138.197.66.192

Basic Info

City: Clifton

Region: New Jersey

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	2020-03-30T02:05:56.505333whonock.onlinehub.pt sshd[27683]: Invalid user bbk from 138.197.66.192 port 36284 2020-03-30T02:05:56.509461whonock.onlinehub.pt sshd[27683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.66.192 2020-03-30T02:05:56.505333whonock.onlinehub.pt sshd[27683]: Invalid user bbk from 138.197.66.192 port 36284 2020-03-30T02:05:58.728906whonock.onlinehub.pt sshd[27683]: Failed password for invalid user bbk from 138.197.66.192 port 36284 ssh2 2020-03-30T02:11:03.263151whonock.onlinehub.pt sshd[27930]: Invalid user uyh from 138.197.66.192 port 36656 2020-03-30T02:11:03.267196whonock.onlinehub.pt sshd[27930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.66.192 2020-03-30T02:11:03.263151whonock.onlinehub.pt sshd[27930]: Invalid user uyh from 138.197.66.192 port 36656 2020-03-30T02:11:05.632067whonock.onlinehub.pt sshd[27930]: Failed password for invalid user uyh from 138.197 ...	2020-03-30 09:34:37
attackspambots	Mar 25 21:18:24 zulu1842 sshd[30770]: Invalid user hedya from 138.197.66.192 Mar 25 21:18:24 zulu1842 sshd[30770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.66.192 Mar 25 21:18:26 zulu1842 sshd[30770]: Failed password for invalid user hedya from 138.197.66.192 port 56062 ssh2 Mar 25 21:18:26 zulu1842 sshd[30770]: Received disconnect from 138.197.66.192: 11: Bye Bye [preauth] Mar 25 21:23:33 zulu1842 sshd[31168]: Invalid user mandriva from 138.197.66.192 Mar 25 21:23:33 zulu1842 sshd[31168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.66.192 Mar 25 21:23:35 zulu1842 sshd[31168]: Failed password for invalid user mandriva from 138.197.66.192 port 44988 ssh2 Mar 25 21:23:35 zulu1842 sshd[31168]: Received disconnect from 138.197.66.192: 11: Bye Bye [preauth] Mar 25 21:26:42 zulu1842 sshd[31372]: Invalid user www from 138.197.66.192 Mar 25 21:26:42 zulu1842 sshd[31372]:........ -------------------------------	2020-03-27 05:17:58

Type

Details

Datetime

attack

2020-03-30T02:05:56.505333whonock.onlinehub.pt sshd[27683]: Invalid user bbk from 138.197.66.192 port 36284
2020-03-30T02:05:56.509461whonock.onlinehub.pt sshd[27683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.66.192
2020-03-30T02:05:56.505333whonock.onlinehub.pt sshd[27683]: Invalid user bbk from 138.197.66.192 port 36284
2020-03-30T02:05:58.728906whonock.onlinehub.pt sshd[27683]: Failed password for invalid user bbk from 138.197.66.192 port 36284 ssh2
2020-03-30T02:11:03.263151whonock.onlinehub.pt sshd[27930]: Invalid user uyh from 138.197.66.192 port 36656
2020-03-30T02:11:03.267196whonock.onlinehub.pt sshd[27930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.66.192
2020-03-30T02:11:03.263151whonock.onlinehub.pt sshd[27930]: Invalid user uyh from 138.197.66.192 port 36656
2020-03-30T02:11:05.632067whonock.onlinehub.pt sshd[27930]: Failed password for invalid user uyh from 138.197
...

