City: unknown
Region: unknown
Country: United States
Internet Service Provider: DigitalOcean LLC
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspambots | 8140/tcp 70/tcp [2019-09-06/07]3pkt |
2019-09-08 20:20:57 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 138.68.208.8 | proxy | aggressive VPN |
2023-03-02 13:44:21 |
| 138.68.208.39 | attackspambots | port scan and connect, tcp 27019 (mongodb-cluster-alt) |
2019-09-12 10:38:27 |
| 138.68.208.196 | attackspam | port scan and connect, tcp 465 (smtps) |
2019-09-10 14:05:23 |
| 138.68.208.175 | attack | Hits on port : 4786 |
2019-09-10 14:01:28 |
| 138.68.208.157 | attack | 09/09/2019-21:20:20.000896 138.68.208.157 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2019-09-10 12:42:27 |
| 138.68.208.97 | attackspam | firewall-block, port(s): 50000/tcp |
2019-09-10 02:50:47 |
| 138.68.208.190 | attackbotsspam | Portscan or hack attempt detected by psad/fwsnort |
2019-09-09 18:11:54 |
| 138.68.208.157 | attackbots | 135/tcp 5672/tcp 5632/udp... [2019-09-06/08]5pkt,4pt.(tcp),1pt.(udp) |
2019-09-09 12:12:58 |
| 138.68.208.175 | attackspam | 587/tcp 2362/udp 808/tcp [2019-09-06/08]3pkt |
2019-09-09 12:10:41 |
| 138.68.208.152 | attackspambots | port scan and connect, tcp 5432 (postgresql) |
2019-09-09 12:05:11 |
| 138.68.208.25 | attackspam | 8080/tcp 995/tcp 8123/tcp... [2019-09-06/08]4pkt,4pt.(tcp) |
2019-09-09 12:01:28 |
| 138.68.208.69 | attackbotsspam | port scan and connect, tcp 2638 (sql-anywhere) |
2019-09-09 11:37:28 |
| 138.68.208.159 | attack | SASL Brute Force |
2019-09-09 11:31:02 |
| 138.68.208.45 | attackbotsspam | SASL Brute Force |
2019-09-09 06:13:41 |
| 138.68.208.48 | attackbots | Lines containing failures of 138.68.208.48 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=138.68.208.48 |
2019-09-09 04:16:38 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.208.31
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58290
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.208.31. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019090800 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Sep 08 20:20:50 CST 2019
;; MSG SIZE rcvd: 11731.208.68.138.in-addr.arpa domain name pointer zg-0905b-6.stretchoid.com.Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
31.208.68.138.in-addr.arpa name = zg-0905b-6.stretchoid.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.233.207.248 | attackspam | Aug 26 06:06:11 localhost sshd[2271106]: Invalid user ftpuser from 49.233.207.248 port 45112 ... |
2020-08-26 04:34:12 |
| 222.186.30.76 | attack | Aug 25 17:45:25 vps46666688 sshd[4090]: Failed password for root from 222.186.30.76 port 54951 ssh2 ... |
2020-08-26 04:46:50 |
| 106.12.11.245 | attackspam | Time: Tue Aug 25 20:03:31 2020 +0000 IP: 106.12.11.245 (CN/China/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Aug 25 19:59:26 vps3 sshd[21890]: Invalid user user04 from 106.12.11.245 port 58620 Aug 25 19:59:28 vps3 sshd[21890]: Failed password for invalid user user04 from 106.12.11.245 port 58620 ssh2 Aug 25 20:01:48 vps3 sshd[22616]: Invalid user teamspeak from 106.12.11.245 port 58084 Aug 25 20:01:49 vps3 sshd[22616]: Failed password for invalid user teamspeak from 106.12.11.245 port 58084 ssh2 Aug 25 20:03:29 vps3 sshd[22982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.11.245 user=root |
2020-08-26 04:45:33 |
| 86.60.41.192 | attackspambots | Port scan: Attack repeated for 24 hours |
2020-08-26 04:59:27 |
| 218.92.0.247 | attackspam | Aug 25 22:59:28 * sshd[24249]: Failed password for root from 218.92.0.247 port 41884 ssh2 Aug 25 22:59:42 * sshd[24249]: error: maximum authentication attempts exceeded for root from 218.92.0.247 port 41884 ssh2 [preauth] |
