138.68.145.247

Basic Info

City: London

Region: England

Country: United Kingdom

Internet Service Provider: unknown

Hostname: unknown

Organization: DigitalOcean, LLC

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.68.145.36	attack	WordPress wp-login brute force :: 138.68.145.36 0.160 BYPASS [15/Oct/2019:03:13:13 1100] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-10-15 02:29:29
138.68.145.73	attack	Brute forcing Wordpress login	2019-08-13 12:42:55

Type

Details

Datetime

138.68.145.36

attack

WordPress wp-login brute force :: 138.68.145.36 0.160 BYPASS [15/Oct/2019:03:13:13  1100] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"

2019-10-15 02:29:29

138.68.145.73

attack

Brute forcing Wordpress login

2019-08-13 12:42:55

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.145.247
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27792
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.145.247.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040801 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Tue Apr 09 04:53:22 +08 2019
;; MSG SIZE  rcvd: 118

Host info

Host 247.145.68.138.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 247.145.68.138.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
43.229.90.196	attackbotsspam	Unauthorized connection attempt from IP address 43.229.90.196 on Port 445(SMB)	2019-09-24 04:58:08
120.59.252.1	attackbotsspam	Unauthorized connection attempt from IP address 120.59.252.1 on Port 445(SMB)	2019-09-24 05:08:47
86.102.177.131	attackspam	Unauthorized connection attempt from IP address 86.102.177.131 on Port 445(SMB)	2019-09-24 05:12:20
45.236.131.227	attackbotsspam	Email spam for this IP	2019-09-24 05:08:29
178.19.247.25	attackspambots	proto=tcp . spt=34524 . dpt=25 . (listed on dnsbl-sorbs plus abuseat-org and barracuda) (530)	2019-09-24 05:14:13
134.17.145.104	attack	Unauthorized connection attempt from IP address 134.17.145.104 on Port 445(SMB)	2019-09-24 04:39:40
14.169.144.80	attackspam	Autoban 14.169.144.80 AUTH/CONNECT	2019-09-24 05:02:08
122.195.200.148	attackspam	Sep 23 22:32:46 cvbnet sshd[7126]: Failed password for root from 122.195.200.148 port 26986 ssh2 Sep 23 22:32:48 cvbnet sshd[7126]: Failed password for root from 122.195.200.148 port 26986 ssh2	2019-09-24 04:35:43
212.83.149.159	attackspambots	\[2019-09-23 16:18:20\] NOTICE\[2270\] chan_sip.c: Registration from '"742" \' failed for '212.83.149.159:5063' - Wrong password \[2019-09-23 16:18:20\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-23T16:18:20.412-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="742",SessionID="0x7fcd8c12cad8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.149.159/5063",Challenge="02fc4821",ReceivedChallenge="02fc4821",ReceivedHash="2ab574aefe8b9acb6aa624cb92367f33" \[2019-09-23 16:21:49\] NOTICE\[2270\] chan_sip.c: Registration from '"942" \' failed for '212.83.149.159:5142' - Wrong password \[2019-09-23 16:21:49\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-23T16:21:49.421-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="942",SessionID="0x7fcd8c57a408",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/2	2019-09-24 04:46:19
188.162.194.128	attack	Unauthorized connection attempt from IP address 188.162.194.128 on Port 445(SMB)	2019-09-24 04:43:19
98.156.148.239	attackbotsspam	Sep 23 16:54:10 server sshd\[14405\]: Invalid user atul from 98.156.148.239 port 52156 Sep 23 16:54:10 server sshd\[14405\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239 Sep 23 16:54:12 server sshd\[14405\]: Failed password for invalid user atul from 98.156.148.239 port 52156 ssh2 Sep 23 16:58:21 server sshd\[28782\]: Invalid user nagesh from 98.156.148.239 port 37534 Sep 23 16:58:21 server sshd\[28782\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239	2019-09-24 04:38:06
49.235.139.216	attackbotsspam	Sep 23 11:01:18 wbs sshd\[19309\]: Invalid user zabbix from 49.235.139.216 Sep 23 11:01:18 wbs sshd\[19309\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.139.216 Sep 23 11:01:19 wbs sshd\[19309\]: Failed password for invalid user zabbix from 49.235.139.216 port 49536 ssh2 Sep 23 11:04:47 wbs sshd\[19609\]: Invalid user kuroiwa from 49.235.139.216 Sep 23 11:04:47 wbs sshd\[19609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.139.216	2019-09-24 05:06:48
68.66.200.213	attackspambots	WP_xmlrpc_attack	2019-09-24 05:10:24
91.102.229.253	attack	proto=tcp . spt=59145 . dpt=25 . (listed on Dark List de Sep 23) (538)	2019-09-24 04:36:13
103.7.129.210	attackspam	Unauthorized connection attempt from IP address 103.7.129.210 on Port 445(SMB)	2019-09-24 05:11:35

Recently Reported IPs

95.216.83.6	71.6.233.102	200.24.87.114	223.97.200.188
220.129.231.51	37.49.225.95	200.210.102.114	200.174.20.70
186.215.57.155	139.5.145.163	31.207.194.134	124.134.63.163
189.63.115.74	88.243.135.125	110.173.191.20	122.114.10.196
111.231.217.21	118.25.10.242	142.44.193.149	82.165.30.36