138.197.166.194

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Unauthorized connection attempt detected from IP address 138.197.166.194 to port 80 [J]	2020-01-25 05:09:03

Comments on same subnet:

IP	Type	Details	Datetime
138.197.166.66	attackspambots	2020-08-20T04:55:15.2903771495-001 sshd[28115]: Invalid user oracle from 138.197.166.66 port 46826 2020-08-20T04:55:15.2934631495-001 sshd[28115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.166.66 2020-08-20T04:55:15.2903771495-001 sshd[28115]: Invalid user oracle from 138.197.166.66 port 46826 2020-08-20T04:55:17.6915131495-001 sshd[28115]: Failed password for invalid user oracle from 138.197.166.66 port 46826 ssh2 2020-08-20T05:00:09.9152261495-001 sshd[28345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.166.66 user=root 2020-08-20T05:00:12.3431121495-001 sshd[28345]: Failed password for root from 138.197.166.66 port 54802 ssh2 ...	2020-08-20 19:22:45
138.197.166.66	attackspambots	Aug 9 09:50:02 * sshd[22797]: Failed password for root from 138.197.166.66 port 49612 ssh2	2020-08-09 18:16:56
138.197.166.66	attack	Aug 3 22:28:05 server sshd[47805]: Failed password for root from 138.197.166.66 port 56432 ssh2 Aug 3 22:41:39 server sshd[52625]: Failed password for root from 138.197.166.66 port 43696 ssh2 Aug 3 22:47:32 server sshd[54555]: Failed password for root from 138.197.166.66 port 56520 ssh2	2020-08-04 04:53:25
138.197.166.66	attack	Aug 2 18:41:51 h2646465 sshd[9833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.166.66 user=root Aug 2 18:41:52 h2646465 sshd[9833]: Failed password for root from 138.197.166.66 port 42202 ssh2 Aug 2 18:49:01 h2646465 sshd[10516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.166.66 user=root Aug 2 18:49:02 h2646465 sshd[10516]: Failed password for root from 138.197.166.66 port 38734 ssh2 Aug 2 18:52:59 h2646465 sshd[11119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.166.66 user=root Aug 2 18:53:01 h2646465 sshd[11119]: Failed password for root from 138.197.166.66 port 58512 ssh2 Aug 2 18:56:53 h2646465 sshd[11732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.166.66 user=root Aug 2 18:56:55 h2646465 sshd[11732]: Failed password for root from 138.197.166.66 port 50058 ssh2 Aug 2 19:00:42 h26464	2020-08-03 03:31:41
138.197.166.66	attackspambots	Invalid user nikolas from 138.197.166.66 port 49724	2020-07-27 18:28:02
138.197.166.110	attack	Exploited Host.	2020-07-26 03:00:46
138.197.166.66	attackbotsspam	Fail2Ban Ban Triggered	2020-07-23 18:04:25
138.197.166.66	attack	Jul 6 01:36:37 webhost01 sshd[26320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.166.66 Jul 6 01:36:39 webhost01 sshd[26320]: Failed password for invalid user xixi from 138.197.166.66 port 33190 ssh2 ...	2020-07-06 02:45:01
138.197.166.110	attackspambots	$f2bV_matches	2020-07-04 05:10:54
138.197.166.66	attackspam	$f2bV_matches	2020-07-04 05:10:15
138.197.166.66	attack	This client attempted to login to an administrator account on a Website, or abused from another resource.	2020-06-13 15:38:19
138.197.166.66	attackbots	Jun 7 12:37:03 vpn01 sshd[13749]: Failed password for root from 138.197.166.66 port 39898 ssh2 ...	2020-06-07 18:48:33
138.197.166.66	attackbots	May 30 00:40:17 NPSTNNYC01T sshd[11834]: Failed password for root from 138.197.166.66 port 53064 ssh2 May 30 00:41:19 NPSTNNYC01T sshd[11962]: Failed password for root from 138.197.166.66 port 37206 ssh2 ...	2020-05-30 12:49:32
138.197.166.66	attackspambots	May 15 23:27:23 vps46666688 sshd[20334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.166.66 May 15 23:27:25 vps46666688 sshd[20334]: Failed password for invalid user haisou from 138.197.166.66 port 47818 ssh2 ...	2020-05-16 20:35:08
138.197.166.66	attackbots	May 15 15:47:55 pkdns2 sshd\[34959\]: Invalid user zimbra from 138.197.166.66May 15 15:47:57 pkdns2 sshd\[34959\]: Failed password for invalid user zimbra from 138.197.166.66 port 46124 ssh2May 15 15:52:43 pkdns2 sshd\[35264\]: Invalid user user from 138.197.166.66May 15 15:52:45 pkdns2 sshd\[35264\]: Failed password for invalid user user from 138.197.166.66 port 54124 ssh2May 15 15:57:31 pkdns2 sshd\[35528\]: Invalid user guest from 138.197.166.66May 15 15:57:33 pkdns2 sshd\[35528\]: Failed password for invalid user guest from 138.197.166.66 port 33888 ssh2 ...	2020-05-15 21:01:26

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.197.166.194
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30729
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.197.166.194.		IN	A

;; AUTHORITY SECTION:
.			481	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012400 1800 900 604800 86400

;; Query time: 116 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 24 22:17:40 CST 2020
;; MSG SIZE  rcvd: 119

