138.197.154.120

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.197.154.79	attack	Unauthorized connection attempt detected from IP address 138.197.154.79 to port 23	2020-04-15 22:53:13
138.197.154.79	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2020-03-11 12:25:19
138.197.154.203	attack	GET /muieblackcat HTTP/1.1 GET //phpmyadmin/scripts/setup.php HTTP/1.1 GET //MyAdmin/scripts/setup.php HTTP/1.1 GET //phpMyAdmin/scripts/setup.php HTTP/1.1 GET //myadmin/scripts/setup.php HTTP/1.1 GET //pma/scripts/setup.php HTTP/1.1	2020-03-06 02:51:16
138.197.154.79	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-18 18:45:50
138.197.154.79	attackbotsspam	SSH Scan	2020-02-11 18:33:41

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.197.154.120
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34634
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.197.154.120.		IN	A

;; AUTHORITY SECTION:
.			130	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 12:26:40 CST 2022
;; MSG SIZE  rcvd: 108

Host info

Host 120.154.197.138.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 120.154.197.138.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
112.120.156.177	attack	Scanned 3 times in the last 24 hours on port 22	2020-09-09 00:18:47
119.45.151.125	attack	Aug 4 15:52:12 server sshd[5691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.151.125 user=root Aug 4 15:52:14 server sshd[5691]: Failed password for invalid user root from 119.45.151.125 port 39852 ssh2 Aug 4 16:14:41 server sshd[7767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.151.125 user=root Aug 4 16:14:43 server sshd[7767]: Failed password for invalid user root from 119.45.151.125 port 44496 ssh2	2020-09-09 00:28:14
141.136.117.194	attack	" "	2020-09-08 23:44:00
190.218.124.200	attackbotsspam	Sep 7 14:38:23 logopedia-1vcpu-1gb-nyc1-01 sshd[151819]: Invalid user admin from 190.218.124.200 port 42700 ...	2020-09-09 00:20:43
185.220.101.213	attack	Sep 8 15:37:50 shivevps sshd[21950]: Failed password for root from 185.220.101.213 port 14188 ssh2 Sep 8 15:38:02 shivevps sshd[21950]: Failed password for root from 185.220.101.213 port 14188 ssh2 Sep 8 15:38:02 shivevps sshd[21950]: error: maximum authentication attempts exceeded for root from 185.220.101.213 port 14188 ssh2 [preauth] ...	2020-09-09 00:23:41
190.220.214.56	attack	Sep 8 08:05:45 logopedia-1vcpu-1gb-nyc1-01 sshd[168481]: Failed password for root from 190.220.214.56 port 41207 ssh2 ...	2020-09-08 23:39:34
36.72.197.119	attackspambots	Honeypot attack, port: 81, PTR: PTR record not found	2020-09-09 00:20:17
211.22.64.206	attackbotsspam	TCP (SYN) 211.22.64.206:10442 -> port 23, len 44	2020-09-09 00:27:32
184.22.36.166	attackbotsspam	Honeypot attack, port: 445, PTR: 184-22-36-0.24.nat.cwdc-cgn02.myaisfibre.com.	2020-09-08 23:47:35
176.192.126.27	attackbots	Sep 8 06:35:31 ws22vmsma01 sshd[160822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.192.126.27 Sep 8 06:35:34 ws22vmsma01 sshd[160822]: Failed password for invalid user chuy from 176.192.126.27 port 53446 ssh2 ...	2020-09-09 00:25:42
111.229.104.94	attackspam	Port Scan ...	2020-09-09 00:00:00
182.92.226.228	attack	Sep 7 13:46:28 firewall sshd[20992]: Failed password for invalid user wiki from 182.92.226.228 port 32152 ssh2 Sep 7 13:51:20 firewall sshd[21162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.92.226.228 user=root Sep 7 13:51:22 firewall sshd[21162]: Failed password for root from 182.92.226.228 port 13325 ssh2 ...	2020-09-08 23:43:16
41.221.251.19	attack	[portscan] tcp/1433 [MsSQL] *(RWIN=1024)(09081006)	2020-09-08 23:52:19
23.95.220.201	attack	Automatic report - Banned IP Access	2020-09-09 00:11:14
169.239.108.52	attack	Brute forcing RDP port 3389	2020-09-08 23:38:12

Recently Reported IPs

138.197.154.117	138.197.153.86	138.197.156.137	138.197.158.226
138.197.157.82	138.197.160.150	138.197.16.235	138.197.161.180
138.197.154.47	138.197.161.71	138.197.160.99	138.197.161.86
138.197.163.118	138.197.165.202	138.197.168.57	138.197.169.191
138.197.169.10	138.197.175.13	138.197.179.92	138.197.175.140