138.197.150.21

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
138.197.150.154	attackbots	138.197.150.154 - - [24/Jun/2020:09:02:58 +0200] "POST /xmlrpc.php HTTP/1.1" 403 14371 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.150.154 - - [24/Jun/2020:09:02:59 +0200] "POST /xmlrpc.php HTTP/1.1" 403 11248 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-06-24 18:13:02
138.197.150.154	attackbots	138.197.150.154 - - [11/Jun/2020:14:14:57 +0200] "GET /wp-login.php HTTP/1.1" 200 6183 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.150.154 - - [11/Jun/2020:14:15:00 +0200] "POST /wp-login.php HTTP/1.1" 200 6434 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.150.154 - - [11/Jun/2020:14:15:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-06-11 20:21:33
138.197.150.154	attackspam	138.197.150.154 - - [10/Jun/2020:05:46:44 +0200] "GET /wp-login.php HTTP/1.1" 200 5861 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.150.154 - - [10/Jun/2020:05:46:48 +0200] "POST /wp-login.php HTTP/1.1" 200 6112 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.150.154 - - [10/Jun/2020:05:46:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-06-10 18:59:47
138.197.150.154	attackbots	xmlrpc attack	2020-05-16 18:09:48
138.197.150.154	attackspambots	Automatic report - XMLRPC Attack	2020-05-11 20:11:51
138.197.150.87	attack	invalid login attempt (unbound)	2020-05-04 18:13:01
138.197.150.87	attack	Apr 28 14:49:31 host sshd[22264]: Invalid user colin from 138.197.150.87 port 35902 ...	2020-04-28 23:14:53
138.197.150.87	attack	Apr 28 09:59:57 sshd\[13445\]: Invalid user strong from 138.197.150.87Apr 28 09:59:59 sshd\[13445\]: Failed password for invalid user strong from 138.197.150.87 port 34274 ssh2 ...	2020-04-28 16:50:51

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.197.150.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43322
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.197.150.21.			IN	A

;; AUTHORITY SECTION:
.			244	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 11:53:43 CST 2022
;; MSG SIZE  rcvd: 107

HOST信息:

