138.68.236.68 - IPInfo

Basic Info

City: Santa Clara

Region: California

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.68.236.50	attackbotsspam	Brute-force attempt banned	2020-10-01 03:58:18
138.68.236.50	attackspam	2020-09-29T22:37:42.505113vps773228.ovh.net sshd[5871]: Invalid user it from 138.68.236.50 port 44976 2020-09-29T22:37:42.524820vps773228.ovh.net sshd[5871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.236.50 2020-09-29T22:37:42.505113vps773228.ovh.net sshd[5871]: Invalid user it from 138.68.236.50 port 44976 2020-09-29T22:37:44.247685vps773228.ovh.net sshd[5871]: Failed password for invalid user it from 138.68.236.50 port 44976 ssh2 2020-09-29T22:41:23.669086vps773228.ovh.net sshd[5891]: Invalid user matt from 138.68.236.50 port 51910 ...	2020-09-30 12:33:49
138.68.236.50	attackbotsspam	$f2bV_matches	2020-09-10 00:17:01
138.68.236.50	attack	Sep 9 11:38:51 fhem-rasp sshd[8413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.236.50 user=root Sep 9 11:38:53 fhem-rasp sshd[8413]: Failed password for root from 138.68.236.50 port 55734 ssh2 ...	2020-09-09 17:46:57
138.68.236.50	attackspam	SSH Brute-Forcing (server1)	2020-08-21 05:02:36
138.68.236.50	attackbotsspam	Aug 18 17:14:17 XXX sshd[4323]: Invalid user md from 138.68.236.50 port 43612	2020-08-19 02:28:11
138.68.236.50	attackspambots	Aug 17 00:02:58 NPSTNNYC01T sshd[3447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.236.50 Aug 17 00:03:00 NPSTNNYC01T sshd[3447]: Failed password for invalid user jsk from 138.68.236.50 port 38028 ssh2 Aug 17 00:06:00 NPSTNNYC01T sshd[3636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.236.50 ...	2020-08-17 15:01:36
138.68.236.50	attackbots	Aug 11 23:13:02 lnxded64 sshd[31436]: Failed password for root from 138.68.236.50 port 37220 ssh2 Aug 11 23:13:02 lnxded64 sshd[31436]: Failed password for root from 138.68.236.50 port 37220 ssh2	2020-08-12 06:19:59
138.68.236.156	attack	138.68.236.156 - - [10/Aug/2020:08:44:58 +0100] "POST /wp-login.php HTTP/1.1" 200 1968 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.236.156 - - [10/Aug/2020:08:45:05 +0100] "POST /wp-login.php HTTP/1.1" 200 1972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.236.156 - - [10/Aug/2020:08:45:06 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-10 17:23:44
138.68.236.50	attackbotsspam	Aug 6 18:58:49 localhost sshd[2096861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.236.50 user=root Aug 6 18:58:51 localhost sshd[2096861]: Failed password for root from 138.68.236.50 port 33500 ssh2 ...	2020-08-06 17:05:03
138.68.236.50	attack	Jul 23 17:46:45 pve1 sshd[12092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.236.50 Jul 23 17:46:48 pve1 sshd[12092]: Failed password for invalid user backuppc from 138.68.236.50 port 57564 ssh2 ...	2020-07-23 23:59:35
138.68.236.156	attackspam	138.68.236.156 - - [23/Jul/2020:00:55:26 +0200] "GET /wp-login.php HTTP/1.1" 200 6310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.236.156 - - [23/Jul/2020:00:55:34 +0200] "POST /wp-login.php HTTP/1.1" 200 6561 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.236.156 - - [23/Jul/2020:00:55:36 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-07-23 06:59:22
138.68.236.50	attackbotsspam	ssh brute force	2020-07-16 13:15:06
138.68.236.50	attackbots	Brute force attempt	2020-07-14 12:49:21
138.68.236.50	attackbotsspam	Invalid user julie from 138.68.236.50 port 58284	2020-07-11 05:13:10

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.236.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42402
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.68.236.68.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025082900 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 29 16:30:27 CST 2025
;; MSG SIZE  rcvd: 106