2020-08-26 05:00:28 |
| 142.93.232.102 | attackspambots | Aug 25 22:26:47 eventyay sshd[24701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.232.102 Aug 25 22:26:48 eventyay sshd[24701]: Failed password for invalid user admin from 142.93.232.102 port 37974 ssh2 Aug 25 22:30:28 eventyay sshd[24805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.232.102 ... |
2020-08-26 04:49:08 |
| 167.99.67.209 | attackspam | Aug 25 23:28:19 journals sshd\[87043\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.67.209 user=backup Aug 25 23:28:21 journals sshd\[87043\]: Failed password for backup from 167.99.67.209 port 57870 ssh2 Aug 25 23:31:20 journals sshd\[87346\]: Invalid user wms from 167.99.67.209 Aug 25 23:31:20 journals sshd\[87346\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.67.209 Aug 25 23:31:22 journals sshd\[87346\]: Failed password for invalid user wms from 167.99.67.209 port 49614 ssh2 ... |
2020-08-26 04:50:34 |
| 106.13.161.17 | attackbots | Aug 25 21:51:23 minden010 sshd[9402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.161.17 Aug 25 21:51:25 minden010 sshd[9402]: Failed password for invalid user joe from 106.13.161.17 port 58984 ssh2 Aug 25 22:00:52 minden010 sshd[10498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.161.17 ... |
2020-08-26 04:49:31 |
| 160.155.53.22 | attackspambots | Aug 25 22:16:10 h2779839 sshd[6919]: Invalid user test from 160.155.53.22 port 57250 Aug 25 22:16:10 h2779839 sshd[6919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.155.53.22 Aug 25 22:16:10 h2779839 sshd[6919]: Invalid user test from 160.155.53.22 port 57250 Aug 25 22:16:13 h2779839 sshd[6919]: Failed password for invalid user test from 160.155.53.22 port 57250 ssh2 Aug 25 22:20:52 h2779839 sshd[7002]: Invalid user zsy from 160.155.53.22 port 41372 Aug 25 22:20:52 h2779839 sshd[7002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.155.53.22 Aug 25 22:20:52 h2779839 sshd[7002]: Invalid user zsy from 160.155.53.22 port 41372 Aug 25 22:20:54 h2779839 sshd[7002]: Failed password for invalid user zsy from 160.155.53.22 port 41372 ssh2 Aug 25 22:25:23 h2779839 sshd[7096]: Invalid user george from 160.155.53.22 port 49632 ... |
2020-08-26 04:27:55 |
| 104.248.61.192 | attackbots | Aug 25 22:25:14 electroncash sshd[57030]: Invalid user fs from 104.248.61.192 port 46488 Aug 25 22:25:14 electroncash sshd[57030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.61.192 Aug 25 22:25:14 electroncash sshd[57030]: Invalid user fs from 104.248.61.192 port 46488 Aug 25 22:25:16 electroncash sshd[57030]: Failed password for invalid user fs from 104.248.61.192 port 46488 ssh2 Aug 25 22:28:36 electroncash sshd[57919]: Invalid user minecraft from 104.248.61.192 port 53650 ... |
2020-08-26 04:35:04 |
| 106.104.88.237 | attack | Unauthorized connection attempt from IP address 106.104.88.237 on Port 445(SMB) |
2020-08-26 05:04:02 |
| 103.43.152.121 | attack | Aug 26 03:34:07 webhost01 sshd[13300]: Failed password for root from 103.43.152.121 port 40788 ssh2 ... |
2020-08-26 05:02:37 |
| 91.187.119.13 | attackspam | Unauthorized connection attempt from IP address 91.187.119.13 on Port 445(SMB) |
2020-08-26 05:03:21 |
| 222.186.15.115 | attackbots | Aug 25 22:30:09 * sshd[21083]: Failed password for root from 222.186.15.115 port 49275 ssh2 |
2020-08-26 04:40:10 |
| 107.178.12.18 | attackbotsspam | Unauthorized connection attempt from IP address 107.178.12.18 on Port 445(SMB) |
2020-08-26 04:33:43 |