138.197.172.140

Basic Info

City: unknown

Region: unknown

Country: Canada

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.197.172.79	attackspam	Apr 28 11:20:25 prox sshd[8832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.172.79 Apr 28 11:20:27 prox sshd[8832]: Failed password for invalid user ftpuser from 138.197.172.79 port 59654 ssh2	2020-04-28 17:57:52
138.197.172.198	attackbots	diesunddas.net 138.197.172.198 \[07/Sep/2019:02:44:01 +0200\] "POST /wp-login.php HTTP/1.1" 200 8413 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" diesunddas.net 138.197.172.198 \[07/Sep/2019:02:44:02 +0200\] "POST /wp-login.php HTTP/1.1" 200 8413 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2019-09-07 10:23:46
138.197.172.198	attackbotsspam	abasicmove.de 138.197.172.198 \[22/Aug/2019:23:34:05 +0200\] "POST /wp-login.php HTTP/1.1" 200 5766 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" abasicmove.de 138.197.172.198 \[22/Aug/2019:23:34:06 +0200\] "POST /wp-login.php HTTP/1.1" 200 5561 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2019-08-23 11:54:25
138.197.172.198	attackspambots	C1,WP GET /nelson/wp-login.php	2019-08-23 02:57:03
138.197.172.198	attack	WordPress login Brute force / Web App Attack on client site.	2019-08-20 15:13:22

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.197.172.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7948
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.197.172.140.		IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021501 1800 900 604800 86400

;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 16 02:05:17 CST 2025
;; MSG SIZE  rcvd: 108

Host info

Host 140.172.197.138.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 140.172.197.138.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
85.173.114.248	attackspambots	Attempted connection to port 445.	2020-06-19 05:45:00
14.166.236.88	attackspambots	Unauthorized connection attempt from IP address 14.166.236.88 on Port 445(SMB)	2020-06-19 05:37:07
89.248.168.51	attackbots	06/18/2020-16:46:18.840906 89.248.168.51 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-06-19 05:19:07
173.236.139.117	attack	Automatic report - XMLRPC Attack	2020-06-19 05:41:07
117.50.106.150	attackspam	Jun 18 23:14:45 localhost sshd\[21883\]: Invalid user katarina from 117.50.106.150 Jun 18 23:14:45 localhost sshd\[21883\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.106.150 Jun 18 23:14:46 localhost sshd\[21883\]: Failed password for invalid user katarina from 117.50.106.150 port 32966 ssh2 Jun 18 23:18:35 localhost sshd\[22123\]: Invalid user jason from 117.50.106.150 Jun 18 23:18:35 localhost sshd\[22123\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.106.150 ...	2020-06-19 05:21:55
201.174.182.160	attack	Unauthorized connection attempt from IP address 201.174.182.160 on Port 445(SMB)	2020-06-19 05:31:38
37.252.188.130	attack	2020-06-18T22:43:05.851432amanda2.illicoweb.com sshd\[22506\]: Invalid user admin2 from 37.252.188.130 port 35888 2020-06-18T22:43:05.853688amanda2.illicoweb.com sshd\[22506\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.252.188.130 2020-06-18T22:43:07.753999amanda2.illicoweb.com sshd\[22506\]: Failed password for invalid user admin2 from 37.252.188.130 port 35888 ssh2 2020-06-18T22:46:13.729579amanda2.illicoweb.com sshd\[22786\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.252.188.130 user=root 2020-06-18T22:46:16.106524amanda2.illicoweb.com sshd\[22786\]: Failed password for root from 37.252.188.130 port 35362 ssh2 ...	2020-06-19 05:20:54
125.21.227.181	attackbots	Jun 18 21:14:37 rush sshd[5263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.21.227.181 Jun 18 21:14:39 rush sshd[5263]: Failed password for invalid user ubuntu from 125.21.227.181 port 60908 ssh2 Jun 18 21:18:45 rush sshd[5384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.21.227.181 ...	2020-06-19 05:26:01
62.215.109.129	attackbots	Hacking	2020-06-19 05:22:30
85.175.226.124	attackbotsspam	Unauthorized connection attempt from IP address 85.175.226.124 on Port 445(SMB)	2020-06-19 05:14:21
103.145.12.180	attackspam	\[Jun 19 06:46:07\] NOTICE\[2019\] chan_sip.c: Registration from '"102" \' failed for '103.145.12.180:5305' - Wrong password \[Jun 19 06:46:08\] NOTICE\[2019\] chan_sip.c: Registration from '"102" \' failed for '103.145.12.180:5305' - Wrong password \[Jun 19 06:46:08\] NOTICE\[2019\] chan_sip.c: Registration from '"102" \' failed for '103.145.12.180:5305' - Wrong password \[Jun 19 06:46:08\] NOTICE\[2019\] chan_sip.c: Registration from '"102" \' failed for '103.145.12.180:5305' - Wrong password \[Jun 19 06:46:08\] NOTICE\[2019\] chan_sip.c: Registration from '"102" \' failed for '103.145.12.180:5305' - Wrong password \[Jun 19 06:46:08\] NOTICE\[2019\] chan_sip.c: Registration from '"102" \' failed for '103.145.12.180:5305' - Wrong password \[Jun 19 06:46:08\] NOTICE\[2019\] chan_sip.c: Registration from '"102" \	2020-06-19 05:32:29
128.201.76.191	attackspambots	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-06-19 05:21:38
218.92.0.184	attackspambots	Failed password for invalid user from 218.92.0.184 port 46420 ssh2	2020-06-19 05:19:34
189.128.216.188	attackbots	Jun 18 23:15:36 master sshd[11165]: Failed password for invalid user admin from 189.128.216.188 port 52486 ssh2	2020-06-19 05:10:38
117.173.67.119	attackbotsspam	Jun 18 20:46:10 ws26vmsma01 sshd[181950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.173.67.119 Jun 18 20:46:12 ws26vmsma01 sshd[181950]: Failed password for invalid user haresh from 117.173.67.119 port 3001 ssh2 ...	2020-06-19 05:27:53

Recently Reported IPs

20.211.59.220	250.177.230.86	33.70.24.187	87.56.55.155
215.251.44.167	83.0.239.16	98.224.70.94	34.83.108.209
79.232.67.251	228.127.84.76	166.169.38.244	141.9.176.156
226.66.193.166	7.1.255.83	210.126.194.0	208.103.247.208
157.76.52.167	153.172.170.1	237.174.100.34	217.50.117.122