102.68.1.5 - IPInfo

Basic Info

City: George

Region: Western Cape

Country: South Africa

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
102.68.137.139	attackspambots	TCP (SYN) 102.68.137.139:54121 -> port 20592, len 44	2020-09-07 04:24:54
102.68.137.139	attackbots	TCP ports : 1615 / 2295 / 12969 / 15156 / 27429 / 29179	2020-09-06 20:00:58
102.68.110.108	attackspambots	Jul 14 20:24:46 mellenthin postfix/smtpd[15429]: NOQUEUE: reject: RCPT from unknown[102.68.110.108]: 554 5.7.1 Service unavailable; Client host [102.68.110.108] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/102.68.110.108 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<[102.68.110.108]>	2020-07-15 07:57:58
102.68.135.234	attack	Port scanning	2020-07-12 17:50:48
102.68.130.109	attackspambots	Unauthorized connection attempt from IP address 102.68.130.109 on Port 445(SMB)	2020-06-21 22:04:34
102.68.17.48	attackbots	May 28 03:23:09 NPSTNNYC01T sshd[21311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.68.17.48 May 28 03:23:10 NPSTNNYC01T sshd[21311]: Failed password for invalid user test1 from 102.68.17.48 port 36604 ssh2 May 28 03:27:16 NPSTNNYC01T sshd[21685]: Failed password for root from 102.68.17.48 port 54444 ssh2 ...	2020-05-28 18:23:18
102.68.17.138	attackspam	Icarus honeypot on github	2020-05-26 11:50:18
102.68.17.48	attack	May 22 15:06:56 l02a sshd[2038]: Invalid user eeg from 102.68.17.48 May 22 15:06:56 l02a sshd[2038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.68.17.48 May 22 15:06:56 l02a sshd[2038]: Invalid user eeg from 102.68.17.48 May 22 15:06:58 l02a sshd[2038]: Failed password for invalid user eeg from 102.68.17.48 port 43006 ssh2	2020-05-23 03:10:31
102.68.109.97	attack	Invalid user dircreate from 102.68.109.97 port 53255	2020-05-22 03:39:40
102.68.17.48	attackbots	Invalid user yh from 102.68.17.48 port 52032	2020-05-01 15:50:49
102.68.17.48	attackspam	SSH brute force attempt	2020-04-27 01:01:30
102.68.17.48	attackspam	Apr 20 08:17:42 mail sshd[30021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.68.17.48 user=root Apr 20 08:17:45 mail sshd[30021]: Failed password for root from 102.68.17.48 port 34032 ssh2 ...	2020-04-20 16:20:04
102.68.17.48	attack	Apr 14 10:58:31 vpn01 sshd[26903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.68.17.48 Apr 14 10:58:33 vpn01 sshd[26903]: Failed password for invalid user mis from 102.68.17.48 port 45534 ssh2 ...	2020-04-14 18:36:47
102.68.17.48	attack	Apr 11 14:01:21 ourumov-web sshd\[18424\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.68.17.48 user=root Apr 11 14:01:23 ourumov-web sshd\[18424\]: Failed password for root from 102.68.17.48 port 52110 ssh2 Apr 11 14:17:27 ourumov-web sshd\[19568\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.68.17.48 user=root ...	2020-04-11 23:54:13
102.68.17.48	attackbots	Apr 9 14:21:06 localhost sshd[117748]: Invalid user norbert from 102.68.17.48 port 59082 Apr 9 14:21:06 localhost sshd[117748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.68.17.48 Apr 9 14:21:06 localhost sshd[117748]: Invalid user norbert from 102.68.17.48 port 59082 Apr 9 14:21:08 localhost sshd[117748]: Failed password for invalid user norbert from 102.68.17.48 port 59082 ssh2 Apr 9 14:27:58 localhost sshd[118383]: Invalid user oraprod from 102.68.17.48 port 58402 ...	2020-04-10 04:31:58

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.68.1.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64723
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;102.68.1.5.			IN	A

;; AUTHORITY SECTION:
.			358	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110201 1800 900 604800 86400

;; Query time: 115 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Nov 03 03:52:49 CST 2019
;; MSG SIZE  rcvd: 114

