138.68.233.131

Basic Info

City: Santa Clara

Region: California

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.68.233.112	attackspam	138.68.233.112 - - [24/Sep/2020:23:54:08 +0100] "POST /wp-login.php HTTP/1.1" 200 2172 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [24/Sep/2020:23:54:13 +0100] "POST /wp-login.php HTTP/1.1" 200 2199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [24/Sep/2020:23:54:15 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-25 07:46:05
138.68.233.112	attack	138.68.233.112 - - [22/Aug/2020:21:36:50 +0100] "POST /wp-login.php HTTP/1.1" 200 2046 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [22/Aug/2020:21:36:55 +0100] "POST /wp-login.php HTTP/1.1" 200 2020 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [22/Aug/2020:21:36:58 +0100] "POST /wp-login.php HTTP/1.1" 200 2019 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-23 06:14:45
138.68.233.112	attack	138.68.233.112 - - [21/Aug/2020:18:11:28 +0100] "POST /wp-login.php HTTP/1.1" 200 1905 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [21/Aug/2020:18:11:33 +0100] "POST /wp-login.php HTTP/1.1" 200 1890 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [21/Aug/2020:18:11:38 +0100] "POST /wp-login.php HTTP/1.1" 200 1887 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-22 02:41:52
138.68.233.112	attack	Automatic report - Banned IP Access	2020-08-12 04:26:55
138.68.233.112	attackbots	138.68.233.112 - - [10/Aug/2020:11:59:34 +0100] "POST /wp-login.php HTTP/1.1" 200 1875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [10/Aug/2020:11:59:40 +0100] "POST /wp-login.php HTTP/1.1" 200 1860 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [10/Aug/2020:11:59:41 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-10 19:06:18
138.68.233.77	attackbotsspam	wavoo.club 138.68.233.77 digitalocean.com From: EZ Battery Reconditioningâ¢ Subject: Bringing Dead Batteries Back To Life Is Simple! Reply-To: reply_to@seliccon.xyz	2020-08-07 04:05:53
138.68.233.112	attackbots	WordPress login Brute force / Web App Attack on client site.	2020-07-20 16:12:04
138.68.233.112	attackbotsspam	Automatic report - Banned IP Access	2020-07-07 22:52:25
138.68.233.112	attack	Automatic report - XMLRPC Attack	2020-06-30 01:26:08
138.68.233.112	attackspam	138.68.233.112 - - [25/Jun/2020:21:45:34 +0100] "POST /wp-login.php HTTP/1.1" 200 2160 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [25/Jun/2020:21:45:38 +0100] "POST /wp-login.php HTTP/1.1" 200 2106 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [25/Jun/2020:21:45:38 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-06-26 06:35:49
138.68.233.112	attackspambots	138.68.233.112 - - [24/Jun/2020:10:11:11 +0100] "POST /wp-login.php HTTP/1.1" 200 1905 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [24/Jun/2020:10:11:14 +0100] "POST /wp-login.php HTTP/1.1" 200 1929 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [24/Jun/2020:10:11:21 +0100] "POST /wp-login.php HTTP/1.1" 200 1926 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-06-24 19:18:40
138.68.233.112	attackspam	138.68.233.112 - - [26/Apr/2020:22:39:12 +0200] "POST /wp-login.php HTTP/1.1" 200 3405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [26/Apr/2020:22:39:16 +0200] "POST /wp-login.php HTTP/1.1" 200 3404 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-04-27 06:09:27
138.68.233.112	attackbots	138.68.233.112 - - [20/Apr/2020:00:17:07 +0200] "POST /wp-login.php HTTP/1.1" 200 3405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [20/Apr/2020:00:17:11 +0200] "POST /wp-login.php HTTP/1.1" 200 3383 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-04-20 07:18:53
138.68.233.112	attackbots	138.68.233.112 - - [08/Apr/2020:07:40:46 +0200] "GET /wp-login.php HTTP/1.1" 200 5702 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [08/Apr/2020:07:40:52 +0200] "POST /wp-login.php HTTP/1.1" 200 6601 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [08/Apr/2020:07:40:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-04-08 15:54:35
138.68.233.59	attack	$f2bV_matches	2020-04-07 01:52:38

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.233.131
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16648
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.68.233.131.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026011901 1800 900 604800 86400

;; Query time: 579 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 20 14:00:13 CST 2026
;; MSG SIZE  rcvd: 107

