138.197.13.136

Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.197.136.163	attack	Bruteforce detected by fail2ban	2020-09-30 03:10:28
138.197.136.163	attack	Invalid user oracle from 138.197.136.163 port 37458	2020-09-29 19:14:00
138.197.135.102	attackspambots	138.197.135.102 - - [19/Sep/2020:07:11:21 +0100] "POST /wp-login.php HTTP/1.1" 200 2451 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.135.102 - - [19/Sep/2020:07:11:22 +0100] "POST /wp-login.php HTTP/1.1" 200 2431 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.135.102 - - [19/Sep/2020:07:11:24 +0100] "POST /wp-login.php HTTP/1.1" 200 2431 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-20 03:49:48
138.197.135.102	attack	138.197.135.102 - - [19/Sep/2020:07:11:21 +0100] "POST /wp-login.php HTTP/1.1" 200 2451 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.135.102 - - [19/Sep/2020:07:11:22 +0100] "POST /wp-login.php HTTP/1.1" 200 2431 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.135.102 - - [19/Sep/2020:07:11:24 +0100] "POST /wp-login.php HTTP/1.1" 200 2431 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-19 19:55:09
138.197.137.225	attack	138.197.137.225 - - [11/Sep/2020:18:52:58 +0200] "HEAD / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36"	2020-09-13 00:18:48
138.197.137.225	attackbotsspam	138.197.137.225 - - [11/Sep/2020:18:52:58 +0200] "HEAD / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36"	2020-09-12 16:17:14
138.197.135.102	attack	138.197.135.102 - - [10/Sep/2020:21:13:11 +0200] "POST /wp-login.php HTTP/1.0" 200 4794 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-11 03:27:35
138.197.131.66	attackbotsspam	138.197.131.66 - - [10/Sep/2020:16:34:59 +0200] "GET /wp-login.php HTTP/1.1" 200 9061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.131.66 - - [10/Sep/2020:16:35:01 +0200] "POST /wp-login.php HTTP/1.1" 200 9312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.131.66 - - [10/Sep/2020:16:35:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-09-11 01:12:33
138.197.135.102	attackspam	CMS (WordPress or Joomla) login attempt.	2020-09-10 18:58:01
138.197.131.66	attack	138.197.131.66 - - [10/Sep/2020:09:37:17 +0200] "POST /xmlrpc.php HTTP/1.1" 403 461 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.131.66 - - [10/Sep/2020:09:40:59 +0200] "POST /xmlrpc.php HTTP/1.1" 403 13510 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-10 16:32:12
138.197.131.66	attack	Automatic report - XMLRPC Attack	2020-09-10 07:09:41
138.197.131.66	attackspambots	Automatic report - XMLRPC Attack	2020-09-08 06:26:08
138.197.135.102	attackbots	CMS (WordPress or Joomla) login attempt.	2020-09-08 00:12:36
138.197.135.102	attackbotsspam	Brute forcing Wordpress login	2020-09-07 08:07:25
138.197.130.138	attackspambots	Sep 4 13:08:14 sigma sshd\[10630\]: Failed password for root from 138.197.130.138 port 42912 ssh2Sep 4 13:16:52 sigma sshd\[11175\]: Invalid user cactiuser from 138.197.130.138 ...	2020-09-04 23:16:07

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.197.13.136
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27678
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.197.13.136.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:33:51 CST 2022
;; MSG SIZE  rcvd: 107

Host info

136.13.197.138.in-addr.arpa domain name pointer test.debian-10.tld.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
136.13.197.138.in-addr.arpa	name = test.debian-10.tld.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
221.7.12.153	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-27 16:54:56
60.173.155.27	attackspam	Feb 27 06:06:58 [host] kernel: [5978773.599409] [U Feb 27 06:10:27 [host] kernel: [5978983.261369] [U Feb 27 06:13:15 [host] kernel: [5979150.384883] [U Feb 27 06:36:15 [host] kernel: [5980531.004530] [U Feb 27 06:39:30 [host] kernel: [5980725.751140] [U Feb 27 06:46:23 [host] kernel: [5981138.648780] [U	2020-02-27 16:35:35
93.42.109.154	attack	unauthorized connection attempt	2020-02-27 16:43:48
36.65.4.113	attackspam	1582783145 - 02/27/2020 06:59:05 Host: 36.65.4.113/36.65.4.113 Port: 445 TCP Blocked	2020-02-27 16:50:07
88.190.124.68	attack	$f2bV_matches	2020-02-27 16:40:08
49.81.218.209	attackbots	Feb 27 06:46:36 grey postfix/smtpd\[17293\]: NOQUEUE: reject: RCPT from unknown\[49.81.218.209\]: 554 5.7.1 Service unavailable\; Client host \[49.81.218.209\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[49.81.218.209\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-27 16:21:42
156.211.227.84	attackbots	Honeypot attack, port: 5555, PTR: host-156.211.84.227-static.tedata.net.	2020-02-27 16:57:18
123.19.243.178	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-27 16:53:14
46.17.107.78	attack	1582787350 - 02/27/2020 08:09:10 Host: 46.17.107.78/46.17.107.78 Port: 445 TCP Blocked	2020-02-27 16:42:42
5.141.86.94	attackbots	Unauthorized connection attempt from IP address 5.141.86.94 on Port 445(SMB)	2020-02-27 16:56:15
188.84.81.64	attackspambots	" "	2020-02-27 17:00:17
77.40.62.75	attack	failed_logins	2020-02-27 16:24:48
77.94.103.217	attackspam	Unauthorized connection attempt from IP address 77.94.103.217 on Port 445(SMB)	2020-02-27 16:20:53
222.186.169.194	attackspam	Feb 27 09:37:01 dedicated sshd[9521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194 user=root Feb 27 09:37:03 dedicated sshd[9521]: Failed password for root from 222.186.169.194 port 28740 ssh2	2020-02-27 16:41:54
71.6.135.131	attack	Feb 27 08:23:55 debian-2gb-nbg1-2 kernel: \[5047429.572792\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=71.6.135.131 DST=195.201.40.59 LEN=44 TOS=0x10 PREC=0x00 TTL=110 ID=1452 PROTO=TCP SPT=23320 DPT=8834 WINDOW=19157 RES=0x00 SYN URGP=0	2020-02-27 16:26:40

Recently Reported IPs

138.197.133.151	138.197.130.154	138.197.131.6	138.197.13.33
138.197.131.123	138.197.133.168	138.197.131.112	138.197.130.70
138.197.133.4	138.197.134.227	138.197.134.130	138.197.134.45
138.197.135.207	138.197.134.229	138.197.134.243	138.197.134.2
118.175.172.32	138.197.133.225	138.197.135.221	240.142.179.196