Host info

Host 68.236.68.138.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 68.236.68.138.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
190.7.128.74	attackbots	Oct 6 02:54:20 hpm sshd\[13150\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.7.128.74 user=root Oct 6 02:54:23 hpm sshd\[13150\]: Failed password for root from 190.7.128.74 port 42919 ssh2 Oct 6 02:58:34 hpm sshd\[13495\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.7.128.74 user=root Oct 6 02:58:37 hpm sshd\[13495\]: Failed password for root from 190.7.128.74 port 6897 ssh2 Oct 6 03:02:53 hpm sshd\[13844\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.7.128.74 user=root	2019-10-07 02:32:37
194.90.117.180	attackbotsspam	Automatic report - Port Scan Attack	2019-10-07 02:29:32
168.90.89.35	attack	Oct 6 18:37:23 localhost sshd\[72345\]: Invalid user 123 from 168.90.89.35 port 38852 Oct 6 18:37:23 localhost sshd\[72345\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.90.89.35 Oct 6 18:37:25 localhost sshd\[72345\]: Failed password for invalid user 123 from 168.90.89.35 port 38852 ssh2 Oct 6 18:42:19 localhost sshd\[72607\]: Invalid user Miss@123 from 168.90.89.35 port 58930 Oct 6 18:42:19 localhost sshd\[72607\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.90.89.35 ...	2019-10-07 02:54:13
151.84.222.52	attackbotsspam	2019-10-06T18:20:09.592664abusebot-5.cloudsearch.cf sshd\[14409\]: Invalid user arma2 from 151.84.222.52 port 38428	2019-10-07 02:33:16
157.55.39.178	attackbots	Automatic report - Banned IP Access	2019-10-07 02:50:56
180.67.91.233	attack	Unauthorised access (Oct 6) SRC=180.67.91.233 LEN=52 TTL=117 ID=7259 DF TCP DPT=1433 WINDOW=8192 SYN	2019-10-07 02:18:54
92.54.200.66	attackspam	2019-10-06 H=$1000thinktank.com$ \[92.54.200.66\] F=\ rejected RCPT \: Sender verify failed 2019-10-06 H=$1000thinktank.com$ \[92.54.200.66\] F=\ rejected RCPT \: Sender verify failed 2019-10-06 H=$1000thinktank.com$ \[92.54.200.66\] F=\ rejected RCPT \<REMOVED@REMOVED.de\>: Sender verify failed	2019-10-07 02:28:07
202.88.246.161	attackbotsspam	Oct 6 20:13:52 vps691689 sshd[19560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.88.246.161 Oct 6 20:13:54 vps691689 sshd[19560]: Failed password for invalid user 123Pizza from 202.88.246.161 port 38745 ssh2 ...	2019-10-07 02:47:30
105.154.30.60	attack	BURG,WP GET /wp-login.php	2019-10-07 02:57:12
82.99.252.82	attackbotsspam	Unauthorised access (Oct 6) SRC=82.99.252.82 LEN=40 PREC=0x20 TTL=44 ID=62302 TCP DPT=23 WINDOW=58597 SYN	2019-10-07 02:55:40
190.128.159.118	attackspambots	2019-10-06T19:30:42.657120 sshd[30550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.128.159.118 user=root 2019-10-06T19:30:44.810566 sshd[30550]: Failed password for root from 190.128.159.118 port 50628 ssh2 2019-10-06T19:36:12.050148 sshd[30627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.128.159.118 user=root 2019-10-06T19:36:13.175627 sshd[30627]: Failed password for root from 190.128.159.118 port 35226 ssh2 2019-10-06T19:41:49.181565 sshd[30720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.128.159.118 user=root 2019-10-06T19:41:50.572817 sshd[30720]: Failed password for root from 190.128.159.118 port 48088 ssh2 ...	2019-10-07 02:48:50
129.204.244.2	attackspambots	2019-10-06T12:06:26.211414abusebot-4.cloudsearch.cf sshd\[10811\]: Invalid user contrasena3@1 from 129.204.244.2 port 57584	2019-10-07 02:21:49
51.68.97.191	attackspam	Oct 6 08:28:47 php1 sshd\[9495\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.97.191 user=root Oct 6 08:28:49 php1 sshd\[9495\]: Failed password for root from 51.68.97.191 port 42942 ssh2 Oct 6 08:33:34 php1 sshd\[9981\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.97.191 user=root Oct 6 08:33:36 php1 sshd\[9981\]: Failed password for root from 51.68.97.191 port 55148 ssh2 Oct 6 08:38:22 php1 sshd\[10415\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.97.191 user=root	2019-10-07 02:53:56
165.227.223.104	attack	www.handydirektreparatur.de 165.227.223.104 \[06/Oct/2019:17:26:01 +0200\] "POST /wp-login.php HTTP/1.1" 200 5665 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" www.handydirektreparatur.de 165.227.223.104 \[06/Oct/2019:17:26:07 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4114 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-10-07 02:36:56
61.5.80.9	attack	Automatic report - Port Scan Attack	2019-10-07 02:53:23

Recently Reported IPs

105.117.0.70	40.124.173.90	41.223.97.172	61.130.51.238
101.226.28.237	45.42.200.168	74.249.177.87	185.247.137.239
222.73.33.10	206.189.201.205	146.190.73.170	69.164.201.142
20.65.195.33	165.227.17.81	84.19.89.245	39.91.190.162
192.168.5.5	226.153.48.20	124.163.197.39	10.0.253.139