2020-03-30 09:34:37

attackspambots

Mar 25 21:18:24 zulu1842 sshd[30770]: Invalid user hedya from 138.197.66.192
Mar 25 21:18:24 zulu1842 sshd[30770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.66.192 
Mar 25 21:18:26 zulu1842 sshd[30770]: Failed password for invalid user hedya from 138.197.66.192 port 56062 ssh2
Mar 25 21:18:26 zulu1842 sshd[30770]: Received disconnect from 138.197.66.192: 11: Bye Bye [preauth]
Mar 25 21:23:33 zulu1842 sshd[31168]: Invalid user mandriva from 138.197.66.192
Mar 25 21:23:33 zulu1842 sshd[31168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.66.192 
Mar 25 21:23:35 zulu1842 sshd[31168]: Failed password for invalid user mandriva from 138.197.66.192 port 44988 ssh2
Mar 25 21:23:35 zulu1842 sshd[31168]: Received disconnect from 138.197.66.192: 11: Bye Bye [preauth]
Mar 25 21:26:42 zulu1842 sshd[31372]: Invalid user www from 138.197.66.192
Mar 25 21:26:42 zulu1842 sshd[31372]:........
-------------------------------

2020-03-27 05:17:58

Comments on same subnet:

IP	Type	Details	Datetime
138.197.66.124	attack	Oct 12 18:19:11 dev0-dcde-rnet sshd[24191]: Failed password for root from 138.197.66.124 port 46600 ssh2 Oct 12 18:31:05 dev0-dcde-rnet sshd[24290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.66.124 Oct 12 18:31:07 dev0-dcde-rnet sshd[24290]: Failed password for invalid user olivia from 138.197.66.124 port 53074 ssh2	2020-10-13 01:19:57
138.197.66.124	attack	Oct 12 18:26:52 web1 sshd[20108]: Invalid user hall from 138.197.66.124 port 34488 Oct 12 18:26:52 web1 sshd[20108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.66.124 Oct 12 18:26:52 web1 sshd[20108]: Invalid user hall from 138.197.66.124 port 34488 Oct 12 18:26:54 web1 sshd[20108]: Failed password for invalid user hall from 138.197.66.124 port 34488 ssh2 Oct 12 18:31:26 web1 sshd[21619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.66.124 user=root Oct 12 18:31:28 web1 sshd[21619]: Failed password for root from 138.197.66.124 port 52078 ssh2 Oct 12 18:34:41 web1 sshd[22607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.66.124 user=root Oct 12 18:34:43 web1 sshd[22607]: Failed password for root from 138.197.66.124 port 55486 ssh2 Oct 12 18:37:54 web1 sshd[23706]: Invalid user lilli from 138.197.66.124 port 58900 ...	2020-10-12 16:42:28
138.197.66.68	attackbotsspam	$f2bV_matches	2020-10-08 05:54:27
138.197.66.68	attackbots	Oct 7 06:27:06 mail sshd[12463]: Failed password for root from 138.197.66.68 port 41183 ssh2	2020-10-07 14:11:34
138.197.66.68	attackspambots	Sep 30 17:13:29 rocket sshd[14643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.66.68 Sep 30 17:13:31 rocket sshd[14643]: Failed password for invalid user account from 138.197.66.68 port 43793 ssh2 ...	2020-10-01 02:07:16
138.197.66.68	attackbotsspam	Invalid user deploy from 138.197.66.68 port 36829	2020-09-30 18:17:20
138.197.66.68	attackspambots	$f2bV_matches	2020-09-30 08:29:21
138.197.66.68	attackspambots	Invalid user deploy from 138.197.66.68 port 36829	2020-09-30 01:16:24
138.197.66.68	attack	Sep 28 17:31:47 NPSTNNYC01T sshd[1700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.66.68 Sep 28 17:31:49 NPSTNNYC01T sshd[1700]: Failed password for invalid user mysql from 138.197.66.68 port 42160 ssh2 Sep 28 17:35:40 NPSTNNYC01T sshd[1982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.66.68 ...	2020-09-29 05:38:45
138.197.66.68	attackbots	Sep 28 11:12:14 *** sshd[19206]: Invalid user victor from 138.197.66.68	2020-09-28 22:00:56
138.197.66.68	attackbots	Sep 28 01:51:45 NPSTNNYC01T sshd[28420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.66.68 Sep 28 01:51:47 NPSTNNYC01T sshd[28420]: Failed password for invalid user ww from 138.197.66.68 port 39393 ssh2 Sep 28 01:55:31 NPSTNNYC01T sshd[28759]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.66.68 ...	2020-09-28 14:07:29
138.197.66.68	attack	Automatic report - Banned IP Access	2020-09-15 22:04:12
138.197.66.68	attackspambots	$f2bV_matches	2020-09-15 14:00:36
138.197.66.68	attack	$f2bV_matches	2020-09-15 06:11:29
138.197.66.68	attackspambots	IP blocked	2020-09-12 22:37:18

