Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: Westlink Tecnologia e Comunicacao Ltda. - ME

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackspam
Dec 16 22:46:15 localhost sshd\[36679\]: Invalid user samp from 138.97.65.4 port 41448
Dec 16 22:46:15 localhost sshd\[36679\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.65.4
Dec 16 22:46:17 localhost sshd\[36679\]: Failed password for invalid user samp from 138.97.65.4 port 41448 ssh2
Dec 16 22:53:11 localhost sshd\[36881\]: Invalid user admin from 138.97.65.4 port 48856
Dec 16 22:53:11 localhost sshd\[36881\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.65.4
...
2019-12-17 07:38:25
attack
Dec 11 10:17:58 vibhu-HP-Z238-Microtower-Workstation sshd\[17097\]: Invalid user hantz from 138.97.65.4
Dec 11 10:17:58 vibhu-HP-Z238-Microtower-Workstation sshd\[17097\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.65.4
Dec 11 10:18:00 vibhu-HP-Z238-Microtower-Workstation sshd\[17097\]: Failed password for invalid user hantz from 138.97.65.4 port 33312 ssh2
Dec 11 10:25:06 vibhu-HP-Z238-Microtower-Workstation sshd\[17644\]: Invalid user fourie from 138.97.65.4
Dec 11 10:25:06 vibhu-HP-Z238-Microtower-Workstation sshd\[17644\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.65.4
...
2019-12-11 13:15:10
attackbotsspam
Dec  1 11:54:21 venus sshd\[26632\]: Invalid user griewing from 138.97.65.4 port 39036
Dec  1 11:54:21 venus sshd\[26632\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.65.4
Dec  1 11:54:23 venus sshd\[26632\]: Failed password for invalid user griewing from 138.97.65.4 port 39036 ssh2
...
2019-12-01 19:56:03
attack
2019-11-30T23:12:23.435420abusebot.cloudsearch.cf sshd\[19503\]: Invalid user giribes from 138.97.65.4 port 36006
2019-12-01 07:16:33
attack
2019-11-29T13:54:19.897578struts4.enskede.local sshd\[2414\]: Invalid user diao from 138.97.65.4 port 54620
2019-11-29T13:54:19.905457struts4.enskede.local sshd\[2414\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138-97-65-4.westlink.net.br
2019-11-29T13:54:23.735878struts4.enskede.local sshd\[2414\]: Failed password for invalid user diao from 138.97.65.4 port 54620 ssh2
2019-11-29T13:58:18.032495struts4.enskede.local sshd\[2419\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138-97-65-4.westlink.net.br  user=root
2019-11-29T13:58:21.576876struts4.enskede.local sshd\[2419\]: Failed password for root from 138.97.65.4 port 33622 ssh2
...
2019-11-29 21:12:42
attackbotsspam
2019-11-21T14:52:23.253169abusebot.cloudsearch.cf sshd\[31556\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138-97-65-4.westlink.net.br  user=root
2019-11-22 02:16:25
attackspambots
Automatic report - Banned IP Access
2019-11-20 04:01:32
attackbotsspam
Nov 16 20:20:17 venus sshd\[32711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.65.4  user=root
Nov 16 20:20:19 venus sshd\[32711\]: Failed password for root from 138.97.65.4 port 34840 ssh2
Nov 16 20:24:09 venus sshd\[32714\]: Invalid user www from 138.97.65.4 port 42944
...
2019-11-17 04:24:19
attackspam
SSH Brute Force, server-1 sshd[27175]: Failed password for invalid user dotty from 138.97.65.4 port 47606 ssh2
2019-11-12 16:14:51
attackbots
no
2019-11-10 08:14:56
attack
Oct 26 15:06:40 MK-Soft-VM5 sshd[28253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.65.4 
Oct 26 15:06:42 MK-Soft-VM5 sshd[28253]: Failed password for invalid user www from 138.97.65.4 port 50436 ssh2
...
2019-10-26 21:25:21
attack
Oct 24 22:11:38 MK-Soft-VM4 sshd[15981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.65.4 
Oct 24 22:11:40 MK-Soft-VM4 sshd[15981]: Failed password for invalid user telefonica from 138.97.65.4 port 36210 ssh2
...
2019-10-25 08:06:46
attackbots
Oct 24 06:51:55 tux-35-217 sshd\[4042\]: Invalid user lynn from 138.97.65.4 port 57922
Oct 24 06:51:55 tux-35-217 sshd\[4042\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.65.4
Oct 24 06:51:56 tux-35-217 sshd\[4042\]: Failed password for invalid user lynn from 138.97.65.4 port 57922 ssh2
Oct 24 06:56:26 tux-35-217 sshd\[4080\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.65.4  user=root
...
2019-10-24 16:37:49
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.97.65.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19733
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.97.65.4.			IN	A

