138.197.150.21

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.197.150.154	attackbots	138.197.150.154 - - [24/Jun/2020:09:02:58 +0200] "POST /xmlrpc.php HTTP/1.1" 403 14371 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.150.154 - - [24/Jun/2020:09:02:59 +0200] "POST /xmlrpc.php HTTP/1.1" 403 11248 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-06-24 18:13:02
138.197.150.154	attackbots	138.197.150.154 - - [11/Jun/2020:14:14:57 +0200] "GET /wp-login.php HTTP/1.1" 200 6183 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.150.154 - - [11/Jun/2020:14:15:00 +0200] "POST /wp-login.php HTTP/1.1" 200 6434 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.150.154 - - [11/Jun/2020:14:15:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-06-11 20:21:33
138.197.150.154	attackspam	138.197.150.154 - - [10/Jun/2020:05:46:44 +0200] "GET /wp-login.php HTTP/1.1" 200 5861 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.150.154 - - [10/Jun/2020:05:46:48 +0200] "POST /wp-login.php HTTP/1.1" 200 6112 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.150.154 - - [10/Jun/2020:05:46:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-06-10 18:59:47
138.197.150.154	attackbots	xmlrpc attack	2020-05-16 18:09:48
138.197.150.154	attackspambots	Automatic report - XMLRPC Attack	2020-05-11 20:11:51
138.197.150.87	attack	invalid login attempt (unbound)	2020-05-04 18:13:01
138.197.150.87	attack	Apr 28 14:49:31 host sshd[22264]: Invalid user colin from 138.197.150.87 port 35902 ...	2020-04-28 23:14:53
138.197.150.87	attack	Apr 28 09:59:57 sshd\[13445\]: Invalid user strong from 138.197.150.87Apr 28 09:59:59 sshd\[13445\]: Failed password for invalid user strong from 138.197.150.87 port 34274 ssh2 ...	2020-04-28 16:50:51

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.197.150.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43322
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.197.150.21.			IN	A

;; AUTHORITY SECTION:
.			244	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 11:53:43 CST 2022
;; MSG SIZE  rcvd: 107

Host info

21.150.197.138.in-addr.arpa domain name pointer 132980.cloudwaysapps.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
21.150.197.138.in-addr.arpa	name = 132980.cloudwaysapps.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
37.187.16.30	attackbots	Sep 4 20:11:44 vm1 sshd[12814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.16.30 Sep 4 20:11:45 vm1 sshd[12814]: Failed password for invalid user sttest from 37.187.16.30 port 48372 ssh2 ...	2020-09-05 07:49:52
198.98.49.181	attackspam	Fail2Ban Ban Triggered (2)	2020-09-05 07:50:54
197.45.138.52	attackbotsspam	Honeypot attack, port: 445, PTR: host-197.45.138.52.tedata.net.	2020-09-05 07:55:55
193.35.51.21	attackspambots	(smtpauth) Failed SMTP AUTH login from 193.35.51.21 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2020-09-04 19:57:10 dovecot_login authenticator failed for ([193.35.51.21]) [193.35.51.21]:8608: 535 Incorrect authentication data (set_id=wordpress@elizabethknudson.ca) 2020-09-04 19:57:17 dovecot_login authenticator failed for ([193.35.51.21]) [193.35.51.21]:10542: 535 Incorrect authentication data 2020-09-04 19:57:27 dovecot_login authenticator failed for ([193.35.51.21]) [193.35.51.21]:9586: 535 Incorrect authentication data 2020-09-04 19:57:33 dovecot_login authenticator failed for ([193.35.51.21]) [193.35.51.21]:10696: 535 Incorrect authentication data 2020-09-04 19:57:45 dovecot_login authenticator failed for ([193.35.51.21]) [193.35.51.21]:10334: 535 Incorrect authentication data	2020-09-05 08:00:48
141.98.10.214	attackspambots	2020-09-04T23:19:52.093584shield sshd\[22082\]: Invalid user admin from 141.98.10.214 port 43725 2020-09-04T23:19:52.102364shield sshd\[22082\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.10.214 2020-09-04T23:19:53.537466shield sshd\[22082\]: Failed password for invalid user admin from 141.98.10.214 port 43725 ssh2 2020-09-04T23:20:33.319213shield sshd\[22224\]: Invalid user admin from 141.98.10.214 port 41057 2020-09-04T23:20:33.328245shield sshd\[22224\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.10.214	2020-09-05 07:31:47
5.196.70.107	attack	Sep 4 23:19:37 prox sshd[933]: Failed password for root from 5.196.70.107 port 39902 ssh2 Sep 4 23:37:00 prox sshd[18098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.70.107	2020-09-05 07:57:11
181.60.6.4	attack	Sep 4 18:50:11 mellenthin postfix/smtpd[32584]: NOQUEUE: reject: RCPT from unknown[181.60.6.4]: 554 5.7.1 Service unavailable; Client host [181.60.6.4] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/181.60.6.4; from= to= proto=ESMTP helo=	2020-09-05 07:43:12
178.207.247.44	attackbotsspam	1599238209 - 09/04/2020 18:50:09 Host: 178.207.247.44/178.207.247.44 Port: 445 TCP Blocked	2020-09-05 07:44:23
138.75.167.252	attackbots	SSH/22 MH Probe, BF, Hack -	2020-09-05 07:41:58
159.65.196.65	attackbotsspam	Invalid user sun from 159.65.196.65 port 38224	2020-09-05 07:41:32
218.82.244.255	attack	port scan and connect, tcp 23 (telnet)	2020-09-05 07:56:23
81.89.218.87	attack	firewall-block, port(s): 445/tcp	2020-09-05 07:51:46
187.188.251.218	attack	Honeypot attack, port: 445, PTR: fixed-187-188-251-218.totalplay.net.	2020-09-05 07:55:09
185.153.198.229	attackbotsspam	TCP (SYN) 185.153.198.229:54458 -> port 22, len 40	2020-09-05 07:33:38
222.186.175.148	attackspambots	Sep 5 01:28:42 server sshd[28865]: Failed none for root from 222.186.175.148 port 30158 ssh2 Sep 5 01:28:45 server sshd[28865]: Failed password for root from 222.186.175.148 port 30158 ssh2 Sep 5 01:28:49 server sshd[28865]: Failed password for root from 222.186.175.148 port 30158 ssh2	2020-09-05 07:32:54

Recently Reported IPs

138.197.158.178	138.197.149.119	138.197.159.251	138.197.159.143
138.197.159.8	138.197.161.160	138.197.160.175	138.197.162.157
138.197.163.209	138.197.165.192	138.197.164.93	138.197.165.186
138.197.161.18	138.197.169.52	138.197.169.210	138.197.16.166
138.197.169.9	138.197.179.33	138.197.181.203	138.197.173.114