138.68.248.239

Basic Info

City: Santa Clara

Region: California

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	3389BruteforceFW23	2019-12-28 06:21:50
attackbots	2019-12-12T14:37:49Z - RDP login failed multiple times. (138.68.248.239)	2019-12-13 04:03:21

Comments on same subnet:

IP	Type	Details	Datetime
138.68.248.80	attackbotsspam	Invalid user minecraft from 138.68.248.80 port 40102	2020-09-29 05:29:19
138.68.248.80	attack	2020-09-28T11:25:45.097195vps-d63064a2 sshd[16738]: Invalid user adi from 138.68.248.80 port 49768 2020-09-28T11:25:47.228216vps-d63064a2 sshd[16738]: Failed password for invalid user adi from 138.68.248.80 port 49768 ssh2 2020-09-28T11:31:18.644362vps-d63064a2 sshd[16822]: Invalid user jessica from 138.68.248.80 port 59084 2020-09-28T11:31:18.654134vps-d63064a2 sshd[16822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.248.80 2020-09-28T11:31:18.644362vps-d63064a2 sshd[16822]: Invalid user jessica from 138.68.248.80 port 59084 2020-09-28T11:31:20.824607vps-d63064a2 sshd[16822]: Failed password for invalid user jessica from 138.68.248.80 port 59084 ssh2 ...	2020-09-28 21:49:21
138.68.248.80	attackbots	SSH bruteforce	2020-09-28 13:56:16
138.68.248.80	attackbotsspam	Invalid user ftpuser from 138.68.248.80 port 60418	2020-09-19 21:41:57
138.68.248.80	attack	$f2bV_matches	2020-09-19 13:35:27
138.68.248.80	attackbots	Sep 18 21:59:45 melroy-server sshd[28584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.248.80 Sep 18 21:59:47 melroy-server sshd[28584]: Failed password for invalid user appuser from 138.68.248.80 port 33412 ssh2 ...	2020-09-19 05:14:14
138.68.248.80	attack	(sshd) Failed SSH login from 138.68.248.80 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 15 07:21:28 optimus sshd[28971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.248.80 user=root Sep 15 07:21:30 optimus sshd[28971]: Failed password for root from 138.68.248.80 port 49030 ssh2 Sep 15 07:23:28 optimus sshd[29775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.248.80 user=root Sep 15 07:23:30 optimus sshd[29775]: Failed password for root from 138.68.248.80 port 52604 ssh2 Sep 15 07:25:27 optimus sshd[30481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.248.80 user=root	2020-09-15 21:27:03
138.68.248.80	attackbots	Sep 15 00:40:11 roki-contabo sshd\[11479\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.248.80 user=root Sep 15 00:40:13 roki-contabo sshd\[11479\]: Failed password for root from 138.68.248.80 port 58976 ssh2 Sep 15 00:46:44 roki-contabo sshd\[11509\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.248.80 user=root Sep 15 00:46:46 roki-contabo sshd\[11509\]: Failed password for root from 138.68.248.80 port 57764 ssh2 Sep 15 00:49:40 roki-contabo sshd\[11535\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.248.80 user=root ...	2020-09-15 13:25:27
138.68.248.68	attackspambots	Automatic report - Banned IP Access	2019-08-11 05:03:58

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.248.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6067
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.248.239.			IN	A

;; AUTHORITY SECTION:
.			548	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121201 1800 900 604800 86400