Host info

Host 131.233.68.138.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 131.233.68.138.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
122.51.64.115	attackspam	Aug 13 08:14:45 ny01 sshd[9491]: Failed password for root from 122.51.64.115 port 32822 ssh2 Aug 13 08:17:38 ny01 sshd[9815]: Failed password for root from 122.51.64.115 port 37164 ssh2	2020-08-13 20:53:35
46.102.13.147	attack	Automatic report - Port Scan Attack	2020-08-13 20:44:26
222.186.180.142	attackspambots	Aug 13 14:39:37 vps639187 sshd\[28608\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.142 user=root Aug 13 14:39:39 vps639187 sshd\[28608\]: Failed password for root from 222.186.180.142 port 52148 ssh2 Aug 13 14:39:41 vps639187 sshd\[28608\]: Failed password for root from 222.186.180.142 port 52148 ssh2 ...	2020-08-13 20:44:57
222.186.175.169	attackbotsspam	Aug 13 14:38:05 cosmoit sshd[2359]: Failed password for root from 222.186.175.169 port 12318 ssh2	2020-08-13 20:46:38
45.129.33.10	attackspambots	[H1] Blocked by UFW	2020-08-13 21:19:27
128.199.123.170	attackspambots	Aug 13 14:14:46 serwer sshd\[6438\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.123.170 user=root Aug 13 14:14:47 serwer sshd\[6438\]: Failed password for root from 128.199.123.170 port 39254 ssh2 Aug 13 14:20:38 serwer sshd\[7242\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.123.170 user=root ...	2020-08-13 20:42:16
170.106.33.194	attackspam	Aug 13 14:15:11 ip106 sshd[12939]: Failed password for root from 170.106.33.194 port 58310 ssh2 ...	2020-08-13 20:36:54
218.92.0.212	attackbotsspam	Aug 13 14:20:13 melroy-server sshd[16487]: Failed password for root from 218.92.0.212 port 28285 ssh2 Aug 13 14:20:18 melroy-server sshd[16487]: Failed password for root from 218.92.0.212 port 28285 ssh2 ...	2020-08-13 21:05:15
106.13.140.138	attack	Aug 13 13:20:31 gospond sshd[28698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.140.138 Aug 13 13:20:31 gospond sshd[28698]: Invalid user guest111 from 106.13.140.138 port 35214 Aug 13 13:20:33 gospond sshd[28698]: Failed password for invalid user guest111 from 106.13.140.138 port 35214 ssh2 ...	2020-08-13 20:49:54
132.232.32.228	attack	Aug 13 14:10:48 ns382633 sshd\[16731\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.32.228 user=root Aug 13 14:10:50 ns382633 sshd\[16731\]: Failed password for root from 132.232.32.228 port 44728 ssh2 Aug 13 14:16:14 ns382633 sshd\[17609\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.32.228 user=root Aug 13 14:16:16 ns382633 sshd\[17609\]: Failed password for root from 132.232.32.228 port 42168 ssh2 Aug 13 14:20:47 ns382633 sshd\[18407\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.32.228 user=root	2020-08-13 20:34:30
116.58.239.143	attackbots	trying to access non-authorized port	2020-08-13 20:42:43
190.79.253.198	attack	20/8/13@08:20:25: FAIL: Alarm-Intrusion address from=190.79.253.198 ...	2020-08-13 20:58:46
54.38.70.93	attackbotsspam	Aug 13 15:20:21 hosting sshd[19956]: Invalid user pASSWorD from 54.38.70.93 port 47044 ...	2020-08-13 21:01:35
213.154.70.102	attackspam	Aug 13 14:52:07 piServer sshd[23447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.154.70.102 Aug 13 14:52:09 piServer sshd[23447]: Failed password for invalid user zeidc123a!@# from 213.154.70.102 port 45456 ssh2 Aug 13 14:57:43 piServer sshd[24010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.154.70.102 ...	2020-08-13 21:08:15
198.143.133.157	attackbotsspam	firewall-block, port(s): 4782/tcp	2020-08-13 21:00:52

Recently Reported IPs

36.27.149.90	98.96.242.53	180.105.58.105	35.203.211.247
52.111.233.3	52.111.233.73	111.22.150.249	172.174.250.151
47.93.122.123	10.8.210.50	121.37.40.62	222.107.159.49
178.249.211.89	116.76.39.189	216.81.245.238	162.243.99.107
173.44.178.36	178.18.240.233	195.177.94.73	74.7.242.5