138.197.105.75

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.197.105.79	attackspambots	SSH Bruteforce Attempt on Honeypot	2020-08-30 01:44:17
138.197.105.79	attackbots	$f2bV_matches	2020-04-06 02:54:18
138.197.105.79	attackspambots	Brute force SMTP login attempted. ...	2020-03-30 20:22:30
138.197.105.79	attackbotsspam	Invalid user admin from 138.197.105.79 port 35820	2020-03-29 15:14:02
138.197.105.79	attackbotsspam	Total attacks: 14	2020-03-28 01:49:08
138.197.105.79	attackbotsspam	$f2bV_matches_ltvn	2020-03-20 02:22:58
138.197.105.79	attackspam	Mar 19 05:21:27 vmd26974 sshd[24786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.105.79 Mar 19 05:21:28 vmd26974 sshd[24786]: Failed password for invalid user admin from 138.197.105.79 port 58304 ssh2 ...	2020-03-19 12:32:16
138.197.105.79	attack	2020-02-27T01:48:18.936260linuxbox-skyline sshd[24876]: Invalid user user from 138.197.105.79 port 53366 ...	2020-02-27 17:08:48
138.197.105.79	attack	Feb 25 11:08:45 dev0-dcde-rnet sshd[429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.105.79 Feb 25 11:08:47 dev0-dcde-rnet sshd[429]: Failed password for invalid user user from 138.197.105.79 port 42114 ssh2 Feb 25 11:12:15 dev0-dcde-rnet sshd[499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.105.79	2020-02-25 18:18:58
138.197.105.79	attackbots	SSH attack	2020-02-24 13:19:48
138.197.105.79	attackbotsspam	Feb 23 23:23:16 ArkNodeAT sshd\[19035\]: Invalid user user from 138.197.105.79 Feb 23 23:23:16 ArkNodeAT sshd\[19035\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.105.79 Feb 23 23:23:18 ArkNodeAT sshd\[19035\]: Failed password for invalid user user from 138.197.105.79 port 40036 ssh2	2020-02-24 06:32:50
138.197.105.79	attackspam	Feb 17 16:50:21 lnxmail61 sshd[13466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.105.79 Feb 17 16:50:23 lnxmail61 sshd[13466]: Failed password for invalid user admin from 138.197.105.79 port 50662 ssh2 Feb 17 16:54:06 lnxmail61 sshd[13961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.105.79	2020-02-18 00:44:44
138.197.105.79	attackspambots	Invalid user admin from 138.197.105.79 port 45984	2020-02-16 10:21:20
138.197.105.79	attackspam	Invalid user ftpuser from 138.197.105.79 port 41972	2020-02-15 21:29:32
138.197.105.79	attackbots	Invalid user ubuntu from 138.197.105.79 port 37034	2020-02-02 15:19:10

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.197.105.75
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33429
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.197.105.75.			IN	A

;; AUTHORITY SECTION:
.			378	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021301 1800 900 604800 86400

