102.68.1.5 - IPInfo

Basic Info

City: George

Region: Western Cape

Country: South Africa

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
102.68.137.139	attackspambots	TCP (SYN) 102.68.137.139:54121 -> port 20592, len 44	2020-09-07 04:24:54
102.68.137.139	attackbots	TCP ports : 1615 / 2295 / 12969 / 15156 / 27429 / 29179	2020-09-06 20:00:58
102.68.110.108	attackspambots	Jul 14 20:24:46 mellenthin postfix/smtpd[15429]: NOQUEUE: reject: RCPT from unknown[102.68.110.108]: 554 5.7.1 Service unavailable; Client host [102.68.110.108] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/102.68.110.108 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<[102.68.110.108]>	2020-07-15 07:57:58
102.68.135.234	attack	Port scanning	2020-07-12 17:50:48
102.68.130.109	attackspambots	Unauthorized connection attempt from IP address 102.68.130.109 on Port 445(SMB)	2020-06-21 22:04:34
102.68.17.48	attackbots	May 28 03:23:09 NPSTNNYC01T sshd[21311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.68.17.48 May 28 03:23:10 NPSTNNYC01T sshd[21311]: Failed password for invalid user test1 from 102.68.17.48 port 36604 ssh2 May 28 03:27:16 NPSTNNYC01T sshd[21685]: Failed password for root from 102.68.17.48 port 54444 ssh2 ...	2020-05-28 18:23:18
102.68.17.138	attackspam	Icarus honeypot on github	2020-05-26 11:50:18
102.68.17.48	attack	May 22 15:06:56 l02a sshd[2038]: Invalid user eeg from 102.68.17.48 May 22 15:06:56 l02a sshd[2038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.68.17.48 May 22 15:06:56 l02a sshd[2038]: Invalid user eeg from 102.68.17.48 May 22 15:06:58 l02a sshd[2038]: Failed password for invalid user eeg from 102.68.17.48 port 43006 ssh2	2020-05-23 03:10:31
102.68.109.97	attack	Invalid user dircreate from 102.68.109.97 port 53255	2020-05-22 03:39:40
102.68.17.48	attackbots	Invalid user yh from 102.68.17.48 port 52032	2020-05-01 15:50:49
102.68.17.48	attackspam	SSH brute force attempt	2020-04-27 01:01:30
102.68.17.48	attackspam	Apr 20 08:17:42 mail sshd[30021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.68.17.48 user=root Apr 20 08:17:45 mail sshd[30021]: Failed password for root from 102.68.17.48 port 34032 ssh2 ...	2020-04-20 16:20:04
102.68.17.48	attack	Apr 14 10:58:31 vpn01 sshd[26903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.68.17.48 Apr 14 10:58:33 vpn01 sshd[26903]: Failed password for invalid user mis from 102.68.17.48 port 45534 ssh2 ...	2020-04-14 18:36:47
102.68.17.48	attack	Apr 11 14:01:21 ourumov-web sshd\[18424\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.68.17.48 user=root Apr 11 14:01:23 ourumov-web sshd\[18424\]: Failed password for root from 102.68.17.48 port 52110 ssh2 Apr 11 14:17:27 ourumov-web sshd\[19568\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.68.17.48 user=root ...	2020-04-11 23:54:13
102.68.17.48	attackbots	Apr 9 14:21:06 localhost sshd[117748]: Invalid user norbert from 102.68.17.48 port 59082 Apr 9 14:21:06 localhost sshd[117748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.68.17.48 Apr 9 14:21:06 localhost sshd[117748]: Invalid user norbert from 102.68.17.48 port 59082 Apr 9 14:21:08 localhost sshd[117748]: Failed password for invalid user norbert from 102.68.17.48 port 59082 ssh2 Apr 9 14:27:58 localhost sshd[118383]: Invalid user oraprod from 102.68.17.48 port 58402 ...	2020-04-10 04:31:58

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.68.1.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64723
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;102.68.1.5.			IN	A

;; AUTHORITY SECTION:
.			358	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110201 1800 900 604800 86400

;; Query time: 115 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Nov 03 03:52:49 CST 2019
;; MSG SIZE  rcvd: 114

