138.68.212.113

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Honeypot hit.	2019-11-10 01:07:35
attackbotsspam	179/tcp 1433/tcp 5060/udp... [2019-09-02/10-31]51pkt,43pt.(tcp),4pt.(udp)	2019-11-02 19:20:16
attack	firewall-block, port(s): 465/tcp	2019-10-03 02:45:27

Comments on same subnet:

IP	Type	Details	Datetime
138.68.212.139	attackbots	" "	2019-11-29 08:49:47
138.68.212.45	attackspam	Mozilla/5.0 zgrab/0.x	2019-11-22 22:48:08
138.68.212.139	attackbots	port scan and connect, tcp 443 (https)	2019-11-10 21:03:29
138.68.212.139	attackspam	138.68.212.139 was recorded 5 times by 5 hosts attempting to connect to the following ports: 1028. Incident counter (4h, 24h, all-time): 5, 16, 23	2019-11-09 22:03:05
138.68.212.45	attackspam	Connection by 138.68.212.45 on port: 10009 got caught by honeypot at 11/8/2019 10:05:03 AM	2019-11-08 21:20:49
138.68.212.45	attackbotsspam	53169/tcp 49738/tcp 8118/tcp... [2019-08-31/10-30]49pkt,37pt.(tcp),3pt.(udp)	2019-10-31 01:38:00
138.68.212.139	attack	firewall-block, port(s): 990/tcp	2019-10-14 16:56:22
138.68.212.45	attackspam	port scan and connect, tcp 22 (ssh)	2019-09-27 14:35:48
138.68.212.45	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2019-09-13 12:22:35
138.68.212.185	attackbotsspam	" "	2019-09-06 04:29:10
138.68.212.207	attackbotsspam	2525/tcp 8443/tcp 5902/tcp... [2019-08-29/09-05]7pkt,7pt.(tcp)	2019-09-05 22:31:56
138.68.212.210	attackbotsspam	Honeypot hit, critical abuseConfidenceScore, incoming Traffic from this IP	2019-09-04 02:34:53
138.68.212.138	attack	failed_logins	2019-09-04 01:20:21
138.68.212.231	attackspam	Unauthorized connection attempt from IP address 138.68.212.231 on Port 587(SMTP-MSA)	2019-09-03 22:46:15
138.68.212.87	attackbotsspam	IP: 138.68.212.87 ASN: AS14061 DigitalOcean LLC Port: Message Submission 587 Found in one or more Blacklists Date: 3/09/2019 8:07:16 AM UTC	2019-09-03 20:14:35

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.212.113
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15058
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.212.113.			IN	A

;; AUTHORITY SECTION:
.			410	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092900 1800 900 604800 86400

;; Query time: 82 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Sep 29 21:33:12 CST 2019
;; MSG SIZE  rcvd: 118