;; Query time: 52 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 14 07:07:09 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 75.105.197.138.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 75.105.197.138.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
79.137.86.205	attackspam	Tried sshing with brute force.	2019-08-30 04:53:59
49.232.51.237	attackbotsspam	Aug 29 22:41:27 meumeu sshd[5584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.51.237 Aug 29 22:41:29 meumeu sshd[5584]: Failed password for invalid user test1 from 49.232.51.237 port 49580 ssh2 Aug 29 22:45:34 meumeu sshd[6194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.51.237 ...	2019-08-30 04:53:38
5.8.18.90	attackspam	ESET LOG: 8/29/2019 3:26:35 PM;TCP Port Scanning attack;Blocked;5.8.18.90:65534	2019-08-30 05:32:19
118.24.145.89	attackspambots	Fail2Ban - SSH Bruteforce Attempt	2019-08-30 05:14:03
60.6.185.220	attackbotsspam	Unauthorised access (Aug 29) SRC=60.6.185.220 LEN=40 TTL=49 ID=60650 TCP DPT=8080 WINDOW=6655 SYN Unauthorised access (Aug 29) SRC=60.6.185.220 LEN=40 TTL=49 ID=14004 TCP DPT=8080 WINDOW=2594 SYN Unauthorised access (Aug 28) SRC=60.6.185.220 LEN=40 TTL=49 ID=42674 TCP DPT=8080 WINDOW=15341 SYN Unauthorised access (Aug 28) SRC=60.6.185.220 LEN=40 TTL=49 ID=4056 TCP DPT=8080 WINDOW=20858 SYN Unauthorised access (Aug 25) SRC=60.6.185.220 LEN=40 TTL=49 ID=19758 TCP DPT=8080 WINDOW=2594 SYN Unauthorised access (Aug 25) SRC=60.6.185.220 LEN=40 TTL=49 ID=46030 TCP DPT=8080 WINDOW=15341 SYN	2019-08-30 05:38:24
151.45.229.160	attackspam	Automatic report - Port Scan Attack	2019-08-30 05:11:28
212.83.170.21	attackbots	\[2019-08-29 17:14:58\] NOTICE\[1829\] chan_sip.c: Registration from '\' failed for '212.83.170.21:2902' - Wrong password \[2019-08-29 17:14:58\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-29T17:14:58.042-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5313",SessionID="0x7f7b30db7498",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.170.21/59171",Challenge="3c3bb786",ReceivedChallenge="3c3bb786",ReceivedHash="2a9429986f27f4cfda37f0a70735aaa0" \[2019-08-29 17:16:39\] NOTICE\[1829\] chan_sip.c: Registration from '\' failed for '212.83.170.21:2968' - Wrong password \[2019-08-29 17:16:39\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-29T17:16:39.949-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="6483",SessionID="0x7f7b30462f68",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.170.	2019-08-30 05:17:24
162.243.99.164	attackbots	Aug 29 11:17:04 hanapaa sshd\[6503\]: Invalid user tom from 162.243.99.164 Aug 29 11:17:04 hanapaa sshd\[6503\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.99.164 Aug 29 11:17:06 hanapaa sshd\[6503\]: Failed password for invalid user tom from 162.243.99.164 port 35549 ssh2 Aug 29 11:23:18 hanapaa sshd\[7043\]: Invalid user problem from 162.243.99.164 Aug 29 11:23:18 hanapaa sshd\[7043\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.99.164	2019-08-30 05:23:59
139.59.92.117	attackbots	Aug 29 23:20:13 pkdns2 sshd\[21014\]: Invalid user user2 from 139.59.92.117Aug 29 23:20:15 pkdns2 sshd\[21014\]: Failed password for invalid user user2 from 139.59.92.117 port 40132 ssh2Aug 29 23:24:48 pkdns2 sshd\[21187\]: Invalid user vishalj from 139.59.92.117Aug 29 23:24:50 pkdns2 sshd\[21187\]: Failed password for invalid user vishalj from 139.59.92.117 port 57822 ssh2Aug 29 23:29:22 pkdns2 sshd\[21430\]: Invalid user anton from 139.59.92.117Aug 29 23:29:24 pkdns2 sshd\[21430\]: Failed password for invalid user anton from 139.59.92.117 port 47290 ssh2 ...	2019-08-30 04:54:16
117.50.99.9	attackspam	Aug 29 17:18:20 ny01 sshd[19259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.99.9 Aug 29 17:18:22 ny01 sshd[19259]: Failed password for invalid user pinguin from 117.50.99.9 port 58688 ssh2 Aug 29 17:19:45 ny01 sshd[19484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.99.9	2019-08-30 05:27:48
105.159.254.100	attackspam	Aug 29 21:45:29 mail sshd\[17191\]: Failed password for invalid user ck from 105.159.254.100 port 36864 ssh2 Aug 29 22:01:52 mail sshd\[17434\]: Invalid user db2fenc1 from 105.159.254.100 port 37412 Aug 29 22:01:52 mail sshd\[17434\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=105.159.254.100 ...	2019-08-30 05:18:04
62.234.152.218	attack	Aug 29 20:29:08 MK-Soft-VM4 sshd\[28207\]: Invalid user kh from 62.234.152.218 port 36513 Aug 29 20:29:08 MK-Soft-VM4 sshd\[28207\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.152.218 Aug 29 20:29:10 MK-Soft-VM4 sshd\[28207\]: Failed password for invalid user kh from 62.234.152.218 port 36513 ssh2 ...	2019-08-30 05:06:22
49.88.112.90	attack	Aug 29 10:50:30 hcbb sshd\[8854\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.90 user=root Aug 29 10:50:32 hcbb sshd\[8854\]: Failed password for root from 49.88.112.90 port 61021 ssh2 Aug 29 10:50:35 hcbb sshd\[8854\]: Failed password for root from 49.88.112.90 port 61021 ssh2 Aug 29 10:50:37 hcbb sshd\[8854\]: Failed password for root from 49.88.112.90 port 61021 ssh2 Aug 29 10:50:38 hcbb sshd\[8866\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.90 user=root	2019-08-30 04:50:50
49.88.112.80	attackbotsspam	2019-08-30T04:28:37.621920enmeeting.mahidol.ac.th sshd\[2379\]: User root from 49.88.112.80 not allowed because not listed in AllowUsers 2019-08-30T04:28:37.971307enmeeting.mahidol.ac.th sshd\[2379\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.80 user=root 2019-08-30T04:28:39.994158enmeeting.mahidol.ac.th sshd\[2379\]: Failed password for invalid user root from 49.88.112.80 port 24456 ssh2 ...	2019-08-30 05:30:51
185.153.198.245	attack	HTTP contact form spam	2019-08-30 05:24:34

Recently Reported IPs

138.197.12.87	138.186.76.12	138.188.54.88	138.197.102.68
138.19.114.224	138.197.13.195	138.197.141.29	138.197.129.58
138.197.138.124	138.197.165.239	138.197.170.120	138.197.186.77
138.197.181.62	138.197.178.19	138.197.190.51	138.197.6.149
138.2.44.15	138.197.7.116	138.199.19.158	138.199.42.134