City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 138.197.146.75 | attack | Scan port |
2023-10-18 12:53:52 |
| 138.197.146.75 | attack | Scan port |
2023-09-23 19:49:04 |
| 138.197.146.75 | attack | Scan port |
2023-07-27 12:45:30 |
| 138.197.146.75 | attack | port scan |
2023-02-03 13:47:17 |
| 138.197.146.75 | attack | Port scan |
2022-12-23 13:51:21 |
| 138.197.146.132 | attackbots | 138.197.146.132 - - [30/Sep/2020:23:11:08 +0200] "GET /wp-login.php HTTP/1.1" 200 9061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [30/Sep/2020:23:11:10 +0200] "POST /wp-login.php HTTP/1.1" 200 9312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [30/Sep/2020:23:11:11 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-10-01 05:49:46 |
| 138.197.146.132 | attackbotsspam | Wordpress framework attack - hard filter |
2020-09-30 22:07:30 |
| 138.197.146.132 | attack | 138.197.146.132 - - [30/Sep/2020:04:04:40 +0200] "GET /wp-login.php HTTP/1.1" 200 1984 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [30/Sep/2020:04:04:40 +0200] "POST /wp-login.php HTTP/1.1" 200 2104 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [30/Sep/2020:04:04:46 +0200] "GET /wp-login.php HTTP/1.1" 200 1984 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [30/Sep/2020:04:04:47 +0200] "POST /wp-login.php HTTP/1.1" 200 2090 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [30/Sep/2020:04:04:47 +0200] "GET /wp-login.php HTTP/1.1" 200 1984 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [30/Sep/2020:04:04:53 +0200] "POST /wp-login.php HTTP/1.1" 200 2091 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/ ... |
2020-09-30 14:40:08 |
| 138.197.146.132 | attackspam | MYH,DEF GET /wp-login.php |
2020-09-27 03:38:24 |
| 138.197.146.132 | attackbots | 138.197.146.132 - - [26/Sep/2020:11:29:07 +0100] "POST /wp-login.php HTTP/1.1" 200 2302 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [26/Sep/2020:11:29:08 +0100] "POST /wp-login.php HTTP/1.1" 200 2238 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [26/Sep/2020:11:29:10 +0100] "POST /wp-login.php HTTP/1.1" 200 2234 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-26 19:37:03 |
| 138.197.146.132 | attackbotsspam | 138.197.146.132 - - [10/Sep/2020:10:56:20 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [10/Sep/2020:10:56:20 +0200] "POST /wp-login.php HTTP/1.1" 200 2698 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [10/Sep/2020:10:56:20 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [10/Sep/2020:10:56:21 +0200] "POST /wp-login.php HTTP/1.1" 200 2672 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [10/Sep/2020:10:56:26 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.146.132 - - [10/Sep/2020:10:56:26 +0200] "POST /wp-login.php HTTP/1.1" 200 2673 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/ ... |
2020-09-10 23:58:21 |
| 138.197.146.132 | attackspam | CMS (WordPress or Joomla) login attempt. |
2020-09-10 15:22:37 |
| 138.197.146.132 | attack | Automatic report generated by Wazuh |
2020-09-10 05:59:00 |
| 138.197.146.132 | attack | WordPress wp-login brute force :: 138.197.146.132 0.068 BYPASS [25/Aug/2020:22:29:20 0000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 2573 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-08-26 07:21:11 |
| 138.197.146.132 | attack | CMS (WordPress or Joomla) login attempt. |
2020-07-27 14:51:04 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.197.146.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18259
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.197.146.99. IN A
;; AUTHORITY SECTION:
. 165 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400
;; Query time: 25 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 11:53:42 CST 2022
;; MSG SIZE rcvd: 107Host 99.146.197.138.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 99.146.197.138.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 89.139.105.154 | attackbots | firewall-block, port(s): 1433/tcp |
2019-11-20 01:36:19 |
| 197.248.2.229 | attackbotsspam | 2019-11-19T12:08:40.150293ns386461 sshd\[8550\]: Invalid user zxvf from 197.248.2.229 port 42469 2019-11-19T12:08:40.154950ns386461 sshd\[8550\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.2.229 2019-11-19T12:08:42.322500ns386461 sshd\[8550\]: Failed password for invalid user zxvf from 197.248.2.229 port 42469 ssh2 2019-11-19T14:00:33.558458ns386461 sshd\[9908\]: Invalid user copello from 197.248.2.229 port 39351 2019-11-19T14:00:33.563112ns386461 sshd\[9908\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.2.229 ... |
2019-11-20 01:30:31 |
| 110.50.86.104 | attackbotsspam | Unauthorized connection attempt from IP address 110.50.86.104 on Port 445(SMB) |
2019-11-20 01:47:02 |
| 14.239.159.34 | attack | Unauthorized connection attempt from IP address 14.239.159.34 on Port 445(SMB) |
2019-11-20 01:15:17 |
| 80.211.129.148 | attackspambots | 2019-11-19T14:03:37.454870abusebot-8.cloudsearch.cf sshd\[30636\]: Invalid user \#\#\#\#\#\# from 80.211.129.148 port 40874 |
2019-11-20 01:12:37 |
| 118.112.187.218 | attackbots | Unauthorized connection attempt from IP address 118.112.187.218 on Port 445(SMB) |
2019-11-20 01:48:01 |
| 113.88.13.217 | attackspam | Unauthorized connection attempt from IP address 113.88.13.217 on Port 445(SMB) |
2019-11-20 01:38:03 |
| 103.8.119.166 | attackbots | fraudulent SSH attempt |
2019-11-20 01:42:50 |
| 81.136.163.212 | attackbotsspam | Unauthorized connection attempt from IP address 81.136.163.212 on Port 445(SMB) |
2019-11-20 01:11:05 |
| 46.238.53.245 | attackspambots | Nov 19 11:16:45 askasleikir sshd[19938]: Failed password for invalid user ching from 46.238.53.245 port 35446 ssh2 Nov 19 11:42:04 askasleikir sshd[20085]: Failed password for invalid user home from 46.238.53.245 port 58446 ssh2 Nov 19 11:38:25 askasleikir sshd[20076]: Failed password for invalid user cssserver from 46.238.53.245 port 50022 ssh2 |
2019-11-20 01:49:06 |
| 87.117.21.99 | attack | Unauthorized connection attempt from IP address 87.117.21.99 on Port 445(SMB) |
2019-11-20 01:30:43 |
| 160.119.136.131 | attackspambots | Unauthorized connection attempt from IP address 160.119.136.131 on Port 445(SMB) |
2019-11-20 01:49:29 |
| 35.224.159.133 | attackbotsspam | Invalid user ronendra from 35.224.159.133 port 54386 |
2019-11-20 01:36:32 |
| 92.119.160.143 | attack | 41633/tcp 41130/tcp 58539/tcp... [2019-09-18/11-19]3943pkt,1178pt.(tcp) |
2019-11-20 01:21:32 |
| 5.13.239.39 | attackbotsspam | Fail2Ban Ban Triggered |
2019-11-20 01:28:38 |