138.197.14.73 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.197.146.75	attack	Scan port	2023-10-18 12:53:52
138.197.146.75	attack	Scan port	2023-09-23 19:49:04
138.197.146.75	attack	Scan port	2023-07-27 12:45:30
138.197.146.75	attack	port scan	2023-02-03 13:47:17
138.197.146.75	attack	Port scan	2022-12-23 13:51:21
138.197.146.132	attackbots	138.197.146.132 - - [30/Sep/2020:23:11:08 +0200] "GET /wp-login.php HTTP/1.1" 200 9061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [30/Sep/2020:23:11:10 +0200] "POST /wp-login.php HTTP/1.1" 200 9312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [30/Sep/2020:23:11:11 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-10-01 05:49:46
138.197.146.132	attackbotsspam	Wordpress framework attack - hard filter	2020-09-30 22:07:30
138.197.146.132	attack	138.197.146.132 - - [30/Sep/2020:04:04:40 +0200] "GET /wp-login.php HTTP/1.1" 200 1984 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [30/Sep/2020:04:04:40 +0200] "POST /wp-login.php HTTP/1.1" 200 2104 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [30/Sep/2020:04:04:46 +0200] "GET /wp-login.php HTTP/1.1" 200 1984 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [30/Sep/2020:04:04:47 +0200] "POST /wp-login.php HTTP/1.1" 200 2090 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [30/Sep/2020:04:04:47 +0200] "GET /wp-login.php HTTP/1.1" 200 1984 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [30/Sep/2020:04:04:53 +0200] "POST /wp-login.php HTTP/1.1" 200 2091 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/ ...	2020-09-30 14:40:08
138.197.146.132	attackspam	MYH,DEF GET /wp-login.php	2020-09-27 03:38:24
138.197.146.132	attackbots	138.197.146.132 - - [26/Sep/2020:11:29:07 +0100] "POST /wp-login.php HTTP/1.1" 200 2302 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [26/Sep/2020:11:29:08 +0100] "POST /wp-login.php HTTP/1.1" 200 2238 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [26/Sep/2020:11:29:10 +0100] "POST /wp-login.php HTTP/1.1" 200 2234 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-26 19:37:03
138.197.149.97	attack	Sep 10 20:00:19 ns308116 sshd[31485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.97 user=root Sep 10 20:00:21 ns308116 sshd[31485]: Failed password for root from 138.197.149.97 port 34136 ssh2 Sep 10 20:06:07 ns308116 sshd[4933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.97 user=root Sep 10 20:06:09 ns308116 sshd[4933]: Failed password for root from 138.197.149.97 port 40806 ssh2 Sep 10 20:09:31 ns308116 sshd[8395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.97 user=root ...	2020-09-11 03:27:57
138.197.146.132	attackbotsspam	138.197.146.132 - - [10/Sep/2020:10:56:20 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [10/Sep/2020:10:56:20 +0200] "POST /wp-login.php HTTP/1.1" 200 2698 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [10/Sep/2020:10:56:20 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [10/Sep/2020:10:56:21 +0200] "POST /wp-login.php HTTP/1.1" 200 2672 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [10/Sep/2020:10:56:26 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [10/Sep/2020:10:56:26 +0200] "POST /wp-login.php HTTP/1.1" 200 2673 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/ ...	2020-09-10 23:58:21
138.197.149.97	attack	$f2bV_matches	2020-09-10 18:58:20
138.197.146.132	attackspam	CMS (WordPress or Joomla) login attempt.	2020-09-10 15:22:37
138.197.146.132	attack	Automatic report generated by Wazuh	2020-09-10 05:59:00

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.197.14.73
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35802
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.197.14.73.			IN	A

;; AUTHORITY SECTION:
.			538	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 27 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:34:06 CST 2022
;; MSG SIZE  rcvd: 106

