138.68.208.97 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	firewall-block, port(s): 50000/tcp	2019-09-10 02:50:47

Comments on same subnet:

IP	Type	Details	Datetime
138.68.208.8	proxy	aggressive VPN	2023-03-02 13:44:21
138.68.208.39	attackspambots	port scan and connect, tcp 27019 (mongodb-cluster-alt)	2019-09-12 10:38:27
138.68.208.196	attackspam	port scan and connect, tcp 465 (smtps)	2019-09-10 14:05:23
138.68.208.175	attack	Hits on port : 4786	2019-09-10 14:01:28
138.68.208.157	attack	09/09/2019-21:20:20.000896 138.68.208.157 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2019-09-10 12:42:27
138.68.208.190	attackbotsspam	Portscan or hack attempt detected by psad/fwsnort	2019-09-09 18:11:54
138.68.208.157	attackbots	135/tcp 5672/tcp 5632/udp... [2019-09-06/08]5pkt,4pt.(tcp),1pt.(udp)	2019-09-09 12:12:58
138.68.208.175	attackspam	587/tcp 2362/udp 808/tcp [2019-09-06/08]3pkt	2019-09-09 12:10:41
138.68.208.152	attackspambots	port scan and connect, tcp 5432 (postgresql)	2019-09-09 12:05:11
138.68.208.25	attackspam	8080/tcp 995/tcp 8123/tcp... [2019-09-06/08]4pkt,4pt.(tcp)	2019-09-09 12:01:28
138.68.208.69	attackbotsspam	port scan and connect, tcp 2638 (sql-anywhere)	2019-09-09 11:37:28
138.68.208.159	attack	SASL Brute Force	2019-09-09 11:31:02
138.68.208.45	attackbotsspam	SASL Brute Force	2019-09-09 06:13:41
138.68.208.48	attackbots	Lines containing failures of 138.68.208.48 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=138.68.208.48	2019-09-09 04:16:38
138.68.208.149	attackbots	992/tcp 465/tcp 9042/tcp... [2019-09-06/07]5pkt,5pt.(tcp)	2019-09-08 20:47:03

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.208.97
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14841
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.208.97.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019090902 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Sep 10 02:50:39 CST 2019
;; MSG SIZE  rcvd: 117

Host info

97.208.68.138.in-addr.arpa domain name pointer zg-0905a-8.stretchoid.com.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
97.208.68.138.in-addr.arpa	name = zg-0905a-8.stretchoid.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
43.241.238.152	attack	2020-06-17T05:05:53.614070-07:00 suse-nuc sshd[18214]: Invalid user nagios from 43.241.238.152 port 49609 ...	2020-06-17 22:23:06
95.86.208.193	attackspambots	Unauthorized connection attempt from IP address 95.86.208.193 on Port 445(SMB)	2020-06-17 22:36:12
190.223.26.38	attackbotsspam	2020-06-17T08:49:07.3905181495-001 sshd[48729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.223.26.38 2020-06-17T08:49:07.3873581495-001 sshd[48729]: Invalid user ashmit from 190.223.26.38 port 28387 2020-06-17T08:49:09.3655361495-001 sshd[48729]: Failed password for invalid user ashmit from 190.223.26.38 port 28387 ssh2 2020-06-17T08:51:54.0834061495-001 sshd[48904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.223.26.38 user=root 2020-06-17T08:51:55.6519261495-001 sshd[48904]: Failed password for root from 190.223.26.38 port 17988 ssh2 2020-06-17T08:54:38.2950681495-001 sshd[49005]: Invalid user karol from 190.223.26.38 port 15281 ...	2020-06-17 22:10:52
115.73.74.108	attackbotsspam	Jun 17 14:03:25 debian-2gb-nbg1-2 kernel: \[14654104.064887\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=115.73.74.108 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=43 ID=5481 PROTO=TCP SPT=54638 DPT=9530 WINDOW=15486 RES=0x00 SYN URGP=0	2020-06-17 22:26:43
103.113.90.128	attackspam	2020-06-17 06:54:18.747247-0500 localhost smtpd[67314]: NOQUEUE: reject: RCPT from unknown[103.113.90.128]: 554 5.7.1 Service unavailable; Client host [103.113.90.128] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<00ea8753.nyidat.xyz>	2020-06-17 22:41:43
45.66.156.176	attackbotsspam	k+ssh-bruteforce	2020-06-17 22:31:42
222.239.28.177	attack	Jun 17 15:57:51 ns381471 sshd[29597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.239.28.177 Jun 17 15:57:54 ns381471 sshd[29597]: Failed password for invalid user kung from 222.239.28.177 port 53510 ssh2	2020-06-17 22:05:26
171.235.107.45	attackbotsspam	20/6/17@08:03:18: FAIL: IoT-Telnet address from=171.235.107.45 ...	2020-06-17 22:33:36
180.167.225.118	attackbotsspam	Jun 17 15:05:27 minden010 sshd[10709]: Failed password for root from 180.167.225.118 port 37988 ssh2 Jun 17 15:07:43 minden010 sshd[11482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.167.225.118 Jun 17 15:07:45 minden010 sshd[11482]: Failed password for invalid user test from 180.167.225.118 port 55000 ssh2 ...	2020-06-17 21:59:15
213.79.91.102	attack	Unauthorized connection attempt from IP address 213.79.91.102 on Port 445(SMB)	2020-06-17 22:30:02
222.186.175.216	attackbotsspam	Jun 17 16:28:13 vmd48417 sshd[11727]: Failed password for root from 222.186.175.216 port 36586 ssh2	2020-06-17 22:34:44
222.186.175.23	attack	Jun 17 15:57:19 mellenthin sshd[20947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.23 user=root Jun 17 15:57:21 mellenthin sshd[20947]: Failed password for invalid user root from 222.186.175.23 port 39124 ssh2	2020-06-17 22:02:02
122.116.253.120	attack	port scan and connect, tcp 23 (telnet)	2020-06-17 22:13:28
201.33.174.234	attackbotsspam	Jun 17 15:49:58 home sshd[29295]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.33.174.234 Jun 17 15:50:00 home sshd[29295]: Failed password for invalid user admin from 201.33.174.234 port 41986 ssh2 Jun 17 15:53:34 home sshd[29740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.33.174.234 ...	2020-06-17 22:14:16
191.240.201.106	attackbotsspam	Unauthorized connection attempt from IP address 191.240.201.106 on Port 445(SMB)	2020-06-17 22:38:36

Recently Reported IPs

27.235.135.69	50.107.40.187	186.123.187.47	76.199.50.125
63.248.180.244	33.96.245.145	181.150.224.215	165.246.16.9
201.220.85.62	46.28.105.126	191.54.239.109	205.103.55.253
185.202.54.1	41.190.170.0	45.172.33.87	197.54.251.211
117.246.133.240	194.143.183.140	223.54.42.40	104.102.237.33