138.197.193.54

Basic Info

City: Santa Clara

Region: California

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.197.193.62	attackbots	Aug 15 02:15:39 lcdev sshd\[1100\]: Invalid user hidden-user from 138.197.193.62 Aug 15 02:15:39 lcdev sshd\[1100\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.193.62 Aug 15 02:15:41 lcdev sshd\[1100\]: Failed password for invalid user hidden-user from 138.197.193.62 port 38312 ssh2 Aug 15 02:20:15 lcdev sshd\[1494\]: Invalid user akuo from 138.197.193.62 Aug 15 02:20:15 lcdev sshd\[1494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.193.62	2019-08-15 20:26:32
138.197.193.62	attackbots	Jul 25 15:22:28 animalibera sshd[1587]: Invalid user test from 138.197.193.62 port 57022 ...	2019-07-26 03:09:05
138.197.193.141	attackbots	Automatic report - Web App Attack	2019-07-08 12:22:44

Type

Details

Datetime

138.197.193.62

attackbots

Aug 15 02:15:39 lcdev sshd\[1100\]: Invalid user hidden-user from 138.197.193.62
Aug 15 02:15:39 lcdev sshd\[1100\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.193.62
Aug 15 02:15:41 lcdev sshd\[1100\]: Failed password for invalid user hidden-user from 138.197.193.62 port 38312 ssh2
Aug 15 02:20:15 lcdev sshd\[1494\]: Invalid user akuo from 138.197.193.62
Aug 15 02:20:15 lcdev sshd\[1494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.193.62

2019-08-15 20:26:32

138.197.193.62

attackbots

Jul 25 15:22:28 animalibera sshd[1587]: Invalid user test from 138.197.193.62 port 57022
...

2019-07-26 03:09:05

138.197.193.141

attackbots

Automatic report - Web App Attack

2019-07-08 12:22:44

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.197.193.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25379
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.197.193.54.			IN	A

;; AUTHORITY SECTION:
.			181	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022010301 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 04 09:51:38 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 54.193.197.138.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 54.193.197.138.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
93.177.154.199	attackspambots	ET CINS Active Threat Intelligence Poor Reputation IP group 87 - port: 23 proto: TCP cat: Misc Attack	2020-05-17 08:46:03
94.102.51.29	attackspambots	May 17 02:27:20 debian-2gb-nbg1-2 kernel: \[11934082.191308\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=94.102.51.29 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=293 PROTO=TCP SPT=40571 DPT=5000 WINDOW=1024 RES=0x00 SYN URGP=0	2020-05-17 08:43:43
180.76.182.56	attack	May 19 16:56:39 webhost01 sshd[7603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.182.56 May 19 16:56:41 webhost01 sshd[7603]: Failed password for invalid user aor from 180.76.182.56 port 9429 ssh2 ...	2020-05-19 23:46:24
146.88.240.4	attack	146.88.240.4 was recorded 5 times by 4 hosts attempting to connect to the following ports: 3283,47808. Incident counter (4h, 24h, all-time): 5, 60, 77957	2020-05-17 08:38:02
45.143.220.179	attack	SIPvicious	2020-05-19 02:29:26
85.209.0.115	attack	SSH Bruteforce attack on our servers coming in from various IP addresses from 85.209.0.100 - 85.209.0.181. Blocked using Fail2ban	2020-05-19 18:55:19
60.246.2.153	attack	(imapd) Failed IMAP login from 60.246.2.153 (MO/Macao/nz2l153.bb60246.ctm.net): 1 in the last 3600 secs	2020-05-19 23:50:11
104.206.128.74	attack	TCP (SYN) 104.206.128.74:60254 -> port 21, len 44	2020-05-17 08:40:44
119.27.185.8	attackbotsspam	ThinkPHP RCE Exploitation Attempt	2020-05-19 23:45:29
91.121.49.238	attackbotsspam	May 19 11:14:01 mail sshd\[3908\]: Invalid user qjz from 91.121.49.238 May 19 11:14:01 mail sshd\[3908\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.49.238 May 19 11:14:04 mail sshd\[3908\]: Failed password for invalid user qjz from 91.121.49.238 port 54050 ssh2 ...	2020-05-19 23:42:11
149.56.19.35	spamattack	Message Details Name: Kerri Miller Email: jmiller22@hotmail.com Subject: Error on your website Message: It looks like you've misspelled the word "nobel" on your website. I thought you would like to know :). Silly mistakes can ruin your site's credibility. I've used a tool called SpellScan.com in the past to keep mistakes off of my website. -Kerri	2020-05-17 18:31:49
104.140.188.6	attackbotsspam	TCP (SYN) 104.140.188.6:56801 -> port 23, len 44	2020-05-17 08:41:37
118.193.159.139	attackbots	ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic	2020-05-17 08:39:52
80.82.78.104	attackbots	port scan and connect, tcp 80 (http)	2020-05-19 23:47:15
217.160.214.48	attack	2020-05-19T11:52:25.565579scmdmz1 sshd[19519]: Invalid user ugr from 217.160.214.48 port 32810 2020-05-19T11:52:27.831907scmdmz1 sshd[19519]: Failed password for invalid user ugr from 217.160.214.48 port 32810 ssh2 2020-05-19T11:56:11.807618scmdmz1 sshd[20014]: Invalid user kxw from 217.160.214.48 port 41476 ...	2020-05-19 23:44:16

Recently Reported IPs

153.51.22.143	195.101.213.159	37.25.151.240	207.155.193.249
189.203.34.173	192.243.32.249	134.215.193.220	90.59.126.204
68.55.146.20	5.79.182.1	61.75.82.58	130.39.44.93
11.75.4.33	92.9.108.17	37.72.196.211	242.140.210.197
36.162.181.220	7.53.96.58	211.36.248.71	185.63.153.127