;; Query time: 107 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 13 04:03:18 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 239.248.68.138.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 239.248.68.138.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
198.12.227.90	attackspam	198.12.227.90 - - [12/Aug/2020:07:43:52 +0100] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 198.12.227.90 - - [12/Aug/2020:07:43:53 +0100] "POST /wp-login.php HTTP/1.1" 200 1685 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 198.12.227.90 - - [12/Aug/2020:07:43:53 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-12 16:18:35
150.109.120.253	attackspambots	Aug 11 20:48:55 wbs sshd\[31444\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.120.253 user=root Aug 11 20:48:57 wbs sshd\[31444\]: Failed password for root from 150.109.120.253 port 50926 ssh2 Aug 11 20:51:20 wbs sshd\[31639\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.120.253 user=root Aug 11 20:51:22 wbs sshd\[31639\]: Failed password for root from 150.109.120.253 port 39896 ssh2 Aug 11 20:53:46 wbs sshd\[31780\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.120.253 user=root	2020-08-12 16:24:36
167.99.155.36	attackbotsspam	$f2bV_matches	2020-08-12 16:31:05
106.54.123.84	attackspambots	Aug 12 06:37:22 OPSO sshd\[17864\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.123.84 user=root Aug 12 06:37:24 OPSO sshd\[17864\]: Failed password for root from 106.54.123.84 port 59406 ssh2 Aug 12 06:41:01 OPSO sshd\[18345\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.123.84 user=root Aug 12 06:41:03 OPSO sshd\[18345\]: Failed password for root from 106.54.123.84 port 42564 ssh2 Aug 12 06:44:39 OPSO sshd\[18628\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.123.84 user=root	2020-08-12 16:53:35
94.102.51.29	attack	ET DROP Dshield Block Listed Source group 1 - port: 58077 proto: tcp cat: Misc Attackbytes: 60	2020-08-12 16:33:55
167.88.161.218	attackbots	5980/tcp 5991/tcp 5990/tcp... [2020-07-25/08-12]57pkt,20pt.(tcp)	2020-08-12 16:32:45
206.126.81.102	attackspam	Aug 12 10:19:08 vps647732 sshd[14908]: Failed password for root from 206.126.81.102 port 50491 ssh2 ...	2020-08-12 16:25:42
112.199.118.195	attack	Aug 12 10:06:53 lnxded64 sshd[1642]: Failed password for root from 112.199.118.195 port 63372 ssh2 Aug 12 10:11:44 lnxded64 sshd[3108]: Failed password for root from 112.199.118.195 port 62764 ssh2	2020-08-12 16:29:33
222.186.175.183	attack	Aug 12 10:45:52 theomazars sshd[24719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.183 user=root Aug 12 10:45:54 theomazars sshd[24719]: Failed password for root from 222.186.175.183 port 41120 ssh2	2020-08-12 16:50:09
152.136.101.207	attackbotsspam	Aug 12 07:22:01 server sshd[16510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.101.207 user=root Aug 12 07:22:04 server sshd[16510]: Failed password for invalid user root from 152.136.101.207 port 59308 ssh2 Aug 12 07:28:22 server sshd[16743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.101.207 user=root Aug 12 07:28:24 server sshd[16743]: Failed password for invalid user root from 152.136.101.207 port 33896 ssh2	2020-08-12 16:47:04
187.16.255.102	attackspambots	TCP (SYN) 187.16.255.102:8432 -> port 22, len 48	2020-08-12 16:39:44
209.97.134.82	attackbots	2020-08-12T02:41:15.440640linuxbox-skyline sshd[80319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.134.82 user=root 2020-08-12T02:41:17.135863linuxbox-skyline sshd[80319]: Failed password for root from 209.97.134.82 port 45078 ssh2 ...	2020-08-12 16:54:36
200.89.154.99	attackbots	Brute-force attempt banned	2020-08-12 16:19:02
110.137.75.148	attackbots	Unauthorized connection attempt from IP address 110.137.75.148 on Port 445(SMB)	2020-08-12 16:27:11
167.62.172.38	attackspam	Automatic report - Port Scan Attack	2020-08-12 16:23:07

Recently Reported IPs

102.187.73.152	5.78.148.64	172.1.127.58	49.41.28.183
5.76.147.16	182.171.31.184	5.43.7.215	217.129.63.94
81.40.112.77	12.107.52.37	108.232.11.202	131.207.138.50
102.121.137.140	77.78.28.96	85.59.84.113	117.48.28.254
217.145.97.222	5.39.104.207	89.129.181.162	5.39.40.159