Host info

73.14.197.138.in-addr.arpa domain name pointer texasschoolguide.org.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
73.14.197.138.in-addr.arpa	name = texasschoolguide.org.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
181.1.32.45	attackspam	Unauthorized connection attempt detected from IP address 181.1.32.45 to port 23 [J]	2020-01-27 09:13:44
222.186.175.155	attack	Unauthorized connection attempt detected from IP address 222.186.175.155 to port 22 [J]	2020-01-27 09:07:55
190.191.4.21	attackspambots	Jan 26 20:46:17 grey postfix/smtpd\[16203\]: NOQUEUE: reject: RCPT from unknown\[190.191.4.21\]: 554 5.7.1 Service unavailable\; Client host \[190.191.4.21\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[190.191.4.21\]\; from=\ to=\ proto=ESMTP helo=\<21-4-191-190.cab.prima.net.ar\> ...	2020-01-27 09:09:10
222.186.169.192	attack	Jan 27 02:25:32 srv206 sshd[9797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.192 user=root Jan 27 02:25:35 srv206 sshd[9797]: Failed password for root from 222.186.169.192 port 4016 ssh2 ...	2020-01-27 09:26:06
46.38.144.102	attackspambots	Jan 27 01:13:14 relay postfix/smtpd\[7197\]: warning: unknown\[46.38.144.102\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 27 01:13:44 relay postfix/smtpd\[7674\]: warning: unknown\[46.38.144.102\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 27 01:14:08 relay postfix/smtpd\[6818\]: warning: unknown\[46.38.144.102\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 27 01:14:38 relay postfix/smtpd\[7610\]: warning: unknown\[46.38.144.102\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 27 01:15:02 relay postfix/smtpd\[7193\]: warning: unknown\[46.38.144.102\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-01-27 09:00:38
94.73.41.136	attackbotsspam	Email rejected due to spam filtering	2020-01-27 09:11:19
104.206.128.26	attack	3389BruteforceFW23	2020-01-27 09:38:12
210.56.195.150	attack	Unauthorized connection attempt detected from IP address 210.56.195.150 to port 2220 [J]	2020-01-27 09:37:07
190.178.39.208	attackspam	TCP Port: 25 invalid blocked abuseat-org also barracuda and zen-spamhaus (513)	2020-01-27 09:12:22
39.32.161.123	attackspam	Email rejected due to spam filtering	2020-01-27 09:25:08
82.64.22.35	attack	Jan 26 17:18:29 server6 sshd[10142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82-64-22-35.subs.proxad.net user=r.r Jan 26 17:18:32 server6 sshd[10142]: Failed password for r.r from 82.64.22.35 port 41420 ssh2 Jan 26 17:18:32 server6 sshd[10142]: Received disconnect from 82.64.22.35: 11: Bye Bye [preauth] Jan 26 18:06:15 server6 sshd[23869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82-64-22-35.subs.proxad.net Jan 26 18:06:17 server6 sshd[23869]: Failed password for invalid user administrador from 82.64.22.35 port 50944 ssh2 Jan 26 18:06:17 server6 sshd[23869]: Received disconnect from 82.64.22.35: 11: Bye Bye [preauth] Jan 26 18:12:30 server6 sshd[31064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82-64-22-35.subs.proxad.net Jan 26 18:12:32 server6 sshd[31064]: Failed password for invalid user helpdesk from 82.64.22.35 port 40888 ssh........ -------------------------------	2020-01-27 09:10:07
117.50.43.236	attackspam	Unauthorized connection attempt detected from IP address 117.50.43.236 to port 2220 [J]	2020-01-27 09:16:37
122.51.154.89	attackspam	Fail2Ban Ban Triggered	2020-01-27 09:32:21
94.66.221.107	attackbotsspam	Email rejected due to spam filtering	2020-01-27 09:30:21
222.186.175.150	attackspambots	Port scan on 1 port(s): 22	2020-01-27 09:05:44

Recently Reported IPs

138.197.140.158	138.197.140.199	138.197.141.32	138.197.141.201
138.197.141.5	138.197.140.220	138.197.141.95	138.197.142.140
138.197.142.172	138.197.142.206	138.197.142.184	138.197.142.238
138.197.142.219	138.197.142.80	138.197.143.160	138.197.143.247
138.197.143.4	138.197.143.18	138.197.143.34	138.197.144.52