;; AUTHORITY SECTION:
.			532	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102400 1800 900 604800 86400

;; Query time: 92 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 24 16:37:45 CST 2019
;; MSG SIZE  rcvd: 115
Host info
4.65.97.138.in-addr.arpa domain name pointer 138-97-65-4.westlink.net.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
4.65.97.138.in-addr.arpa	name = 138-97-65-4.westlink.net.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
162.218.244.202 attackspambots
Email rejected due to spam filtering
2020-03-09 04:36:17
212.114.59.55 attack
Jun 23 22:24:55 ms-srv sshd[12678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.114.59.55
Jun 23 22:24:57 ms-srv sshd[12678]: Failed password for invalid user nadmin from 212.114.59.55 port 57803 ssh2
2020-03-09 04:24:41
45.105.49.158 attackspambots
1583673301 - 03/08/2020 14:15:01 Host: 45.105.49.158/45.105.49.158 Port: 445 TCP Blocked
2020-03-09 04:49:14
117.11.146.89 attack
Brute force blocker - service: proftpd1 - aantal: 155 - Tue Apr 10 02:20:15 2018
2020-03-09 04:51:07
212.109.4.125 attackspam
Mar  7 22:16:02 ms-srv sshd[37010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.109.4.125  user=sshd
Mar  7 22:16:04 ms-srv sshd[37010]: Failed password for invalid user sshd from 212.109.4.125 port 32952 ssh2
2020-03-09 04:35:18
51.255.164.173 attack
WordPress login Brute force / Web App Attack on client site.
2020-03-09 04:43:51
118.112.91.163 attackbotsspam
Brute force blocker - service: proftpd1 - aantal: 133 - Thu Apr 12 08:45:17 2018
2020-03-09 04:19:01
2.60.110.164 attack
[portscan] Port scan
2020-03-09 04:17:02
92.118.37.74 attackspam
Mar  8 21:42:33 debian-2gb-nbg1-2 kernel: \[5959307.993628\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=92.118.37.74 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=8055 PROTO=TCP SPT=58558 DPT=17115 WINDOW=1024 RES=0x00 SYN URGP=0
2020-03-09 04:45:40
112.226.123.7 attackbots
Brute force blocker - service: proftpd1 - aantal: 80 - Mon Apr  9 11:10:14 2018
2020-03-09 04:53:35
177.152.124.21 attackspam
Mar  8 16:45:44 ns41 sshd[6916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.152.124.21
2020-03-09 04:32:48
202.39.28.8 attackbots
2020-03-08T14:42:16.623949ns386461 sshd\[26107\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202-39-28-8.hinet-ip.hinet.net  user=root
2020-03-08T14:42:17.992726ns386461 sshd\[26107\]: Failed password for root from 202.39.28.8 port 56386 ssh2
2020-03-08T14:50:59.365769ns386461 sshd\[1820\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202-39-28-8.hinet-ip.hinet.net  user=root
2020-03-08T14:51:01.201081ns386461 sshd\[1820\]: Failed password for root from 202.39.28.8 port 44482 ssh2
2020-03-08T14:55:09.226817ns386461 sshd\[5969\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202-39-28-8.hinet-ip.hinet.net  user=root
...
2020-03-09 04:30:17
58.244.182.149 attackbots
Brute force blocker - service: proftpd1, proftpd2 - aantal: 67 - Thu Apr 12 00:35:15 2018
2020-03-09 04:25:29
212.100.155.154 attack
Jan 20 01:12:12 ms-srv sshd[4541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.100.155.154  user=root
Jan 20 01:12:14 ms-srv sshd[4541]: Failed password for invalid user root from 212.100.155.154 port 38252 ssh2
2020-03-09 04:37:50
116.101.230.136 attack
Unauthorized connection attempt from IP address 116.101.230.136 on Port 445(SMB)
2020-03-09 04:33:48

Recently Reported IPs

212.33.204.242 45.40.165.38 42.115.138.206 95.15.36.56
32.153.0.254 115.201.218.214 180.139.138.168 198.102.14.18
27.121.66.188 185.13.36.90 183.253.20.213 84.118.119.43
112.112.19.138 185.220.101.76 156.192.181.242 96.202.188.30
127.22.148.226 145.119.73.248 100.230.83.140 31.242.122.177