138.68.208.8 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
proxy	aggressive VPN	2023-03-02 13:44:21

Comments on same subnet:

IP	Type	Details	Datetime
138.68.208.39	attackspambots	port scan and connect, tcp 27019 (mongodb-cluster-alt)	2019-09-12 10:38:27
138.68.208.196	attackspam	port scan and connect, tcp 465 (smtps)	2019-09-10 14:05:23
138.68.208.175	attack	Hits on port : 4786	2019-09-10 14:01:28
138.68.208.157	attack	09/09/2019-21:20:20.000896 138.68.208.157 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2019-09-10 12:42:27
138.68.208.97	attackspam	firewall-block, port(s): 50000/tcp	2019-09-10 02:50:47
138.68.208.190	attackbotsspam	Portscan or hack attempt detected by psad/fwsnort	2019-09-09 18:11:54
138.68.208.157	attackbots	135/tcp 5672/tcp 5632/udp... [2019-09-06/08]5pkt,4pt.(tcp),1pt.(udp)	2019-09-09 12:12:58
138.68.208.175	attackspam	587/tcp 2362/udp 808/tcp [2019-09-06/08]3pkt	2019-09-09 12:10:41
138.68.208.152	attackspambots	port scan and connect, tcp 5432 (postgresql)	2019-09-09 12:05:11
138.68.208.25	attackspam	8080/tcp 995/tcp 8123/tcp... [2019-09-06/08]4pkt,4pt.(tcp)	2019-09-09 12:01:28
138.68.208.69	attackbotsspam	port scan and connect, tcp 2638 (sql-anywhere)	2019-09-09 11:37:28
138.68.208.159	attack	SASL Brute Force	2019-09-09 11:31:02
138.68.208.45	attackbotsspam	SASL Brute Force	2019-09-09 06:13:41
138.68.208.48	attackbots	Lines containing failures of 138.68.208.48 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=138.68.208.48	2019-09-09 04:16:38
138.68.208.149	attackbots	992/tcp 465/tcp 9042/tcp... [2019-09-06/07]5pkt,5pt.(tcp)	2019-09-08 20:47:03

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.208.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41281
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.68.208.8.			IN	A

;; AUTHORITY SECTION:
.			372	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023030101 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 02 13:44:05 CST 2023
;; MSG SIZE  rcvd: 105

Host info

8.208.68.138.in-addr.arpa domain name pointer zg-1220e-80.stretchoid.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
8.208.68.138.in-addr.arpa	name = zg-1220e-80.stretchoid.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
117.50.63.241	attackbots	malicious Brute-Force reported by https://www.patrick-binder.de ...	2020-09-03 13:38:39
2.205.221.43	attackspambots	Postfix attempt blocked due to public blacklist entry	2020-09-03 13:38:06
112.120.158.43	attackspam	Sep 2 18:47:56 vpn01 sshd[21269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.120.158.43 Sep 2 18:47:58 vpn01 sshd[21269]: Failed password for invalid user support from 112.120.158.43 port 52945 ssh2 ...	2020-09-03 13:36:51
23.94.183.112	attackbotsspam	Invalid user oracle from 23.94.183.112 port 36204	2020-09-03 13:33:21
106.12.194.204	attack	Invalid user dev from 106.12.194.204 port 58274	2020-09-03 13:42:45
123.30.181.234	attack	1599065272 - 09/02/2020 18:47:52 Host: 123.30.181.234/123.30.181.234 Port: 445 TCP Blocked	2020-09-03 13:43:40
190.200.94.36	attackbots	Unauthorised access (Sep 2) SRC=190.200.94.36 LEN=52 TTL=113 ID=3113 DF TCP DPT=445 WINDOW=8192 SYN	2020-09-03 13:09:32
31.170.123.253	attack	URL Probing: /wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php	2020-09-03 13:10:39
192.241.225.130	attack	" "	2020-09-03 13:19:17
3.81.26.85	attackbots	Invalid user veronica from 3.81.26.85 port 34698	2020-09-03 13:18:53
222.186.180.223	attack	Sep 3 07:24:03 hidden sshd[59508]: Failed password for hidden from 222.186.180.223 port 18120 ssh2 Sep 3 07:24:08 hidden sshd[59508]: Failed password for hidden from 222.186.180.223 port 18120 ssh2 Sep 3 07:24:13 hidden sshd[59508]: Failed password for hidden from 222.186.180.223 port 18120 ssh2	2020-09-03 13:25:37
107.172.211.13	attackbotsspam	2020-09-02 11:42:30.667343-0500 localhost smtpd[8057]: NOQUEUE: reject: RCPT from unknown[107.172.211.13]: 450 4.7.25 Client host rejected: cannot find your hostname, [107.172.211.13]; from= to= proto=ESMTP helo=<00ea8fcb.purebloods.icu>	2020-09-03 13:30:57
200.198.180.178	attackbotsspam	Sep 2 09:48:25 server sshd[63037]: Invalid user miner from 200.198.180.178 port 39510 Sep 2 09:48:28 server sshd[63037]: Failed password for invalid user miner from 200.198.180.178 port 39510 ssh2 ...	2020-09-03 13:11:38
83.235.174.95	attack	Automatic report - Port Scan Attack	2020-09-03 13:08:30
106.12.46.179	attackbotsspam	(sshd) Failed SSH login from 106.12.46.179 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 3 00:05:46 server sshd[15277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.46.179 user=root Sep 3 00:05:48 server sshd[15277]: Failed password for root from 106.12.46.179 port 47012 ssh2 Sep 3 00:16:54 server sshd[18302]: Invalid user warehouse from 106.12.46.179 port 37398 Sep 3 00:16:56 server sshd[18302]: Failed password for invalid user warehouse from 106.12.46.179 port 37398 ssh2 Sep 3 00:19:37 server sshd[19034]: Invalid user testuser from 106.12.46.179 port 41100	2020-09-03 13:40:31

Recently Reported IPs

46.4.203.167	40.160.88.57	107.181.136.100	9.63.91.234
102.22.75.218	110.39.164.240	110.39.164.24	110.39.164.2
192.229.221.95	45.107.216.229	206.8.50.229	10.80.105.102
82.39.143.66	160.39.129.24	31.129.158.79	223.60.194.130
53.214.70.82	182.239.115.79	111.166.81.240	126.77.49.111