Host info

113.212.68.138.in-addr.arpa domain name pointer zg-0911b-8.stretchoid.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
113.212.68.138.in-addr.arpa	name = zg-0911b-8.stretchoid.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
51.68.230.124	attackspambots	May 22 05:57:29 vps639187 sshd\[18182\]: Invalid user ciz from 51.68.230.124 port 46732 May 22 05:57:29 vps639187 sshd\[18182\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.230.124 May 22 05:57:31 vps639187 sshd\[18182\]: Failed password for invalid user ciz from 51.68.230.124 port 46732 ssh2 ...	2020-05-22 13:25:58
42.114.43.141	attackbots	Unauthorized connection attempt from IP address 42.114.43.141 on Port 445(SMB)	2020-05-22 13:26:50
200.40.45.82	attackspam	Invalid user nwr from 200.40.45.82 port 39764	2020-05-22 13:46:03
103.242.56.122	attackbotsspam	SSH Brute-Force reported by Fail2Ban	2020-05-22 13:18:41
185.234.219.108	attack	Unauthorized connection attempt detected from IP address 185.234.219.108 to port 25	2020-05-22 13:12:17
51.15.190.82	attackspam	2020-05-22T07:04:18.972952vps773228.ovh.net sshd[22749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.190.82 2020-05-22T07:04:18.961515vps773228.ovh.net sshd[22749]: Invalid user ntps from 51.15.190.82 port 50484 2020-05-22T07:04:20.679596vps773228.ovh.net sshd[22749]: Failed password for invalid user ntps from 51.15.190.82 port 50484 ssh2 2020-05-22T07:05:20.638812vps773228.ovh.net sshd[22761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.190.82 user=root 2020-05-22T07:05:23.188910vps773228.ovh.net sshd[22761]: Failed password for root from 51.15.190.82 port 33124 ssh2 ...	2020-05-22 13:49:16
40.73.73.244	attackbotsspam	May 22 11:11:29 dhoomketu sshd[100484]: Invalid user pky from 40.73.73.244 port 37622 May 22 11:11:29 dhoomketu sshd[100484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.73.244 May 22 11:11:29 dhoomketu sshd[100484]: Invalid user pky from 40.73.73.244 port 37622 May 22 11:11:31 dhoomketu sshd[100484]: Failed password for invalid user pky from 40.73.73.244 port 37622 ssh2 May 22 11:13:52 dhoomketu sshd[100500]: Invalid user lul from 40.73.73.244 port 40268 ...	2020-05-22 13:45:08
103.61.37.231	attack	Invalid user tpj from 103.61.37.231 port 34739	2020-05-22 13:18:13
69.94.143.13	attackbotsspam	May 22 06:24:59 web01.agentur-b-2.de postfix/smtpd[1372004]: NOQUEUE: reject: RCPT from unknown[69.94.143.13]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= May 22 06:25:09 web01.agentur-b-2.de postfix/smtpd[1374519]: NOQUEUE: reject: RCPT from unknown[69.94.143.13]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= May 22 06:25:29 web01.agentur-b-2.de postfix/smtpd[1375394]: NOQUEUE: reject: RCPT from unknown[69.94.143.13]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= May 22 06:33:51 web01.agentur-b-2.de postfix/smtpd[1376036]: NOQUEUE: reject: RCPT from unknown[69.94.143.13]: 45	2020-05-22 13:09:18
141.98.81.107	attackspam	$f2bV_matches \| Triggered by Fail2Ban at Vostok web server	2020-05-22 13:29:15
222.186.42.155	attackbotsspam	(sshd) Failed SSH login from 222.186.42.155 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 22 07:00:45 amsweb01 sshd[8123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.155 user=root May 22 07:00:47 amsweb01 sshd[8123]: Failed password for root from 222.186.42.155 port 47390 ssh2 May 22 07:00:49 amsweb01 sshd[8123]: Failed password for root from 222.186.42.155 port 47390 ssh2 May 22 07:00:52 amsweb01 sshd[8123]: Failed password for root from 222.186.42.155 port 47390 ssh2 May 22 07:00:54 amsweb01 sshd[8138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.155 user=root	2020-05-22 13:02:02
61.219.171.213	attack	May 22 05:57:38 santamaria sshd\[26771\]: Invalid user gqs from 61.219.171.213 May 22 05:57:38 santamaria sshd\[26771\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.219.171.213 May 22 05:57:40 santamaria sshd\[26771\]: Failed password for invalid user gqs from 61.219.171.213 port 51460 ssh2 ...	2020-05-22 13:16:07
145.239.72.63	attack	5x Failed Password	2020-05-22 13:02:32
78.21.31.172	attack	Automatic report - Banned IP Access	2020-05-22 13:13:13
122.155.223.59	attackbots	May 22 07:00:12 buvik sshd[21921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.155.223.59 May 22 07:00:14 buvik sshd[21921]: Failed password for invalid user ozq from 122.155.223.59 port 55232 ssh2 May 22 07:02:38 buvik sshd[22688]: Invalid user ime from 122.155.223.59 ...	2020-05-22 13:14:47

Recently Reported IPs

49.68.176.234	86.5.150.7	27.214.199.155	1.68.243.17
137.159.228.65	206.253.161.174	203.189.156.96	123.215.196.178
117.188.194.8	5.166.182.151	219.223.234.9	60.251.44.125
213.97.192.108	208.168.138.102	178.126.83.244	127.129.127.247
200.24.51.1	73.167.74.83	197.37.136.119	128.188.6.242