21.150.197.138.in-addr.arpa domain name pointer 132980.cloudwaysapps.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
21.150.197.138.in-addr.arpa	name = 132980.cloudwaysapps.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
46.101.43.224	attackspambots	Oct 14 14:45:51 pkdns2 sshd\[25957\]: Invalid user Asdf!@\#$ from 46.101.43.224Oct 14 14:45:52 pkdns2 sshd\[25957\]: Failed password for invalid user Asdf!@\#$ from 46.101.43.224 port 48161 ssh2Oct 14 14:50:24 pkdns2 sshd\[26203\]: Invalid user cent0s2018 from 46.101.43.224Oct 14 14:50:26 pkdns2 sshd\[26203\]: Failed password for invalid user cent0s2018 from 46.101.43.224 port 39729 ssh2Oct 14 14:54:49 pkdns2 sshd\[26344\]: Invalid user cent0s2018 from 46.101.43.224Oct 14 14:54:51 pkdns2 sshd\[26344\]: Failed password for invalid user cent0s2018 from 46.101.43.224 port 59389 ssh2 ...	2019-10-14 20:55:00
141.98.80.176	attackbots	Port Scan detected from 141.98.80.176 (PA/Panama/-). 4 hits in the last 80 seconds	2019-10-14 20:46:57
13.57.213.209	attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-10-14 20:20:39
61.185.139.72	attack	Oct 14 REMOVED dovecot: imap-login: Disconnected $auth failed, 1 attempts in 5 secs$: user=\, method=PLAIN, rip=61.185.139.72, lip=REMOVED, TLS, session=\ Oct 14 REMOVED dovecot: imap-login: Disconnected $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=61.185.139.72, lip=REMOVED, TLS: Disconnected, session=\ Oct 14 REMOVED dovecot: imap-login: Disconnected $auth failed, 1 attempts in 7 secs$: user=\, method=PLAIN, rip=61.185.139.72, lip=REMOVED, TLS, session=\	2019-10-14 20:30:26
35.229.122.68	attackbotsspam	Automated report (2019-10-14T11:55:42+00:00). Misbehaving bot detected at this address.	2019-10-14 20:26:16
185.36.81.236	attackbotsspam	Oct 14 12:02:58 mail postfix/smtpd\[4117\]: warning: unknown\[185.36.81.236\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Oct 14 12:31:24 mail postfix/smtpd\[4887\]: warning: unknown\[185.36.81.236\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Oct 14 13:00:19 mail postfix/smtpd\[6301\]: warning: unknown\[185.36.81.236\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Oct 14 13:56:37 mail postfix/smtpd\[8323\]: warning: unknown\[185.36.81.236\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\	2019-10-14 20:15:05
149.202.59.85	attackspam	Oct 14 13:51:11 meumeu sshd[21929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.59.85 Oct 14 13:51:12 meumeu sshd[21929]: Failed password for invalid user C3ntos2016 from 149.202.59.85 port 40659 ssh2 Oct 14 13:55:17 meumeu sshd[22585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.59.85 ...	2019-10-14 20:39:01
36.89.219.169	attackbotsspam	Attempt to attack host OS, exploiting network vulnerabilities, on 14-10-2019 12:55:22.	2019-10-14 20:34:46
222.186.175.155	attack	Brute force attempt	2019-10-14 20:24:58
178.128.246.123	attack	Oct 14 13:51:59 vps647732 sshd[14682]: Failed password for root from 178.128.246.123 port 60370 ssh2 ...	2019-10-14 20:19:00
103.54.219.106	attack	2019-10-14T13:51:02.297018lon01.zurich-datacenter.net sshd\[9012\]: Invalid user hao360 from 103.54.219.106 port 63793 2019-10-14T13:51:02.304274lon01.zurich-datacenter.net sshd\[9012\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.54.219.106 2019-10-14T13:51:03.693848lon01.zurich-datacenter.net sshd\[9012\]: Failed password for invalid user hao360 from 103.54.219.106 port 63793 ssh2 2019-10-14T13:55:34.893906lon01.zurich-datacenter.net sshd\[9118\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.54.219.106 user=root 2019-10-14T13:55:36.960431lon01.zurich-datacenter.net sshd\[9118\]: Failed password for root from 103.54.219.106 port 26788 ssh2 ...	2019-10-14 20:28:59
193.32.160.141	attackbotsspam	2019-10-14 H=$\[193.32.160.142\]$ \[193.32.160.141\] F=\<7psty427pi4k1@mu17.ru\> rejected RCPT \: Unrouteable address 2019-10-14 H=$\[193.32.160.142\]$ \[193.32.160.141\] F=\<7psty427pi4k1@mu17.ru\> rejected RCPT \: Unrouteable address 2019-10-14 H=$\[193.32.160.142\]$ \[193.32.160.141\] F=\<7psty427pi4k1@mu17.ru\> rejected RCPT \: Unrouteable address	2019-10-14 20:33:23
107.173.168.16	attack	Oct 14 08:37:12 debian sshd\[7321\]: Invalid user vinod from 107.173.168.16 port 47524 Oct 14 08:37:12 debian sshd\[7321\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.168.16 Oct 14 08:37:14 debian sshd\[7321\]: Failed password for invalid user vinod from 107.173.168.16 port 47524 ssh2 ...	2019-10-14 20:42:01
27.211.168.245	attackspambots	'IP reached maximum auth failures for a one day block'	2019-10-14 20:31:47
222.186.175.161	attackbotsspam	Oct 14 14:40:56 MK-Soft-Root1 sshd[23045]: Failed password for root from 222.186.175.161 port 16286 ssh2 Oct 14 14:41:00 MK-Soft-Root1 sshd[23045]: Failed password for root from 222.186.175.161 port 16286 ssh2 ...	2019-10-14 20:43:15

最近上报的IP列表

138.197.158.178	138.197.149.119	138.197.159.251	138.197.159.143
138.197.159.8	138.197.161.160	138.197.160.175	138.197.162.157
138.197.163.209	138.197.165.192	138.197.164.93	138.197.165.186
138.197.161.18	138.197.169.52	138.197.169.210	138.197.16.166
138.197.169.9	138.197.179.33	138.197.181.203	138.197.173.114

基本信息:

用户上报:

相同子网IP讨论:

WHOIS信息:

DIG信息:

HOST信息:

NSLOOKUP信息:

相关IP信息:

最新评论:

最近上报的IP列表