138.197.1.10 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.197.146.75	attack	Scan port	2023-10-18 12:53:52
138.197.146.75	attack	Scan port	2023-09-23 19:49:04
138.197.146.75	attack	Scan port	2023-07-27 12:45:30
138.197.146.75	attack	port scan	2023-02-03 13:47:17
138.197.146.75	attack	Port scan	2022-12-23 13:51:21
138.197.15.190	attackspam	Oct 13 03:50:07 l03 sshd[13578]: Invalid user appserver from 138.197.15.190 port 42290 ...	2020-10-13 13:20:21
138.197.15.190	attackbotsspam	SSH Invalid Login	2020-10-13 06:05:42
138.197.152.148	attackbotsspam	Port Scan ...	2020-10-12 07:08:45
138.197.152.148	attackbots	TCP port : 31881	2020-10-11 23:19:23
138.197.152.148	attackspam	firewall-block, port(s): 10363/tcp	2020-10-11 15:17:56
138.197.152.148	attackspam	firewall-block, port(s): 31881/tcp	2020-10-11 08:38:04
138.197.189.231	attackbotsspam	Port Scan detected from 138.197.189.231 (DE/Germany/Hesse/Frankfurt am Main/-). 4 hits in the last 235 seconds	2020-10-08 05:34:44
138.197.189.231	attack	TCP (SYN) 138.197.189.231:48110 -> port 5900, len 48	2020-10-07 13:47:56
138.197.151.213	attackbotsspam	firewall-block, port(s): 32001/tcp	2020-10-06 02:18:47
138.197.151.213	attackspambots	2020-10-05T09:48:33.794878Z 21ac2d9b3602 New connection: 138.197.151.213:47922 (172.17.0.5:2222) [session: 21ac2d9b3602] 2020-10-05T09:58:13.105810Z 46a5d45c28c1 New connection: 138.197.151.213:33728 (172.17.0.5:2222) [session: 46a5d45c28c1]	2020-10-05 18:07:09

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.197.1.10
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60952
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.197.1.10.			IN	A

;; AUTHORITY SECTION:
.			562	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 72 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:33:27 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 10.1.197.138.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 10.1.197.138.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
14.231.58.9	attackspam	Email rejected due to spam filtering	2020-08-11 16:57:41
111.229.110.107	attackspambots	[ssh] SSH attack	2020-08-11 16:39:42
189.42.210.84	attackspam	Aug 11 02:56:24 firewall sshd[7460]: Failed password for root from 189.42.210.84 port 40423 ssh2 Aug 11 02:58:20 firewall sshd[7518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.42.210.84 user=root Aug 11 02:58:22 firewall sshd[7518]: Failed password for root from 189.42.210.84 port 53359 ssh2 ...	2020-08-11 16:55:31
189.172.144.103	attack	Aug 11 05:42:48 v22019038103785759 sshd\[2020\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.172.144.103 user=root Aug 11 05:42:51 v22019038103785759 sshd\[2020\]: Failed password for root from 189.172.144.103 port 53410 ssh2 Aug 11 05:46:44 v22019038103785759 sshd\[2168\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.172.144.103 user=root Aug 11 05:46:46 v22019038103785759 sshd\[2168\]: Failed password for root from 189.172.144.103 port 34072 ssh2 Aug 11 05:50:44 v22019038103785759 sshd\[2315\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.172.144.103 user=root ...	2020-08-11 17:25:44
192.243.116.235	attackbotsspam	Aug 10 14:37:45 host sshd[14555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.243.116.235.16clouds.com user=r.r Aug 10 14:37:48 host sshd[14555]: Failed password for r.r from 192.243.116.235 port 49262 ssh2 Aug 10 14:37:48 host sshd[14555]: Received disconnect from 192.243.116.235: 11: Bye Bye [preauth] Aug 10 14:59:24 host sshd[18128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.243.116.235.16clouds.com user=r.r Aug 10 14:59:26 host sshd[18128]: Failed password for r.r from 192.243.116.235 port 33352 ssh2 Aug 10 14:59:26 host sshd[18128]: Received disconnect from 192.243.116.235: 11: Bye Bye [preauth] Aug 10 15:14:44 host sshd[6132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.243.116.235.16clouds.com user=r.r Aug 10 15:14:46 host sshd[6132]: Failed password for r.r from 192.243.116.235 port 57378 ssh2 Aug 10 15:14:46 host s........ -------------------------------	2020-08-11 17:13:25
122.51.216.203	attackbots	Aug 11 07:09:01 vmd36147 sshd[21397]: Failed password for root from 122.51.216.203 port 58124 ssh2 Aug 11 07:15:07 vmd36147 sshd[1928]: Failed password for root from 122.51.216.203 port 44356 ssh2 ...	2020-08-11 16:42:45
116.111.156.9	attack	20/8/11@00:11:15: FAIL: Alarm-Network address from=116.111.156.9 ...	2020-08-11 17:09:03
129.211.7.173	attackspambots	2020-08-11T05:55:41.050202shield sshd\[4884\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.7.173 user=root 2020-08-11T05:55:43.098211shield sshd\[4884\]: Failed password for root from 129.211.7.173 port 50844 ssh2 2020-08-11T05:59:50.464399shield sshd\[5405\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.7.173 user=root 2020-08-11T05:59:53.029361shield sshd\[5405\]: Failed password for root from 129.211.7.173 port 40090 ssh2 2020-08-11T06:04:15.511738shield sshd\[6128\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.7.173 user=root	2020-08-11 17:03:12
184.105.247.203	attackspambots	UDP 184.105.247.203:19332 -> port 5353, len 74	2020-08-11 16:49:48
52.170.129.77	attackspam	TCP (SYN) 52.170.129.77:20918 -> port 23, len 44	2020-08-11 16:51:59
122.51.21.208	attackbots	sshd jail - ssh hack attempt	2020-08-11 16:43:40
61.133.232.253	attack	Aug 11 08:50:42 ncomp sshd[29086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.133.232.253 user=root Aug 11 08:50:44 ncomp sshd[29086]: Failed password for root from 61.133.232.253 port 59011 ssh2 Aug 11 09:35:11 ncomp sshd[30195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.133.232.253 user=root Aug 11 09:35:13 ncomp sshd[30195]: Failed password for root from 61.133.232.253 port 17940 ssh2	2020-08-11 16:59:51
222.186.180.223	attackspam	Aug 11 11:23:45 cosmoit sshd[1000]: Failed password for root from 222.186.180.223 port 49812 ssh2	2020-08-11 17:26:15
14.146.92.154	attack	Failed password for root from 14.146.92.154 port 55128 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.146.92.154 user=root Failed password for root from 14.146.92.154 port 48244 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.146.92.154 user=root Failed password for root from 14.146.92.154 port 41372 ssh2	2020-08-11 16:50:22
159.65.224.137	attack	SIP/5060 Probe, BF, Hack -	2020-08-11 17:01:40

Recently Reported IPs

138.197.1.121	138.197.1.132	138.197.1.175	138.197.1.230
138.197.10.18	138.197.10.223	118.175.171.223	138.197.10.240
138.197.10.243	138.197.10.255	138.197.10.31	138.197.10.34
138.197.10.78	138.197.100.116	138.197.10.6	118.175.171.224
138.197.100.127	138.197.100.169	138.197.100.25	138.197.10.70