Host info

Host 194.166.197.138.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 194.166.197.138.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
14.161.16.62	attackbots	Sep 27 15:03:14 OPSO sshd\[28880\]: Invalid user sage from 14.161.16.62 port 34336 Sep 27 15:03:14 OPSO sshd\[28880\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.16.62 Sep 27 15:03:16 OPSO sshd\[28880\]: Failed password for invalid user sage from 14.161.16.62 port 34336 ssh2 Sep 27 15:07:40 OPSO sshd\[29859\]: Invalid user doris from 14.161.16.62 port 45964 Sep 27 15:07:40 OPSO sshd\[29859\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.16.62	2019-09-27 21:18:08
222.186.173.180	attackbotsspam	F2B jail: sshd. Time: 2019-09-27 15:21:50, Reported by: VKReport	2019-09-27 21:24:37
84.53.198.245	attackspambots	Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:15:21.	2019-09-27 20:56:22
222.186.52.86	attackbots	Sep 27 08:51:33 ny01 sshd[32002]: Failed password for root from 222.186.52.86 port 23181 ssh2 Sep 27 08:51:36 ny01 sshd[32003]: Failed password for root from 222.186.52.86 port 52226 ssh2 Sep 27 08:51:36 ny01 sshd[32002]: Failed password for root from 222.186.52.86 port 23181 ssh2	2019-09-27 21:09:22
54.39.193.26	attack	Sep 27 09:30:24 plusreed sshd[16322]: Invalid user claudio from 54.39.193.26 ...	2019-09-27 21:31:40
62.234.152.218	attackspambots	Sep 27 03:01:27 php1 sshd\[14501\]: Invalid user passwd from 62.234.152.218 Sep 27 03:01:27 php1 sshd\[14501\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.152.218 Sep 27 03:01:29 php1 sshd\[14501\]: Failed password for invalid user passwd from 62.234.152.218 port 53617 ssh2 Sep 27 03:07:44 php1 sshd\[15175\]: Invalid user rp from 62.234.152.218 Sep 27 03:07:44 php1 sshd\[15175\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.152.218	2019-09-27 21:08:55
78.234.235.122	attack	Netgear DGN Device Remote Command Execution Vulnerability	2019-09-27 21:08:23
178.32.127.179	attackspambots	Sep 27 03:11:35 lcdev sshd\[28943\]: Invalid user mailman from 178.32.127.179 Sep 27 03:11:35 lcdev sshd\[28943\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=fo3.network.minehosting.pro Sep 27 03:11:37 lcdev sshd\[28943\]: Failed password for invalid user mailman from 178.32.127.179 port 52929 ssh2 Sep 27 03:15:28 lcdev sshd\[29281\]: Invalid user ftp from 178.32.127.179 Sep 27 03:15:28 lcdev sshd\[29281\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=fo3.network.minehosting.pro	2019-09-27 21:16:34
49.88.112.114	attackspambots	Sep 27 03:20:32 aiointranet sshd\[17764\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root Sep 27 03:20:34 aiointranet sshd\[17764\]: Failed password for root from 49.88.112.114 port 49907 ssh2 Sep 27 03:21:35 aiointranet sshd\[17844\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root Sep 27 03:21:37 aiointranet sshd\[17844\]: Failed password for root from 49.88.112.114 port 47723 ssh2 Sep 27 03:22:36 aiointranet sshd\[17928\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root	2019-09-27 21:26:32
51.77.140.244	attack	Sep 27 14:58:07 SilenceServices sshd[14741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.140.244 Sep 27 14:58:08 SilenceServices sshd[14741]: Failed password for invalid user house from 51.77.140.244 port 40712 ssh2 Sep 27 15:04:31 SilenceServices sshd[18756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.140.244	2019-09-27 21:12:34
101.255.52.171	attackspambots	Sep 27 13:07:37 game-panel sshd[8129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.255.52.171 Sep 27 13:07:38 game-panel sshd[8129]: Failed password for invalid user avahi-autoipd from 101.255.52.171 port 39158 ssh2 Sep 27 13:12:34 game-panel sshd[8364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.255.52.171	2019-09-27 21:21:43
94.134.95.114	attackbots	Sep 27 12:15:26 hermescis postfix/smtpd\[15413\]: NOQUEUE: reject: RCPT from unknown\[94.134.95.114\]: 550 5.1.1 \: Recipient address rejected:* from=\ to=\ proto=ESMTP helo=\<\[94.134.95.114\]\>	2019-09-27 20:45:45
46.101.103.207	attack	Sep 27 02:27:29 lcdev sshd\[24747\]: Invalid user oracle from 46.101.103.207 Sep 27 02:27:29 lcdev sshd\[24747\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.103.207 Sep 27 02:27:31 lcdev sshd\[24747\]: Failed password for invalid user oracle from 46.101.103.207 port 53672 ssh2 Sep 27 02:31:35 lcdev sshd\[25148\]: Invalid user ksb from 46.101.103.207 Sep 27 02:31:35 lcdev sshd\[25148\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.103.207	2019-09-27 20:44:50
125.37.161.82	attack	Automated reporting of FTP Brute Force	2019-09-27 21:25:35
209.45.29.218	attackbots	Sep 27 12:47:11 web8 sshd\[5325\]: Invalid user ab from 209.45.29.218 Sep 27 12:47:11 web8 sshd\[5325\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.45.29.218 Sep 27 12:47:12 web8 sshd\[5325\]: Failed password for invalid user ab from 209.45.29.218 port 57896 ssh2 Sep 27 12:51:47 web8 sshd\[7572\]: Invalid user adonix from 209.45.29.218 Sep 27 12:51:47 web8 sshd\[7572\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.45.29.218	2019-09-27 20:52:34

Recently Reported IPs

181.141.238.8	23.173.81.86	119.122.88.42	6.189.124.105
117.60.38.178	60.8.200.207	195.212.22.24	235.27.90.174
58.252.108.40	188.14.198.228	4.92.227.41	44.94.62.11
149.149.33.58	49.71.124.210	249.9.53.173	192.103.234.133
157.70.203.48	192.128.157.46	243.174.17.68	120.143.60.127