Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
port scan and connect, tcp 465 (smtps)
2019-09-10 14:05:23
Comments on same subnet:
IP Type Details Datetime
138.68.208.8 proxy
aggressive VPN
2023-03-02 13:44:21
138.68.208.39 attackspambots
port scan and connect, tcp 27019 (mongodb-cluster-alt)
2019-09-12 10:38:27
138.68.208.175 attack
Hits on port : 4786
2019-09-10 14:01:28
138.68.208.157 attack
09/09/2019-21:20:20.000896 138.68.208.157 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
2019-09-10 12:42:27
138.68.208.97 attackspam
firewall-block, port(s): 50000/tcp
2019-09-10 02:50:47
138.68.208.190 attackbotsspam
Portscan or hack attempt detected by psad/fwsnort
2019-09-09 18:11:54
138.68.208.157 attackbots
135/tcp 5672/tcp 5632/udp...
[2019-09-06/08]5pkt,4pt.(tcp),1pt.(udp)
2019-09-09 12:12:58
138.68.208.175 attackspam
587/tcp 2362/udp 808/tcp
[2019-09-06/08]3pkt
2019-09-09 12:10:41
138.68.208.152 attackspambots
port scan and connect, tcp 5432 (postgresql)
2019-09-09 12:05:11
138.68.208.25 attackspam
8080/tcp 995/tcp 8123/tcp...
[2019-09-06/08]4pkt,4pt.(tcp)
2019-09-09 12:01:28
138.68.208.69 attackbotsspam
port scan and connect, tcp 2638 (sql-anywhere)
2019-09-09 11:37:28
138.68.208.159 attack
SASL Brute Force
2019-09-09 11:31:02
138.68.208.45 attackbotsspam
SASL Brute Force
2019-09-09 06:13:41
138.68.208.48 attackbots
Lines containing failures of 138.68.208.48


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=138.68.208.48
2019-09-09 04:16:38
138.68.208.149 attackbots
992/tcp 465/tcp 9042/tcp...
[2019-09-06/07]5pkt,5pt.(tcp)
2019-09-08 20:47:03
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.208.196
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21445
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.208.196.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091000 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Sep 10 14:05:18 CST 2019
;; MSG SIZE  rcvd: 118
Host info
196.208.68.138.in-addr.arpa domain name pointer zg-0905a-76.stretchoid.com.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
196.208.68.138.in-addr.arpa	name = zg-0905a-76.stretchoid.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
27.155.99.173 attack
Jan  7 14:43:26 debian sshd[1792]: Unable to negotiate with 27.155.99.173 port 59199: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
Jan  7 14:54:25 debian sshd[2193]: Unable to negotiate with 27.155.99.173 port 22794: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
...
2020-01-08 05:18:07
37.70.132.170 attackspambots
Jan  7 20:51:18 goofy sshd\[19324\]: Invalid user stevef from 37.70.132.170
Jan  7 20:51:18 goofy sshd\[19324\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.70.132.170
Jan  7 20:51:19 goofy sshd\[19324\]: Failed password for invalid user stevef from 37.70.132.170 port 50132 ssh2
Jan  7 21:11:24 goofy sshd\[20576\]: Invalid user de from 37.70.132.170
Jan  7 21:11:24 goofy sshd\[20576\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.70.132.170
2020-01-08 05:15:19
51.91.212.79 attack
Unauthorized connection attempt detected from IP address 51.91.212.79 to port 8088 [J]
2020-01-08 05:16:08
212.47.244.208 attackspambots
WordPress wp-login brute force :: 212.47.244.208 0.200 - [07/Jan/2020:18:39:35  0000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 1806 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "HTTP/1.1"
2020-01-08 04:43:03
117.69.154.31 attackspam
2020-01-07 06:53:28 dovecot_login authenticator failed for (pihod) [117.69.154.31]:55366 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=zhangyong@lerctr.org)
2020-01-07 06:53:36 dovecot_login authenticator failed for (qslyv) [117.69.154.31]:55366 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=zhangyong@lerctr.org)
2020-01-07 06:53:47 dovecot_login authenticator failed for (wuxze) [117.69.154.31]:55366 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=zhangyong@lerctr.org)
...
2020-01-08 05:04:28
49.88.160.21 attack
Jan  7 13:54:01 grey postfix/smtpd\[31570\]: NOQUEUE: reject: RCPT from unknown\[49.88.160.21\]: 554 5.7.1 Service unavailable\; Client host \[49.88.160.21\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[49.88.160.21\]\; from=\ to=\ proto=ESMTP helo=\
...
2020-01-08 04:58:26
92.118.38.56 attackspam
2020-01-07T20:39:55.814299beta postfix/smtpd[8403]: warning: unknown[92.118.38.56]: SASL LOGIN authentication failed: authentication failure
2020-01-07T20:40:25.840572beta postfix/smtpd[8403]: warning: unknown[92.118.38.56]: SASL LOGIN authentication failed: authentication failure
2020-01-07T20:40:54.646513beta postfix/smtpd[8403]: warning: unknown[92.118.38.56]: SASL LOGIN authentication failed: authentication failure
...
2020-01-08 04:42:01
111.67.197.54 attackbots
Jan  7 19:48:55 XXX sshd[26131]: Invalid user admin from 111.67.197.54 port 46601
2020-01-08 04:58:59
123.31.32.150 attack
Unauthorized connection attempt detected from IP address 123.31.32.150 to port 2220 [J]
2020-01-08 04:49:16
81.22.45.117 attackbotsspam
2020-01-07T21:59:19.997360+01:00 lumpi kernel: [3720659.837354] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.117 DST=78.46.199.189 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=23514 PROTO=TCP SPT=59882 DPT=8119 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-01-08 04:59:54
51.38.179.179 attackbotsspam
Unauthorized connection attempt detected from IP address 51.38.179.179 to port 2220 [J]
2020-01-08 04:41:03
122.152.203.83 attackbotsspam
Jan  7 01:33:06 main sshd[31373]: Failed password for invalid user yre from 122.152.203.83 port 42652 ssh2
2020-01-08 04:57:23
190.198.191.13 attack
Unauthorized connection attempt detected from IP address 190.198.191.13 to port 445
2020-01-08 05:17:19
5.196.227.244 attackspambots
Unauthorized connection attempt detected from IP address 5.196.227.244 to port 2220 [J]
2020-01-08 05:08:52
218.22.36.135 attackspambots
Jan  7 21:33:26 ns381471 sshd[9060]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.22.36.135
Jan  7 21:33:27 ns381471 sshd[9060]: Failed password for invalid user ubnt from 218.22.36.135 port 4182 ssh2
2020-01-08 04:50:12

Recently Reported IPs

158.114.142.132 151.128.221.244 49.250.25.130 188.29.165.173
69.244.251.129 77.247.110.113 177.238.248.101 45.187.228.229
169.201.183.133 122.63.45.133 146.109.126.116 148.178.45.32
56.235.194.86 62.229.72.134 114.35.123.76 81.199.145.213
45.119.127.243 104.168.145.196 32.54.218.193 205.122.2.130