Host info

Host 5.1.68.102.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 5.1.68.102.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
62.234.146.45	attackbots	Sep 10 09:14:39 root sshd[5881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.146.45 ...	2020-09-10 15:43:44
181.114.208.102	attackspam	(smtpauth) Failed SMTP AUTH login from 181.114.208.102 (AR/Argentina/host-208-102.adc.net.ar): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-09-09 21:22:11 plain authenticator failed for ([181.114.208.102]) [181.114.208.102]: 535 Incorrect authentication data (set_id=info)	2020-09-10 15:58:24
77.244.214.11	attackbotsspam	77.244.214.11 - - [10/Sep/2020:08:23:23 +0100] "POST /wp-login.php HTTP/1.1" 200 1874 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 77.244.214.11 - - [10/Sep/2020:08:23:24 +0100] "POST /wp-login.php HTTP/1.1" 200 1858 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 77.244.214.11 - - [10/Sep/2020:08:23:24 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-10 15:44:43
45.227.255.205	attack	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "user" at 2020-09-10T07:45:59Z	2020-09-10 16:14:40
170.83.230.2	attackbotsspam	170.83.230.2 (BR/Brazil/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 9 22:21:20 server2 sshd[2757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.207.11 user=root Sep 9 22:21:22 server2 sshd[2757]: Failed password for root from 161.35.207.11 port 50652 ssh2 Sep 9 22:25:46 server2 sshd[6424]: Failed password for root from 111.229.67.3 port 35186 ssh2 Sep 9 22:22:33 server2 sshd[3880]: Failed password for root from 170.83.230.2 port 45791 ssh2 Sep 9 22:26:16 server2 sshd[6785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.124.24.114 user=root Sep 9 22:25:44 server2 sshd[6424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.67.3 user=root IP Addresses Blocked: 161.35.207.11 (US/United States/-) 111.229.67.3 (CN/China/-)	2020-09-10 15:54:51
1.53.137.12	attackbots	Dovecot Invalid User Login Attempt.	2020-09-10 15:51:50
111.229.13.242	attack	SSH	2020-09-10 16:10:38
94.102.56.151	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-09-10 15:44:21
123.207.19.105	attackspambots	Sep 10 09:45:36 mout sshd[7081]: Invalid user ieee from 123.207.19.105 port 37814 Sep 10 09:45:38 mout sshd[7081]: Failed password for invalid user ieee from 123.207.19.105 port 37814 ssh2 Sep 10 09:45:40 mout sshd[7081]: Disconnected from invalid user ieee 123.207.19.105 port 37814 [preauth]	2020-09-10 15:50:54
60.50.99.134	attackbotsspam	Sep 10 07:21:52 root sshd[21668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.50.99.134 ...	2020-09-10 15:43:13
101.96.143.79	attackbotsspam	...	2020-09-10 15:57:30
188.124.245.52	attack	445	2020-09-10 16:05:15
45.95.168.126	attackspambots	Sep 10 09:38:13 inter-technics sshd[31133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.168.126 user=root Sep 10 09:38:15 inter-technics sshd[31133]: Failed password for root from 45.95.168.126 port 59962 ssh2 Sep 10 09:38:19 inter-technics sshd[31142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.168.126 user=root Sep 10 09:38:21 inter-technics sshd[31142]: Failed password for root from 45.95.168.126 port 42980 ssh2 Sep 10 09:38:26 inter-technics sshd[31144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.168.126 user=root Sep 10 09:38:28 inter-technics sshd[31144]: Failed password for root from 45.95.168.126 port 54206 ssh2 ...	2020-09-10 15:42:24
139.59.38.142	attackspam	sshd jail - ssh hack attempt	2020-09-10 16:15:33
124.160.83.138	attack	$f2bV_matches	2020-09-10 15:56:08

Recently Reported IPs

86.87.173.13	9.124.235.79	172.17.135.115	196.227.190.165
170.191.1.67	241.42.158.92	48.128.161.3	67.244.71.81
208.159.160.207	11.195.230.32	117.12.14.66	22.37.212.203
24.228.204.160	209.11.235.4	14.254.204.201	108.169.120.58
55.236.230.50	159.205.153.207	169.144.60.163	191.40.174.180