-login.php HTTP/1.1" 200 2393 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 54.236.41.118 - - [31/Aug/2020:01:17:34 +0100] "POST /wp-login.php HTTP/1.1" 200 2440 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-31 08:21:03
193.27.229.189	attack	[H1.VM2] Blocked by UFW	2020-08-31 08:35:54
145.239.51.233	attackbots	[2020-08-30 20:01:11] NOTICE[1185][C-00008b31] chan_sip.c: Call from '' (145.239.51.233:64197) to extension '87996010046520458220' rejected because extension not found in context 'public'. [2020-08-30 20:01:11] SECURITY[1203] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-30T20:01:11.606-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="87996010046520458220",SessionID="0x7f10c4286a78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/145.239.51.233/64197",ACLName="no_extension_match" [2020-08-30 20:01:28] NOTICE[1185][C-00008b32] chan_sip.c: Call from '' (145.239.51.233:59580) to extension '16754000046520458220' rejected because extension not found in context 'public'. [2020-08-30 20:01:28] SECURITY[1203] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-30T20:01:28.641-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="16754000046520458220",SessionID="0x7f10c4031b98",LocalAddress="IPV4/UDP/192.168.244.6/5060",R ...	2020-08-31 08:16:26

Recently Reported IPs

138.97.243.53	138.97.243.46	138.97.243.49	138.97.243.50
138.97.243.55	138.97.243.56	118.194.242.229	138.97.243.58
138.97.243.61	138.97.243.6	118.194.242.237	118.194.242.24
118.194.242.28	118.194.242.32	118.194.242.34	118.194.242.36
118.194.242.38	138.97.3.30	138.97.3.32	138.97.3.38