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.197.66.192
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32996
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.197.66.192.			IN	A

;; AUTHORITY SECTION:
.			451	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020032601 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 27 05:17:55 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 192.66.197.138.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 192.66.197.138.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
192.99.32.86	attackbots	Oct 2 20:40:26 hanapaa sshd\[11873\]: Invalid user pul from 192.99.32.86 Oct 2 20:40:26 hanapaa sshd\[11873\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns517943.ip-192-99-32.net Oct 2 20:40:28 hanapaa sshd\[11873\]: Failed password for invalid user pul from 192.99.32.86 port 34902 ssh2 Oct 2 20:44:00 hanapaa sshd\[12148\]: Invalid user oracle from 192.99.32.86 Oct 2 20:44:00 hanapaa sshd\[12148\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns517943.ip-192-99-32.net	2019-10-03 15:02:33
185.9.3.48	attack	Oct 3 05:38:46 game-panel sshd[8457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.9.3.48 Oct 3 05:38:48 game-panel sshd[8457]: Failed password for invalid user guest from 185.9.3.48 port 43128 ssh2 Oct 3 05:43:03 game-panel sshd[8697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.9.3.48	2019-10-03 15:16:32
165.22.112.45	attack	Oct 3 14:06:09 webhost01 sshd[10700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.112.45 Oct 3 14:06:11 webhost01 sshd[10700]: Failed password for invalid user ifrs from 165.22.112.45 port 49382 ssh2 ...	2019-10-03 15:31:52
106.12.83.210	attackbotsspam	Oct 3 08:59:31 hosting sshd[22856]: Invalid user user from 106.12.83.210 port 49830 ...	2019-10-03 14:44:23
190.155.135.138	attackbotsspam	SPF Fail sender not permitted to send mail for @ipsp-profremar.com / Sent mail to target address hacked/leaked from abandonia in 2016	2019-10-03 15:14:21
222.186.15.110	attackspambots	Oct 3 08:53:36 mail sshd\[26980\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.110 user=root Oct 3 08:53:38 mail sshd\[26980\]: Failed password for root from 222.186.15.110 port 38973 ssh2 Oct 3 08:53:40 mail sshd\[26980\]: Failed password for root from 222.186.15.110 port 38973 ssh2 Oct 3 08:53:42 mail sshd\[26980\]: Failed password for root from 222.186.15.110 port 38973 ssh2 Oct 3 09:00:18 mail sshd\[27992\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.110 user=root	2019-10-03 15:08:39
176.109.238.62	attackspam	" "	2019-10-03 15:18:57
178.62.60.233	attack	2019-10-03T02:41:19.7118451495-001 sshd\[62039\]: Failed password for invalid user rootme from 178.62.60.233 port 57430 ssh2 2019-10-03T02:52:51.5748611495-001 sshd\[62804\]: Invalid user yx from 178.62.60.233 port 37262 2019-10-03T02:52:51.5799491495-001 sshd\[62804\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=exxonmobil.online 2019-10-03T02:52:53.9276271495-001 sshd\[62804\]: Failed password for invalid user yx from 178.62.60.233 port 37262 ssh2 2019-10-03T02:56:52.7784791495-001 sshd\[63044\]: Invalid user data from 178.62.60.233 port 49360 2019-10-03T02:56:52.7874651495-001 sshd\[63044\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=exxonmobil.online ...	2019-10-03 15:12:53
2a02:587:5401:4e00:29b5:6baa:e91e:bf0d	attack	ENG,WP GET /wp-login.php	2019-10-03 15:13:33
