Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
138.68.136.152 attackbotsspam
$f2bV_matches
2020-03-18 13:00:56
138.68.136.152 attackbots
Wordpress login scanning
2020-03-18 01:18:28
138.68.136.152 attack
xmlrpc attack
2020-02-21 16:55:11
138.68.136.152 attack
Automatic report - Banned IP Access
2020-02-11 13:34:27
138.68.136.152 attackspam
Automatic report - Banned IP Access
2019-12-30 05:47:05
138.68.136.152 attack
blogonese.net 138.68.136.152 \[19/Nov/2019:07:28:37 +0100\] "POST /wp-login.php HTTP/1.1" 200 6376 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
blogonese.net 138.68.136.152 \[19/Nov/2019:07:28:38 +0100\] "POST /wp-login.php HTTP/1.1" 200 6340 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
blogonese.net 138.68.136.152 \[19/Nov/2019:07:28:38 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4085 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-11-19 15:34:03
138.68.136.152 attackspam
\[Sun Nov 17 15:39:23.191526 2019\] \[authz_core:error\] \[pid 18326\] \[client 138.68.136.152:36356\] AH01630: client denied by server configuration: /var/www/michele/xmlrpc.php
...
2019-11-18 03:40:42
138.68.136.152 attackbots
138.68.136.152 - - \[10/Nov/2019:07:24:00 +0100\] "POST /wp-login.php HTTP/1.0" 200 5269 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
138.68.136.152 - - \[10/Nov/2019:07:24:05 +0100\] "POST /wp-login.php HTTP/1.0" 200 5099 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
138.68.136.152 - - \[10/Nov/2019:07:24:09 +0100\] "POST /wp-login.php HTTP/1.0" 200 5093 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-11-10 20:29:37
138.68.136.152 attackbots
138.68.136.152 - - [08/Nov/2019:15:36:26 +0100] "GET /wp-login.php HTTP/1.1" 200 1238 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.136.152 - - [08/Nov/2019:15:36:26 +0100] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.136.152 - - [08/Nov/2019:15:36:26 +0100] "GET /wp-login.php HTTP/1.1" 200 1238 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.136.152 - - [08/Nov/2019:15:36:27 +0100] "POST /wp-login.php HTTP/1.1" 200 1608 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.136.152 - - [08/Nov/2019:15:36:28 +0100] "GET /wp-login.php HTTP/1.1" 200 1238 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.136.152 - - [08/Nov/2019:15:36:30 +0100] "POST /wp-login.php HTTP/1.1" 200 1608 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.
2019-11-09 02:24:02
138.68.136.152 attackbots
Brute forcing Wordpress login
2019-11-05 14:10:34
138.68.136.152 attackbots
WordPress wp-login brute force :: 138.68.136.152 0.060 BYPASS [05/Oct/2019:21:40:21  1000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 4630 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-10-05 20:47:51
138.68.136.152 attackspambots
WordPress wp-login brute force :: 138.68.136.152 0.128 BYPASS [05/Oct/2019:06:25:24  1000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-10-05 06:39:02
138.68.136.152 attack
Automatic report - XMLRPC Attack
2019-10-04 21:01:38
138.68.136.152 attackbots
xmlrpc attack
2019-09-28 08:34:40
138.68.136.152 attackspam
WordPress wp-login brute force :: 138.68.136.152 0.040 BYPASS [25/Sep/2019:22:23:43  1000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 4630 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-09-25 20:39:50
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.136.41
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61313
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.68.136.41.			IN	A

;; AUTHORITY SECTION:
.			321	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 12:31:04 CST 2022
;; MSG SIZE  rcvd: 106
Host info
Host 41.136.68.138.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 41.136.68.138.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
186.219.36.202 attackbots
Sat, 20 Jul 2019 21:55:41 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-21 09:53:06
37.6.202.227 attack
Sat, 20 Jul 2019 21:55:37 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-21 10:03:25
218.92.0.145 attackbots
2019-06-28T21:22:04.521299wiz-ks3 sshd[2862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.145  user=root
2019-06-28T21:22:06.814591wiz-ks3 sshd[2862]: Failed password for root from 218.92.0.145 port 24497 ssh2
2019-06-28T21:22:09.586197wiz-ks3 sshd[2862]: Failed password for root from 218.92.0.145 port 24497 ssh2
2019-06-28T21:22:04.521299wiz-ks3 sshd[2862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.145  user=root
2019-06-28T21:22:06.814591wiz-ks3 sshd[2862]: Failed password for root from 218.92.0.145 port 24497 ssh2
2019-06-28T21:22:09.586197wiz-ks3 sshd[2862]: Failed password for root from 218.92.0.145 port 24497 ssh2
2019-06-28T21:22:04.521299wiz-ks3 sshd[2862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.145  user=root
2019-06-28T21:22:06.814591wiz-ks3 sshd[2862]: Failed password for root from 218.92.0.145 port 24497 ssh2
2019-06-28T21:22:09.58619
2019-07-21 09:33:10
201.238.247.234 attackspam
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-20 20:45:55,623 INFO [amun_request_handler] PortScan Detected on Port: 445 (201.238.247.234)
2019-07-21 10:10:00
14.177.45.135 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-20 20:47:10,259 INFO [amun_request_handler] PortScan Detected on Port: 445 (14.177.45.135)
2019-07-21 09:40:52
103.244.205.202 attackbotsspam
Sat, 20 Jul 2019 21:55:48 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-21 09:37:15
80.187.114.176 attack
Sat, 20 Jul 2019 21:55:40 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-21 09:56:28
102.184.40.177 attack
Sat, 20 Jul 2019 21:55:45 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-21 09:45:09
190.205.145.156 attack
Sat, 20 Jul 2019 21:55:36 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-21 10:04:25
178.207.82.226 attackbots
Sat, 20 Jul 2019 21:55:47 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-21 09:40:13
180.254.130.126 attack
Sat, 20 Jul 2019 21:55:41 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-21 09:50:48
186.145.8.23 attackbots
Sat, 20 Jul 2019 21:55:32 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-21 10:13:03
185.205.239.226 attackspam
Sat, 20 Jul 2019 21:55:35 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-21 10:06:17
171.4.235.48 attackbots
Sat, 20 Jul 2019 21:55:39 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-21 09:58:00
171.7.246.252 attackspambots
Sat, 20 Jul 2019 21:55:43 +0000 likely compromised host or open proxy. ddos rate spidering
2019-07-21 09:48:26

Recently Reported IPs

138.68.139.77 138.68.137.70 138.68.148.176 138.68.145.198
138.68.142.124 138.68.146.124 138.68.149.30 138.68.151.66
138.68.149.152 138.68.152.170 122.113.223.50 138.68.149.248
138.68.150.174 138.68.153.9 138.68.155.208 138.68.154.59
138.68.155.225 138.68.16.227 138.68.160.140 138.68.157.234