Host info

Host 5.1.68.102.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 5.1.68.102.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
14.116.150.230	attack	$f2bV_matches	2020-04-04 08:22:51
43.243.37.227	attack	Apr 4 01:59:19 h2829583 sshd[26497]: Failed password for root from 43.243.37.227 port 58986 ssh2	2020-04-04 08:44:15
58.96.242.120	attackspambots	Automatic report - Port Scan Attack	2020-04-04 09:01:14
111.229.128.9	attackbotsspam	Apr 4 00:24:29 django sshd[3631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.128.9 user=r.r Apr 4 00:24:31 django sshd[3631]: Failed password for r.r from 111.229.128.9 port 33836 ssh2 Apr 4 00:24:31 django sshd[3632]: Received disconnect from 111.229.128.9: 11: Bye Bye Apr 4 00:36:16 django sshd[4980]: Invalid user tomcat from 111.229.128.9 Apr 4 00:36:16 django sshd[4980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.128.9 Apr 4 00:36:18 django sshd[4980]: Failed password for invalid user tomcat from 111.229.128.9 port 43816 ssh2 Apr 4 00:36:18 django sshd[4981]: Received disconnect from 111.229.128.9: 11: Bye Bye Apr 4 00:42:28 django sshd[7125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.128.9 user=r.r Apr 4 00:42:29 django sshd[7125]: Failed password for r.r from 111.229.128.9 port 51186 ssh2 Apr 4........ -------------------------------	2020-04-04 08:25:23
45.82.137.19	attackbots	2020-04-03T23:16:56.777790abusebot-6.cloudsearch.cf sshd[10549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.137.19 user=root 2020-04-03T23:16:59.246147abusebot-6.cloudsearch.cf sshd[10549]: Failed password for root from 45.82.137.19 port 33104 ssh2 2020-04-03T23:21:17.487996abusebot-6.cloudsearch.cf sshd[10808]: Invalid user kq from 45.82.137.19 port 40940 2020-04-03T23:21:17.494253abusebot-6.cloudsearch.cf sshd[10808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.137.19 2020-04-03T23:21:17.487996abusebot-6.cloudsearch.cf sshd[10808]: Invalid user kq from 45.82.137.19 port 40940 2020-04-03T23:21:19.790505abusebot-6.cloudsearch.cf sshd[10808]: Failed password for invalid user kq from 45.82.137.19 port 40940 ssh2 2020-04-03T23:25:38.716082abusebot-6.cloudsearch.cf sshd[11024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.82.137.19 user=root 2 ...	2020-04-04 08:45:45
222.186.180.8	attack	Apr 4 02:38:45 ArkNodeAT sshd\[12723\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.8 user=root Apr 4 02:38:48 ArkNodeAT sshd\[12723\]: Failed password for root from 222.186.180.8 port 25584 ssh2 Apr 4 02:39:02 ArkNodeAT sshd\[12723\]: Failed password for root from 222.186.180.8 port 25584 ssh2	2020-04-04 08:42:59
180.76.171.53	attackspam	ssh brute force	2020-04-04 08:58:17
157.230.190.90	attackspambots	(sshd) Failed SSH login from 157.230.190.90 (US/United States/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 4 00:25:31 andromeda sshd[16274]: Invalid user nivinform from 157.230.190.90 port 54610 Apr 4 00:25:33 andromeda sshd[16274]: Failed password for invalid user nivinform from 157.230.190.90 port 54610 ssh2 Apr 4 00:31:35 andromeda sshd[16550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.190.90 user=root	2020-04-04 08:38:56
5.249.145.245	attack	Fail2Ban Ban Triggered (2)	2020-04-04 08:55:05
115.225.95.251	attackspam	$f2bV_matches	2020-04-04 08:52:12
61.177.172.128	attack	2020-04-04T02:28:22.290729ns386461 sshd\[12536\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128 user=root 2020-04-04T02:28:24.482455ns386461 sshd\[12536\]: Failed password for root from 61.177.172.128 port 5374 ssh2 2020-04-04T02:28:27.974452ns386461 sshd\[12536\]: Failed password for root from 61.177.172.128 port 5374 ssh2 2020-04-04T02:28:31.016742ns386461 sshd\[12536\]: Failed password for root from 61.177.172.128 port 5374 ssh2 2020-04-04T02:28:34.470355ns386461 sshd\[12536\]: Failed password for root from 61.177.172.128 port 5374 ssh2 ...	2020-04-04 08:38:35
190.64.212.250	attack	DATE:2020-04-03 23:38:55, IP:190.64.212.250, PORT:1433 MSSQL brute force auth on honeypot server (epe-honey1-hq)	2020-04-04 08:53:18
51.158.122.211	attackspambots	SSH brute force attempt	2020-04-04 09:06:39
49.233.182.23	attackbots	Invalid user esuser from 49.233.182.23 port 58320	2020-04-04 08:32:41
183.48.91.201	attackspam	Apr 4 02:21:30 www sshd\[210816\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.48.91.201 user=root Apr 4 02:21:32 www sshd\[210816\]: Failed password for root from 183.48.91.201 port 35538 ssh2 Apr 4 02:25:31 www sshd\[210836\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.48.91.201 user=root ...	2020-04-04 08:37:19

Recently Reported IPs

86.87.173.13	9.124.235.79	172.17.135.115	196.227.190.165
170.191.1.67	241.42.158.92	48.128.161.3	67.244.71.81
208.159.160.207	11.195.230.32	117.12.14.66	22.37.212.203
24.228.204.160	209.11.235.4	14.254.204.201	108.169.120.58
55.236.230.50	159.205.153.207	169.144.60.163	191.40.174.180