222.186.175.8	attack	Oct 3 09:08:41 h2177944 sshd\[8953\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.8 user=root Oct 3 09:08:43 h2177944 sshd\[8953\]: Failed password for root from 222.186.175.8 port 60282 ssh2 Oct 3 09:08:47 h2177944 sshd\[8953\]: Failed password for root from 222.186.175.8 port 60282 ssh2 Oct 3 09:08:52 h2177944 sshd\[8953\]: Failed password for root from 222.186.175.8 port 60282 ssh2 ...	2019-10-03 15:21:52
62.234.144.135	attackspam	Lines containing failures of 62.234.144.135 Oct 2 06:18:34 shared12 sshd[30193]: Invalid user lw from 62.234.144.135 port 38032 Oct 2 06:18:34 shared12 sshd[30193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.144.135 Oct 2 06:18:36 shared12 sshd[30193]: Failed password for invalid user lw from 62.234.144.135 port 38032 ssh2 Oct 2 06:18:36 shared12 sshd[30193]: Received disconnect from 62.234.144.135 port 38032:11: Bye Bye [preauth] Oct 2 06:18:36 shared12 sshd[30193]: Disconnected from invalid user lw 62.234.144.135 port 38032 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=62.234.144.135	2019-10-03 15:03:41
193.32.160.139	attackspambots	2019-10-03 08:47:50 H=$\[193.32.160.143\]$ \[193.32.160.139\] F=\<4hpz5kry96kmy@ihstcuae.com\> rejected RCPT \: Unrouteable address 2019-10-03 08:47:50 H=$\[193.32.160.143\]$ \[193.32.160.139\] F=\<4hpz5kry96kmy@ihstcuae.com\> rejected RCPT \: Unrouteable address 2019-10-03 08:47:50 H=$\[193.32.160.143\]$ \[193.32.160.139\] F=\<4hpz5kry96kmy@ihstcuae.com\> rejected RCPT \: Unrouteable address 2019-10-03 08:47:50 H=$\[193.32.160.143\]$ \[193.32.160.139\] F=\<4hpz5kry96kmy@ihstcuae.com\> rejected RCPT \: Unrouteable address 2019-10-03 08:47:50 H=$\[193.32.160.143\]$ \[193.32.160.139\] F=\<4hpz5kry96kmy@ihstcuae.com\> rejected RCPT \: Unrouteable address 2019-10-03 08:47:50 H=$\[193.32.160.143\]$ \[193.32.160.139\] F=\<4hpz5kry96kmy@ihstcuae.com\> rejected RCPT \: Unrouteable address 2019-10-03 08:47:50 H=$\[193.32.160.143\]$ \[193.32.160.139\] F=\<4	2019-10-03 15:22:42
60.249.21.129	attackbots	Oct 2 21:11:44 php1 sshd\[16722\]: Invalid user system from 60.249.21.129 Oct 2 21:11:44 php1 sshd\[16722\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60-249-21-129.hinet-ip.hinet.net Oct 2 21:11:46 php1 sshd\[16722\]: Failed password for invalid user system from 60.249.21.129 port 59398 ssh2 Oct 2 21:15:57 php1 sshd\[17213\]: Invalid user globit from 60.249.21.129 Oct 2 21:15:57 php1 sshd\[17213\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60-249-21-129.hinet-ip.hinet.net	2019-10-03 15:18:31
202.98.213.218	attackspam	2019-09-05 14:42:42,131 fail2ban.actions [814]: NOTICE [sshd] Ban 202.98.213.218 2019-09-05 18:02:40,619 fail2ban.actions [814]: NOTICE [sshd] Ban 202.98.213.218 2019-09-05 21:43:53,472 fail2ban.actions [814]: NOTICE [sshd] Ban 202.98.213.218 ...	2019-10-03 15:10:34
217.65.27.132	attackbots	Oct 3 07:15:06 taivassalofi sshd[157195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.65.27.132 Oct 3 07:15:08 taivassalofi sshd[157195]: Failed password for invalid user lynx from 217.65.27.132 port 60810 ssh2 ...	2019-10-03 14:58:13

Recently Reported IPs

178.58.134.249	174.97.227.145	176.170.15.79	131.130.44.181
119.90.61.52	175.72.49.98	42.182.34.228	117.203.195.224
105.0.226.146	1.237.141.228	95.148.212.130	182.53.100.155
125.180.164.9	86.107.23.28	63.74.147.12	144.57.251.141
39.243.71.102	191.138.91.85	178.226.218.198	212.16.250.155