138.68.233.139

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.68.233.112	attackspam	138.68.233.112 - - [24/Sep/2020:23:54:08 +0100] "POST /wp-login.php HTTP/1.1" 200 2172 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [24/Sep/2020:23:54:13 +0100] "POST /wp-login.php HTTP/1.1" 200 2199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [24/Sep/2020:23:54:15 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-25 07:46:05
138.68.233.112	attack	138.68.233.112 - - [22/Aug/2020:21:36:50 +0100] "POST /wp-login.php HTTP/1.1" 200 2046 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [22/Aug/2020:21:36:55 +0100] "POST /wp-login.php HTTP/1.1" 200 2020 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [22/Aug/2020:21:36:58 +0100] "POST /wp-login.php HTTP/1.1" 200 2019 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-23 06:14:45
138.68.233.112	attack	138.68.233.112 - - [21/Aug/2020:18:11:28 +0100] "POST /wp-login.php HTTP/1.1" 200 1905 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [21/Aug/2020:18:11:33 +0100] "POST /wp-login.php HTTP/1.1" 200 1890 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [21/Aug/2020:18:11:38 +0100] "POST /wp-login.php HTTP/1.1" 200 1887 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-22 02:41:52
138.68.233.112	attack	Automatic report - Banned IP Access	2020-08-12 04:26:55
138.68.233.112	attackbots	138.68.233.112 - - [10/Aug/2020:11:59:34 +0100] "POST /wp-login.php HTTP/1.1" 200 1875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [10/Aug/2020:11:59:40 +0100] "POST /wp-login.php HTTP/1.1" 200 1860 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [10/Aug/2020:11:59:41 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-10 19:06:18
138.68.233.77	attackbotsspam	wavoo.club 138.68.233.77 digitalocean.com From: EZ Battery Reconditioningâ¢ Subject: Bringing Dead Batteries Back To Life Is Simple! Reply-To: reply_to@seliccon.xyz	2020-08-07 04:05:53
138.68.233.112	attackbots	WordPress login Brute force / Web App Attack on client site.	2020-07-20 16:12:04
138.68.233.112	attackbotsspam	Automatic report - Banned IP Access	2020-07-07 22:52:25
138.68.233.112	attack	Automatic report - XMLRPC Attack	2020-06-30 01:26:08
138.68.233.112	attackspam	138.68.233.112 - - [25/Jun/2020:21:45:34 +0100] "POST /wp-login.php HTTP/1.1" 200 2160 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [25/Jun/2020:21:45:38 +0100] "POST /wp-login.php HTTP/1.1" 200 2106 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [25/Jun/2020:21:45:38 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-06-26 06:35:49
138.68.233.112	attackspambots	138.68.233.112 - - [24/Jun/2020:10:11:11 +0100] "POST /wp-login.php HTTP/1.1" 200 1905 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [24/Jun/2020:10:11:14 +0100] "POST /wp-login.php HTTP/1.1" 200 1929 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [24/Jun/2020:10:11:21 +0100] "POST /wp-login.php HTTP/1.1" 200 1926 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-06-24 19:18:40
138.68.233.112	attackspam	138.68.233.112 - - [26/Apr/2020:22:39:12 +0200] "POST /wp-login.php HTTP/1.1" 200 3405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [26/Apr/2020:22:39:16 +0200] "POST /wp-login.php HTTP/1.1" 200 3404 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-04-27 06:09:27
138.68.233.112	attackbots	138.68.233.112 - - [20/Apr/2020:00:17:07 +0200] "POST /wp-login.php HTTP/1.1" 200 3405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [20/Apr/2020:00:17:11 +0200] "POST /wp-login.php HTTP/1.1" 200 3383 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-04-20 07:18:53
138.68.233.112	attackbots	138.68.233.112 - - [08/Apr/2020:07:40:46 +0200] "GET /wp-login.php HTTP/1.1" 200 5702 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [08/Apr/2020:07:40:52 +0200] "POST /wp-login.php HTTP/1.1" 200 6601 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.233.112 - - [08/Apr/2020:07:40:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-04-08 15:54:35
138.68.233.59	attack	$f2bV_matches	2020-04-07 01:52:38

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.233.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56156
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.68.233.139.			IN	A

;; AUTHORITY SECTION:
.			443	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400

;; Query time: 126 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 04:04:24 CST 2022
;; MSG SIZE  rcvd: 107

Host info

139.233.68.138.in-addr.arpa domain name pointer les.tempurl.host.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
139.233.68.138.in-addr.arpa	name = les.tempurl.host.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
159.89.91.67	attack	Invalid user ipo from 159.89.91.67 port 45492	2020-05-23 12:58:07
218.78.84.162	attackspambots	Invalid user swb from 218.78.84.162 port 35016	2020-05-23 12:37:07
101.51.228.77	attack	Invalid user ubnt from 101.51.228.77 port 50966	2020-05-23 12:27:02
186.232.119.84	attackbotsspam	May 23 00:26:32 NPSTNNYC01T sshd[26339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.232.119.84 May 23 00:26:34 NPSTNNYC01T sshd[26339]: Failed password for invalid user sunyufei from 186.232.119.84 port 51660 ssh2 May 23 00:29:24 NPSTNNYC01T sshd[26568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.232.119.84 ...	2020-05-23 12:48:11
197.119.5.70	attack	Invalid user service from 197.119.5.70 port 50015	2020-05-23 12:43:25
180.244.84.114	attackspam	Invalid user ubnt from 180.244.84.114 port 58574	2020-05-23 12:50:49
40.113.153.70	attack	Invalid user zex from 40.113.153.70 port 54966	2020-05-23 12:32:29
222.85.230.155	attackspambots	Invalid user hackingtools from 222.85.230.155 port 6918	2020-05-23 12:36:34
180.252.91.179	attackspam	Invalid user admin from 180.252.91.179 port 13309	2020-05-23 12:50:18
163.172.113.19	attack	SSH Brute-Force reported by Fail2Ban	2020-05-23 12:56:08
178.32.163.201	attackspam	Invalid user doggy from 178.32.163.201 port 50040	2020-05-23 12:52:58
179.7.192.251	attackbotsspam	Invalid user pi from 179.7.192.251 port 15148	2020-05-23 12:52:04
81.51.156.171	attackspambots	Invalid user blx from 81.51.156.171 port 47436	2020-05-23 12:28:03
111.229.28.34	attackbotsspam	May 23 06:02:24 vserver sshd\[19374\]: Invalid user asz from 111.229.28.34May 23 06:02:26 vserver sshd\[19374\]: Failed password for invalid user asz from 111.229.28.34 port 41136 ssh2May 23 06:06:30 vserver sshd\[19423\]: Invalid user dlw from 111.229.28.34May 23 06:06:32 vserver sshd\[19423\]: Failed password for invalid user dlw from 111.229.28.34 port 53906 ssh2 ...	2020-05-23 12:22:24
27.77.136.14	attackspam	Invalid user ubnt from 27.77.136.14 port 62855	2020-05-23 12:34:22

Recently Reported IPs

138.68.191.236	138.68.231.150	138.68.229.102	138.68.235.79
138.68.236.85	138.68.237.43	138.68.248.117	138.68.248.91
138.68.255.239	138.68.253.17	138.68.255.173	138.68.250.53
138.68.31.46	138.68.26.55	138.68.30.74	138.68.37.201
138.68.34.161	138.68.39.77	138.68.40.62	138.68.41.104